Edit tour

Windows Analysis Report
hesaphareketi-01.exe

Overview

General Information

Sample name:	hesaphareketi-01.exe
Analysis ID:	1539141
MD5:	e4197fa29371d990625fe9a93b1ecd13
SHA1:	5002887485371ff36521e2cc3b15ae3ca290bc2b
SHA256:	1ad2ef0b45c01f7a75d980a008cdb684e40c7163ea0846cca49c856595ba716d
Tags:	exeuser-lowmal3
Infos:

Detection

AgentTesla

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Sigma detected: MSBuild connects to smtp port

Suricata IDS alerts for network traffic

Yara detected AgentTesla

Yara detected AntiVM3

Yara detected UAC Bypass using CMSTP

.NET source code references suspicious native API functions

AI detected suspicious sample

Allocates memory in foreign processes

Contains functionality to log keystrokes (.Net Source)

Injects a PE file into a foreign processes

Installs a global keyboard hook

Machine Learning detection for sample

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Mail credentials (via file / registry access)

Writes to foreign memory regions

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks if the current process is being debugged

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates a window with clipboard capturing capabilities

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

One or more processes crash

PE file does not import any functions

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Sigma detected: Suspicious Outbound SMTP Connections

Uses SMTP (mail sending)

Uses code obfuscation techniques (call, push, ret)

Uses insecure TLS / SSL version for HTTPS connection

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

hesaphareketi-01.exe (PID: 6848 cmdline: "C:\Users\user\Desktop\hesaphareketi-01.exe" MD5: E4197FA29371D990625FE9A93B1ECD13)

MSBuild.exe (PID: 3948 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\msbuild.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

MSBuild.exe (PID: 5940 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\msbuild.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

WerFault.exe (PID: 6500 cmdline: C:\Windows\system32\WerFault.exe -u -p 6848 -s 856 MD5: FD27D9F6D02763BDE32511B5DF7FF7A0)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Agent Tesla, AgentTesla	A .NET based information stealer readily available to actors due to leaked builders. The malware is able to log keystrokes, can access the host's clipboard and crawls the disk for credentials or other valuable information. It has the capability to send information back to its C&C via HTTP(S), SMTP, FTP, or towards a Telegram channel.	SWEED	http://blog.nsfocus.net/sweed-611/ http://l1v1ngc0d3.wordpress.com/2021/11/12/agenttesla-dropped-via-nsis-installer/ http://ropgadget.com/posts/originlogger.html http://www.secureworks.com/research/threat-profiles/gold-galleon https://0xmrmagnezi.github.io/malware%20analysis/AgentTesla/	https://malpedia.caad.fkie.fraunhofer.de/details/win.agent_tesla

Malware Configuration

Threatname: Agenttesla

{"Exfil Mode": "SMTP", "Port": "587", "Host": "mail.alhoneycomb.com", "Username": "blog@alhoneycomb.com", "Password": "          WORTHwill3611!           "}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000002.2266085780.000001559E3C3000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_UACBypassusingCMSTP	Yara detected UAC Bypass using CMSTP	Joe Security
00000002.00000002.4489457598.0000000000402000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000002.00000002.4489457598.0000000000402000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000000.00000002.2266776507.00000155AE057000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000002.2266776507.00000155AE057000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000002.00000002.4498926450.0000000002A51000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000002.00000002.4498926450.0000000002A51000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Process Memory Space: hesaphareketi-01.exe PID: 6848	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: hesaphareketi-01.exe PID: 6848	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Process Memory Space: hesaphareketi-01.exe PID: 6848	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Process Memory Space: hesaphareketi-01.exe PID: 6848	JoeSecurity_UACBypassusingCMSTP	Yara detected UAC Bypass using CMSTP	Joe Security
Process Memory Space: MSBuild.exe PID: 3948	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: MSBuild.exe PID: 3948	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Click to see the 8 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
0.2.hesaphareketi-01.exe.155ae096b08.3.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0.2.hesaphareketi-01.exe.155ae096b08.3.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
0.2.hesaphareketi-01.exe.155ae096b08.3.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x339aa:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x33a1c:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x33aa6:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x33b38:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x33ba2:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x33c14:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x33caa:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x33d3a:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
0.2.hesaphareketi-01.exe.155ae0d3b50.4.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0.2.hesaphareketi-01.exe.155ae0d3b50.4.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
0.2.hesaphareketi-01.exe.155ae0d3b50.4.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x339aa:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x33a1c:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x33aa6:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x33b38:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x33ba2:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x33c14:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x33caa:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x33d3a:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
0.2.hesaphareketi-01.exe.155ae0d3b50.4.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0.2.hesaphareketi-01.exe.155ae0d3b50.4.raw.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
0.2.hesaphareketi-01.exe.155ae0d3b50.4.raw.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x357aa:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x3581c:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x358a6:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x35938:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x359a2:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x35a14:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x35aaa:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x35b3a:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
2.2.MSBuild.exe.400000.0.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
2.2.MSBuild.exe.400000.0.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
2.2.MSBuild.exe.400000.0.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x357aa:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x3581c:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x358a6:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x35938:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x359a2:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x35a14:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x35aaa:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x35b3a:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
0.2.hesaphareketi-01.exe.155ae096b08.3.raw.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0.2.hesaphareketi-01.exe.155ae096b08.3.raw.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
0.2.hesaphareketi-01.exe.155ae096b08.3.raw.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x357aa:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x727f2:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x3581c:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x72864:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x358a6:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x728ee:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x35938:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x72980:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x359a2:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x729ea:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x35a14:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x72a5c:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x35aaa:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x72af2:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x35b3a:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548 0x72b82:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548
Click to see the 10 entries

Sigma Signatures

Networking

Sigma detected: MSBuild connects to smtp port

Source: Network Connection

Author: Joe Security: Data: DestinationIp: 74.119.238.7, DestinationIsIpv6: false, DestinationPort: 587, EventID: 3, Image: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe, Initiated: true, ProcessId: 3948, Protocol: tcp, SourceIp: 192.168.2.5, SourceIsIpv6: false, SourcePort: 49706

System Summary

Sigma detected: Suspicious Outbound SMTP Connections

Source: Network Connection

Author: frack113: Data: DestinationIp: 74.119.238.7, DestinationIsIpv6: false, DestinationPort: 587, EventID: 3, Image: , Initiated: true, ProcessId: , Protocol: tcp, SourceIp: 192.168.2.5, SourceIsIpv6: false, SourcePort: 50007

Suricata Signatures

ET MALWARE AgentTesla Exfil Via SMTP

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-22T09:02:57.007430+0200	2030171	1	A Network Trojan was detected	192.168.2.5	49706	74.119.238.7	587	TCP
2024-10-22T09:02:59.103919+0200	2030171	1	A Network Trojan was detected	192.168.2.5	49711	74.119.238.7	587	TCP
2024-10-22T09:04:36.173053+0200	2030171	1	A Network Trojan was detected	192.168.2.5	49990	74.119.238.7	587	TCP
2024-10-22T09:04:52.080932+0200	2030171	1	A Network Trojan was detected	192.168.2.5	49991	74.119.238.7	587	TCP
2024-10-22T09:05:01.532208+0200	2030171	1	A Network Trojan was detected	192.168.2.5	49992	74.119.238.7	587	TCP
2024-10-22T09:05:17.337782+0200	2030171	1	A Network Trojan was detected	192.168.2.5	49993	74.119.238.7	587	TCP
2024-10-22T09:05:21.319251+0200	2030171	1	A Network Trojan was detected	192.168.2.5	49994	74.119.238.7	587	TCP
2024-10-22T09:05:30.880061+0200	2030171	1	A Network Trojan was detected	192.168.2.5	49995	74.119.238.7	587	TCP
2024-10-22T09:05:30.932408+0200	2030171	1	A Network Trojan was detected	192.168.2.5	49996	74.119.238.7	587	TCP
2024-10-22T09:05:36.513940+0200	2030171	1	A Network Trojan was detected	192.168.2.5	49997	74.119.238.7	587	TCP
2024-10-22T09:05:40.310386+0200	2030171	1	A Network Trojan was detected	192.168.2.5	49998	74.119.238.7	587	TCP
2024-10-22T09:06:06.153479+0200	2030171	1	A Network Trojan was detected	192.168.2.5	49999	74.119.238.7	587	TCP
2024-10-22T09:06:12.004598+0200	2030171	1	A Network Trojan was detected	192.168.2.5	50000	74.119.238.7	587	TCP
2024-10-22T09:06:16.169764+0200	2030171	1	A Network Trojan was detected	192.168.2.5	50002	74.119.238.7	587	TCP
2024-10-22T09:06:27.742278+0200	2030171	1	A Network Trojan was detected	192.168.2.5	50003	74.119.238.7	587	TCP
2024-10-22T09:06:32.544698+0200	2030171	1	A Network Trojan was detected	192.168.2.5	50004	74.119.238.7	587	TCP
2024-10-22T09:06:41.442364+0200	2030171	1	A Network Trojan was detected	192.168.2.5	50005	74.119.238.7	587	TCP
2024-10-22T09:06:52.573769+0200	2030171	1	A Network Trojan was detected	192.168.2.5	50006	74.119.238.7	587	TCP

ETPRO MALWARE Agent Tesla CnC Exfil Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-22T09:02:56.432529+0200	2855542	1	A Network Trojan was detected	192.168.2.5	49706	74.119.238.7	587	TCP
2024-10-22T09:02:58.892551+0200	2855542	1	A Network Trojan was detected	192.168.2.5	49711	74.119.238.7	587	TCP
2024-10-22T09:04:36.164425+0200	2855542	1	A Network Trojan was detected	192.168.2.5	49990	74.119.238.7	587	TCP
2024-10-22T09:04:52.073462+0200	2855542	1	A Network Trojan was detected	192.168.2.5	49991	74.119.238.7	587	TCP
2024-10-22T09:05:01.525263+0200	2855542	1	A Network Trojan was detected	192.168.2.5	49992	74.119.238.7	587	TCP
2024-10-22T09:05:17.330926+0200	2855542	1	A Network Trojan was detected	192.168.2.5	49993	74.119.238.7	587	TCP
2024-10-22T09:05:21.288848+0200	2855542	1	A Network Trojan was detected	192.168.2.5	49994	74.119.238.7	587	TCP
2024-10-22T09:05:30.873448+0200	2855542	1	A Network Trojan was detected	192.168.2.5	49995	74.119.238.7	587	TCP
2024-10-22T09:05:30.917708+0200	2855542	1	A Network Trojan was detected	192.168.2.5	49996	74.119.238.7	587	TCP
2024-10-22T09:05:36.505717+0200	2855542	1	A Network Trojan was detected	192.168.2.5	49997	74.119.238.7	587	TCP
2024-10-22T09:05:40.303201+0200	2855542	1	A Network Trojan was detected	192.168.2.5	49998	74.119.238.7	587	TCP
2024-10-22T09:06:06.146561+0200	2855542	1	A Network Trojan was detected	192.168.2.5	49999	74.119.238.7	587	TCP
2024-10-22T09:06:11.995541+0200	2855542	1	A Network Trojan was detected	192.168.2.5	50000	74.119.238.7	587	TCP
2024-10-22T09:06:16.160646+0200	2855542	1	A Network Trojan was detected	192.168.2.5	50002	74.119.238.7	587	TCP
2024-10-22T09:06:27.733088+0200	2855542	1	A Network Trojan was detected	192.168.2.5	50003	74.119.238.7	587	TCP
2024-10-22T09:06:32.535913+0200	2855542	1	A Network Trojan was detected	192.168.2.5	50004	74.119.238.7	587	TCP
2024-10-22T09:06:41.435865+0200	2855542	1	A Network Trojan was detected	192.168.2.5	50005	74.119.238.7	587	TCP
2024-10-22T09:06:52.566920+0200	2855542	1	A Network Trojan was detected	192.168.2.5	50006	74.119.238.7	587	TCP

ETPRO MALWARE Agent Tesla Exfil via SMTP

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-22T09:02:56.432529+0200	2855245	1	A Network Trojan was detected	192.168.2.5	49706	74.119.238.7	587	TCP

ETPRO MALWARE Win32/Agent Tesla SMTP Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-22T09:02:57.007430+0200	2839723	1	Malware Command and Control Activity Detected	192.168.2.5	49706	74.119.238.7	587	TCP
2024-10-22T09:02:59.103919+0200	2839723	1	Malware Command and Control Activity Detected	192.168.2.5	49711	74.119.238.7	587	TCP
2024-10-22T09:04:36.173053+0200	2839723	1	Malware Command and Control Activity Detected	192.168.2.5	49990	74.119.238.7	587	TCP
2024-10-22T09:04:52.080932+0200	2839723	1	Malware Command and Control Activity Detected	192.168.2.5	49991	74.119.238.7	587	TCP
2024-10-22T09:05:01.532208+0200	2839723	1	Malware Command and Control Activity Detected	192.168.2.5	49992	74.119.238.7	587	TCP
2024-10-22T09:05:17.337782+0200	2839723	1	Malware Command and Control Activity Detected	192.168.2.5	49993	74.119.238.7	587	TCP
2024-10-22T09:05:21.319251+0200	2839723	1	Malware Command and Control Activity Detected	192.168.2.5	49994	74.119.238.7	587	TCP
2024-10-22T09:05:30.880061+0200	2839723	1	Malware Command and Control Activity Detected	192.168.2.5	49995	74.119.238.7	587	TCP
2024-10-22T09:05:30.932408+0200	2839723	1	Malware Command and Control Activity Detected	192.168.2.5	49996	74.119.238.7	587	TCP
2024-10-22T09:05:36.513940+0200	2839723	1	Malware Command and Control Activity Detected	192.168.2.5	49997	74.119.238.7	587	TCP
2024-10-22T09:05:40.310386+0200	2839723	1	Malware Command and Control Activity Detected	192.168.2.5	49998	74.119.238.7	587	TCP
2024-10-22T09:06:06.153479+0200	2839723	1	Malware Command and Control Activity Detected	192.168.2.5	49999	74.119.238.7	587	TCP
2024-10-22T09:06:12.004598+0200	2839723	1	Malware Command and Control Activity Detected	192.168.2.5	50000	74.119.238.7	587	TCP
2024-10-22T09:06:16.169764+0200	2839723	1	Malware Command and Control Activity Detected	192.168.2.5	50002	74.119.238.7	587	TCP
2024-10-22T09:06:27.742278+0200	2839723	1	Malware Command and Control Activity Detected	192.168.2.5	50003	74.119.238.7	587	TCP
2024-10-22T09:06:32.544698+0200	2839723	1	Malware Command and Control Activity Detected	192.168.2.5	50004	74.119.238.7	587	TCP
2024-10-22T09:06:41.442364+0200	2839723	1	Malware Command and Control Activity Detected	192.168.2.5	50005	74.119.238.7	587	TCP
2024-10-22T09:06:52.573769+0200	2839723	1	Malware Command and Control Activity Detected	192.168.2.5	50006	74.119.238.7	587	TCP

ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-22T09:02:57.007430+0200	2840032	1	A Network Trojan was detected	192.168.2.5	49706	74.119.238.7	587	TCP
2024-10-22T09:02:59.103919+0200	2840032	1	A Network Trojan was detected	192.168.2.5	49711	74.119.238.7	587	TCP
2024-10-22T09:04:36.173053+0200	2840032	1	A Network Trojan was detected	192.168.2.5	49990	74.119.238.7	587	TCP
2024-10-22T09:04:52.080932+0200	2840032	1	A Network Trojan was detected	192.168.2.5	49991	74.119.238.7	587	TCP
2024-10-22T09:05:01.532208+0200	2840032	1	A Network Trojan was detected	192.168.2.5	49992	74.119.238.7	587	TCP
2024-10-22T09:05:17.337782+0200	2840032	1	A Network Trojan was detected	192.168.2.5	49993	74.119.238.7	587	TCP
2024-10-22T09:05:21.319251+0200	2840032	1	A Network Trojan was detected	192.168.2.5	49994	74.119.238.7	587	TCP
2024-10-22T09:05:30.880061+0200	2840032	1	A Network Trojan was detected	192.168.2.5	49995	74.119.238.7	587	TCP
2024-10-22T09:05:30.932408+0200	2840032	1	A Network Trojan was detected	192.168.2.5	49996	74.119.238.7	587	TCP
2024-10-22T09:05:36.513940+0200	2840032	1	A Network Trojan was detected	192.168.2.5	49997	74.119.238.7	587	TCP
2024-10-22T09:05:40.310386+0200	2840032	1	A Network Trojan was detected	192.168.2.5	49998	74.119.238.7	587	TCP
2024-10-22T09:06:06.153479+0200	2840032	1	A Network Trojan was detected	192.168.2.5	49999	74.119.238.7	587	TCP
2024-10-22T09:06:12.004598+0200	2840032	1	A Network Trojan was detected	192.168.2.5	50000	74.119.238.7	587	TCP
2024-10-22T09:06:16.169764+0200	2840032	1	A Network Trojan was detected	192.168.2.5	50002	74.119.238.7	587	TCP
2024-10-22T09:06:27.742278+0200	2840032	1	A Network Trojan was detected	192.168.2.5	50003	74.119.238.7	587	TCP
2024-10-22T09:06:32.544698+0200	2840032	1	A Network Trojan was detected	192.168.2.5	50004	74.119.238.7	587	TCP
2024-10-22T09:06:41.442364+0200	2840032	1	A Network Trojan was detected	192.168.2.5	50005	74.119.238.7	587	TCP
2024-10-22T09:06:52.573769+0200	2840032	1	A Network Trojan was detected	192.168.2.5	50006	74.119.238.7	587	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: hesaphareketi-01.exe

Avira: detected

Found malware configuration

Source: 0.2.hesaphareketi-01.exe.155ae096b08.3.raw.unpack

Malware Configuration Extractor: Agenttesla {"Exfil Mode": "SMTP", "Port": "587", "Host": "mail.alhoneycomb.com", "Username": "blog@alhoneycomb.com", "Password": " WORTHwill3611! "}

Multi AV Scanner detection for submitted file

Source: hesaphareketi-01.exe

ReversingLabs: Detection: 47%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for sample

Source: hesaphareketi-01.exe

Joe Sandbox ML: detected

Exploits

Yara detected UAC Bypass using CMSTP

Source: Yara match	File source: 00000000.00000002.2266085780.000001559E3C3000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: hesaphareketi-01.exe PID: 6848, type: MEMORYSTR

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49720 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.5:49815 version: TLS 1.2

Source: hesaphareketi-01.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: Microsoft.VisualBasic.ni.pdb source: WERD907.tmp.dmp.6.dr
Source:	Binary string: mscorlib.pdb source: WERD907.tmp.dmp.6.dr
Source:	Binary string: System.ni.pdbRSDS source: WERD907.tmp.dmp.6.dr
Source:	Binary string: mscorlib.ni.pdb source: WERD907.tmp.dmp.6.dr
Source:	Binary string: System.Core.pdb source: WERD907.tmp.dmp.6.dr
Source:	Binary string: System.Core.pdb =Y source: WERD907.tmp.dmp.6.dr
Source:	Binary string: mscorlib.ni.pdbRSDS7^3l source: WERD907.tmp.dmp.6.dr
Source:	Binary string: Microsoft.VisualBasic.ni.pdbRSDS& source: WERD907.tmp.dmp.6.dr
Source:	Binary string: System.ni.pdb source: WERD907.tmp.dmp.6.dr
Source:	Binary string: System.pdb source: WERD907.tmp.dmp.6.dr
Source:	Binary string: System.Core.ni.pdbRSDS source: WERD907.tmp.dmp.6.dr
Source:	Binary string: Microsoft.VisualBasic.pdb source: WERD907.tmp.dmp.6.dr
Source:	Binary string: System.Core.ni.pdb source: WERD907.tmp.dmp.6.dr

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2855542 - Severity 1 - ETPRO MALWARE Agent Tesla CnC Exfil Activity : 192.168.2.5:49711 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2855245 - Severity 1 - ETPRO MALWARE Agent Tesla Exfil via SMTP : 192.168.2.5:49706 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2855542 - Severity 1 - ETPRO MALWARE Agent Tesla CnC Exfil Activity : 192.168.2.5:49706 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2030171 - Severity 1 - ET MALWARE AgentTesla Exfil Via SMTP : 192.168.2.5:49711 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2839723 - Severity 1 - ETPRO MALWARE Win32/Agent Tesla SMTP Activity : 192.168.2.5:49711 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2840032 - Severity 1 - ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2 : 192.168.2.5:49711 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2030171 - Severity 1 - ET MALWARE AgentTesla Exfil Via SMTP : 192.168.2.5:49706 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2839723 - Severity 1 - ETPRO MALWARE Win32/Agent Tesla SMTP Activity : 192.168.2.5:49706 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2840032 - Severity 1 - ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2 : 192.168.2.5:49706 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2855542 - Severity 1 - ETPRO MALWARE Agent Tesla CnC Exfil Activity : 192.168.2.5:49990 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2855542 - Severity 1 - ETPRO MALWARE Agent Tesla CnC Exfil Activity : 192.168.2.5:49991 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2030171 - Severity 1 - ET MALWARE AgentTesla Exfil Via SMTP : 192.168.2.5:49990 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2839723 - Severity 1 - ETPRO MALWARE Win32/Agent Tesla SMTP Activity : 192.168.2.5:49990 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2840032 - Severity 1 - ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2 : 192.168.2.5:49990 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2855542 - Severity 1 - ETPRO MALWARE Agent Tesla CnC Exfil Activity : 192.168.2.5:49993 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2855542 - Severity 1 - ETPRO MALWARE Agent Tesla CnC Exfil Activity : 192.168.2.5:49992 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2030171 - Severity 1 - ET MALWARE AgentTesla Exfil Via SMTP : 192.168.2.5:49991 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2839723 - Severity 1 - ETPRO MALWARE Win32/Agent Tesla SMTP Activity : 192.168.2.5:49991 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2840032 - Severity 1 - ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2 : 192.168.2.5:49991 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2855542 - Severity 1 - ETPRO MALWARE Agent Tesla CnC Exfil Activity : 192.168.2.5:49994 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2030171 - Severity 1 - ET MALWARE AgentTesla Exfil Via SMTP : 192.168.2.5:49993 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2839723 - Severity 1 - ETPRO MALWARE Win32/Agent Tesla SMTP Activity : 192.168.2.5:49993 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2840032 - Severity 1 - ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2 : 192.168.2.5:49993 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2855542 - Severity 1 - ETPRO MALWARE Agent Tesla CnC Exfil Activity : 192.168.2.5:49995 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2030171 - Severity 1 - ET MALWARE AgentTesla Exfil Via SMTP : 192.168.2.5:49992 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2839723 - Severity 1 - ETPRO MALWARE Win32/Agent Tesla SMTP Activity : 192.168.2.5:49992 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2840032 - Severity 1 - ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2 : 192.168.2.5:49992 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2030171 - Severity 1 - ET MALWARE AgentTesla Exfil Via SMTP : 192.168.2.5:49994 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2839723 - Severity 1 - ETPRO MALWARE Win32/Agent Tesla SMTP Activity : 192.168.2.5:49994 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2840032 - Severity 1 - ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2 : 192.168.2.5:49994 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2855542 - Severity 1 - ETPRO MALWARE Agent Tesla CnC Exfil Activity : 192.168.2.5:49997 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2030171 - Severity 1 - ET MALWARE AgentTesla Exfil Via SMTP : 192.168.2.5:49995 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2839723 - Severity 1 - ETPRO MALWARE Win32/Agent Tesla SMTP Activity : 192.168.2.5:49995 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2840032 - Severity 1 - ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2 : 192.168.2.5:49995 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2855542 - Severity 1 - ETPRO MALWARE Agent Tesla CnC Exfil Activity : 192.168.2.5:49998 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2030171 - Severity 1 - ET MALWARE AgentTesla Exfil Via SMTP : 192.168.2.5:49997 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2839723 - Severity 1 - ETPRO MALWARE Win32/Agent Tesla SMTP Activity : 192.168.2.5:49997 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2840032 - Severity 1 - ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2 : 192.168.2.5:49997 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2855542 - Severity 1 - ETPRO MALWARE Agent Tesla CnC Exfil Activity : 192.168.2.5:50000 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2855542 - Severity 1 - ETPRO MALWARE Agent Tesla CnC Exfil Activity : 192.168.2.5:49999 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2030171 - Severity 1 - ET MALWARE AgentTesla Exfil Via SMTP : 192.168.2.5:49998 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2839723 - Severity 1 - ETPRO MALWARE Win32/Agent Tesla SMTP Activity : 192.168.2.5:49998 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2840032 - Severity 1 - ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2 : 192.168.2.5:49998 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2855542 - Severity 1 - ETPRO MALWARE Agent Tesla CnC Exfil Activity : 192.168.2.5:50003 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2855542 - Severity 1 - ETPRO MALWARE Agent Tesla CnC Exfil Activity : 192.168.2.5:50002 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2030171 - Severity 1 - ET MALWARE AgentTesla Exfil Via SMTP : 192.168.2.5:50000 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2839723 - Severity 1 - ETPRO MALWARE Win32/Agent Tesla SMTP Activity : 192.168.2.5:50000 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2840032 - Severity 1 - ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2 : 192.168.2.5:50000 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2855542 - Severity 1 - ETPRO MALWARE Agent Tesla CnC Exfil Activity : 192.168.2.5:50004 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2030171 - Severity 1 - ET MALWARE AgentTesla Exfil Via SMTP : 192.168.2.5:50003 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2839723 - Severity 1 - ETPRO MALWARE Win32/Agent Tesla SMTP Activity : 192.168.2.5:50003 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2840032 - Severity 1 - ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2 : 192.168.2.5:50003 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2855542 - Severity 1 - ETPRO MALWARE Agent Tesla CnC Exfil Activity : 192.168.2.5:49996 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2030171 - Severity 1 - ET MALWARE AgentTesla Exfil Via SMTP : 192.168.2.5:50002 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2839723 - Severity 1 - ETPRO MALWARE Win32/Agent Tesla SMTP Activity : 192.168.2.5:50002 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2840032 - Severity 1 - ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2 : 192.168.2.5:50002 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2030171 - Severity 1 - ET MALWARE AgentTesla Exfil Via SMTP : 192.168.2.5:49999 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2855542 - Severity 1 - ETPRO MALWARE Agent Tesla CnC Exfil Activity : 192.168.2.5:50005 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2839723 - Severity 1 - ETPRO MALWARE Win32/Agent Tesla SMTP Activity : 192.168.2.5:49999 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2840032 - Severity 1 - ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2 : 192.168.2.5:49999 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2030171 - Severity 1 - ET MALWARE AgentTesla Exfil Via SMTP : 192.168.2.5:49996 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2839723 - Severity 1 - ETPRO MALWARE Win32/Agent Tesla SMTP Activity : 192.168.2.5:49996 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2840032 - Severity 1 - ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2 : 192.168.2.5:49996 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2855542 - Severity 1 - ETPRO MALWARE Agent Tesla CnC Exfil Activity : 192.168.2.5:50006 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2030171 - Severity 1 - ET MALWARE AgentTesla Exfil Via SMTP : 192.168.2.5:50006 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2839723 - Severity 1 - ETPRO MALWARE Win32/Agent Tesla SMTP Activity : 192.168.2.5:50006 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2840032 - Severity 1 - ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2 : 192.168.2.5:50006 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2030171 - Severity 1 - ET MALWARE AgentTesla Exfil Via SMTP : 192.168.2.5:50005 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2839723 - Severity 1 - ETPRO MALWARE Win32/Agent Tesla SMTP Activity : 192.168.2.5:50005 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2840032 - Severity 1 - ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2 : 192.168.2.5:50005 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2030171 - Severity 1 - ET MALWARE AgentTesla Exfil Via SMTP : 192.168.2.5:50004 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2839723 - Severity 1 - ETPRO MALWARE Win32/Agent Tesla SMTP Activity : 192.168.2.5:50004 -> 74.119.238.7:587
Source: Network traffic	Suricata IDS: 2840032 - Severity 1 - ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2 : 192.168.2.5:50004 -> 74.119.238.7:587

Source: global traffic

TCP traffic: 192.168.2.5:49706 -> 74.119.238.7:587

Source: Joe Sandbox View

ASN Name: VPLSNETUS VPLSNETUS

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: global traffic

TCP traffic: 192.168.2.5:49706 -> 74.119.238.7:587

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49720 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic

DNS traffic detected: DNS query: mail.alhoneycomb.com

Source: MSBuild.exe, 00000002.00000002.4498926450.0000000002E99000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000002.00000002.4498926450.0000000002E69000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000002.00000002.4498926450.0000000002B9A000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000002.00000002.4498926450.0000000002DE5000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000002.00000002.4498926450.0000000002D31000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000002.00000002.4498926450.0000000002F30000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000002.00000002.4498926450.0000000002CC3000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000002.00000002.4498926450.0000000002A51000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000002.00000002.4498926450.0000000002C63000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://mail.alhoneycomb.com
Source: Amcache.hve.6.dr	String found in binary or memory: http://upx.sf.net
Source: hesaphareketi-01.exe, 00000000.00000002.2266776507.00000155AE057000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000002.00000002.4489457598.0000000000402000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://account.dyn.com/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800

Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.5:49815 version: TLS 1.2

Key, Mouse, Clipboard, Microphone and Screen Capturing

Contains functionality to log keystrokes (.Net Source)

Source: 0.2.hesaphareketi-01.exe.155ae096b08.3.raw.unpack, SKTzxzsJw.cs	.Net Code: GhwkGV1Ll50
Source: 0.2.hesaphareketi-01.exe.155ae0d3b50.4.raw.unpack, SKTzxzsJw.cs	.Net Code: GhwkGV1Ll50

Installs a global keyboard hook

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Windows user hook set: 0 keyboard low level C:\Windows\Microsoft.NET\Framework\v4.0.30319\msbuild.exe

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Window created: window name: CLIPBRDWNDCLASS

Jump to behavior

System Summary

Malicious sample detected (through community Yara rule)

Source: 0.2.hesaphareketi-01.exe.155ae096b08.3.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 0.2.hesaphareketi-01.exe.155ae0d3b50.4.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 0.2.hesaphareketi-01.exe.155ae0d3b50.4.raw.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 2.2.MSBuild.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen
Source: 0.2.hesaphareketi-01.exe.155ae096b08.3.raw.unpack, type: UNPACKEDPE	Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_00EA4330	2_2_00EA4330
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_00EA4C00	2_2_00EA4C00
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_00EA3FE8	2_2_00EA3FE8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_00EABF20	2_2_00EABF20
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_00EABF13	2_2_00EABF13
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_05FE07F8	2_2_05FE07F8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_05FEA7A8	2_2_05FEA7A8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_05FEBF38	2_2_05FEBF38
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_05FE6E50	2_2_05FE6E50
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_05FEF3EF	2_2_05FEF3EF
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_05FE3B38	2_2_05FE3B38
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_05FEB858	2_2_05FEB858
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_05FE9A8B	2_2_05FE9A8B
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_060246B8	2_2_060246B8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_06029BE4	2_2_06029BE4
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_060226F0	2_2_060226F0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_0602B470	2_2_0602B470
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_06029BD8	2_2_06029BD8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_06027838	2_2_06027838
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_064993D0	2_2_064993D0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_064944A0	2_2_064944A0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_0649F648	2_2_0649F648
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_0649F658	2_2_0649F658

Source: C:\Users\user\Desktop\hesaphareketi-01.exe

Process created: C:\Windows\System32\WerFault.exe C:\Windows\system32\WerFault.exe -u -p 6848 -s 856

Source: hesaphareketi-01.exe

Static PE information: No import functions for PE file found

Source: hesaphareketi-01.exe, 00000000.00000000.2026889151.000001559C2A2000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameNewcastle.exe4 vs hesaphareketi-01.exe
Source: hesaphareketi-01.exe, 00000000.00000002.2266776507.00000155AE49A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameAresuvokad> vs hesaphareketi-01.exe
Source: hesaphareketi-01.exe, 00000000.00000002.2266776507.00000155AE057000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameb17b300f-3107-4f0e-bd36-73672dc506a5.exe4 vs hesaphareketi-01.exe
Source: hesaphareketi-01.exe	Binary or memory string: OriginalFilenameNewcastle.exe4 vs hesaphareketi-01.exe

Source: 0.2.hesaphareketi-01.exe.155ae096b08.3.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.2.hesaphareketi-01.exe.155ae0d3b50.4.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.2.hesaphareketi-01.exe.155ae0d3b50.4.raw.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 2.2.MSBuild.exe.400000.0.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers
Source: 0.2.hesaphareketi-01.exe.155ae096b08.3.raw.unpack, type: UNPACKEDPE	Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers

Source: 0.2.hesaphareketi-01.exe.155ae096b08.3.raw.unpack, 4JJG6X.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.hesaphareketi-01.exe.155ae096b08.3.raw.unpack, 4JJG6X.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.hesaphareketi-01.exe.155ae096b08.3.raw.unpack, 8C78isHTVco.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.hesaphareketi-01.exe.155ae096b08.3.raw.unpack, 8C78isHTVco.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.hesaphareketi-01.exe.155ae096b08.3.raw.unpack, 8C78isHTVco.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.hesaphareketi-01.exe.155ae096b08.3.raw.unpack, 8C78isHTVco.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.hesaphareketi-01.exe.155ae096b08.3.raw.unpack, CqSP68Ir.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.hesaphareketi-01.exe.155ae096b08.3.raw.unpack, CqSP68Ir.cs	Cryptographic APIs: 'TransformFinalBlock', 'CreateDecryptor'

Source: classification engine

Classification label: mal100.spre.troj.spyw.expl.evad.winEXE@6/5@1/1

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Mutant created: NULL
Source: C:\Windows\System32\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess6848

Source: C:\Windows\System32\WerFault.exe

File created: C:\ProgramData\Microsoft\Windows\WER\Temp\4fb578d7-3d40-4882-b8d2-ff92f6fd4db8

Jump to behavior

Source: hesaphareketi-01.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

File read: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini

Jump to behavior

Source: C:\Users\user\Desktop\hesaphareketi-01.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: hesaphareketi-01.exe

ReversingLabs: Detection: 47%

Source: C:\Users\user\Desktop\hesaphareketi-01.exe

File read: C:\Users\user\Desktop\hesaphareketi-01.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\hesaphareketi-01.exe "C:\Users\user\Desktop\hesaphareketi-01.exe"
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\msbuild.exe"
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\msbuild.exe"
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process created: C:\Windows\System32\WerFault.exe C:\Windows\system32\WerFault.exe -u -p 6848 -s 856
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\msbuild.exe"	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\msbuild.exe"	Jump to behavior

Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: vaultcli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: windowscodecs.dll	Jump to behavior

Source: C:\Users\user\Desktop\hesaphareketi-01.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0EE7644B-1BAD-48B1-9889-0281C206EB85}\InprocServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\hesaphareketi-01.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\11.0\Outlook\Profiles

Jump to behavior

Source: hesaphareketi-01.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: hesaphareketi-01.exe

Static file information: File size 1625154 > 1048576

Source: hesaphareketi-01.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: Microsoft.VisualBasic.ni.pdb source: WERD907.tmp.dmp.6.dr
Source:	Binary string: mscorlib.pdb source: WERD907.tmp.dmp.6.dr
Source:	Binary string: System.ni.pdbRSDS source: WERD907.tmp.dmp.6.dr
Source:	Binary string: mscorlib.ni.pdb source: WERD907.tmp.dmp.6.dr
Source:	Binary string: System.Core.pdb source: WERD907.tmp.dmp.6.dr
Source:	Binary string: System.Core.pdb =Y source: WERD907.tmp.dmp.6.dr
Source:	Binary string: mscorlib.ni.pdbRSDS7^3l source: WERD907.tmp.dmp.6.dr
Source:	Binary string: Microsoft.VisualBasic.ni.pdbRSDS& source: WERD907.tmp.dmp.6.dr
Source:	Binary string: System.ni.pdb source: WERD907.tmp.dmp.6.dr
Source:	Binary string: System.pdb source: WERD907.tmp.dmp.6.dr
Source:	Binary string: System.Core.ni.pdbRSDS source: WERD907.tmp.dmp.6.dr
Source:	Binary string: Microsoft.VisualBasic.pdb source: WERD907.tmp.dmp.6.dr
Source:	Binary string: System.Core.ni.pdb source: WERD907.tmp.dmp.6.dr

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_00EAFD83 push es; ret		2_2_00EAFD90
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_064976D0 push es; ret		2_2_064976E0

Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Yara detected AntiVM3

Source: Yara match

File source: Process Memory Space: hesaphareketi-01.exe PID: 6848, type: MEMORYSTR

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_NetworkAdapterConfiguration

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: hesaphareketi-01.exe, 00000000.00000002.2266085780.000001559E3C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: WINE_GET_UNIX_FILE_NAME
Source: hesaphareketi-01.exe, 00000000.00000002.2266085780.000001559E3C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SBIEDLL.DLL

Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Memory allocated: 1559C4D0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Memory allocated: 155B6050000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Memory allocated: 155C6710000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: EA0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 2A50000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 28E0000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 1199964	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 1199860	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 1199750	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 1199641	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 1199516	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 1199391	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Window / User API: threadDelayed 2074			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Window / User API: threadDelayed 7774			Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -35048813740048126s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -100000s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -99843s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -99734s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -99624s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -99515s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -99406s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -99296s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -99187s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -99076s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -98966s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -98848s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -98733s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -98607s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -98500s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -98390s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -98281s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -98171s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -98062s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -97953s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -97843s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -97734s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -97624s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -99937s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -99828s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -99718s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -99609s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -99500s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -99390s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -99281s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -99171s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -99062s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -98953s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -98843s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -98734s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -98625s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -98515s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -98406s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -98297s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -98187s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -98078s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -97968s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -97859s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -97750s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -97640s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -1199964s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -1199860s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -1199750s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -1199641s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -1199516s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep time: -1199391s >= -30000s	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BaseBoard

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 100000	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 99843	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 99734	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 99624	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 99515	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 99406	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 99296	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 99187	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 99076	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 98966	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 98848	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 98733	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 98607	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 98500	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 98390	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 98281	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 98171	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 98062	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 97953	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 97843	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 97734	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 97624	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 99937	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 99828	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 99718	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 99609	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 99500	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 99390	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 99281	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 99171	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 99062	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 98953	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 98843	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 98734	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 98625	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 98515	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 98406	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 98297	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 98187	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 98078	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 97968	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 97859	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 97750	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 97640	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 1199964	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 1199860	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 1199750	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 1199641	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 1199516	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 1199391	Jump to behavior

Source: Amcache.hve.6.dr	Binary or memory string: VMware
Source: Amcache.hve.6.dr	Binary or memory string: VMware Virtual USB Mouse
Source: Amcache.hve.6.dr	Binary or memory string: vmci.syshbin
Source: Amcache.hve.6.dr	Binary or memory string: VMware, Inc.
Source: hesaphareketi-01.exe, 00000000.00000002.2266085780.000001559E3C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: C:\PROGRAM FILES\VMWARE\VMWARE TOOLS\
Source: Amcache.hve.6.dr	Binary or memory string: VMware20,1hbin@
Source: Amcache.hve.6.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: Amcache.hve.6.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.6.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.6.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: hesaphareketi-01.exe, 00000000.00000002.2266085780.000001559E3C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMWARE
Source: hesaphareketi-01.exe, 00000000.00000002.2266085780.000001559E3C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: InstallPath%C:\PROGRAM FILES\VMWARE\VMWARE TOOLS\'C:\WINDOWS\system32\drivers\vmmouse.sys&C:\WINDOWS\system32\drivers\vmhgfs.sys
Source: Amcache.hve.6.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: hesaphareketi-01.exe, 00000000.00000002.2266085780.000001559E3C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMWARE"SOFTWARE\VMware, Inc.\VMware ToolsLHARDWARE\DEVICEMAP\Scsi\Scsi Port 1\Scsi Bus 0\Target Id 0\Logical Unit Id 0LHARDWARE\DEVICEMAP\Scsi\Scsi Port 2\Scsi Bus 0\Target Id 0\Logical Unit Id 0'SYSTEM\ControlSet001\Services\Disk\Enum
Source: hesaphareketi-01.exe, 00000000.00000002.2266085780.000001559E3C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware SVGA II
Source: Amcache.hve.6.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.6.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.6.dr	Binary or memory string: vmci.sys
Source: MSBuild.exe, 00000002.00000002.4534603619.0000000005670000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dlly
Source: Amcache.hve.6.dr	Binary or memory string: VMware-56 4d 43 71 48 15 3d ed-ae e6 c7 5a ec d9 3b f0
Source: hesaphareketi-01.exe, 00000000.00000002.2266085780.000001559E3C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: C:\WINDOWS\system32\drivers\vmmouse.sys
Source: Amcache.hve.6.dr	Binary or memory string: vmci.syshbin`
Source: hesaphareketi-01.exe, 00000000.00000002.2266085780.000001559E3C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmware
Source: Amcache.hve.6.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: hesaphareketi-01.exe, 00000000.00000002.2266085780.000001559E3C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: C:\WINDOWS\system32\drivers\vmhgfs.sys
Source: hesaphareketi-01.exe, 00000000.00000002.2266085780.000001559E3C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SOFTWARE\VMware, Inc.\VMware Tools
Source: Amcache.hve.6.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.6.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.6.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.6.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.6.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: Amcache.hve.6.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: Amcache.hve.6.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.6.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.6.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: hesaphareketi-01.exe, 00000000.00000002.2266085780.000001559E3C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: noValueButYesKey)C:\WINDOWS\system32\drivers\VBoxMouse.sys
Source: hesaphareketi-01.exe, 00000000.00000002.2266085780.000001559E3C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: C:\WINDOWS\system32\drivers\VBoxMouse.sys
Source: Amcache.hve.6.dr	Binary or memory string: VMware VMCI Bus Device
Source: Amcache.hve.6.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.6.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: Amcache.hve.6.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process queried: DebugPort			Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process queried: DebugPort			Jump to behavior

Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process token adjusted: Debug			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process token adjusted: Debug			Jump to behavior

Source: C:\Users\user\Desktop\hesaphareketi-01.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

.NET source code references suspicious native API functions

Source: hesaphareketi-01.exe, ---.cs	Reference to suspicious API methods: GetProcAddress(_FBBA_FD4D_FD4C_FD46_065B, )
Source: hesaphareketi-01.exe, ---.cs	Reference to suspicious API methods: VirtualProtect(procAddress, (UIntPtr)(ulong)_FDDF_0612.Length, 64u, out var _FD4B_06DC_FDEA_0616)
Source: 0.2.hesaphareketi-01.exe.155ae096b08.3.raw.unpack, zOS.cs	Reference to suspicious API methods: _120HqGy.OpenProcess(_2pIt.DuplicateHandle, bInheritHandle: true, (uint)iVE.ProcessID)

Allocates memory in foreign processes

Source: C:\Users\user\Desktop\hesaphareketi-01.exe

Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000 protect: page execute and read and write

Jump to behavior

Injects a PE file into a foreign processes

Source: C:\Users\user\Desktop\hesaphareketi-01.exe

Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000 value starts with: 4D5A

Jump to behavior

Writes to foreign memory regions

Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 402000	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 440000	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 442000	Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 96B008	Jump to behavior

Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\msbuild.exe"			Jump to behavior
Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\msbuild.exe"			Jump to behavior

Source: C:\Users\user\Desktop\hesaphareketi-01.exe	Queries volume information: C:\Users\user\Desktop\hesaphareketi-01.exe VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\hesaphareketi-01.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: Amcache.hve.6.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.6.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.6.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.6.dr	Binary or memory string: MsMpEng.exe

Stealing of Sensitive Information

Yara detected AgentTesla

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 0.2.hesaphareketi-01.exe.155ae096b08.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.hesaphareketi-01.exe.155ae0d3b50.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.hesaphareketi-01.exe.155ae0d3b50.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.MSBuild.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.hesaphareketi-01.exe.155ae096b08.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000002.00000002.4489457598.0000000000402000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2266776507.00000155AE057000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.4498926450.0000000002A51000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: hesaphareketi-01.exe PID: 6848, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: MSBuild.exe PID: 3948, type: MEMORYSTR

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Roaming\NETGATE Technologies\BlackHawk\profiles.ini	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Roaming\8pecxstudios\Cyberfox\profiles.ini	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

File opened: C:\FTP Navigator\Ftplist.txt

Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Key opened: HKEY_CURRENT_USER\Software\IncrediMail\Identities	Jump to behavior

Source: Yara match	File source: 0.2.hesaphareketi-01.exe.155ae096b08.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.hesaphareketi-01.exe.155ae0d3b50.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.hesaphareketi-01.exe.155ae0d3b50.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.MSBuild.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.hesaphareketi-01.exe.155ae096b08.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000002.00000002.4489457598.0000000000402000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2266776507.00000155AE057000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.4498926450.0000000002A51000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: hesaphareketi-01.exe PID: 6848, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: MSBuild.exe PID: 3948, type: MEMORYSTR

Remote Access Functionality

Yara detected AgentTesla

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 0.2.hesaphareketi-01.exe.155ae096b08.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.hesaphareketi-01.exe.155ae0d3b50.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.hesaphareketi-01.exe.155ae0d3b50.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 2.2.MSBuild.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.hesaphareketi-01.exe.155ae096b08.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000002.00000002.4489457598.0000000000402000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2266776507.00000155AE057000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000002.00000002.4498926450.0000000002A51000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: hesaphareketi-01.exe PID: 6848, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: MSBuild.exe PID: 3948, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	121 Windows Management Instrumentation	1 DLL Side-Loading	311 Process Injection	1 Disable or Modify Tools	2 OS Credential Dumping	231 Security Software Discovery	Remote Services	1 Email Collection	12 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	Boot or Logon Initialization Scripts	1 DLL Side-Loading	151 Virtualization/Sandbox Evasion	21 Input Capture	1 Process Discovery	Remote Desktop Protocol	21 Input Capture	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	311 Process Injection	1 Credentials in Registry	151 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	11 Archive Collected Data	1 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Deobfuscate/Decode Files or Information	NTDS	1 Application Window Discovery	Distributed Component Object Model	2 Data from Local System	12 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Obfuscated Files or Information	LSA Secrets	1 File and Directory Discovery	SSH	1 Clipboard Data	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	24 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
hesaphareketi-01.exe	47%	ReversingLabs	Win32.Trojan.AgentTesla
hesaphareketi-01.exe	100%	Avira	HEUR/AGEN.1313324
hesaphareketi-01.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label	Link
http://upx.sf.net	0%	URL Reputation	safe
https://account.dyn.com/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
mail.alhoneycomb.com	74.119.238.7	true	true	unknown
s-part-0044.t-0009.fb-t-msedge.net	13.107.253.72	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://upx.sf.net	Amcache.hve.6.dr	false	URL Reputation: safe	unknown
https://account.dyn.com/	hesaphareketi-01.exe, 00000000.00000002.2266776507.00000155AE057000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000002.00000002.4489457598.0000000000402000.00000040.00000400.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://mail.alhoneycomb.com	MSBuild.exe, 00000002.00000002.4498926450.0000000002E99000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000002.00000002.4498926450.0000000002E69000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000002.00000002.4498926450.0000000002B9A000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000002.00000002.4498926450.0000000002DE5000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000002.00000002.4498926450.0000000002D31000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000002.00000002.4498926450.0000000002F30000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000002.00000002.4498926450.0000000002CC3000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000002.00000002.4498926450.0000000002A51000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000002.00000002.4498926450.0000000002C63000.00000004.00000800.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
74.119.238.7	mail.alhoneycomb.com	United States		35908	VPLSNETUS	true

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1539141
Start date and time:	2024-10-22 09:01:58 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 47s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	hesaphareketi-01.exe
Detection:	MAL
Classification:	mal100.spre.troj.spyw.expl.evad.winEXE@6/5@1/1
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 99% Number of executed functions: 110 Number of non-executed functions: 14
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 20.190.160.14, 40.126.32.68, 40.126.32.133, 20.190.160.17, 40.126.32.134, 40.126.32.76, 40.126.32.138, 20.190.160.22, 199.232.210.172, 192.229.221.95, 20.109.210.53, 13.95.31.18, 52.168.117.173, 52.165.164.15
Excluded domains from analysis (whitelisted): onedsblobprdeus16.eastus.cloudapp.azure.com, prdv4a.aadg.msidentity.com, azurefd-t-fb-prod.trafficmanager.net, ctldl.windowsupdate.com.delivery.microsoft.com, slscr.update.microsoft.com, otelrules.azureedge.net, www.tm.v4.a.prd.aadg.akadns.net, otelrules.afd.azureedge.net, ctldl.windowsupdate.com, login.msa.msidentity.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, ocsp.digicert.com, login.live.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, blobcollector.events.data.trafficmanager.net, sls.update.microsoft.com, azureedge-t-prod.trafficmanager.net, umwatson.events.data.microsoft.com, wu-b-net.trafficmanager.net, www.tm.lg.prod.aadmsa.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: hesaphareketi-01.exe

Simulations

Behavior and APIs

Time	Type	Description
03:02:53	API Interceptor	10465188x Sleep call for process: MSBuild.exe modified
03:03:10	API Interceptor	1x Sleep call for process: WerFault.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
74.119.238.7	New Purchase Order.exe	Get hash	malicious	AgentTesla	Browse
74.119.238.7	rPO_CW00402902400415.exe	Get hash	malicious	AgentTesla	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
mail.alhoneycomb.com	New Purchase Order.exe	Get hash	malicious	AgentTesla	Browse	74.119.238.7
mail.alhoneycomb.com	rPO_CW00402902400415.exe	Get hash	malicious	AgentTesla	Browse	74.119.238.7
bg.microsoft.map.fastly.net	261058103890221857.js	Get hash	malicious	Unknown	Browse	199.232.214.172
	2317945301117813032.js	Get hash	malicious	Unknown	Browse	199.232.214.172
	Salary_Increase_Approval_Open_Enrollment_202417918.pdf	Get hash	malicious	Unknown	Browse	199.232.214.172
	https://m-apkpure.playvoir.com/ru/maiorders-merchant/maiorders.merchantapp	Get hash	malicious	Unknown	Browse	199.232.210.172
	https://granddunman-info.com/	Get hash	malicious	Unknown	Browse	199.232.214.172
	http://linternasdelmar.com/RDGHEV	Get hash	malicious	Unknown	Browse	199.232.210.172
	https://trevorcrow.com/bio/	Get hash	malicious	Unknown	Browse	199.232.214.172
	https://healthsignnotifications.com/?opekttnf&qrc=c2pyaWNrZXJ0NEB5YWhvby5jb2	Get hash	malicious	Unknown	Browse	199.232.210.172
	https://fochap-fcbdd2.ingress-alpha.ewp.live/wp-content/plugins/Wetransfert/	Get hash	malicious	Unknown	Browse	199.232.214.172
	https://na3.docusign.net/Signing/EmailStart.aspx?a=119f68e4-ce2c-4337-abcf-20449fabc48a&etti=24&acct=05b64014-5519-4569-8f43-5b3079a08bb5&er=6843d1a3-b45c-4ba9-abc9-dca563e838fa__;!!O2i0137kdDYgisg!hOYz5IH_iJ_EiNVl8KU7XRSqWHtjUT_-7anDxA0YgBD-wvRpW9QU0sz9vL8ojPsfmoxnwuchvbDu_H5qacWjfRaw$	Get hash	malicious	Unknown	Browse	199.232.210.172
fp2e7a.wpc.phicdn.net	3378016557129061.js	Get hash	malicious	Unknown	Browse	192.229.221.95
	https://doc.tayato.com/mo6/?top=uwe.geiersbach@bbraun.com	Get hash	malicious	Unknown	Browse	192.229.221.95
	https://mcprod.britwyn.co.nz	Get hash	malicious	Unknown	Browse	192.229.221.95
	http://manatoki463.net	Get hash	malicious	Unknown	Browse	192.229.221.95
	https://na2.docusign.net/Signing/EmailStart.aspx?a=52f7eab1-67dd-4b2c-9342-8cf1837ca85b&etti=24&acct=8327544d-e5d8-4fb1-8036-f62a8723beb9&er=1f6c0370-0bf0-4639-942a-0c529236b3c5	Get hash	malicious	HtmlDropper	Browse	192.229.221.95
	https://rdi5cditblgwvqdacqlhomd2xnwm7evojwwetg5vpgo5rnk4btoq.ar-io.dev/iNHRDRMKzWrAYBQWdzB6u2zPkq5NrEmbtXmd2LVcDN0	Get hash	malicious	Unknown	Browse	192.229.221.95
	https://granddunman-info.com/	Get hash	malicious	Unknown	Browse	192.229.221.95
	http://linternasdelmar.com/RDGHEV	Get hash	malicious	Unknown	Browse	192.229.221.95
	Reminder.exe	Get hash	malicious	Amadey	Browse	192.229.221.95
	https://telstra-102068.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse	192.229.221.95
s-part-0044.t-0009.fb-t-msedge.net	Request for 30 Downpayment.exe	Get hash	malicious	FormBook	Browse	13.107.253.72
	Request for 30 Downpayment.exe	Get hash	malicious	FormBook	Browse	13.107.253.72
	https://trevorcrow.com/bio/	Get hash	malicious	Unknown	Browse	13.107.253.72
	DHL.exe	Get hash	malicious	AgentTesla, GuLoader	Browse	13.107.253.72
	INV00663.docx	Get hash	malicious	HTMLPhisher	Browse	13.107.253.72
	gtIVRm5dHl.htm	Get hash	malicious	Unknown	Browse	13.107.253.72
	https://app.adjust.com/mr11ui?fallback=https://abcshopbd.com/#amVmZi5kaXhvbiRhdXN0YWx1c2EuY29t	Get hash	malicious	HTMLPhisher	Browse	13.107.253.72
	https://bino8-7920.twil.io/index4.html	Get hash	malicious	Unknown	Browse	13.107.253.72
	http://plankton-app-xfp49.ondigitalocean.app	Get hash	malicious	TechSupportScam	Browse	13.107.253.72
	XYrLOQoLE4.exe	Get hash	malicious	Unknown	Browse	13.107.253.72

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
VPLSNETUS	la.bot.arm.elf	Get hash	malicious	Unknown	Browse	174.139.218.86
	na.elf	Get hash	malicious	Mirai	Browse	98.126.6.38
	New Purchase Order.exe	Get hash	malicious	AgentTesla	Browse	74.119.238.7
	arm7.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	110.34.178.120
	SecuriteInfo.com.Linux.Siggen.9999.30976.5557.elf	Get hash	malicious	Mirai	Browse	96.62.177.176
	http://www.telegremapp.me/	Get hash	malicious	Unknown	Browse	74.119.238.102
	rPO_CW00402902400415.exe	Get hash	malicious	AgentTesla	Browse	74.119.238.7
	LisectAVT_2403002B_466.exe	Get hash	malicious	FormBook	Browse	67.198.129.29
	SecuriteInfo.com.FileRepMalware.25505.20211.exe	Get hash	malicious	Unknown	Browse	66.186.50.50
	arm.elf	Get hash	malicious	Mirai	Browse	67.229.74.119

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	https://granddunman-info.com/	Get hash	malicious	Unknown	Browse	23.1.237.91
	https://telstra-102068.weeblysite.com/	Get hash	malicious	HTMLPhisher	Browse	23.1.237.91
	https://handling-violations.cfd/meta-community-standard/contract/197852827244973	Get hash	malicious	Unknown	Browse	23.1.237.91
	Technical_Technical_Specifications_&_Data_for_Optimized_Process.html	Get hash	malicious	HTMLPhisher	Browse	23.1.237.91
	https://healthsignnotifications.com/?opekttnf&qrc=c2pyaWNrZXJ0NEB5YWhvby5jb2	Get hash	malicious	Unknown	Browse	23.1.237.91
	https://mlbmajorlossbuilders.hbportal.co/flow/66fdd3a6c031cc001f728831/view?hash=54079a777636a614d8d961b5b9a96a5f	Get hash	malicious	Unknown	Browse	23.1.237.91
	index.html	Get hash	malicious	Unknown	Browse	23.1.237.91
	https://www.google.co.nz/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp%2Falinegrazielle.com%2FKaW12DtgTK%2FCGJiV2TYiHhEjaWZAqcgtold/S0pvbmVzQGtvbmlhZy1ncy5jb20=	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	23.1.237.91
	https://www.google.co.nz/url?q=38pQvvq6xRyj7Y00xDjnlx9kIHOSozurMOiaAkImPuQJnOIWtJjqJLi6stjtDz3yh&rct=tTPSrMOiaAkImPuQJnOIWtJjqJLi6stjtFX08pQvvq6xRyj7Y00xDjnlx9kIjusucT&sa=t&url=amp%2Falinegrazielle.com%2FKaW12DtgTK%2FQVUPgqjgXFIkJFnzej6vlwSU/RENhcm5vdnNreUBrb25pYWctZ3MuY29t	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	23.1.237.91
	https://docs.google.com/drawings/d/1rNIRSAgTQ9BvkQDgt6I1-bvyHw8Lwl60PfNx3hGnniY/preview?pli=128762876287628762876287628762876	Get hash	malicious	Unknown	Browse	23.1.237.91
28a2c9bd18a11de089ef85a160da29e4	MDE_File_Sample_1a8e4ebbcc2e3f76efb2a55bb6179417263ebf3d.zip	Get hash	malicious	Unknown	Browse	13.107.253.72
	https://doc.tayato.com/mo6/?top=uwe.geiersbach@bbraun.com	Get hash	malicious	Unknown	Browse	13.107.253.72
	https://mcprod.britwyn.co.nz	Get hash	malicious	Unknown	Browse	13.107.253.72
	Salary_Increase_Approval_Open_Enrollment_202417918.pdf	Get hash	malicious	Unknown	Browse	13.107.253.72
	http://manatoki463.net	Get hash	malicious	Unknown	Browse	13.107.253.72
	https://na2.docusign.net/Signing/EmailStart.aspx?a=52f7eab1-67dd-4b2c-9342-8cf1837ca85b&etti=24&acct=8327544d-e5d8-4fb1-8036-f62a8723beb9&er=1f6c0370-0bf0-4639-942a-0c529236b3c5	Get hash	malicious	HtmlDropper	Browse	13.107.253.72
	https://rdi5cditblgwvqdacqlhomd2xnwm7evojwwetg5vpgo5rnk4btoq.ar-io.dev/iNHRDRMKzWrAYBQWdzB6u2zPkq5NrEmbtXmd2LVcDN0	Get hash	malicious	Unknown	Browse	13.107.253.72
	https://m-apkpure.playvoir.com/ru/maiorders-merchant/maiorders.merchantapp	Get hash	malicious	Unknown	Browse	13.107.253.72
	https://granddunman-info.com/	Get hash	malicious	Unknown	Browse	13.107.253.72
	http://linternasdelmar.com/RDGHEV	Get hash	malicious	Unknown	Browse	13.107.253.72

Dropped Files

⊘No context

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_hesaphareketi-01_90b82cb3f85c944cacad82af54fa85589b762785_be022f20_2cedb2d7-065a-4f4a-8a55-93fcada01eb3\Report.wer

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.9925276515269958
Encrypted:	false
SSDEEP:	192:DZVM1nE5de0UnUVaWBNs7/zuiFdZ24lO8L5:vMwdFUnUVamNsbzuiFdY4lO8L
MD5:	D9B30307FAD38D9B9FB102D5CEC7B3E6
SHA1:	65F4DDA2407DE73E8A159DEC9990DB7B79DF1AC6
SHA-256:	620B2B420ECAC5093B4AD392FDB73A2B5BD56EF2C547783164378B005A8D3754
SHA-512:	E6D08B7D3729B2FE5D7FF973F0722C49CC9EBA40B6222F43FF0598439C1A0024FE83F2721EC3AFFAA1B8F6C82C20D412887157D0D468B8589ED35FC337DBDD56
Malicious:	false
Reputation:	low
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.A.P.P.C.R.A.S.H.....E.v.e.n.t.T.i.m.e.=.1.3.3.7.4.0.5.4.1.6.9.9.1.1.5.7.4.3.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.7.4.0.5.4.1.7.0.5.8.3.4.4.5.2.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.2.c.e.d.b.2.d.7.-.0.6.5.a.-.4.f.4.a.-.8.a.5.5.-.9.3.f.c.a.d.a.0.1.e.b.3.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.6.6.6.7.f.8.d.c.-.1.6.a.a.-.4.a.a.3.-.9.5.5.5.-.3.9.7.8.e.f.8.2.2.c.6.a.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....N.s.A.p.p.N.a.m.e.=.h.e.s.a.p.h.a.r.e.k.e.t.i.-.0.1...e.x.e.....O.r.i.g.i.n.a.l.F.i.l.e.n.a.m.e.=.N.e.w.c.a.s.t.l.e...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.a.c.0.-.0.0.0.1.-.0.0.1.4.-.e.3.b.b.-.f.6.6.5.5.0.2.4.d.b.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.7.6.4.5.7.7.9.8.9.a.e.c.6.6.9.f.5.f.6.b.e.8.c.3.0.a.b.a.c.0.f.1.0.0.0.0.0.0.0.0.!.0.0.0.0.5.0.0.2.8.8.7.4.8.5.3.7.1.f.f.3.6.5.2.1.e.2.c.c.3.b.1.5.a.e.3.c.a.2.9.0.b.c.2.b.!.h.e.s.

C:\ProgramData\Microsoft\Windows\WER\Temp\WERD907.tmp.dmp

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	Mini DuMP crash report, 16 streams, Tue Oct 22 07:02:50 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	388733
Entropy (8bit):	3.257964797776831
Encrypted:	false
SSDEEP:	3072:F5YtRFOH4bcSP4ZWHrRabKlQG1CCqWSr3+veN:F5gRaWdrRawqlr3Q
MD5:	564DCB7F3C8CE962CD6564CF62C77416
SHA1:	D86017F0562B972703DB38B4BE11D26764D398A6
SHA-256:	D5BE0D26C826A7D4848FBF84C559743F182F366824BFB7684E1E1850FA75545D
SHA-512:	A89DAEA5B24DAD03DC8EAE5E267E5FCEDB64D003796E3123CBC1726FFD5E9C58B609B5EE7A2747D83FB806798D716B7F78879B6573A51ABAF31496D2DCA7376C
Malicious:	false
Reputation:	low
Preview:	MDMP..a..... ........N.g....................................$...............(.......DF...v..........l.......8...........T............(...............8...........:..............................................................................eJ......p;......Lw......................T............N.g.............................0..............,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6...........................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WERDAAD.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	8638
Entropy (8bit):	3.7031760169976966
Encrypted:	false
SSDEEP:	192:R6l7wVeJv17d5e6YEI0CPRgmfh4arpr189bPVIfAlFm:R6lXJhq6YErCPRgmfh4aEP6fX
MD5:	484B0B105D3F769668F55302B724A3DA
SHA1:	64E7D9C5CBFCD7C28E3DA59A659EA9663C5F329A
SHA-256:	4A41A7B27B27E697EC43BA3D95F65E4D0AA4EB73C38CC2440CEDCA2BA4B55555
SHA-512:	CF7A5FF3465C6E6864F97313ED03A2A6AD33B6A0F04EAFC02B5E3CE28E6938AABAA1D87243D2612E3F8EADDBF5364C9785E148A52A1C18008915EAB128E5F7FB
Malicious:	false
Reputation:	low
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.6.8.4.8.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WERDB0C.tmp.xml

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4787
Entropy (8bit):	4.509971825280374
Encrypted:	false
SSDEEP:	48:cvIwWl8zstJg771I9hOWpW8VYzajYm8M4J9H+FJyq85hg5XjW4IzK9KVwd:uIjfHI72v7VOa2J96wyXjWSkVwd
MD5:	8A2569AD10C716A3566A55102BCBE9BE
SHA1:	44A9AD2A37E81F2389ED80E9D360400BB486036B
SHA-256:	8A1DAD4956094354B5114083A0A43E6D6F221763A280F8C9DFE11049C19B1DE2
SHA-512:	0BFF38384E08D5F34CB184AE105DCA257235718427741C6BAE6A02B7A61F9B4ADE337511193180823DB34CB3AAB04BA8859552AAF090086DB55CBA18AB277E97
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="554285" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.421640716388942
Encrypted:	false
SSDEEP:	6144:8Svfpi6ceLP/9skLmb0OTYWSPHaJG8nAgeMZMMhA2fX4WABlEnNE0uhiTw:nvloTYW+EZMM6DFy+03w
MD5:	9F6BE534BF2A1AC94555739EC72E3A5D
SHA1:	A81B8DB51ACD6715FB46D7CB2BEBDE0A7666E06B
SHA-256:	D41D1E92A2E90191CE6E5DD1EA704551177F13E52DCE6BB26C80E6F916AA73C1
SHA-512:	5EFDF2B987F4927C7CCF0E30520728997604539733A17A9D32056EC2BE0A8FEDFA04AAE1B4EF0DA78AC4EA0FFBAEAC39C2801500A7B59A5E2E275151C9588036
Malicious:	false
Reputation:	low
Preview:	regf>...>....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm.F.gP$................................................................................................................................................................................................................................................................................................................................................S........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
Entropy (8bit):	5.604293654944818
TrID:	Win64 Executable GUI (202006/5) 92.65% Win64 Executable (generic) (12005/4) 5.51% Generic Win/DOS Executable (2004/3) 0.92% DOS Executable Generic (2002/1) 0.92% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	hesaphareketi-01.exe
File size:	1'625'154 bytes
MD5:	e4197fa29371d990625fe9a93b1ecd13
SHA1:	5002887485371ff36521e2cc3b15ae3ca290bc2b
SHA256:	1ad2ef0b45c01f7a75d980a008cdb684e40c7163ea0846cca49c856595ba716d
SHA512:	5b77a6bec4cd8864e3a72946b57e9eadaeb8a1670f709541740b10e0d9db1689c065e975aa33e314742a802b282fb1e57e36e9b2b2eec79678cee1600e5624e1
SSDEEP:	12288:6h6HmeOW+7HzgVk2f1alImwrzgVGgvt25fL4zyTdz2cKi0K/:nGenyEf1CImwfGk5seMcz0W
TLSH:	8875126AB84B1E03FC949134C0D97AF0AAFD4E4772FB1A5FEF522D4281919BC5290CB5
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d....E.g.........."...0..>............... ....@...... ....................................`................................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x400000
Entrypoint Section:
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x671645F3 [Mon Oct 21 12:15:47 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:

Entrypoint Preview

Instruction
dec ebp
pop edx
nop
add byte ptr [ebx], al
add byte ptr [eax], al
add byte ptr [eax+eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x6000	0x4d6	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2000	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x3eba	0x4000	d810635041b63b114761111b1ce7ed64	False	0.60601806640625	data	6.229588044653206	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0x6000	0x4d6	0x600	d00c518c8aafea247960e1f782645af5	False	0.3743489583333333	data	3.718432686235799	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_VERSION	0x60a0	0x24c	data			0.46598639455782315
RT_MANIFEST	0x62ec	0x1ea	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators			0.5489795918367347

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-22T09:02:56.432529+0200	2855245	ETPRO MALWARE Agent Tesla Exfil via SMTP	1	192.168.2.5	49706	74.119.238.7	587	TCP
2024-10-22T09:02:56.432529+0200	2855542	ETPRO MALWARE Agent Tesla CnC Exfil Activity	1	192.168.2.5	49706	74.119.238.7	587	TCP
2024-10-22T09:02:57.007430+0200	2030171	ET MALWARE AgentTesla Exfil Via SMTP	1	192.168.2.5	49706	74.119.238.7	587	TCP
2024-10-22T09:02:57.007430+0200	2839723	ETPRO MALWARE Win32/Agent Tesla SMTP Activity	1	192.168.2.5	49706	74.119.238.7	587	TCP
2024-10-22T09:02:57.007430+0200	2840032	ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2	1	192.168.2.5	49706	74.119.238.7	587	TCP
2024-10-22T09:02:58.892551+0200	2855542	ETPRO MALWARE Agent Tesla CnC Exfil Activity	1	192.168.2.5	49711	74.119.238.7	587	TCP
2024-10-22T09:02:59.103919+0200	2030171	ET MALWARE AgentTesla Exfil Via SMTP	1	192.168.2.5	49711	74.119.238.7	587	TCP
2024-10-22T09:02:59.103919+0200	2839723	ETPRO MALWARE Win32/Agent Tesla SMTP Activity	1	192.168.2.5	49711	74.119.238.7	587	TCP
2024-10-22T09:02:59.103919+0200	2840032	ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2	1	192.168.2.5	49711	74.119.238.7	587	TCP
2024-10-22T09:04:36.164425+0200	2855542	ETPRO MALWARE Agent Tesla CnC Exfil Activity	1	192.168.2.5	49990	74.119.238.7	587	TCP
2024-10-22T09:04:36.173053+0200	2030171	ET MALWARE AgentTesla Exfil Via SMTP	1	192.168.2.5	49990	74.119.238.7	587	TCP
2024-10-22T09:04:36.173053+0200	2839723	ETPRO MALWARE Win32/Agent Tesla SMTP Activity	1	192.168.2.5	49990	74.119.238.7	587	TCP
2024-10-22T09:04:36.173053+0200	2840032	ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2	1	192.168.2.5	49990	74.119.238.7	587	TCP
2024-10-22T09:04:52.073462+0200	2855542	ETPRO MALWARE Agent Tesla CnC Exfil Activity	1	192.168.2.5	49991	74.119.238.7	587	TCP
2024-10-22T09:04:52.080932+0200	2030171	ET MALWARE AgentTesla Exfil Via SMTP	1	192.168.2.5	49991	74.119.238.7	587	TCP
2024-10-22T09:04:52.080932+0200	2839723	ETPRO MALWARE Win32/Agent Tesla SMTP Activity	1	192.168.2.5	49991	74.119.238.7	587	TCP
2024-10-22T09:04:52.080932+0200	2840032	ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2	1	192.168.2.5	49991	74.119.238.7	587	TCP
2024-10-22T09:05:01.525263+0200	2855542	ETPRO MALWARE Agent Tesla CnC Exfil Activity	1	192.168.2.5	49992	74.119.238.7	587	TCP
2024-10-22T09:05:01.532208+0200	2030171	ET MALWARE AgentTesla Exfil Via SMTP	1	192.168.2.5	49992	74.119.238.7	587	TCP
2024-10-22T09:05:01.532208+0200	2839723	ETPRO MALWARE Win32/Agent Tesla SMTP Activity	1	192.168.2.5	49992	74.119.238.7	587	TCP
2024-10-22T09:05:01.532208+0200	2840032	ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2	1	192.168.2.5	49992	74.119.238.7	587	TCP
2024-10-22T09:05:17.330926+0200	2855542	ETPRO MALWARE Agent Tesla CnC Exfil Activity	1	192.168.2.5	49993	74.119.238.7	587	TCP
2024-10-22T09:05:17.337782+0200	2030171	ET MALWARE AgentTesla Exfil Via SMTP	1	192.168.2.5	49993	74.119.238.7	587	TCP
2024-10-22T09:05:17.337782+0200	2839723	ETPRO MALWARE Win32/Agent Tesla SMTP Activity	1	192.168.2.5	49993	74.119.238.7	587	TCP
2024-10-22T09:05:17.337782+0200	2840032	ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2	1	192.168.2.5	49993	74.119.238.7	587	TCP
2024-10-22T09:05:21.288848+0200	2855542	ETPRO MALWARE Agent Tesla CnC Exfil Activity	1	192.168.2.5	49994	74.119.238.7	587	TCP
2024-10-22T09:05:21.319251+0200	2030171	ET MALWARE AgentTesla Exfil Via SMTP	1	192.168.2.5	49994	74.119.238.7	587	TCP
2024-10-22T09:05:21.319251+0200	2839723	ETPRO MALWARE Win32/Agent Tesla SMTP Activity	1	192.168.2.5	49994	74.119.238.7	587	TCP
2024-10-22T09:05:21.319251+0200	2840032	ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2	1	192.168.2.5	49994	74.119.238.7	587	TCP
2024-10-22T09:05:30.873448+0200	2855542	ETPRO MALWARE Agent Tesla CnC Exfil Activity	1	192.168.2.5	49995	74.119.238.7	587	TCP
2024-10-22T09:05:30.880061+0200	2030171	ET MALWARE AgentTesla Exfil Via SMTP	1	192.168.2.5	49995	74.119.238.7	587	TCP
2024-10-22T09:05:30.880061+0200	2839723	ETPRO MALWARE Win32/Agent Tesla SMTP Activity	1	192.168.2.5	49995	74.119.238.7	587	TCP
2024-10-22T09:05:30.880061+0200	2840032	ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2	1	192.168.2.5	49995	74.119.238.7	587	TCP
2024-10-22T09:05:30.917708+0200	2855542	ETPRO MALWARE Agent Tesla CnC Exfil Activity	1	192.168.2.5	49996	74.119.238.7	587	TCP
2024-10-22T09:05:30.932408+0200	2030171	ET MALWARE AgentTesla Exfil Via SMTP	1	192.168.2.5	49996	74.119.238.7	587	TCP
2024-10-22T09:05:30.932408+0200	2839723	ETPRO MALWARE Win32/Agent Tesla SMTP Activity	1	192.168.2.5	49996	74.119.238.7	587	TCP
2024-10-22T09:05:30.932408+0200	2840032	ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2	1	192.168.2.5	49996	74.119.238.7	587	TCP
2024-10-22T09:05:36.505717+0200	2855542	ETPRO MALWARE Agent Tesla CnC Exfil Activity	1	192.168.2.5	49997	74.119.238.7	587	TCP
2024-10-22T09:05:36.513940+0200	2030171	ET MALWARE AgentTesla Exfil Via SMTP	1	192.168.2.5	49997	74.119.238.7	587	TCP
2024-10-22T09:05:36.513940+0200	2839723	ETPRO MALWARE Win32/Agent Tesla SMTP Activity	1	192.168.2.5	49997	74.119.238.7	587	TCP
2024-10-22T09:05:36.513940+0200	2840032	ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2	1	192.168.2.5	49997	74.119.238.7	587	TCP
2024-10-22T09:05:40.303201+0200	2855542	ETPRO MALWARE Agent Tesla CnC Exfil Activity	1	192.168.2.5	49998	74.119.238.7	587	TCP
2024-10-22T09:05:40.310386+0200	2030171	ET MALWARE AgentTesla Exfil Via SMTP	1	192.168.2.5	49998	74.119.238.7	587	TCP
2024-10-22T09:05:40.310386+0200	2839723	ETPRO MALWARE Win32/Agent Tesla SMTP Activity	1	192.168.2.5	49998	74.119.238.7	587	TCP
2024-10-22T09:05:40.310386+0200	2840032	ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2	1	192.168.2.5	49998	74.119.238.7	587	TCP
2024-10-22T09:06:06.146561+0200	2855542	ETPRO MALWARE Agent Tesla CnC Exfil Activity	1	192.168.2.5	49999	74.119.238.7	587	TCP
2024-10-22T09:06:06.153479+0200	2030171	ET MALWARE AgentTesla Exfil Via SMTP	1	192.168.2.5	49999	74.119.238.7	587	TCP
2024-10-22T09:06:06.153479+0200	2839723	ETPRO MALWARE Win32/Agent Tesla SMTP Activity	1	192.168.2.5	49999	74.119.238.7	587	TCP
2024-10-22T09:06:06.153479+0200	2840032	ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2	1	192.168.2.5	49999	74.119.238.7	587	TCP
2024-10-22T09:06:11.995541+0200	2855542	ETPRO MALWARE Agent Tesla CnC Exfil Activity	1	192.168.2.5	50000	74.119.238.7	587	TCP
2024-10-22T09:06:12.004598+0200	2030171	ET MALWARE AgentTesla Exfil Via SMTP	1	192.168.2.5	50000	74.119.238.7	587	TCP
2024-10-22T09:06:12.004598+0200	2839723	ETPRO MALWARE Win32/Agent Tesla SMTP Activity	1	192.168.2.5	50000	74.119.238.7	587	TCP
2024-10-22T09:06:12.004598+0200	2840032	ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2	1	192.168.2.5	50000	74.119.238.7	587	TCP
2024-10-22T09:06:16.160646+0200	2855542	ETPRO MALWARE Agent Tesla CnC Exfil Activity	1	192.168.2.5	50002	74.119.238.7	587	TCP
2024-10-22T09:06:16.169764+0200	2030171	ET MALWARE AgentTesla Exfil Via SMTP	1	192.168.2.5	50002	74.119.238.7	587	TCP
2024-10-22T09:06:16.169764+0200	2839723	ETPRO MALWARE Win32/Agent Tesla SMTP Activity	1	192.168.2.5	50002	74.119.238.7	587	TCP
2024-10-22T09:06:16.169764+0200	2840032	ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2	1	192.168.2.5	50002	74.119.238.7	587	TCP
2024-10-22T09:06:27.733088+0200	2855542	ETPRO MALWARE Agent Tesla CnC Exfil Activity	1	192.168.2.5	50003	74.119.238.7	587	TCP
2024-10-22T09:06:27.742278+0200	2030171	ET MALWARE AgentTesla Exfil Via SMTP	1	192.168.2.5	50003	74.119.238.7	587	TCP
2024-10-22T09:06:27.742278+0200	2839723	ETPRO MALWARE Win32/Agent Tesla SMTP Activity	1	192.168.2.5	50003	74.119.238.7	587	TCP
2024-10-22T09:06:27.742278+0200	2840032	ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2	1	192.168.2.5	50003	74.119.238.7	587	TCP
2024-10-22T09:06:32.535913+0200	2855542	ETPRO MALWARE Agent Tesla CnC Exfil Activity	1	192.168.2.5	50004	74.119.238.7	587	TCP
2024-10-22T09:06:32.544698+0200	2030171	ET MALWARE AgentTesla Exfil Via SMTP	1	192.168.2.5	50004	74.119.238.7	587	TCP
2024-10-22T09:06:32.544698+0200	2839723	ETPRO MALWARE Win32/Agent Tesla SMTP Activity	1	192.168.2.5	50004	74.119.238.7	587	TCP
2024-10-22T09:06:32.544698+0200	2840032	ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2	1	192.168.2.5	50004	74.119.238.7	587	TCP
2024-10-22T09:06:41.435865+0200	2855542	ETPRO MALWARE Agent Tesla CnC Exfil Activity	1	192.168.2.5	50005	74.119.238.7	587	TCP
2024-10-22T09:06:41.442364+0200	2030171	ET MALWARE AgentTesla Exfil Via SMTP	1	192.168.2.5	50005	74.119.238.7	587	TCP
2024-10-22T09:06:41.442364+0200	2839723	ETPRO MALWARE Win32/Agent Tesla SMTP Activity	1	192.168.2.5	50005	74.119.238.7	587	TCP
2024-10-22T09:06:41.442364+0200	2840032	ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2	1	192.168.2.5	50005	74.119.238.7	587	TCP
2024-10-22T09:06:52.566920+0200	2855542	ETPRO MALWARE Agent Tesla CnC Exfil Activity	1	192.168.2.5	50006	74.119.238.7	587	TCP
2024-10-22T09:06:52.573769+0200	2030171	ET MALWARE AgentTesla Exfil Via SMTP	1	192.168.2.5	50006	74.119.238.7	587	TCP
2024-10-22T09:06:52.573769+0200	2839723	ETPRO MALWARE Win32/Agent Tesla SMTP Activity	1	192.168.2.5	50006	74.119.238.7	587	TCP
2024-10-22T09:06:52.573769+0200	2840032	ETPRO MALWARE Win32/AgentTesla/OriginLogger Data Exfil via SMTP M2	1	192.168.2.5	50006	74.119.238.7	587	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 22, 2024 09:02:44.572556973 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 22, 2024 09:02:44.573069096 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 22, 2024 09:02:44.666361094 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 22, 2024 09:02:54.181900024 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 22, 2024 09:02:54.181899071 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 22, 2024 09:02:54.275784969 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 22, 2024 09:02:54.557178974 CEST	49706	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:54.562666893 CEST	587	49706	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:54.562732935 CEST	49706	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:55.261603117 CEST	587	49706	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:55.266787052 CEST	49706	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:55.274307966 CEST	587	49706	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:55.423363924 CEST	587	49706	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:55.434384108 CEST	49706	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:55.439822912 CEST	587	49706	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:55.605912924 CEST	587	49706	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:55.607106924 CEST	49706	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:55.612637997 CEST	587	49706	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:55.929517031 CEST	587	49706	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:55.929750919 CEST	49706	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:55.935080051 CEST	587	49706	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:56.040390968 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 22, 2024 09:02:56.040739059 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 22, 2024 09:02:56.084588051 CEST	587	49706	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:56.085109949 CEST	49706	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:56.090377092 CEST	587	49706	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:56.258503914 CEST	587	49706	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:56.258833885 CEST	49706	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:56.264134884 CEST	587	49706	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:56.431674957 CEST	587	49706	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:56.432449102 CEST	49706	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:56.432528973 CEST	49706	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:56.432555914 CEST	49706	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:56.432579041 CEST	49706	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:56.437830925 CEST	587	49706	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:56.437844992 CEST	587	49706	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:56.437856913 CEST	587	49706	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:56.437866926 CEST	587	49706	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:56.601468086 CEST	587	49706	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:56.648634911 CEST	49706	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:56.654122114 CEST	587	49706	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:57.007237911 CEST	587	49706	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:57.007430077 CEST	49706	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:57.008393049 CEST	49711	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:57.013051033 CEST	587	49706	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:57.013127089 CEST	49706	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:57.013717890 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:57.013787031 CEST	49711	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:57.741430044 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:57.741746902 CEST	49711	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:57.747060061 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:57.915916920 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:57.916351080 CEST	49711	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:57.921638012 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:58.211925983 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:58.212246895 CEST	49711	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:58.217629910 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:58.372947931 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:58.373207092 CEST	49711	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:58.378567934 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:58.545290947 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:58.545465946 CEST	49711	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:58.551606894 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:58.735726118 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:58.735889912 CEST	49711	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:58.741456032 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:58.891288042 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:58.892468929 CEST	49711	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:58.892519951 CEST	49711	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:58.892550945 CEST	49711	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:58.892582893 CEST	49711	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:58.892661095 CEST	49711	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:58.892695904 CEST	49711	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:58.892729998 CEST	49711	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:58.892755032 CEST	49711	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:58.892776966 CEST	49711	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:58.892795086 CEST	49711	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:58.897743940 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:58.897768021 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:58.897777081 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:58.897902012 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:58.897948027 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:58.898030996 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:58.898041010 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:58.898051023 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:58.898098946 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:59.054728985 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:59.103919029 CEST	49711	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:02:59.432804108 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:02:59.432904005 CEST	49711	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:03:05.865978956 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:05.866043091 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:05.866115093 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:05.866404057 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:05.866422892 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:06.115751028 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 22, 2024 09:03:06.115943909 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 22, 2024 09:03:06.116584063 CEST	49720	443	192.168.2.5	23.1.237.91
Oct 22, 2024 09:03:06.116625071 CEST	443	49720	23.1.237.91	192.168.2.5
Oct 22, 2024 09:03:06.116698027 CEST	49720	443	192.168.2.5	23.1.237.91
Oct 22, 2024 09:03:06.117512941 CEST	49720	443	192.168.2.5	23.1.237.91
Oct 22, 2024 09:03:06.117527008 CEST	443	49720	23.1.237.91	192.168.2.5
Oct 22, 2024 09:03:06.121264935 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 22, 2024 09:03:06.121321917 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 22, 2024 09:03:06.637525082 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:06.639157057 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:06.645137072 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:06.645163059 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:06.645467997 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:06.654486895 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:06.695333958 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:06.793066978 CEST	443	49720	23.1.237.91	192.168.2.5
Oct 22, 2024 09:03:06.793314934 CEST	49720	443	192.168.2.5	23.1.237.91
Oct 22, 2024 09:03:06.920118093 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:06.920140028 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:06.920155048 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:06.921025038 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:06.921061993 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:06.921235085 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:07.039283037 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.039307117 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.039396048 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:07.039429903 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.039706945 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:07.158181906 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.158209085 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.158373117 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:07.158453941 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.158616066 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:07.277214050 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.277242899 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.277440071 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:07.277508020 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.283149004 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:07.395766020 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.395790100 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.395847082 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:07.395876884 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.395926952 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:07.514640093 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.514663935 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.514719963 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:07.514758110 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.514775038 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:07.514799118 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:07.633223057 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.633244038 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.633304119 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:07.633336067 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.633379936 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:07.752069950 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.752090931 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.752165079 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:07.752197981 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.752235889 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:07.799923897 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.799948931 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.800024986 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:07.800055027 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.800081015 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:07.800101042 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:07.871735096 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.871766090 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.871810913 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:07.871840954 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.871861935 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:07.871880054 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:07.990068913 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.990092993 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.990138054 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:07.990178108 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:07.990191936 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:07.990212917 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.108242035 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.108266115 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.108335972 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.108385086 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.108402014 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.108427048 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.158930063 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.158961058 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.159046888 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.159149885 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.159193039 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.159218073 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.159846067 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.159909964 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.159921885 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.159976006 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.160022974 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.160067081 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.160094023 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.160109997 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.216140032 CEST	49722	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.216213942 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.216284037 CEST	49722	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.216376066 CEST	49723	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.216418982 CEST	443	49723	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.216481924 CEST	49723	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.217593908 CEST	49722	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.217619896 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.217660904 CEST	49723	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.217673063 CEST	443	49723	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.218112946 CEST	49724	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.218158960 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.218334913 CEST	49724	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.218334913 CEST	49724	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.218379974 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.219110966 CEST	49725	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.219145060 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.219214916 CEST	49725	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.219271898 CEST	49726	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.219307899 CEST	443	49726	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.219367027 CEST	49726	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.219394922 CEST	49725	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.219407082 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.219562054 CEST	49726	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.219578981 CEST	443	49726	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.973512888 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.974369049 CEST	49722	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.974396944 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.974775076 CEST	49722	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.974782944 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.980073929 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.980247974 CEST	443	49723	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.980745077 CEST	49723	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.980776072 CEST	443	49723	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.980807066 CEST	49725	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.980825901 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.981226921 CEST	49723	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.981235981 CEST	443	49723	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.981404066 CEST	49725	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.981410027 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.986512899 CEST	443	49726	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.986927032 CEST	49726	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.986959934 CEST	443	49726	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.987498999 CEST	49726	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.987509012 CEST	443	49726	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.992335081 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.992845058 CEST	49724	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.992860079 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:08.993415117 CEST	49724	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:08.993421078 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.108181953 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.108210087 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.108359098 CEST	49722	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.108390093 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.108417988 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.108489037 CEST	49722	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.108489037 CEST	49722	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.108637094 CEST	49722	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.108654022 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.108678102 CEST	49722	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.108683109 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.113131046 CEST	49728	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.113173962 CEST	443	49728	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.113333941 CEST	49728	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.113583088 CEST	49728	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.113594055 CEST	443	49728	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.117240906 CEST	443	49723	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.117552996 CEST	443	49723	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.117635965 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.117670059 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.117670059 CEST	49723	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.117748022 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.117844105 CEST	49723	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.117860079 CEST	443	49723	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.117866993 CEST	49725	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.117872953 CEST	49723	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.117878914 CEST	443	49723	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.118146896 CEST	49725	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.118160963 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.118185043 CEST	49725	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.118190050 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.120703936 CEST	49730	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.120712042 CEST	49729	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.120735884 CEST	443	49730	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.120776892 CEST	443	49729	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.121170044 CEST	49730	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.121172905 CEST	49729	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.121356964 CEST	49730	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.121357918 CEST	49729	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.121366978 CEST	443	49730	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.121376038 CEST	443	49729	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.126065016 CEST	443	49726	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.126236916 CEST	443	49726	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.129216909 CEST	49726	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.129216909 CEST	49726	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.129658937 CEST	49726	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.129678965 CEST	443	49726	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.131865025 CEST	49731	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.131895065 CEST	443	49731	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.132091999 CEST	49731	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.132210016 CEST	49731	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.132227898 CEST	443	49731	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.135103941 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.135124922 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.135175943 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.135188103 CEST	49724	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.135298967 CEST	49724	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.135530949 CEST	49724	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.135530949 CEST	49724	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.135540962 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.135551929 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.137978077 CEST	49732	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.138015985 CEST	443	49732	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.138175964 CEST	49732	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.138331890 CEST	49732	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.138341904 CEST	443	49732	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.863595009 CEST	443	49728	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.866389990 CEST	443	49730	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.875247002 CEST	443	49729	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.876281977 CEST	49728	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.876297951 CEST	443	49728	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.876914024 CEST	49728	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.876919031 CEST	443	49728	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.877178907 CEST	49730	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.877192974 CEST	443	49730	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.877887964 CEST	49730	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.877893925 CEST	443	49730	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.878869057 CEST	49729	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.878901958 CEST	443	49729	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.879841089 CEST	49729	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.879848957 CEST	443	49729	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.882997990 CEST	443	49731	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.886203051 CEST	49731	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.886214018 CEST	443	49731	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.894146919 CEST	49731	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.894154072 CEST	443	49731	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.907046080 CEST	443	49732	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.907497883 CEST	49732	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.907524109 CEST	443	49732	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:09.908288956 CEST	49732	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:09.908296108 CEST	443	49732	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.008829117 CEST	443	49730	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.008915901 CEST	443	49730	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.008977890 CEST	49730	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.010080099 CEST	443	49728	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.010327101 CEST	443	49728	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.010382891 CEST	49728	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.014767885 CEST	443	49729	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.014940023 CEST	443	49729	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.015022993 CEST	49729	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.026654959 CEST	49730	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.026664972 CEST	443	49731	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.026679993 CEST	443	49730	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.026681900 CEST	49730	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.026689053 CEST	443	49730	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.026850939 CEST	443	49731	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.026962996 CEST	49731	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.028487921 CEST	49731	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.028506041 CEST	443	49731	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.028517008 CEST	49731	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.028523922 CEST	443	49731	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.029863119 CEST	49728	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.029874086 CEST	443	49728	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.029906034 CEST	49728	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.029910088 CEST	443	49728	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.030581951 CEST	49729	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.030586004 CEST	443	49729	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.030599117 CEST	49729	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.030601978 CEST	443	49729	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.034395933 CEST	49733	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.034437895 CEST	443	49733	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.034573078 CEST	49733	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.034729004 CEST	49734	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.034759998 CEST	443	49734	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.034831047 CEST	49734	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.035517931 CEST	49735	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.035526991 CEST	443	49735	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.035690069 CEST	49735	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.035816908 CEST	49733	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.035829067 CEST	443	49733	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.035901070 CEST	49734	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.035911083 CEST	443	49734	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.036194086 CEST	49736	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.036227942 CEST	443	49736	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.036251068 CEST	49735	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.036259890 CEST	443	49735	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.036292076 CEST	49736	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.036370039 CEST	49736	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.036380053 CEST	443	49736	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.052433968 CEST	443	49732	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.052789927 CEST	443	49732	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.052846909 CEST	49732	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.052900076 CEST	49732	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.052911043 CEST	443	49732	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.052920103 CEST	49732	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.052925110 CEST	443	49732	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.055242062 CEST	49737	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.055274963 CEST	443	49737	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.055398941 CEST	49737	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.055613041 CEST	49737	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.055623055 CEST	443	49737	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.791821957 CEST	443	49736	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.792464972 CEST	49736	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.792534113 CEST	443	49736	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.792953014 CEST	49736	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.792969942 CEST	443	49736	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.798515081 CEST	443	49735	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.798916101 CEST	49735	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.798947096 CEST	443	49735	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.799266100 CEST	49735	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.799271107 CEST	443	49735	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.802026987 CEST	443	49737	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.802365065 CEST	49737	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.802382946 CEST	443	49737	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.802683115 CEST	49737	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.802692890 CEST	443	49737	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.803330898 CEST	443	49734	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.803596020 CEST	49734	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.803611040 CEST	443	49734	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.803931952 CEST	49734	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.803937912 CEST	443	49734	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.804666042 CEST	443	49733	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.804922104 CEST	49733	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.804929018 CEST	443	49733	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.805263042 CEST	49733	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.805265903 CEST	443	49733	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.928733110 CEST	443	49736	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.928874016 CEST	443	49736	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.929014921 CEST	49736	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.929282904 CEST	49736	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.929308891 CEST	443	49736	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.929320097 CEST	49736	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.929327011 CEST	443	49736	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.932981014 CEST	49739	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.933043003 CEST	443	49739	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.933125973 CEST	49739	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.933304071 CEST	49739	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.933314085 CEST	443	49739	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.939029932 CEST	443	49735	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.939351082 CEST	443	49735	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.939419031 CEST	49735	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.939475060 CEST	49735	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.939490080 CEST	443	49735	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.940476894 CEST	443	49737	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.940866947 CEST	443	49737	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.940943003 CEST	49737	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.940968037 CEST	49737	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.940977097 CEST	443	49737	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.940996885 CEST	49737	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.941003084 CEST	443	49737	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.942495108 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.942538977 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.942699909 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.942764997 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.942781925 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.942929983 CEST	443	49734	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.943032026 CEST	443	49734	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.943099976 CEST	49734	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.943123102 CEST	49734	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.943139076 CEST	443	49734	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.943144083 CEST	49741	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.943167925 CEST	49734	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.943177938 CEST	443	49734	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.943178892 CEST	443	49741	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.943247080 CEST	49741	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.943378925 CEST	49741	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.943391085 CEST	443	49741	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.945158958 CEST	49742	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.945183039 CEST	443	49742	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.945252895 CEST	49742	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.945439100 CEST	49742	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.945456028 CEST	443	49742	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.945590973 CEST	443	49733	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.945691109 CEST	443	49733	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.945739031 CEST	49733	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.945772886 CEST	49733	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.945779085 CEST	443	49733	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.945791006 CEST	49733	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.945795059 CEST	443	49733	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.947715998 CEST	49743	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.947730064 CEST	443	49743	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:10.947793961 CEST	49743	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.947909117 CEST	49743	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:10.947916031 CEST	443	49743	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.685735941 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.686434984 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.686461926 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.686970949 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.686983109 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.687272072 CEST	443	49739	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.687697887 CEST	49739	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.687730074 CEST	443	49739	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.688153028 CEST	49739	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.688158989 CEST	443	49739	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.700824976 CEST	443	49743	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.701308966 CEST	49743	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.701335907 CEST	443	49743	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.701795101 CEST	49743	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.701798916 CEST	443	49743	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.710556030 CEST	443	49741	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.711028099 CEST	49741	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.711040974 CEST	443	49741	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.711549997 CEST	49741	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.711554050 CEST	443	49741	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.712321997 CEST	443	49742	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.712775946 CEST	49742	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.712837934 CEST	443	49742	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.713274956 CEST	49742	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.713289022 CEST	443	49742	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.823870897 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.823945045 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.824027061 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.825515985 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.825536013 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.825550079 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.825556040 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.825611115 CEST	443	49739	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.825825930 CEST	443	49739	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.826000929 CEST	49739	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.833019018 CEST	49739	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.833041906 CEST	443	49739	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.833058119 CEST	49739	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.833065033 CEST	443	49739	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.839215040 CEST	443	49743	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.839292049 CEST	443	49743	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.839410067 CEST	49743	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.840482950 CEST	49743	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.840503931 CEST	443	49743	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.840518951 CEST	49743	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.840524912 CEST	443	49743	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.842077971 CEST	49744	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.842119932 CEST	443	49744	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.842174053 CEST	49744	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.845237970 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.845283031 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.845338106 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.847064018 CEST	49744	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.847085953 CEST	443	49744	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.847954988 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.847970963 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.849795103 CEST	49746	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.849828005 CEST	443	49746	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.849859953 CEST	443	49741	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.849900007 CEST	49746	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.849967003 CEST	443	49741	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.850023985 CEST	49741	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.850300074 CEST	49746	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.850315094 CEST	443	49746	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.850591898 CEST	49741	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.850609064 CEST	443	49741	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.850620031 CEST	49741	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.850625038 CEST	443	49741	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.852606058 CEST	443	49742	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.852766991 CEST	443	49742	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.852832079 CEST	49742	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.853116989 CEST	49742	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.853140116 CEST	443	49742	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.853152037 CEST	49742	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.853157997 CEST	443	49742	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.855751038 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.855782032 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.855834007 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.855983019 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.855993986 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.857521057 CEST	49748	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.857553959 CEST	443	49748	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:11.857609034 CEST	49748	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.859379053 CEST	49748	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:11.859395027 CEST	443	49748	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.605148077 CEST	443	49744	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.606266022 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.612672091 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.614949942 CEST	443	49746	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.616998911 CEST	49744	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.617027998 CEST	443	49744	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.617434978 CEST	49746	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.617443085 CEST	443	49746	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.617635012 CEST	49744	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.617639065 CEST	443	49744	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.618194103 CEST	49746	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.618199110 CEST	443	49746	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.618200064 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.618228912 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.618673086 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.618678093 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.619456053 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.619463921 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.620068073 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.620073080 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.624994040 CEST	443	49748	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.625350952 CEST	49748	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.625380039 CEST	443	49748	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.625883102 CEST	49748	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.625888109 CEST	443	49748	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.750596046 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.750682116 CEST	443	49744	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.750799894 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.750925064 CEST	443	49744	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.750988960 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.751087904 CEST	49744	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.751087904 CEST	49744	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.751128912 CEST	49744	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.751149893 CEST	443	49744	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.752033949 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.752094984 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.752110958 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.752125978 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.752132893 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.752180099 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.752235889 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.752659082 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.752665997 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.752677917 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.752681017 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.755295992 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.755348921 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.755418062 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.756371021 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.756412983 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.756479025 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.757224083 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.757236004 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.757297039 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.757431984 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.757441998 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.757528067 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.757541895 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.758013010 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.758021116 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.763473034 CEST	443	49748	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.763736963 CEST	443	49748	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.763796091 CEST	49748	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.763997078 CEST	49748	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.764008045 CEST	443	49748	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.764020920 CEST	49748	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.764025927 CEST	443	49748	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.766670942 CEST	49752	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.766706944 CEST	443	49752	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.766768932 CEST	49752	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.766926050 CEST	49752	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.766937017 CEST	443	49752	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.866780043 CEST	443	49746	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.867002964 CEST	443	49746	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.867063999 CEST	49746	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.867320061 CEST	49746	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.867340088 CEST	443	49746	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.867352962 CEST	49746	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.867358923 CEST	443	49746	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.873119116 CEST	49753	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.873168945 CEST	443	49753	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:12.874241114 CEST	49753	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.874241114 CEST	49753	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:12.874268055 CEST	443	49753	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.514082909 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.514506102 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.514525890 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.514975071 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.514980078 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.516520977 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.516819000 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.516824007 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.517225027 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.517229080 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.519435883 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.519881964 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.519905090 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.520277977 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.520282030 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.536032915 CEST	443	49752	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.536376953 CEST	49752	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.536402941 CEST	443	49752	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.536770105 CEST	49752	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.536776066 CEST	443	49752	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.630213976 CEST	443	49753	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.636575937 CEST	49753	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.636575937 CEST	49753	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.636600971 CEST	443	49753	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.636615992 CEST	443	49753	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.650351048 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.650506973 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.650552988 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.650763988 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.650780916 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.650791883 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.650798082 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.653420925 CEST	49754	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.653470993 CEST	443	49754	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.653527975 CEST	49754	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.653652906 CEST	49754	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.653666019 CEST	443	49754	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.654086113 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.654149055 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.654185057 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.654297113 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.654303074 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.654330015 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.654335022 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.656708956 CEST	49755	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.656744957 CEST	443	49755	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.656831026 CEST	49755	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.657162905 CEST	49755	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.657171965 CEST	443	49755	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.659655094 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.660197973 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.660248041 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.660279989 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.660295963 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.660306931 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.660311937 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.662012100 CEST	49756	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.662045956 CEST	443	49756	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.662101030 CEST	49756	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.662239075 CEST	49756	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.662250042 CEST	443	49756	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.674392939 CEST	443	49752	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.674459934 CEST	443	49752	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.674504995 CEST	49752	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.674603939 CEST	49752	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.674621105 CEST	443	49752	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.674633980 CEST	49752	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.674639940 CEST	443	49752	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.676843882 CEST	49757	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.676875114 CEST	443	49757	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.676939964 CEST	49757	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.677056074 CEST	49757	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.677066088 CEST	443	49757	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.770997047 CEST	443	49753	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.771151066 CEST	443	49753	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.771254063 CEST	49753	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.771336079 CEST	49753	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.771336079 CEST	49753	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.771349907 CEST	443	49753	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.771359921 CEST	443	49753	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.773874044 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.773926973 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:13.773988008 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.774290085 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:13.774322987 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.415045977 CEST	443	49754	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.416094065 CEST	443	49756	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.416731119 CEST	49754	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.416765928 CEST	443	49754	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.417123079 CEST	49754	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.417129993 CEST	443	49754	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.417428970 CEST	49756	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.417450905 CEST	443	49756	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.417841911 CEST	49756	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.417845011 CEST	443	49756	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.424949884 CEST	443	49755	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.426811934 CEST	49755	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.426811934 CEST	49755	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.426826000 CEST	443	49755	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.426841974 CEST	443	49755	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.436225891 CEST	443	49757	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.437431097 CEST	49757	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.437448978 CEST	443	49757	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.437858105 CEST	49757	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.437863111 CEST	443	49757	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.528295040 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.529084921 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.529104948 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.529503107 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.529508114 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.553281069 CEST	443	49754	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.553373098 CEST	443	49754	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.553749084 CEST	443	49756	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.553759098 CEST	49754	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.553760052 CEST	49754	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.553760052 CEST	49754	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.553911924 CEST	443	49756	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.554204941 CEST	49756	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.554897070 CEST	49756	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.554918051 CEST	443	49756	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.554928064 CEST	49756	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.554933071 CEST	443	49756	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.557082891 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.557121992 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.557213068 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.557358027 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.557363987 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.558182955 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.558232069 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.558283091 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.558428049 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.558442116 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.562360048 CEST	443	49755	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.562721014 CEST	443	49755	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.562827110 CEST	49755	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.562827110 CEST	49755	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.562896013 CEST	49755	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.562920094 CEST	443	49755	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.564927101 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.565021038 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.565088987 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.565207958 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.565237999 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.576412916 CEST	443	49757	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.576479912 CEST	443	49757	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.576560974 CEST	49757	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.576677084 CEST	49757	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.576688051 CEST	443	49757	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.576700926 CEST	49757	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.576705933 CEST	443	49757	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.578731060 CEST	49762	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.578785896 CEST	443	49762	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.578845978 CEST	49762	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.578978062 CEST	49762	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.579004049 CEST	443	49762	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.663085938 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.663172007 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.663223982 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.678066015 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.678092957 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.678106070 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.678112030 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.680923939 CEST	49763	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.680974960 CEST	443	49763	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.681046009 CEST	49763	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.681164980 CEST	49763	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.681173086 CEST	443	49763	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:14.853780985 CEST	49754	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:14.853815079 CEST	443	49754	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.500391960 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.500848055 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.500962019 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.500983953 CEST	443	49762	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.501219034 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.501250029 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.501686096 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.501692057 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.502005100 CEST	49762	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.502021074 CEST	443	49762	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.502409935 CEST	49762	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.502414942 CEST	443	49762	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.502671003 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.502676964 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.502804995 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.502824068 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.503181934 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.503191948 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.503257036 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.503262043 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.629785061 CEST	443	49763	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.630254030 CEST	49763	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.630289078 CEST	443	49763	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.630709887 CEST	49763	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.630717993 CEST	443	49763	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.636022091 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.638535023 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.638607979 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.638670921 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.638670921 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.638710022 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.638736010 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.639394045 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.639486074 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.639627934 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.639627934 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.639627934 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.639717102 CEST	443	49762	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.639935970 CEST	443	49762	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.639991999 CEST	49762	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.640026093 CEST	49762	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.640026093 CEST	49762	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.640058994 CEST	443	49762	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.640084028 CEST	443	49762	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.642569065 CEST	49764	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.642610073 CEST	443	49764	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.642673016 CEST	49764	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.642812014 CEST	49764	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.642824888 CEST	443	49764	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.643887043 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.643959999 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.643990993 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.644035101 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.644047976 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.644083023 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.644191980 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.644201040 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.644409895 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.644433022 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.644448042 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.644454956 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.644895077 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.644906044 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.644957066 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.645190001 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.645201921 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.646933079 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.646943092 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.647000074 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.647118092 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.647128105 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.779110909 CEST	443	49763	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.779557943 CEST	443	49763	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.779639959 CEST	49763	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.779735088 CEST	49763	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.779735088 CEST	49763	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.779803038 CEST	443	49763	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.779838085 CEST	443	49763	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.782398939 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.782453060 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.782527924 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.782650948 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.782664061 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:15.947560072 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:15.947624922 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.391639948 CEST	443	49764	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.398169041 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.401058912 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.404727936 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.426199913 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.426219940 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.426753044 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.426757097 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.426902056 CEST	49764	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.426939011 CEST	443	49764	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.427248955 CEST	49764	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.427254915 CEST	443	49764	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.427453041 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.427459002 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.427803993 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.427809000 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.436388016 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.436394930 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.436831951 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.436836004 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.549287081 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.550101995 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.550137043 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.550580025 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.550585985 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.557840109 CEST	443	49764	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.557941914 CEST	443	49764	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.558188915 CEST	49764	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.558235884 CEST	49764	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.558259010 CEST	443	49764	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.558275938 CEST	49764	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.558283091 CEST	443	49764	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.559204102 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.559447050 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.559497118 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.561011076 CEST	49769	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.561044931 CEST	443	49769	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.561100006 CEST	49769	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.561181068 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.561197996 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.561208963 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.561213970 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.561309099 CEST	49769	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.561321974 CEST	443	49769	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.562274933 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.562582970 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.562628984 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.562757969 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.562764883 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.562779903 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.562784910 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.563188076 CEST	49770	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.563218117 CEST	443	49770	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.563283920 CEST	49770	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.563460112 CEST	49770	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.563469887 CEST	443	49770	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.564781904 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.564800024 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.564938068 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.565299034 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.565306902 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.570847988 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.571187019 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.571283102 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.571319103 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.571327925 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.571341991 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.571346045 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.573148966 CEST	49772	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.573184013 CEST	443	49772	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.576209068 CEST	49772	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.576318979 CEST	49772	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.576330900 CEST	443	49772	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.691875935 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.691946983 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.692008972 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.692209959 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.692231894 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.692246914 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.692253113 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.695262909 CEST	49773	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.695301056 CEST	443	49773	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:16.695396900 CEST	49773	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.695672989 CEST	49773	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:16.695682049 CEST	443	49773	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.299717903 CEST	443	49769	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.302107096 CEST	49769	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.302107096 CEST	49769	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.302129030 CEST	443	49769	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.302143097 CEST	443	49769	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.311588049 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.312328100 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.312328100 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.312335014 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.312345028 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.342034101 CEST	443	49772	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.345271111 CEST	49772	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.345297098 CEST	443	49772	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.345741987 CEST	49772	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.345746994 CEST	443	49772	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.358110905 CEST	443	49770	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.358583927 CEST	49770	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.358609915 CEST	443	49770	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.358999968 CEST	49770	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.359004974 CEST	443	49770	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.433895111 CEST	443	49769	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.434094906 CEST	443	49769	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.434201002 CEST	49769	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.438711882 CEST	49769	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.438711882 CEST	49769	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.438728094 CEST	443	49769	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.438736916 CEST	443	49769	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.452269077 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.452488899 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.452543020 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.454329014 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.454329014 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.454334021 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.454341888 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.458575010 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.458617926 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.458677053 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.464452028 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.464487076 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.464536905 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.464859962 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.464873075 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.465464115 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.465472937 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.469440937 CEST	443	49773	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.469795942 CEST	49773	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.469804049 CEST	443	49773	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.470236063 CEST	49773	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.470240116 CEST	443	49773	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.488720894 CEST	443	49772	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.489181995 CEST	443	49772	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.489233971 CEST	49772	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.489263058 CEST	49772	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.489274025 CEST	443	49772	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.489285946 CEST	49772	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.489290953 CEST	443	49772	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.496031046 CEST	49776	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.496089935 CEST	443	49776	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.496231079 CEST	49776	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.496436119 CEST	49776	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.496453047 CEST	443	49776	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.496570110 CEST	443	49770	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.496854067 CEST	443	49770	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.496915102 CEST	49770	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.497001886 CEST	49770	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.497001886 CEST	49770	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.497045994 CEST	443	49770	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.497078896 CEST	443	49770	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.499680042 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.499701023 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.499759912 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.499883890 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.499895096 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.610481024 CEST	443	49773	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.611148119 CEST	443	49773	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.611196995 CEST	49773	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.611248970 CEST	49773	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.611263037 CEST	443	49773	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.614712000 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.614774942 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:17.614854097 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.615176916 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:17.615197897 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.218291998 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.225655079 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.225684881 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.226121902 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.226128101 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.228971958 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.229336977 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.229352951 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.229748964 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.229753971 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.250303030 CEST	443	49776	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.250845909 CEST	49776	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.250864983 CEST	443	49776	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.251118898 CEST	49776	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.251123905 CEST	443	49776	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.260082006 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.260490894 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.260523081 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.260930061 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.260936022 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.358573914 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.358783960 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.358932972 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.365621090 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.365650892 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.365669966 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.365674973 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.370666027 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.370765924 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.370831013 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.378390074 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.378422022 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.378437042 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.378443956 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.383538961 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.390539885 CEST	443	49776	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.390866995 CEST	443	49776	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.391280890 CEST	49776	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.391282082 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.391324043 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.391738892 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.391743898 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.392743111 CEST	49776	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.392761946 CEST	443	49776	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.395133972 CEST	49776	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.395140886 CEST	443	49776	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.405664921 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.405709028 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.405752897 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.405776024 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.405838966 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.405880928 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.406013966 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.406022072 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.406033993 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.406038046 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.406796932 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.406827927 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.406876087 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.407021999 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.407032013 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.408724070 CEST	49781	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.408761978 CEST	443	49781	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.408816099 CEST	49781	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.416510105 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.416533947 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.417561054 CEST	49782	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.417572975 CEST	443	49782	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.417695045 CEST	49781	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.417707920 CEST	443	49781	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.417721987 CEST	49782	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.417778969 CEST	49782	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.417787075 CEST	443	49782	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.530029058 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.530123949 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.530168056 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.533751011 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.533777952 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.533852100 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.533859968 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.545641899 CEST	49783	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.545701981 CEST	443	49783	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:18.545803070 CEST	49783	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.546546936 CEST	49783	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:18.546561003 CEST	443	49783	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.150413036 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.151669025 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.151706934 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.152133942 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.152143955 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.179128885 CEST	443	49782	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.180496931 CEST	49782	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.180516958 CEST	443	49782	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.181029081 CEST	49782	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.181034088 CEST	443	49782	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.181391001 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.182991028 CEST	443	49781	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.183293104 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.183332920 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.183655977 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.183661938 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.183942080 CEST	49781	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.183969021 CEST	443	49781	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.184331894 CEST	49781	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.184338093 CEST	443	49781	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.287292957 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.287498951 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.287574053 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.287833929 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.287853956 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.287864923 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.287880898 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.290539980 CEST	49784	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.290644884 CEST	443	49784	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.290734053 CEST	49784	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.290874958 CEST	49784	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.290905952 CEST	443	49784	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.313549042 CEST	443	49783	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.317648888 CEST	49783	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.317678928 CEST	443	49783	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.318106890 CEST	49783	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.318113089 CEST	443	49783	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.318754911 CEST	443	49782	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.318881989 CEST	443	49782	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.318941116 CEST	49782	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.319108009 CEST	49782	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.319117069 CEST	443	49782	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.319128036 CEST	49782	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.319133997 CEST	443	49782	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.321645021 CEST	49785	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.321712971 CEST	443	49785	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.321765900 CEST	443	49781	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.321791887 CEST	49785	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.321923971 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.321973085 CEST	49785	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.321974039 CEST	443	49781	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.322001934 CEST	443	49785	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.322046995 CEST	49781	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.322069883 CEST	49781	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.322086096 CEST	443	49781	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.322096109 CEST	49781	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.322102070 CEST	443	49781	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.322597980 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.323194981 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.323227882 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.323229074 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.323242903 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.323254108 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.330023050 CEST	49786	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.330111027 CEST	443	49786	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.330192089 CEST	49786	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.330451965 CEST	49786	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.330487967 CEST	443	49786	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.330785036 CEST	49787	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.330809116 CEST	443	49787	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.330881119 CEST	49787	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.330971003 CEST	49787	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.330991030 CEST	443	49787	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.453881979 CEST	443	49783	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.453965902 CEST	443	49783	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.454009056 CEST	49783	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.454221964 CEST	49783	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.454238892 CEST	443	49783	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.454251051 CEST	49783	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.454256058 CEST	443	49783	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.457138062 CEST	49788	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.457182884 CEST	443	49788	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:19.457247972 CEST	49788	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.458955050 CEST	49788	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:19.458970070 CEST	443	49788	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.059400082 CEST	443	49784	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.061227083 CEST	49784	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.061259985 CEST	443	49784	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.061688900 CEST	49784	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.061695099 CEST	443	49784	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.075809002 CEST	443	49785	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.076716900 CEST	443	49786	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.076728106 CEST	49785	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.076757908 CEST	443	49785	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.077207088 CEST	49785	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.077213049 CEST	443	49785	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.077581882 CEST	49786	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.077617884 CEST	443	49786	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.078016996 CEST	49786	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.078027010 CEST	443	49786	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.087447882 CEST	443	49787	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.087963104 CEST	49787	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.087985039 CEST	443	49787	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.088891983 CEST	49787	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.088900089 CEST	443	49787	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.202644110 CEST	443	49784	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.202719927 CEST	443	49784	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.202780008 CEST	49784	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.202970028 CEST	49784	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.202991962 CEST	443	49784	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.203008890 CEST	49784	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.203015089 CEST	443	49784	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.205657959 CEST	49789	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.205703974 CEST	443	49789	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.205773115 CEST	49789	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.205909967 CEST	49789	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.205934048 CEST	443	49789	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.209392071 CEST	443	49788	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.209755898 CEST	49788	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.209784985 CEST	443	49788	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.210227966 CEST	49788	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.210236073 CEST	443	49788	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.212996006 CEST	443	49786	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.213329077 CEST	443	49786	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.213381052 CEST	49786	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.213416100 CEST	49786	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.213417053 CEST	49786	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.213433027 CEST	443	49786	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.213450909 CEST	443	49786	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.213732958 CEST	443	49785	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.214062929 CEST	443	49785	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.214107990 CEST	49785	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.214145899 CEST	49785	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.214158058 CEST	443	49785	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.214170933 CEST	49785	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.214178085 CEST	443	49785	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.216605902 CEST	49790	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.216665983 CEST	443	49790	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.216754913 CEST	49790	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.216882944 CEST	49790	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.216909885 CEST	443	49790	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.217048883 CEST	49791	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.217082977 CEST	443	49791	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.217137098 CEST	49791	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.217284918 CEST	49791	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.217299938 CEST	443	49791	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.225610971 CEST	443	49787	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.225785971 CEST	443	49787	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.225831985 CEST	49787	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.225864887 CEST	49787	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.225872040 CEST	443	49787	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.225883961 CEST	49787	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.225888014 CEST	443	49787	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.227817059 CEST	49792	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.227838993 CEST	443	49792	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.227900028 CEST	49792	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.228019953 CEST	49792	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.228032112 CEST	443	49792	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.357727051 CEST	443	49788	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.357825994 CEST	443	49788	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.357903004 CEST	49788	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.358143091 CEST	49788	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.358163118 CEST	443	49788	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.358175039 CEST	49788	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.358181000 CEST	443	49788	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.361056089 CEST	49793	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.361162901 CEST	443	49793	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.361253977 CEST	49793	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.361394882 CEST	49793	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.361419916 CEST	443	49793	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.977230072 CEST	443	49789	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.977293015 CEST	443	49791	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.977773905 CEST	49789	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.977804899 CEST	443	49789	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.978231907 CEST	49789	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.978240967 CEST	443	49789	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.978543997 CEST	49791	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.978557110 CEST	443	49791	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.979022980 CEST	49791	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.979028940 CEST	443	49791	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.988188982 CEST	443	49792	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.988712072 CEST	49792	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.988738060 CEST	443	49792	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:20.989165068 CEST	49792	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:20.989171028 CEST	443	49792	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.116307020 CEST	443	49791	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.116483927 CEST	443	49791	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.116544962 CEST	49791	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.116645098 CEST	443	49789	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.116647005 CEST	49791	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.116672039 CEST	443	49791	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.116687059 CEST	49791	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.116694927 CEST	443	49791	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.116916895 CEST	443	49789	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.116960049 CEST	49789	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.118570089 CEST	49789	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.118575096 CEST	443	49789	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.118597031 CEST	49789	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.118601084 CEST	443	49789	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.120939970 CEST	49794	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.120985985 CEST	443	49794	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.121054888 CEST	49794	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.121876001 CEST	49795	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.121948004 CEST	443	49795	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.121997118 CEST	49794	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.122009993 CEST	443	49794	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.122020960 CEST	49795	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.122092009 CEST	49795	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.122111082 CEST	443	49795	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.122423887 CEST	443	49793	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.122785091 CEST	49793	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.122806072 CEST	443	49793	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.123191118 CEST	49793	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.123203039 CEST	443	49793	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.127855062 CEST	443	49792	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.128038883 CEST	443	49792	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.128096104 CEST	49792	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.128182888 CEST	49792	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.128182888 CEST	49792	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.128201008 CEST	443	49792	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.128216028 CEST	443	49792	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.130240917 CEST	49796	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.130284071 CEST	443	49796	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.130350113 CEST	49796	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.130474091 CEST	49796	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.130487919 CEST	443	49796	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.189640999 CEST	443	49790	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.192154884 CEST	49790	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.192184925 CEST	443	49790	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.192637920 CEST	49790	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.192652941 CEST	443	49790	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.263135910 CEST	443	49793	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.263487101 CEST	443	49793	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.263591051 CEST	49793	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.263684034 CEST	49793	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.263684034 CEST	49793	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.263736010 CEST	443	49793	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.263765097 CEST	443	49793	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.266566992 CEST	49797	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.266618967 CEST	443	49797	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.266686916 CEST	49797	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.266819000 CEST	49797	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.266833067 CEST	443	49797	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.329118967 CEST	443	49790	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.329195023 CEST	443	49790	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.329238892 CEST	49790	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.329426050 CEST	49790	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.329447031 CEST	443	49790	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.329462051 CEST	49790	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.329468966 CEST	443	49790	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.331932068 CEST	49798	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.331964970 CEST	443	49798	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.332032919 CEST	49798	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.332174063 CEST	49798	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.332185030 CEST	443	49798	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.869751930 CEST	443	49794	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.876051903 CEST	49794	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.876131058 CEST	443	49794	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.876513958 CEST	49794	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.876528025 CEST	443	49794	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.892220974 CEST	443	49796	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.896014929 CEST	49796	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.896044016 CEST	443	49796	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:21.896457911 CEST	49796	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:21.896466017 CEST	443	49796	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.013870955 CEST	443	49794	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.013997078 CEST	443	49794	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.014048100 CEST	49794	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.016568899 CEST	49794	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.016586065 CEST	443	49794	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.016596079 CEST	49794	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.016602039 CEST	443	49794	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.024923086 CEST	443	49797	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.025166035 CEST	49799	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.025201082 CEST	443	49799	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.025254011 CEST	49799	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.025784016 CEST	49797	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.025793076 CEST	443	49797	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.026305914 CEST	49797	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.026312113 CEST	443	49797	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.029783010 CEST	49799	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.029795885 CEST	443	49799	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.030083895 CEST	443	49796	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.030370951 CEST	443	49796	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.030417919 CEST	49796	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.030536890 CEST	49796	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.030555010 CEST	443	49796	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.030570030 CEST	49796	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.030575037 CEST	443	49796	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.033102989 CEST	49800	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.033138037 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.033200979 CEST	49800	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.035516977 CEST	49800	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.035526037 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.080112934 CEST	443	49798	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.080542088 CEST	49798	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.080565929 CEST	443	49798	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.081007004 CEST	49798	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.081012011 CEST	443	49798	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.166080952 CEST	443	49797	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.166166067 CEST	443	49797	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.166229010 CEST	49797	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.166440964 CEST	49797	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.166459084 CEST	443	49797	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.166475058 CEST	49797	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.166482925 CEST	443	49797	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.169625044 CEST	49801	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.169666052 CEST	443	49801	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.169723034 CEST	49801	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.169862032 CEST	49801	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.169878960 CEST	443	49801	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.217463017 CEST	443	49798	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.217540026 CEST	443	49798	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.217601061 CEST	49798	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.218986988 CEST	49798	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.219011068 CEST	443	49798	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.219027996 CEST	49798	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.219033957 CEST	443	49798	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.240935087 CEST	49802	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.240979910 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.241036892 CEST	49802	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.241220951 CEST	49802	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.241230011 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.241858006 CEST	443	49795	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.242238045 CEST	49795	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.242265940 CEST	443	49795	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.242681026 CEST	49795	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.242686987 CEST	443	49795	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.383997917 CEST	443	49795	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.384088039 CEST	443	49795	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.384151936 CEST	49795	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.386277914 CEST	49795	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.386331081 CEST	443	49795	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.386363983 CEST	49795	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.386380911 CEST	443	49795	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.396009922 CEST	49803	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.396111012 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.396198034 CEST	49803	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.401705980 CEST	49803	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.401745081 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.782105923 CEST	443	49799	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.782583952 CEST	49799	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.782617092 CEST	443	49799	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.783061981 CEST	49799	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.783068895 CEST	443	49799	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.783706903 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.784045935 CEST	49800	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.784061909 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.784442902 CEST	49800	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.784446955 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.918942928 CEST	443	49799	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.918977976 CEST	443	49799	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.919035912 CEST	49799	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.919049978 CEST	443	49799	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.919107914 CEST	49799	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.921391010 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.921694040 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.921755075 CEST	49800	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.923094034 CEST	443	49801	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.928937912 CEST	49799	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.928976059 CEST	443	49799	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.928994894 CEST	49800	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.928997993 CEST	49799	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.929007053 CEST	443	49799	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.929017067 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.929038048 CEST	49800	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.929045916 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.929914951 CEST	49801	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.929941893 CEST	443	49801	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.930521011 CEST	49801	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.930526018 CEST	443	49801	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.932221889 CEST	49804	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.932279110 CEST	443	49804	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.932374001 CEST	49804	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.932600975 CEST	49804	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.932611942 CEST	443	49804	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.933778048 CEST	49805	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.933829069 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.933917046 CEST	49805	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.934019089 CEST	49805	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.934031010 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.995233059 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.995776892 CEST	49802	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.995795012 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:22.996244907 CEST	49802	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:22.996252060 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.061988115 CEST	443	49801	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.062159061 CEST	443	49801	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.062232018 CEST	49801	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.062400103 CEST	49801	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.062421083 CEST	443	49801	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.062433004 CEST	49801	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.062438965 CEST	443	49801	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.065130949 CEST	49806	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.065175056 CEST	443	49806	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.065258026 CEST	49806	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.065390110 CEST	49806	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.065399885 CEST	443	49806	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.132559061 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.132612944 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.132697105 CEST	49802	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.132725000 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.132764101 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.132810116 CEST	49802	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.132985115 CEST	49802	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.132998943 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.133012056 CEST	49802	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.133022070 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.135797024 CEST	49807	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.135864973 CEST	443	49807	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.135941982 CEST	49807	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.136084080 CEST	49807	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.136105061 CEST	443	49807	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.176702023 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.179446936 CEST	49803	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.179472923 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.180111885 CEST	49803	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.180119038 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.319603920 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.319629908 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.319689035 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.319730043 CEST	49803	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.319777966 CEST	49803	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.320035934 CEST	49803	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.320049047 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.320061922 CEST	49803	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.320067883 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.322912931 CEST	49808	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.322936058 CEST	443	49808	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.322992086 CEST	49808	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.323199034 CEST	49808	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.323209047 CEST	443	49808	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.678106070 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.679850101 CEST	49805	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.679877996 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.680346966 CEST	49805	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.680355072 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.693453074 CEST	443	49804	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.697572947 CEST	49804	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.697592974 CEST	443	49804	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.698066950 CEST	49804	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.698074102 CEST	443	49804	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.813651085 CEST	443	49806	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.813940048 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.814126015 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.814214945 CEST	49805	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.819506884 CEST	49806	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.819521904 CEST	443	49806	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.819983959 CEST	49806	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.819993019 CEST	443	49806	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.820460081 CEST	49805	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.820494890 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.820513964 CEST	49805	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.820523977 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.828459978 CEST	49809	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.828511953 CEST	443	49809	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.828571081 CEST	49809	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.828797102 CEST	49809	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.828808069 CEST	443	49809	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.832195044 CEST	443	49804	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.832223892 CEST	443	49804	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.832288980 CEST	49804	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.832299948 CEST	443	49804	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.832364082 CEST	443	49804	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.832432032 CEST	49804	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.832449913 CEST	443	49804	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.832469940 CEST	49804	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.832475901 CEST	443	49804	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.836883068 CEST	49810	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.836920023 CEST	443	49810	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.837007999 CEST	49810	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.837239027 CEST	49810	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.837250948 CEST	443	49810	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.895888090 CEST	443	49807	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.896394968 CEST	49807	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.896430969 CEST	443	49807	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.896864891 CEST	49807	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.896872044 CEST	443	49807	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.950464964 CEST	443	49806	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.950545073 CEST	443	49806	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.950654984 CEST	49806	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.959410906 CEST	49806	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.959431887 CEST	443	49806	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.959445000 CEST	49806	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.959451914 CEST	443	49806	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.962207079 CEST	49811	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.962263107 CEST	443	49811	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:23.962331057 CEST	49811	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.962476015 CEST	49811	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:23.962496996 CEST	443	49811	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.048486948 CEST	443	49807	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.048559904 CEST	443	49807	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.048661947 CEST	49807	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.048933029 CEST	49807	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.048933029 CEST	49807	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.048954964 CEST	443	49807	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.048969030 CEST	443	49807	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.051646948 CEST	49812	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.051682949 CEST	443	49812	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.051755905 CEST	49812	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.051898956 CEST	49812	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.051912069 CEST	443	49812	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.077121973 CEST	443	49808	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.077713966 CEST	49808	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.077729940 CEST	443	49808	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.078247070 CEST	49808	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.078253984 CEST	443	49808	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.214204073 CEST	443	49808	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.214508057 CEST	443	49808	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.214601040 CEST	49808	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.214835882 CEST	49808	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.214848042 CEST	443	49808	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.214859962 CEST	49808	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.214865923 CEST	443	49808	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.217684031 CEST	49813	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.217721939 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.217793941 CEST	49813	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.217931032 CEST	49813	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.217942953 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.582796097 CEST	443	49810	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.583333015 CEST	49810	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.583364964 CEST	443	49810	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.583807945 CEST	49810	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.583813906 CEST	443	49810	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.589795113 CEST	443	49809	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.590262890 CEST	49809	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.590293884 CEST	443	49809	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.590655088 CEST	49809	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.590661049 CEST	443	49809	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.718790054 CEST	443	49810	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.718930960 CEST	443	49810	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.719002008 CEST	49810	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.719130993 CEST	49810	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.719171047 CEST	443	49810	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.719196081 CEST	49810	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.719208956 CEST	443	49810	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.722170115 CEST	49814	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.722213984 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.722274065 CEST	49814	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.722420931 CEST	49814	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.722439051 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.728467941 CEST	443	49811	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.728972912 CEST	49811	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.728988886 CEST	443	49811	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.729310036 CEST	443	49809	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.729374886 CEST	443	49809	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.729418039 CEST	49809	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.729603052 CEST	49811	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.729608059 CEST	443	49811	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.729899883 CEST	49809	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.729917049 CEST	443	49809	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.729926109 CEST	49809	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.729931116 CEST	443	49809	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.732448101 CEST	49815	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.732481956 CEST	443	49815	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.732538939 CEST	49815	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.732652903 CEST	49815	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.732666016 CEST	443	49815	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.806962967 CEST	443	49812	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.807596922 CEST	49812	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.807632923 CEST	443	49812	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.808162928 CEST	49812	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.808177948 CEST	443	49812	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.870383024 CEST	443	49811	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.870491982 CEST	443	49811	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.870544910 CEST	49811	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.870821953 CEST	49811	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.870842934 CEST	443	49811	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.870856047 CEST	49811	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.870867014 CEST	443	49811	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.873497009 CEST	49816	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.873544931 CEST	443	49816	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:24.873636007 CEST	49816	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.873775959 CEST	49816	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:24.873788118 CEST	443	49816	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.110462904 CEST	443	49812	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.110547066 CEST	443	49812	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.110615969 CEST	49812	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.110822916 CEST	49812	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.110850096 CEST	443	49812	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.110865116 CEST	49812	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.110872030 CEST	443	49812	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.113504887 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.113656044 CEST	49817	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.113702059 CEST	443	49817	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.113765001 CEST	49817	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.113993883 CEST	49813	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.114008904 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.114444971 CEST	49813	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.114454031 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.114603043 CEST	49817	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.114617109 CEST	443	49817	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.253170013 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.253254890 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.253323078 CEST	49813	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.253597021 CEST	49813	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.253619909 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.253653049 CEST	49813	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.253659964 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.256345987 CEST	49818	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.256448030 CEST	443	49818	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.256540060 CEST	49818	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.256697893 CEST	49818	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.256732941 CEST	443	49818	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.472635031 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.473176956 CEST	49814	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.473211050 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.473665953 CEST	49814	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.473671913 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.483795881 CEST	443	49815	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.484273911 CEST	49815	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.484289885 CEST	443	49815	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.484714985 CEST	49815	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.484719992 CEST	443	49815	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.613543987 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.613714933 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.613789082 CEST	49814	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.615967989 CEST	49814	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.615994930 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.616010904 CEST	49814	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.616019011 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.619693995 CEST	49819	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.619740009 CEST	443	49819	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.619792938 CEST	49819	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.621072054 CEST	49819	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.621088028 CEST	443	49819	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.621340036 CEST	443	49815	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.621476889 CEST	443	49815	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.621517897 CEST	49815	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.621524096 CEST	443	49815	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.621565104 CEST	49815	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.621597052 CEST	49815	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.621622086 CEST	443	49815	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.621633053 CEST	49815	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.621638060 CEST	443	49815	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.624780893 CEST	49820	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.624819994 CEST	443	49820	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.624878883 CEST	49820	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.625020981 CEST	49820	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.625036955 CEST	443	49820	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.647152901 CEST	443	49816	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.647592068 CEST	49816	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.647648096 CEST	443	49816	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.648045063 CEST	49816	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.648052931 CEST	443	49816	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.784106970 CEST	443	49816	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.784187078 CEST	443	49816	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.784249067 CEST	49816	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.784467936 CEST	49816	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.784488916 CEST	443	49816	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.784499884 CEST	49816	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.784504890 CEST	443	49816	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.787230968 CEST	49821	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.787337065 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.787425995 CEST	49821	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.787564039 CEST	49821	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.787591934 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.878356934 CEST	443	49817	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.878899097 CEST	49817	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.878931999 CEST	443	49817	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.879367113 CEST	49817	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.879374027 CEST	443	49817	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.943047047 CEST	443	49720	23.1.237.91	192.168.2.5
Oct 22, 2024 09:03:25.943135023 CEST	49720	443	192.168.2.5	23.1.237.91
Oct 22, 2024 09:03:25.995800018 CEST	443	49818	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.996330023 CEST	49818	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.996359110 CEST	443	49818	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:25.996813059 CEST	49818	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:25.996817112 CEST	443	49818	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.016766071 CEST	443	49817	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.017198086 CEST	443	49817	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.017251015 CEST	443	49817	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.017255068 CEST	49817	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.017297983 CEST	49817	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.017328978 CEST	49817	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.017357111 CEST	443	49817	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.017373085 CEST	49817	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.017379999 CEST	443	49817	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.045424938 CEST	49822	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.045486927 CEST	443	49822	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.045566082 CEST	49822	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.045723915 CEST	49822	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.045757055 CEST	443	49822	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.131094933 CEST	443	49818	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.131192923 CEST	443	49818	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.131275892 CEST	49818	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.131582022 CEST	49818	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.131629944 CEST	443	49818	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.131680965 CEST	49818	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.131697893 CEST	443	49818	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.134440899 CEST	49823	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.134497881 CEST	443	49823	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.134565115 CEST	49823	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.134711981 CEST	49823	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.134733915 CEST	443	49823	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.384174109 CEST	443	49820	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.384727955 CEST	49820	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.384788990 CEST	443	49820	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.385531902 CEST	49820	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.385550976 CEST	443	49820	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.392760992 CEST	443	49819	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.393332958 CEST	49819	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.393418074 CEST	443	49819	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.393765926 CEST	49819	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.393785954 CEST	443	49819	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.521872044 CEST	443	49820	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.521934986 CEST	443	49820	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.521981001 CEST	49820	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.522144079 CEST	49820	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.522171974 CEST	443	49820	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.522192001 CEST	49820	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.522200108 CEST	443	49820	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.525228977 CEST	49824	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.525264025 CEST	443	49824	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.525326014 CEST	49824	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.525547981 CEST	49824	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.525558949 CEST	443	49824	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.533190966 CEST	443	49819	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.533590078 CEST	443	49819	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.533638954 CEST	49819	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.533694983 CEST	49819	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.533711910 CEST	443	49819	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.533725023 CEST	49819	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.533730030 CEST	443	49819	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.536432028 CEST	49825	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.536465883 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.536513090 CEST	49825	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.536638975 CEST	49825	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.536653996 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.554131985 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.554554939 CEST	49821	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.554582119 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.555018902 CEST	49821	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.555023909 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.695538998 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.695614100 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.695682049 CEST	49821	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.695734024 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.695770979 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.695879936 CEST	49821	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.713938951 CEST	49821	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.713938951 CEST	49821	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.713994980 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.714024067 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.732613087 CEST	49826	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.732722044 CEST	443	49826	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.732858896 CEST	49826	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.733021975 CEST	49826	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.733047962 CEST	443	49826	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.788794041 CEST	443	49822	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.792649984 CEST	49822	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.792702913 CEST	443	49822	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.793113947 CEST	49822	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.793127060 CEST	443	49822	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.905755043 CEST	443	49823	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.906636953 CEST	49823	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.906662941 CEST	443	49823	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.907181978 CEST	49823	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.907188892 CEST	443	49823	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.925323963 CEST	443	49822	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.925435066 CEST	443	49822	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.925510883 CEST	49822	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.925654888 CEST	49822	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.925682068 CEST	443	49822	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.925698042 CEST	49822	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.925707102 CEST	443	49822	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.928401947 CEST	49827	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.928443909 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:26.928517103 CEST	49827	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.928642988 CEST	49827	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:26.928652048 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.052025080 CEST	443	49823	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.052162886 CEST	443	49823	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.052275896 CEST	49823	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.053167105 CEST	49823	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.053217888 CEST	443	49823	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.053248882 CEST	49823	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.053265095 CEST	443	49823	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.056277990 CEST	49828	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.056333065 CEST	443	49828	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.056426048 CEST	49828	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.056555986 CEST	49828	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.056566954 CEST	443	49828	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.277456045 CEST	443	49824	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.278002024 CEST	49824	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.278019905 CEST	443	49824	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.278487921 CEST	49824	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.278491974 CEST	443	49824	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.642636061 CEST	443	49824	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.642708063 CEST	443	49824	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.642767906 CEST	49824	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.642970085 CEST	49824	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.642993927 CEST	443	49824	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.643012047 CEST	49824	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.643018961 CEST	443	49824	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.644004107 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.644496918 CEST	49825	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.644517899 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.645020962 CEST	49825	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.645025969 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.647289991 CEST	49829	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.647331953 CEST	443	49829	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.647516966 CEST	49829	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.647516966 CEST	49829	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.647542000 CEST	443	49829	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.779480934 CEST	443	49826	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.780023098 CEST	49826	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.780050993 CEST	443	49826	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.780462027 CEST	49826	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.780467033 CEST	443	49826	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.786873102 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.787291050 CEST	49827	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.787321091 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.787717104 CEST	49827	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.787722111 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.789618969 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.789710999 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.789751053 CEST	49825	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.789760113 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.789773941 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.789824009 CEST	49825	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.789860964 CEST	49825	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.789874077 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.789884090 CEST	49825	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.789889097 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.792625904 CEST	49830	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.792681932 CEST	443	49830	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.792754889 CEST	49830	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.792871952 CEST	49830	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.792886019 CEST	443	49830	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.819444895 CEST	443	49828	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.819870949 CEST	49828	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.819884062 CEST	443	49828	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.820323944 CEST	49828	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.820331097 CEST	443	49828	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.919109106 CEST	443	49826	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.919225931 CEST	443	49826	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.919277906 CEST	49826	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.932725906 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.932756901 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.932804108 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.932842970 CEST	49827	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.932885885 CEST	49827	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.933123112 CEST	49826	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.933144093 CEST	443	49826	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.933155060 CEST	49826	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.933161020 CEST	443	49826	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.934386015 CEST	49827	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.934401989 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.934413910 CEST	49827	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.934420109 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.937131882 CEST	49831	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.937164068 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.937283039 CEST	49831	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.938277960 CEST	49832	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.938328981 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.938388109 CEST	49832	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.938879967 CEST	49832	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.938896894 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.939013004 CEST	49831	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.939027071 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.957801104 CEST	443	49828	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.957866907 CEST	443	49828	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.957911968 CEST	49828	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.958070040 CEST	49828	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.958081961 CEST	443	49828	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.958107948 CEST	49828	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.958113909 CEST	443	49828	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.960107088 CEST	49833	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.960163116 CEST	443	49833	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:27.960299969 CEST	49833	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.960360050 CEST	49833	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:27.960371971 CEST	443	49833	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.403249025 CEST	443	49829	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.415167093 CEST	49829	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.415185928 CEST	443	49829	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.415637970 CEST	49829	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.415652037 CEST	443	49829	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.551348925 CEST	443	49829	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.551460028 CEST	443	49829	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.551503897 CEST	49829	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.557784081 CEST	49829	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.557801962 CEST	443	49829	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.557822943 CEST	49829	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.557827950 CEST	443	49829	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.561593056 CEST	443	49830	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.561894894 CEST	49834	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.561939955 CEST	443	49834	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.561997890 CEST	49834	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.562606096 CEST	49830	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.562638998 CEST	443	49830	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.563093901 CEST	49830	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.563098907 CEST	443	49830	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.563234091 CEST	49834	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.563256025 CEST	443	49834	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.692173004 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.692959070 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.693335056 CEST	49832	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.693367958 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.693808079 CEST	49832	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.693815947 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.694813967 CEST	49831	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.694829941 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.695168018 CEST	49831	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.695175886 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.701610088 CEST	443	49830	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.701703072 CEST	443	49830	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.701755047 CEST	49830	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.701884985 CEST	49830	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.701906919 CEST	443	49830	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.701919079 CEST	49830	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.701926947 CEST	443	49830	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.705461025 CEST	49835	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.705512047 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.705573082 CEST	49835	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.705713034 CEST	49835	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.705725908 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.714360952 CEST	443	49833	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.715440989 CEST	49833	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.715455055 CEST	443	49833	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.715861082 CEST	49833	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.715867043 CEST	443	49833	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.831374884 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.831419945 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.831464052 CEST	49831	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.831465006 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.831500053 CEST	49831	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.833646059 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.833739996 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.833781958 CEST	49832	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.838727951 CEST	49831	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.838745117 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.838756084 CEST	49831	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.838762045 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.839962006 CEST	49832	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.839998007 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.840013027 CEST	49832	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.840020895 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.849515915 CEST	443	49833	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.849591017 CEST	443	49833	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.849641085 CEST	49833	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.854202032 CEST	49833	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.854224920 CEST	443	49833	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.854265928 CEST	49833	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.854273081 CEST	443	49833	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.860399961 CEST	49836	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.860441923 CEST	443	49836	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.860502005 CEST	49836	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.861618042 CEST	49837	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.861659050 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.861727953 CEST	49837	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.877242088 CEST	49836	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.877273083 CEST	443	49836	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.877574921 CEST	49837	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.877607107 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.895503044 CEST	49838	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.895550013 CEST	443	49838	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:28.895625114 CEST	49838	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.895772934 CEST	49838	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:28.895788908 CEST	443	49838	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.323359013 CEST	443	49834	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.324290037 CEST	49834	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.324323893 CEST	443	49834	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.324768066 CEST	49834	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.324774981 CEST	443	49834	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.462573051 CEST	443	49834	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.462641001 CEST	443	49834	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.462713003 CEST	49834	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.462969065 CEST	49834	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.462994099 CEST	443	49834	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.463011026 CEST	49834	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.463017941 CEST	443	49834	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.464935064 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.465825081 CEST	49839	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.465869904 CEST	443	49839	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.465935946 CEST	49839	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.466212988 CEST	49835	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.466238022 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.466645956 CEST	49835	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.466650963 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.466773987 CEST	49839	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.466785908 CEST	443	49839	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.604511023 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.604547977 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.604599953 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.604649067 CEST	49835	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.604834080 CEST	49835	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.604850054 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.604877949 CEST	49835	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.604882956 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.608195066 CEST	49840	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.608213902 CEST	443	49840	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.608316898 CEST	49840	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.608593941 CEST	49840	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.608603954 CEST	443	49840	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.615230083 CEST	443	49836	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.615596056 CEST	49836	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.615619898 CEST	443	49836	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.616028070 CEST	49836	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.616034985 CEST	443	49836	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.645227909 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.649511099 CEST	49837	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.649528980 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.649967909 CEST	49837	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.649972916 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.654604912 CEST	443	49838	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.657473087 CEST	49838	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.657488108 CEST	443	49838	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.657838106 CEST	49838	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.657843113 CEST	443	49838	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.749291897 CEST	443	49836	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.749433994 CEST	443	49836	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.749516964 CEST	49836	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.749974012 CEST	49836	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.749984026 CEST	443	49836	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.749998093 CEST	49836	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.750004053 CEST	443	49836	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.752633095 CEST	49841	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.752665997 CEST	443	49841	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.752861023 CEST	49841	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.753161907 CEST	49841	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.753175974 CEST	443	49841	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.784024000 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.784096003 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.785222054 CEST	49837	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.791398048 CEST	49837	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.791429043 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.791443110 CEST	49837	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.791450024 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.792231083 CEST	443	49838	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.792293072 CEST	443	49838	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.792356968 CEST	49838	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.807281017 CEST	49838	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.807303905 CEST	443	49838	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.807333946 CEST	49838	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.807339907 CEST	443	49838	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.829870939 CEST	49842	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.829912901 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.829982996 CEST	49842	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.830761909 CEST	49843	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.830795050 CEST	443	49843	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.830854893 CEST	49843	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.831100941 CEST	49842	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.831113100 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:29.831279039 CEST	49843	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:29.831294060 CEST	443	49843	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.133687973 CEST	443	49839	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.134154081 CEST	49839	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.134171963 CEST	443	49839	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.134602070 CEST	49839	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.134605885 CEST	443	49839	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.136967897 CEST	443	49840	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.137257099 CEST	49840	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.137290001 CEST	443	49840	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.137649059 CEST	49840	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.137654066 CEST	443	49840	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.139235020 CEST	443	49843	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.139553070 CEST	49843	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.139580965 CEST	443	49843	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.139900923 CEST	49843	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.139908075 CEST	443	49843	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.141168118 CEST	443	49841	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.141460896 CEST	49841	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.141475916 CEST	443	49841	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.141863108 CEST	49841	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.141874075 CEST	443	49841	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.144975901 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.145265102 CEST	49842	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.145282030 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.145612955 CEST	49842	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.145618916 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.270875931 CEST	443	49839	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.271107912 CEST	443	49839	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.271163940 CEST	443	49839	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.271166086 CEST	49839	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.271228075 CEST	49839	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.271291971 CEST	49839	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.271346092 CEST	443	49839	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.271379948 CEST	49839	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.271395922 CEST	443	49839	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.272103071 CEST	443	49840	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.272166967 CEST	443	49840	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.272221088 CEST	49840	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.272598028 CEST	49840	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.272648096 CEST	443	49840	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.272682905 CEST	49840	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.272699118 CEST	443	49840	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.273195982 CEST	443	49843	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.273264885 CEST	443	49843	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.273330927 CEST	49843	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.275352001 CEST	49844	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.275398970 CEST	443	49844	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.275501013 CEST	49843	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.275544882 CEST	443	49843	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.275544882 CEST	49844	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.275583029 CEST	49843	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.275600910 CEST	443	49843	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.276288986 CEST	49845	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.276370049 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.276446104 CEST	49845	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.277203083 CEST	49844	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.277231932 CEST	443	49844	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.277322054 CEST	49845	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.277352095 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.278176069 CEST	443	49841	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.278320074 CEST	443	49841	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.278399944 CEST	49841	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.278448105 CEST	49841	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.278448105 CEST	49841	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.278465986 CEST	443	49841	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.278486967 CEST	443	49841	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.278609037 CEST	49846	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.278631926 CEST	443	49846	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.278692007 CEST	49846	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.278808117 CEST	49846	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.278831005 CEST	443	49846	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.280205011 CEST	49847	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.280225039 CEST	443	49847	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.280313015 CEST	49847	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.280431032 CEST	49847	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.280457020 CEST	443	49847	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.284502983 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.284569979 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.284614086 CEST	49842	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.284632921 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.284676075 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.284714937 CEST	49842	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.284764051 CEST	49842	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.284770966 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.284781933 CEST	49842	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.284785986 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.286530018 CEST	49848	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.286595106 CEST	443	49848	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:31.286675930 CEST	49848	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.286786079 CEST	49848	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:31.286804914 CEST	443	49848	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.017184019 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.017699003 CEST	49845	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.017728090 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.018321037 CEST	49845	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.018326044 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.030237913 CEST	443	49847	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.030636072 CEST	49847	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.030643940 CEST	443	49847	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.031189919 CEST	49847	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.031193972 CEST	443	49847	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.050337076 CEST	443	49844	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.050714016 CEST	49844	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.050731897 CEST	443	49844	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.051150084 CEST	49844	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.051153898 CEST	443	49844	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.054522991 CEST	443	49846	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.054797888 CEST	49846	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.054806948 CEST	443	49846	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.055171967 CEST	443	49848	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.055191994 CEST	49846	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.055197954 CEST	443	49846	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.055500031 CEST	49848	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.055519104 CEST	443	49848	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.055924892 CEST	49848	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.055929899 CEST	443	49848	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.153218985 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.153307915 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.153383970 CEST	49845	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.153414011 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.153438091 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.153486013 CEST	49845	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.155699015 CEST	49845	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.155716896 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.155750036 CEST	49845	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.155755997 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.158540964 CEST	49849	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.158584118 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.158647060 CEST	49849	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.158756971 CEST	49849	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.158765078 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.166829109 CEST	443	49847	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.166888952 CEST	443	49847	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.166932106 CEST	443	49847	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.166933060 CEST	49847	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.166973114 CEST	49847	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.167030096 CEST	49847	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.167038918 CEST	443	49847	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.167049885 CEST	49847	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.167056084 CEST	443	49847	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.171883106 CEST	49850	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.171957970 CEST	443	49850	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.172028065 CEST	49850	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.172238111 CEST	49850	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.172269106 CEST	443	49850	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.192012072 CEST	443	49844	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.192192078 CEST	443	49844	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.192251921 CEST	49844	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.192356110 CEST	49844	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.192373991 CEST	443	49844	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.192384958 CEST	49844	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.192390919 CEST	443	49844	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.193916082 CEST	443	49848	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.194001913 CEST	443	49848	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.194046021 CEST	49848	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.194154978 CEST	49848	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.194173098 CEST	443	49848	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.194188118 CEST	49848	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.194192886 CEST	443	49848	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.195878983 CEST	443	49846	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.196304083 CEST	443	49846	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.196357012 CEST	49846	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.196405888 CEST	49846	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.196412086 CEST	443	49846	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.196425915 CEST	49846	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.196429968 CEST	443	49846	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.212624073 CEST	49851	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.212682962 CEST	443	49851	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.212750912 CEST	49851	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.212925911 CEST	49851	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.212939024 CEST	443	49851	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.213567972 CEST	49852	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.213608980 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.213666916 CEST	49852	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.214293003 CEST	49853	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.214334011 CEST	443	49853	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.214379072 CEST	49853	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.214652061 CEST	49852	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.214663029 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.215188026 CEST	49853	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:32.215199947 CEST	443	49853	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.919826984 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.932511091 CEST	443	49850	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.959665060 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.962033033 CEST	443	49851	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.977385044 CEST	443	49853	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:32.978816032 CEST	49850	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.025690079 CEST	49849	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.025690079 CEST	49853	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.029179096 CEST	49851	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.029181957 CEST	49852	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.076736927 CEST	49853	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.076780081 CEST	443	49853	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.088148117 CEST	49853	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.088205099 CEST	443	49853	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.090933084 CEST	49851	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.090992928 CEST	443	49851	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.091406107 CEST	49851	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.091428995 CEST	443	49851	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.091439009 CEST	49850	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.091475010 CEST	443	49850	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.091677904 CEST	49849	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.091694117 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.091916084 CEST	49850	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.091931105 CEST	443	49850	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.092092991 CEST	49849	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.092107058 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.092256069 CEST	49852	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.092269897 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.092616081 CEST	49852	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.092621088 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.222537041 CEST	443	49853	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.222620010 CEST	443	49853	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.222687006 CEST	49853	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.223171949 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.223221064 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.223257065 CEST	49852	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.223264933 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.223299026 CEST	49852	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.224778891 CEST	443	49851	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.224916935 CEST	443	49851	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.224972010 CEST	49851	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.225861073 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.225950003 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.225986958 CEST	49849	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.225999117 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.226013899 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.226056099 CEST	49849	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.229636908 CEST	443	49850	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.229820967 CEST	443	49850	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.229871035 CEST	49850	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.273098946 CEST	49853	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.273138046 CEST	443	49853	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.273154974 CEST	49853	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.273163080 CEST	443	49853	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.273766041 CEST	49849	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.273804903 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.273817062 CEST	49849	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.273823023 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.274207115 CEST	49850	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.274235964 CEST	443	49850	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.274251938 CEST	49850	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.274257898 CEST	443	49850	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.274609089 CEST	49852	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.274631023 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.274643898 CEST	49852	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.274648905 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.275010109 CEST	49851	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.275013924 CEST	443	49851	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.275029898 CEST	49851	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.275033951 CEST	443	49851	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.292584896 CEST	49854	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.292613983 CEST	443	49854	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.292674065 CEST	49854	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.292753935 CEST	49855	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.292804003 CEST	443	49855	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.292856932 CEST	49855	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.293514013 CEST	49854	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.293524981 CEST	443	49854	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.294323921 CEST	49856	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.294332027 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.294383049 CEST	49856	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.294507980 CEST	49856	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.294519901 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.294699907 CEST	49855	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.294708967 CEST	443	49855	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.303402901 CEST	49857	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.303416014 CEST	443	49857	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.303472042 CEST	49857	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.303592920 CEST	49857	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.303603888 CEST	443	49857	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.304347038 CEST	49858	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.304358006 CEST	443	49858	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:33.304413080 CEST	49858	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.304709911 CEST	49858	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:33.304719925 CEST	443	49858	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.047928095 CEST	443	49855	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.054330111 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.055150032 CEST	443	49854	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.055911064 CEST	443	49858	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.058811903 CEST	49858	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.058840990 CEST	443	49858	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.059287071 CEST	49858	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.059294939 CEST	443	49858	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.059597015 CEST	49855	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.059607983 CEST	443	49855	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.060010910 CEST	49855	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.060019016 CEST	443	49855	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.060261011 CEST	49856	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.060269117 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.060636997 CEST	49856	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.060642004 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.060878038 CEST	49854	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.060899019 CEST	443	49854	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.061239004 CEST	49854	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.061244965 CEST	443	49854	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.066174984 CEST	443	49857	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.066548109 CEST	49857	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.066564083 CEST	443	49857	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.066941023 CEST	49857	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.066946983 CEST	443	49857	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.193310976 CEST	443	49855	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.193348885 CEST	443	49855	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.193398952 CEST	443	49855	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.193422079 CEST	49855	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.193459988 CEST	49855	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.194864988 CEST	49855	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.194890976 CEST	443	49855	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.194909096 CEST	49855	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.194915056 CEST	443	49855	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.196367979 CEST	443	49858	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.196387053 CEST	443	49854	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.196523905 CEST	443	49858	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.196590900 CEST	49858	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.196618080 CEST	443	49854	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.196660042 CEST	49854	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.197949886 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.198115110 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.198172092 CEST	49856	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.198178053 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.198215961 CEST	49856	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.199500084 CEST	49859	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.199536085 CEST	443	49859	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.199547052 CEST	49858	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.199553013 CEST	443	49858	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.199563026 CEST	49858	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.199565887 CEST	443	49858	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.199590921 CEST	49859	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.200303078 CEST	49859	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.200314999 CEST	443	49859	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.201776028 CEST	49860	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.201817989 CEST	443	49860	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.201896906 CEST	49860	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.201914072 CEST	49854	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.201914072 CEST	49854	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.201925993 CEST	443	49854	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.201935053 CEST	443	49854	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.202111959 CEST	49860	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.202125072 CEST	443	49860	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.203500032 CEST	49856	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.203514099 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.203546047 CEST	49856	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.203551054 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.204412937 CEST	443	49857	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.204504013 CEST	443	49857	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.204551935 CEST	49857	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.205008984 CEST	49857	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.205018044 CEST	443	49857	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.205037117 CEST	49857	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.205041885 CEST	443	49857	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.207254887 CEST	49861	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.207288980 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.207609892 CEST	49862	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.207631111 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.207659006 CEST	49861	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.207683086 CEST	49862	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.208584070 CEST	49863	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.208584070 CEST	49861	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.208595991 CEST	443	49863	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.208611012 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.208722115 CEST	49862	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.208730936 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.208789110 CEST	49863	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.208789110 CEST	49863	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.208806038 CEST	443	49863	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.943662882 CEST	443	49859	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.944175005 CEST	49859	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.944188118 CEST	443	49859	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.944653034 CEST	49859	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.944658041 CEST	443	49859	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.955038071 CEST	443	49860	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.955589056 CEST	49860	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.955621004 CEST	443	49860	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.956012964 CEST	49860	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.956017971 CEST	443	49860	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.959417105 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.959803104 CEST	49862	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.959809065 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.960215092 CEST	49862	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.960218906 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.960433006 CEST	443	49863	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.961080074 CEST	49863	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.961105108 CEST	443	49863	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.961752892 CEST	49863	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.961765051 CEST	443	49863	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.983073950 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.983580112 CEST	49861	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.983597994 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:34.984081030 CEST	49861	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:34.984091997 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.079497099 CEST	443	49859	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.079576969 CEST	443	49859	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.079632998 CEST	49859	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.088238955 CEST	49859	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.088259935 CEST	443	49859	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.088275909 CEST	49859	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.088280916 CEST	443	49859	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.092380047 CEST	49864	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.092413902 CEST	443	49864	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.092464924 CEST	49864	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.092827082 CEST	49864	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.092837095 CEST	443	49864	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.097534895 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.097563028 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.097605944 CEST	49862	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.097614050 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.097667933 CEST	49862	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.097835064 CEST	49862	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.097851992 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.097862959 CEST	49862	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.097867966 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.098486900 CEST	443	49863	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.098592043 CEST	443	49863	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.098632097 CEST	49863	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.098661900 CEST	49863	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.098676920 CEST	443	49863	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.098687887 CEST	49863	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.098692894 CEST	443	49863	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.100404978 CEST	49865	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.100440025 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.100491047 CEST	49865	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.100632906 CEST	49865	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.100644112 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.101985931 CEST	49866	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.102003098 CEST	443	49866	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.102081060 CEST	49866	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.102179050 CEST	443	49860	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.102231979 CEST	49866	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.102242947 CEST	443	49866	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.102523088 CEST	443	49860	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.102608919 CEST	49860	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.102662086 CEST	49860	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.102667093 CEST	443	49860	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.102677107 CEST	49860	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.102679968 CEST	443	49860	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.104746103 CEST	49867	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.104753971 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.104800940 CEST	49867	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.105384111 CEST	49867	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.105390072 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.123665094 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.123718023 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.123795033 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.123848915 CEST	49861	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.124002934 CEST	49861	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.124047041 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.124077082 CEST	49861	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.124094963 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.127563953 CEST	49868	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.127604008 CEST	443	49868	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.127656937 CEST	49868	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.127928019 CEST	49868	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.127938986 CEST	443	49868	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.847762108 CEST	443	49864	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.854698896 CEST	443	49866	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.855657101 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.860809088 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.877091885 CEST	443	49868	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.888919115 CEST	49868	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.888946056 CEST	443	49868	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.890809059 CEST	49868	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.890818119 CEST	443	49868	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.891859055 CEST	49867	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.891876936 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.892806053 CEST	49867	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.892808914 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.893385887 CEST	49865	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.893392086 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.894062996 CEST	49865	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.894068003 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.894318104 CEST	49864	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.894335032 CEST	443	49864	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.895121098 CEST	49864	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.895126104 CEST	443	49864	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.895814896 CEST	49866	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.895826101 CEST	443	49866	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:35.896703005 CEST	49866	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:35.896707058 CEST	443	49866	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.021532059 CEST	443	49868	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.021627903 CEST	443	49868	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.021673918 CEST	49868	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.024471998 CEST	49868	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.024501085 CEST	443	49868	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.024516106 CEST	49868	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.024522066 CEST	443	49868	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.026587009 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.026688099 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.026761055 CEST	49867	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.027060032 CEST	443	49864	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.027138948 CEST	443	49864	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.027266979 CEST	49864	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.027899027 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.028012991 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.028057098 CEST	49865	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.029244900 CEST	443	49866	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.029405117 CEST	443	49866	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.029457092 CEST	49866	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.029845953 CEST	49869	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.029887915 CEST	443	49869	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.029997110 CEST	49866	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.029997110 CEST	49866	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.030008078 CEST	443	49866	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.030016899 CEST	443	49866	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.030025959 CEST	49869	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.030117989 CEST	49867	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.030138969 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.030153990 CEST	49867	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.030158997 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.030736923 CEST	49869	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.030752897 CEST	443	49869	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.031508923 CEST	49864	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.031516075 CEST	443	49864	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.031524897 CEST	49864	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.031528950 CEST	443	49864	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.031666994 CEST	49865	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.031675100 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.031691074 CEST	49865	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.031693935 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.034449100 CEST	49870	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.034473896 CEST	443	49870	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.034523964 CEST	49870	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.035459042 CEST	49871	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.035478115 CEST	443	49871	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.035569906 CEST	49871	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.036303043 CEST	49870	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.036314964 CEST	443	49870	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.037276030 CEST	49872	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.037302017 CEST	443	49872	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.037446022 CEST	49872	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.037574053 CEST	49871	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.037585020 CEST	443	49871	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.037679911 CEST	49872	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.037692070 CEST	443	49872	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.038563967 CEST	49873	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.038587093 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.038680077 CEST	49873	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.038813114 CEST	49873	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.038825989 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.777304888 CEST	443	49870	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.777865887 CEST	49870	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.777896881 CEST	443	49870	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.778552055 CEST	49870	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.778558969 CEST	443	49870	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.783683062 CEST	443	49869	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.783978939 CEST	49869	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.784010887 CEST	443	49869	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.784393072 CEST	49869	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.784403086 CEST	443	49869	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.786000967 CEST	443	49871	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.786328077 CEST	49871	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.786343098 CEST	443	49871	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.786719084 CEST	49871	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.786731005 CEST	443	49871	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.801635981 CEST	443	49872	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.802012920 CEST	49872	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.802036047 CEST	443	49872	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.802676916 CEST	49872	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.802684069 CEST	443	49872	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.807256937 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.807564974 CEST	49873	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.807601929 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.808207989 CEST	49873	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.808213949 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.918803930 CEST	443	49870	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.918879986 CEST	443	49870	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.918962955 CEST	49870	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.919389963 CEST	49870	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.919411898 CEST	443	49870	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.919434071 CEST	49870	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.919440031 CEST	443	49870	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.920222044 CEST	443	49869	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.920300007 CEST	443	49869	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.920370102 CEST	49869	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.921598911 CEST	49869	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.921619892 CEST	443	49869	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.921670914 CEST	49869	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.921677113 CEST	443	49869	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.924736977 CEST	443	49871	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.924825907 CEST	443	49871	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.924995899 CEST	49871	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.926867008 CEST	49871	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.926877022 CEST	443	49871	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.926939964 CEST	49871	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.926943064 CEST	443	49871	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.929574013 CEST	49874	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.929619074 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.929687977 CEST	49874	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.930533886 CEST	49875	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.930577040 CEST	443	49875	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.930634022 CEST	49875	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.930741072 CEST	49874	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.930751085 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.930916071 CEST	49875	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.930927992 CEST	443	49875	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.931503057 CEST	49876	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.931521893 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.931595087 CEST	49876	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.931744099 CEST	49876	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.931754112 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.943449974 CEST	443	49872	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.943641901 CEST	443	49872	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.943700075 CEST	49872	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.943727970 CEST	49872	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.943741083 CEST	443	49872	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.943763018 CEST	49872	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.943768978 CEST	443	49872	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.946376085 CEST	49877	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.946402073 CEST	443	49877	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.946485996 CEST	49877	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.946614981 CEST	49877	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.946624994 CEST	443	49877	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.951642036 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.951725006 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.951769114 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.951780081 CEST	49873	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.951826096 CEST	49873	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.951896906 CEST	49873	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.951905966 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.951920033 CEST	49873	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.951925993 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.954499960 CEST	49878	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.954514980 CEST	443	49878	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:36.954593897 CEST	49878	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.954806089 CEST	49878	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:36.954816103 CEST	443	49878	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.683552027 CEST	443	49875	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.684022903 CEST	49875	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.684051991 CEST	443	49875	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.684464931 CEST	49875	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.684470892 CEST	443	49875	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.690438032 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.690839052 CEST	49874	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.690857887 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.691303015 CEST	49874	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.691320896 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.691766024 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.692022085 CEST	49876	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.692074060 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.692387104 CEST	49876	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.692399979 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.693969011 CEST	443	49878	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.694194078 CEST	49878	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.694209099 CEST	443	49878	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.694550037 CEST	49878	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.694561005 CEST	443	49878	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.704790115 CEST	443	49877	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.709441900 CEST	49877	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.709502935 CEST	443	49877	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.710304022 CEST	49877	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.710311890 CEST	443	49877	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.818708897 CEST	443	49875	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.818876982 CEST	443	49875	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.818939924 CEST	49875	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.818998098 CEST	49875	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.819020987 CEST	443	49875	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.819034100 CEST	49875	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.819039106 CEST	443	49875	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.821921110 CEST	49879	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.822036982 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.822123051 CEST	49879	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.822349072 CEST	49879	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.822372913 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.827894926 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.827930927 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.827944040 CEST	443	49878	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.827980042 CEST	49876	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.827985048 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.828008890 CEST	443	49878	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.828037024 CEST	49876	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.828054905 CEST	49878	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.828169107 CEST	49878	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.828187943 CEST	443	49878	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.828201056 CEST	49878	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.828207016 CEST	443	49878	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.828351021 CEST	49876	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.828356028 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.828367949 CEST	49876	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.828371048 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.828866959 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.828924894 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.828979015 CEST	49874	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.829039097 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.829072952 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.829113960 CEST	49874	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.829163074 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.829193115 CEST	49874	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.829193115 CEST	49874	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.829216003 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.829235077 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.831583023 CEST	49880	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.831614971 CEST	443	49880	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.831681967 CEST	49880	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.831950903 CEST	49880	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.831962109 CEST	443	49880	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.832823038 CEST	49881	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.832860947 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.832910061 CEST	49881	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.833012104 CEST	49881	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.833024025 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.833812952 CEST	49882	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.833823919 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.833878994 CEST	49882	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.834043980 CEST	49882	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.834054947 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.845930099 CEST	443	49877	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.846103907 CEST	443	49877	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.846152067 CEST	443	49877	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.846157074 CEST	49877	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.846210003 CEST	49877	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.846240044 CEST	49877	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.846267939 CEST	443	49877	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.846295118 CEST	49877	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.846308947 CEST	443	49877	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.848196030 CEST	49883	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.848217964 CEST	443	49883	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:37.848297119 CEST	49883	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.848404884 CEST	49883	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:37.848413944 CEST	443	49883	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.591495991 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.591548920 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.592009068 CEST	49882	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.592025995 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.592535019 CEST	49882	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.592540979 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.592591047 CEST	49879	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.592634916 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.592957973 CEST	49879	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.592967033 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.597136974 CEST	443	49880	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.597440958 CEST	49880	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.597450018 CEST	443	49880	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.597879887 CEST	49880	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.597887039 CEST	443	49880	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.603121042 CEST	443	49883	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.603478909 CEST	49883	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.603506088 CEST	443	49883	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.603806019 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.603895903 CEST	49883	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.603905916 CEST	443	49883	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.604284048 CEST	49881	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.604290962 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.604747057 CEST	49881	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.604751110 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.728302956 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.728338003 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.728393078 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.728544950 CEST	49882	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.728544950 CEST	49882	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.728638887 CEST	49882	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.728658915 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.728672028 CEST	49882	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.728677988 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.730155945 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.730185032 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.730240107 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.730240107 CEST	49879	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.730277061 CEST	49879	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.730433941 CEST	49879	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.730453014 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.730465889 CEST	49879	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.730470896 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.737938881 CEST	443	49880	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.738133907 CEST	443	49880	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.738200903 CEST	49880	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.741015911 CEST	49880	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.741015911 CEST	49880	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.741030931 CEST	443	49880	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.741039991 CEST	443	49880	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.741523027 CEST	49884	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.741556883 CEST	443	49884	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.741626024 CEST	49884	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.742171049 CEST	443	49883	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.742202997 CEST	443	49883	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.742254019 CEST	443	49883	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.742257118 CEST	49883	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.742305994 CEST	49883	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.742321968 CEST	49885	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.742418051 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.742496967 CEST	49884	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.742497921 CEST	49885	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.742507935 CEST	443	49884	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.742666960 CEST	49883	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.742686033 CEST	443	49883	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.742700100 CEST	49883	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.742706060 CEST	443	49883	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.743071079 CEST	49885	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.743107080 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.744117022 CEST	49886	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.744132996 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.744208097 CEST	49886	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.744312048 CEST	49886	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.744323015 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.744661093 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.744718075 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.744716883 CEST	49887	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.744752884 CEST	443	49887	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.744779110 CEST	49881	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.744796991 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.744829893 CEST	49887	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.744901896 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.744925022 CEST	49887	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.744949102 CEST	49881	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.744951010 CEST	443	49887	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.745069981 CEST	49881	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.745075941 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.745089054 CEST	49881	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.745093107 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.746891022 CEST	49888	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.746979952 CEST	443	49888	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:38.747044086 CEST	49888	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.747163057 CEST	49888	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:38.747191906 CEST	443	49888	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.493763924 CEST	443	49887	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.494434118 CEST	49887	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.494468927 CEST	443	49887	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.495095015 CEST	49887	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.495104074 CEST	443	49887	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.497811079 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.498138905 CEST	49886	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.498156071 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.498562098 CEST	49886	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.498569012 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.513683081 CEST	443	49884	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.514071941 CEST	443	49888	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.514142990 CEST	49884	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.514170885 CEST	443	49884	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.514462948 CEST	49888	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.514488935 CEST	443	49888	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.514580965 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.514657974 CEST	49884	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.514666080 CEST	443	49884	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.514785051 CEST	49888	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.514794111 CEST	443	49888	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.514956951 CEST	49885	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.514977932 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.515358925 CEST	49885	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.515367985 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.630363941 CEST	443	49887	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.632441998 CEST	443	49887	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.632494926 CEST	443	49887	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.632570982 CEST	49887	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.632622004 CEST	49887	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.632641077 CEST	443	49887	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.636324883 CEST	49889	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.636372089 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.636425972 CEST	49889	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.636596918 CEST	49889	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.636610985 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.638058901 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.638124943 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.638173103 CEST	49886	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.638273001 CEST	49886	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.638298988 CEST	49886	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.638303995 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.638309956 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.640855074 CEST	49890	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.640897036 CEST	443	49890	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.640957117 CEST	49890	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.641108990 CEST	49890	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.641124964 CEST	443	49890	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.653222084 CEST	443	49888	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.653311968 CEST	443	49888	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.653357029 CEST	49888	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.653456926 CEST	49888	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.653474092 CEST	443	49888	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.653484106 CEST	49888	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.653490067 CEST	443	49888	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.655679941 CEST	443	49884	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.655755997 CEST	443	49884	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.655797958 CEST	49884	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.655922890 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.656105995 CEST	49891	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.656147957 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.656151056 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.656198978 CEST	49885	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.656224012 CEST	49891	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.656348944 CEST	49891	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.656358957 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.656434059 CEST	49885	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.656457901 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.656477928 CEST	49885	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.656485081 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.656550884 CEST	49884	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.656568050 CEST	443	49884	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.656579018 CEST	49884	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.656584024 CEST	443	49884	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.658972025 CEST	49892	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.659002066 CEST	443	49892	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.659054041 CEST	49892	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.659210920 CEST	49892	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.659224987 CEST	443	49892	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.660099983 CEST	49893	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.660132885 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:39.660201073 CEST	49893	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.660531044 CEST	49893	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:39.660546064 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.400557995 CEST	443	49890	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.402875900 CEST	49890	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.402899027 CEST	443	49890	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.403359890 CEST	49890	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.403366089 CEST	443	49890	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.405688047 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.405982971 CEST	49889	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.406013966 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.406238079 CEST	443	49892	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.406332970 CEST	49889	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.406338930 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.406502962 CEST	49892	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.406528950 CEST	443	49892	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.406847000 CEST	49892	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.406857014 CEST	443	49892	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.426055908 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.426569939 CEST	49891	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.426590919 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.427026033 CEST	49891	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.427033901 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.433576107 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.434182882 CEST	49893	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.434202909 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.434887886 CEST	49893	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.434891939 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.545579910 CEST	443	49892	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.545840979 CEST	443	49892	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.545902014 CEST	443	49890	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.545923948 CEST	49892	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.545979977 CEST	443	49890	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.546024084 CEST	49890	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.546828985 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.546859980 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.546897888 CEST	49889	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.546912909 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.546950102 CEST	49889	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.548410892 CEST	49892	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.548437119 CEST	443	49892	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.548453093 CEST	49892	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.548460007 CEST	443	49892	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.556421995 CEST	49890	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.556448936 CEST	443	49890	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.556463003 CEST	49890	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.556469917 CEST	443	49890	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.565937042 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.566152096 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.566246033 CEST	49891	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.566271067 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.566293001 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.566335917 CEST	49891	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.573405027 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.573501110 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.573565960 CEST	49893	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.575915098 CEST	49893	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.575939894 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.575953007 CEST	49893	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.575958967 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.587177992 CEST	49889	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.587203026 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.587219000 CEST	49889	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.587225914 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.602669001 CEST	49891	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.602694035 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.673063993 CEST	49894	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.673161030 CEST	443	49894	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.673249006 CEST	49894	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.686568022 CEST	49894	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.686616898 CEST	443	49894	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.687287092 CEST	49895	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.687340975 CEST	443	49895	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.687405109 CEST	49895	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.687511921 CEST	49895	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.687525034 CEST	443	49895	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.688996077 CEST	49896	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.689029932 CEST	443	49896	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.689080954 CEST	49896	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.689884901 CEST	49897	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.689924955 CEST	443	49897	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.689979076 CEST	49897	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.690059900 CEST	49896	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.690071106 CEST	443	49896	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.690809011 CEST	49898	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.690817118 CEST	443	49898	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.690860033 CEST	49898	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.690949917 CEST	49898	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.690956116 CEST	443	49898	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:40.691026926 CEST	49897	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:40.691042900 CEST	443	49897	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.435887098 CEST	443	49895	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.436511040 CEST	49895	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.436548948 CEST	443	49895	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.436986923 CEST	49895	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.436995983 CEST	443	49895	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.442161083 CEST	443	49897	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.442555904 CEST	49897	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.442578077 CEST	443	49897	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.443334103 CEST	49897	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.443346977 CEST	443	49897	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.444324970 CEST	443	49896	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.444924116 CEST	49896	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.444924116 CEST	49896	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.444943905 CEST	443	49896	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.444958925 CEST	443	49896	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.450871944 CEST	443	49894	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.451278925 CEST	49894	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.451303959 CEST	443	49894	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.451724052 CEST	49894	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.451734066 CEST	443	49894	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.463638067 CEST	443	49898	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.464243889 CEST	49898	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.464257956 CEST	443	49898	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.464605093 CEST	49898	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.464612961 CEST	443	49898	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.574111938 CEST	443	49895	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.574196100 CEST	443	49895	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.574249029 CEST	49895	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.574434996 CEST	49895	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.574450016 CEST	443	49895	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.574466944 CEST	49895	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.574471951 CEST	443	49895	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.577625036 CEST	49899	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.577662945 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.577747107 CEST	49899	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.577928066 CEST	49899	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.577941895 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.580296040 CEST	443	49897	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.580432892 CEST	443	49897	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.580607891 CEST	49897	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.580672026 CEST	49897	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.580681086 CEST	443	49897	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.580699921 CEST	49897	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.580704927 CEST	443	49897	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.582189083 CEST	443	49896	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.582243919 CEST	443	49896	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.582302094 CEST	443	49896	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.582344055 CEST	49896	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.582344055 CEST	49896	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.582456112 CEST	49896	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.582456112 CEST	49896	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.582470894 CEST	443	49896	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.582479954 CEST	443	49896	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.583158970 CEST	49900	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.583194971 CEST	443	49900	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.583251953 CEST	49900	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.583384991 CEST	49900	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.583395004 CEST	443	49900	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.584424973 CEST	49901	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.584460020 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.584520102 CEST	49901	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.584645987 CEST	49901	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.584660053 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.590194941 CEST	443	49894	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.590604067 CEST	443	49894	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.590667963 CEST	49894	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.590703964 CEST	49894	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.590703964 CEST	49894	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.590719938 CEST	443	49894	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.590730906 CEST	443	49894	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.592689991 CEST	49902	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.592715979 CEST	443	49902	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.592782021 CEST	49902	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.592915058 CEST	49902	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.592924118 CEST	443	49902	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.605621099 CEST	443	49898	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.605690002 CEST	443	49898	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.605752945 CEST	49898	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.605936050 CEST	49898	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.605936050 CEST	49898	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.605950117 CEST	443	49898	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.605957985 CEST	443	49898	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.608267069 CEST	49903	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.608304024 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:41.608361959 CEST	49903	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.608484030 CEST	49903	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:41.608493090 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.324388981 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.325017929 CEST	49899	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.325053930 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.325395107 CEST	49899	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.325406075 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.339123011 CEST	443	49900	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.339617014 CEST	49900	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.339653015 CEST	443	49900	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.339934111 CEST	49900	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.339940071 CEST	443	49900	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.342526913 CEST	443	49902	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.342827082 CEST	49902	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.342842102 CEST	443	49902	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.343260050 CEST	49902	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.343265057 CEST	443	49902	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.348417044 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.348952055 CEST	49901	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.348984003 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.349455118 CEST	49901	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.349462032 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.371854067 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.372308969 CEST	49903	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.372327089 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.372754097 CEST	49903	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.372756958 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.459700108 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.459835052 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.459884882 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.459909916 CEST	49899	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.459944010 CEST	49899	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.460122108 CEST	49899	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.460146904 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.460159063 CEST	49899	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.460164070 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.462832928 CEST	49905	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.462862968 CEST	443	49905	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.462949038 CEST	49905	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.463099957 CEST	49905	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.463109970 CEST	443	49905	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.475215912 CEST	443	49900	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.475311041 CEST	443	49900	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.475384951 CEST	49900	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.475550890 CEST	49900	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.475568056 CEST	443	49900	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.475580931 CEST	49900	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.475586891 CEST	443	49900	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.478219032 CEST	49906	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.478245020 CEST	443	49906	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.478317976 CEST	49906	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.478458881 CEST	49906	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.478471041 CEST	443	49906	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.478835106 CEST	443	49902	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.478924036 CEST	443	49902	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.478969097 CEST	49902	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.479199886 CEST	49902	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.479207993 CEST	443	49902	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.479221106 CEST	49902	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.479224920 CEST	443	49902	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.481158972 CEST	49907	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.481198072 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.481267929 CEST	49907	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.481374025 CEST	49907	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.481388092 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.488665104 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.488914013 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.488961935 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.488990068 CEST	49901	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.489058018 CEST	49901	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.489099979 CEST	49901	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.489099979 CEST	49901	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.489140987 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.489171982 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.491004944 CEST	49908	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.491048098 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.491183043 CEST	49908	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.491300106 CEST	49908	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.491341114 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.512753010 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.512875080 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.512955904 CEST	49903	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.512983084 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.513016939 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.513163090 CEST	49903	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.520124912 CEST	49903	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.520148039 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.520194054 CEST	49903	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.520207882 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.522911072 CEST	49909	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.522972107 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:42.523066044 CEST	49909	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.523205042 CEST	49909	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:42.523221016 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.231225967 CEST	443	49905	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.235042095 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.236924887 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.246186018 CEST	443	49906	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.254690886 CEST	49905	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.254705906 CEST	443	49905	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.255153894 CEST	49905	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.255160093 CEST	443	49905	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.255491972 CEST	49908	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.255516052 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.255942106 CEST	49908	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.255954981 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.256069899 CEST	49906	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.256098986 CEST	443	49906	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.256165981 CEST	49907	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.256175041 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.256517887 CEST	49907	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.256525040 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.256674051 CEST	49906	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.256680965 CEST	443	49906	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.290447950 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.338228941 CEST	49909	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.391988993 CEST	443	49905	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.392069101 CEST	443	49905	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.392138004 CEST	49905	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.392759085 CEST	443	49906	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.392812967 CEST	443	49906	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.392863035 CEST	49906	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.392889977 CEST	443	49906	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.393263102 CEST	443	49906	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.393309116 CEST	49906	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.393320084 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.393376112 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.393420935 CEST	49907	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.393430948 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.393676996 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.393723965 CEST	49907	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.393731117 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.393825054 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.393867970 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.393910885 CEST	49908	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.393910885 CEST	49908	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.582596064 CEST	49909	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.582626104 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.583029985 CEST	49909	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.583035946 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.583336115 CEST	49908	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.583336115 CEST	49908	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.583399057 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.583426952 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.594984055 CEST	49905	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.595006943 CEST	443	49905	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.596708059 CEST	49906	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.596738100 CEST	443	49906	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.597943068 CEST	49907	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.597943068 CEST	49907	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.597959042 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.597975016 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.651196957 CEST	49910	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.651238918 CEST	443	49910	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.651350021 CEST	49910	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.652534008 CEST	49911	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.652590036 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.652719975 CEST	49911	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.653599024 CEST	49910	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.653613091 CEST	443	49910	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.654103041 CEST	49911	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.654119968 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.654812098 CEST	49912	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.654848099 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.654958010 CEST	49912	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.655109882 CEST	49912	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.655123949 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.657568932 CEST	49913	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.657598972 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.657675028 CEST	49913	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.657790899 CEST	49913	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.657803059 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.718550920 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.718638897 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.718709946 CEST	49909	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.718909025 CEST	49909	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.718931913 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.718950987 CEST	49909	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.718959093 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.721678972 CEST	49914	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.721733093 CEST	443	49914	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:43.721901894 CEST	49914	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.722089052 CEST	49914	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:43.722103119 CEST	443	49914	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.411448956 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.413671970 CEST	49913	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.413700104 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.414123058 CEST	49913	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.414130926 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.414422035 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.415664911 CEST	49911	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.415693998 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.415858030 CEST	443	49910	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.416073084 CEST	49911	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.416078091 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.416682959 CEST	49910	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.416735888 CEST	443	49910	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.417172909 CEST	49910	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.417186022 CEST	443	49910	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.418112993 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.418401957 CEST	49912	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.418433905 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.418787956 CEST	49912	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.418792963 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.495357990 CEST	443	49914	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.495870113 CEST	49914	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.495887041 CEST	443	49914	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.496332884 CEST	49914	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.496336937 CEST	443	49914	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.546714067 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.546873093 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.546935081 CEST	49913	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.547039986 CEST	49913	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.547055006 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.547066927 CEST	49913	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.547071934 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.549725056 CEST	49915	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.549746990 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.549808979 CEST	49915	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.549942970 CEST	49915	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.549956083 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.551896095 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.552062988 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.552119970 CEST	49911	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.552162886 CEST	49911	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.552162886 CEST	49911	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.552181005 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.552190065 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.554117918 CEST	49916	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.554205894 CEST	443	49916	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.554286003 CEST	49916	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.554538965 CEST	49916	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.554574013 CEST	443	49916	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.554718971 CEST	443	49910	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.554773092 CEST	443	49910	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.554835081 CEST	443	49910	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.554879904 CEST	49910	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.554951906 CEST	49910	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.554951906 CEST	49910	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.554951906 CEST	49910	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.556715965 CEST	49917	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.556763887 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.556802034 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.556839943 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.556889057 CEST	49917	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.556911945 CEST	49912	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.556945086 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.556974888 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.557034016 CEST	49912	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.557194948 CEST	49917	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.557224989 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.557372093 CEST	49912	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.557372093 CEST	49912	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.557401896 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.557425022 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.559405088 CEST	49918	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.559437990 CEST	443	49918	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.559516907 CEST	49918	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.559628963 CEST	49918	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.559655905 CEST	443	49918	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.636086941 CEST	443	49914	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.636169910 CEST	443	49914	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.636301041 CEST	443	49914	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.636404991 CEST	49914	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.636404991 CEST	49914	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.636528969 CEST	49914	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.636528969 CEST	49914	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.636569977 CEST	443	49914	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.636596918 CEST	443	49914	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.639472008 CEST	49919	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.639585018 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.639674902 CEST	49919	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.639851093 CEST	49919	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.639888048 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:44.871341944 CEST	49910	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:44.871372938 CEST	443	49910	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.313827991 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.314367056 CEST	49915	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.314388037 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.315150023 CEST	49915	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.315155983 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.317625046 CEST	443	49918	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.317920923 CEST	49918	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.317945957 CEST	443	49918	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.318298101 CEST	49918	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.318304062 CEST	443	49918	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.320604086 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.320930004 CEST	49917	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.320956945 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.321238995 CEST	443	49916	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.321340084 CEST	49917	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.321346045 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.321463108 CEST	49916	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.321470976 CEST	443	49916	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.321801901 CEST	49916	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.321805954 CEST	443	49916	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.405824900 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.406240940 CEST	49919	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.406270027 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.406678915 CEST	49919	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.406685114 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.454245090 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.454385996 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.454477072 CEST	49915	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.454596043 CEST	49915	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.454596043 CEST	49915	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.454617977 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.454629898 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.455915928 CEST	443	49918	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.456082106 CEST	443	49918	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.456156015 CEST	49918	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.456240892 CEST	49918	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.456240892 CEST	49918	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.456288099 CEST	443	49918	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.456319094 CEST	443	49918	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.457220078 CEST	49920	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.457272053 CEST	443	49920	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.457341909 CEST	49920	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.457498074 CEST	49920	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.457510948 CEST	443	49920	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.458234072 CEST	49921	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.458280087 CEST	443	49921	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.458635092 CEST	49921	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.458635092 CEST	49921	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.458663940 CEST	443	49921	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.459223032 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.459425926 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.459486008 CEST	49917	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.459537983 CEST	49917	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.459554911 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.459570885 CEST	49917	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.459575891 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.460623980 CEST	443	49916	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.460669994 CEST	443	49916	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.460716963 CEST	49916	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.460726976 CEST	443	49916	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.460767031 CEST	49916	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.460874081 CEST	49916	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.460899115 CEST	443	49916	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.460922956 CEST	49916	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.460937977 CEST	443	49916	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.461622953 CEST	49922	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.461657047 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.461741924 CEST	49922	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.461865902 CEST	49922	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.461883068 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.462929010 CEST	49923	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.462939024 CEST	443	49923	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.463119984 CEST	49923	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.463119984 CEST	49923	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.463135004 CEST	443	49923	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.543397903 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.543469906 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.543576002 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.543580055 CEST	49919	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.543637037 CEST	49919	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.543859005 CEST	49919	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.543859005 CEST	49919	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.543884993 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.543895960 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.546565056 CEST	49924	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.546616077 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:45.546704054 CEST	49924	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.546891928 CEST	49924	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:45.546910048 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.210942984 CEST	443	49921	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.217704058 CEST	443	49920	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.220208883 CEST	443	49923	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.229047060 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.234812975 CEST	49921	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.234836102 CEST	443	49921	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.235270023 CEST	49921	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.235275030 CEST	443	49921	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.235491991 CEST	49920	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.235515118 CEST	443	49920	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.235832930 CEST	49920	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.235840082 CEST	443	49920	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.236002922 CEST	49923	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.236010075 CEST	443	49923	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.236344099 CEST	49923	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.236347914 CEST	443	49923	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.236592054 CEST	49922	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.236614943 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.236929893 CEST	49922	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.236936092 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.293275118 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.301954985 CEST	49924	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.301980972 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.315392971 CEST	49924	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.315418959 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.368912935 CEST	443	49921	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.369034052 CEST	443	49921	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.369091988 CEST	49921	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.369210958 CEST	49921	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.369232893 CEST	443	49921	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.369244099 CEST	49921	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.369254112 CEST	443	49921	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.369333982 CEST	443	49920	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.369458914 CEST	443	49920	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.369517088 CEST	49920	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.370950937 CEST	49920	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.370968103 CEST	443	49920	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.370978117 CEST	49920	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.370981932 CEST	443	49920	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.371536016 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.371604919 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.371668100 CEST	443	49923	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.371674061 CEST	49922	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.371680975 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.371706963 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.371855021 CEST	443	49923	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.371908903 CEST	49922	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.371911049 CEST	49923	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.373586893 CEST	49925	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.373624086 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.373693943 CEST	49925	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.374171019 CEST	49922	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.374175072 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.374183893 CEST	49922	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.374186993 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.374793053 CEST	49926	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.374835014 CEST	443	49926	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.374937057 CEST	49923	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.374944925 CEST	443	49923	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.374968052 CEST	49926	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.375158072 CEST	49925	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.375173092 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.375411987 CEST	49926	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.375430107 CEST	443	49926	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.376615047 CEST	49927	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.376626015 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.376729965 CEST	49927	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.376765966 CEST	49928	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.376787901 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.376933098 CEST	49928	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.376996040 CEST	49927	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.377013922 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.377023935 CEST	49928	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.377034903 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.445636988 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.445714951 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.445775032 CEST	49924	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.445806980 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.445837975 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.445998907 CEST	49924	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.446027040 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.446039915 CEST	49924	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.446041107 CEST	49924	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.446048975 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.446053982 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.448790073 CEST	49929	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.448833942 CEST	443	49929	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:46.448976040 CEST	49929	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.449139118 CEST	49929	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:46.449152946 CEST	443	49929	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.126857996 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.127466917 CEST	49925	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.127485991 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.127939939 CEST	49925	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.127947092 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.129152060 CEST	443	49926	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.129755974 CEST	49926	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.129756927 CEST	49926	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.129807949 CEST	443	49926	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.129825115 CEST	443	49926	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.137717962 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.138036966 CEST	49928	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.138051987 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.138392925 CEST	49928	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.138398886 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.146627903 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.146898985 CEST	49927	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.146936893 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.147216082 CEST	49927	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.147222996 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.204212904 CEST	443	49929	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.204945087 CEST	49929	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.204972982 CEST	443	49929	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.205352068 CEST	49929	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.205363989 CEST	443	49929	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.263897896 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.264061928 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.264189959 CEST	49925	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.264328003 CEST	49925	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.264345884 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.264379025 CEST	49925	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.264384985 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.266113997 CEST	443	49926	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.266189098 CEST	443	49926	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.266254902 CEST	49926	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.266359091 CEST	49926	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.266381025 CEST	443	49926	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.266392946 CEST	49926	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.266397953 CEST	443	49926	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.267535925 CEST	49930	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.267584085 CEST	443	49930	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.267679930 CEST	49930	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.267805099 CEST	49930	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.267813921 CEST	443	49930	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.268413067 CEST	49931	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.268450022 CEST	443	49931	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.268511057 CEST	49931	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.268670082 CEST	49931	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.268681049 CEST	443	49931	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.275815964 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.275875092 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.275942087 CEST	49928	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.276031017 CEST	49928	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.276042938 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.276068926 CEST	49928	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.276074886 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.278104067 CEST	49932	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.278140068 CEST	443	49932	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.278215885 CEST	49932	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.278383970 CEST	49932	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.278413057 CEST	443	49932	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.286875963 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.286941051 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.287007093 CEST	49927	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.287033081 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.287058115 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.287081003 CEST	49927	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.287105083 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.287121058 CEST	49927	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.287121058 CEST	49927	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.287127972 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.287133932 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.288963079 CEST	49933	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.289051056 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.289140940 CEST	49933	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.289284945 CEST	49933	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.289321899 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.344418049 CEST	443	49929	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.344640970 CEST	443	49929	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.344724894 CEST	49929	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.344770908 CEST	49929	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.344770908 CEST	49929	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.344789982 CEST	443	49929	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.344799995 CEST	443	49929	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.347142935 CEST	49934	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.347153902 CEST	443	49934	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:47.347235918 CEST	49934	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.347352028 CEST	49934	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:47.347357035 CEST	443	49934	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.027596951 CEST	443	49930	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.028232098 CEST	49930	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.028259993 CEST	443	49930	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.028703928 CEST	49930	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.028707981 CEST	443	49930	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.030170918 CEST	443	49931	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.030430079 CEST	49931	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.030452013 CEST	443	49931	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.030755997 CEST	49931	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.030761003 CEST	443	49931	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.040894985 CEST	443	49932	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.041347027 CEST	49932	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.041377068 CEST	443	49932	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.041707039 CEST	49932	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.041713953 CEST	443	49932	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.042156935 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.042469025 CEST	49933	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.042495012 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.042831898 CEST	49933	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.042838097 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.103704929 CEST	443	49934	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.104665041 CEST	49934	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.104696989 CEST	443	49934	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.105257988 CEST	49934	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.105264902 CEST	443	49934	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.166750908 CEST	443	49930	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.166795969 CEST	443	49930	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.166835070 CEST	49930	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.166846991 CEST	443	49930	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.166888952 CEST	49930	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.167304993 CEST	49930	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.167332888 CEST	443	49930	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.167366028 CEST	49930	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.167371988 CEST	443	49930	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.170196056 CEST	49935	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.170236111 CEST	443	49935	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.170326948 CEST	49935	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.170495033 CEST	49935	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.170505047 CEST	443	49935	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.172000885 CEST	443	49931	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.172075987 CEST	443	49931	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.172369957 CEST	49931	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.172369957 CEST	49931	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.172399998 CEST	49931	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.172413111 CEST	443	49931	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.175374031 CEST	49936	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.175395012 CEST	443	49936	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.175446033 CEST	49936	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.175569057 CEST	49936	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.175576925 CEST	443	49936	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.178514004 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.178590059 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.178647995 CEST	49933	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.178700924 CEST	49933	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.178711891 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.178724051 CEST	49933	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.178729057 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.181555033 CEST	49937	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.181586981 CEST	443	49937	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.181675911 CEST	49937	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.181993008 CEST	443	49932	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.182039022 CEST	443	49932	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.182080030 CEST	49932	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.182087898 CEST	443	49932	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.182115078 CEST	49937	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.182126045 CEST	49932	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.182126999 CEST	443	49937	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.182368994 CEST	49932	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.182382107 CEST	443	49932	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.182394028 CEST	49932	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.182398081 CEST	443	49932	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.184416056 CEST	49938	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.184436083 CEST	443	49938	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.184484959 CEST	49938	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.184618950 CEST	49938	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.184627056 CEST	443	49938	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.242825985 CEST	443	49934	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.243031025 CEST	443	49934	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.243113041 CEST	49934	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.243325949 CEST	49934	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.243350029 CEST	443	49934	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.243362904 CEST	49934	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.243369102 CEST	443	49934	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.246463060 CEST	49939	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.246510029 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.246591091 CEST	49939	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.246915102 CEST	49939	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.246932030 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.921650887 CEST	443	49936	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.922324896 CEST	49936	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.922357082 CEST	443	49936	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.922835112 CEST	49936	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.922840118 CEST	443	49936	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.937633038 CEST	443	49938	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.938071012 CEST	49938	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.938080072 CEST	443	49938	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.938452959 CEST	49938	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.938457966 CEST	443	49938	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.944238901 CEST	443	49937	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.944627047 CEST	49937	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.944662094 CEST	443	49937	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.944876909 CEST	49937	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.944883108 CEST	443	49937	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.991940022 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.992592096 CEST	49939	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.992636919 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:48.992858887 CEST	49939	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:48.992863894 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.060573101 CEST	443	49936	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.060638905 CEST	443	49936	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.060689926 CEST	443	49936	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.060698032 CEST	49936	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.060730934 CEST	49936	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.060947895 CEST	49936	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.060965061 CEST	443	49936	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.063982010 CEST	49940	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.064028025 CEST	443	49940	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.064124107 CEST	49940	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.064321041 CEST	49940	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.064336061 CEST	443	49940	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.079586983 CEST	443	49938	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.079643011 CEST	443	49938	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.079696894 CEST	443	49938	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.079804897 CEST	49938	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.079804897 CEST	49938	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.079881907 CEST	49938	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.079890013 CEST	443	49938	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.079899073 CEST	49938	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.079906940 CEST	443	49938	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.082333088 CEST	49941	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.082431078 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.082525015 CEST	49941	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.082643986 CEST	49941	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.082660913 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.086421967 CEST	443	49937	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.086525917 CEST	443	49937	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.086585045 CEST	49937	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.086642981 CEST	49937	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.086658001 CEST	443	49937	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.086669922 CEST	49937	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.086677074 CEST	443	49937	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.089293957 CEST	49942	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.089327097 CEST	443	49942	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.089406013 CEST	49942	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.089517117 CEST	49942	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.089533091 CEST	443	49942	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.129832029 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.129930019 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.130014896 CEST	49939	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.130215883 CEST	49939	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.130237103 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.130279064 CEST	49939	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.130284071 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.133187056 CEST	49943	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.133234024 CEST	443	49943	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.133330107 CEST	49943	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.133501053 CEST	49943	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.133516073 CEST	443	49943	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.827038050 CEST	443	49940	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.827824116 CEST	49940	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.827902079 CEST	443	49940	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.828314066 CEST	49940	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.828329086 CEST	443	49940	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.842497110 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.842957020 CEST	49941	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.842981100 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.843362093 CEST	49941	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.843367100 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.850250006 CEST	443	49942	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.850533962 CEST	49942	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.850555897 CEST	443	49942	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.850889921 CEST	49942	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.850893974 CEST	443	49942	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.899926901 CEST	443	49943	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.900515079 CEST	49943	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.900540113 CEST	443	49943	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.901026011 CEST	49943	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.901030064 CEST	443	49943	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.968588114 CEST	443	49940	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.969137907 CEST	443	49940	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.969187021 CEST	443	49940	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.969213963 CEST	49940	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.969255924 CEST	49940	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.969304085 CEST	49940	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.969329119 CEST	443	49940	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.969355106 CEST	49940	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.969362020 CEST	443	49940	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.972043037 CEST	49944	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.972090006 CEST	443	49944	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.972174883 CEST	49944	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.972337961 CEST	49944	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.972347975 CEST	443	49944	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.980964899 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.981034994 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.981221914 CEST	49941	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.981265068 CEST	49941	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.981282949 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.981296062 CEST	49941	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.981302023 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.983917952 CEST	49945	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.983952045 CEST	443	49945	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.984028101 CEST	49945	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.984199047 CEST	49945	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.984211922 CEST	443	49945	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.988584995 CEST	443	49942	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.988662004 CEST	443	49942	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.988850117 CEST	49942	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.988899946 CEST	49942	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.988924980 CEST	443	49942	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.988975048 CEST	49942	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.988987923 CEST	443	49942	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.991322041 CEST	49946	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.991357088 CEST	443	49946	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:49.991436958 CEST	49946	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.991578102 CEST	49946	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:49.991590023 CEST	443	49946	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.050276041 CEST	443	49943	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.050344944 CEST	443	49943	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.050615072 CEST	49943	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.050646067 CEST	49943	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.050662041 CEST	443	49943	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.050674915 CEST	49943	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.050679922 CEST	443	49943	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.053462029 CEST	49947	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.053491116 CEST	443	49947	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.053570032 CEST	49947	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.053714037 CEST	49947	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.053723097 CEST	443	49947	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.739320993 CEST	443	49944	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.739880085 CEST	49944	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.739900112 CEST	443	49944	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.740493059 CEST	49944	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.740502119 CEST	443	49944	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.752439976 CEST	443	49946	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.753026009 CEST	49946	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.753037930 CEST	443	49946	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.753386021 CEST	49946	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.753388882 CEST	443	49946	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.814448118 CEST	443	49947	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.815021992 CEST	49947	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.815042973 CEST	443	49947	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.815493107 CEST	49947	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.815495968 CEST	443	49947	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.841664076 CEST	443	49935	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.842155933 CEST	49935	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.842192888 CEST	443	49935	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.842583895 CEST	49935	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.842590094 CEST	443	49935	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.884458065 CEST	443	49944	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.884814978 CEST	443	49944	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.884865999 CEST	443	49944	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.884895086 CEST	49944	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.884929895 CEST	49944	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.884974957 CEST	49944	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.884989977 CEST	443	49944	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.885004044 CEST	49944	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.885009050 CEST	443	49944	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.887806892 CEST	49948	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.887847900 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.887938023 CEST	49948	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.888108015 CEST	49948	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.888118029 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.891180992 CEST	443	49946	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.891362906 CEST	443	49946	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.891442060 CEST	49946	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.891504049 CEST	49946	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.891509056 CEST	443	49946	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.891519070 CEST	49946	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.891522884 CEST	443	49946	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.893892050 CEST	49949	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.893935919 CEST	443	49949	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.894015074 CEST	49949	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.894151926 CEST	49949	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.894162893 CEST	443	49949	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.959798098 CEST	443	49947	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.959964037 CEST	443	49947	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.963463068 CEST	49947	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.963464022 CEST	49947	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.963464022 CEST	49947	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.963478088 CEST	49950	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.963578939 CEST	443	49950	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.963671923 CEST	49950	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.963836908 CEST	49950	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.963857889 CEST	443	49950	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.981055021 CEST	443	49935	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.981268883 CEST	443	49935	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.981364012 CEST	49935	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.981518984 CEST	49935	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.981518984 CEST	49935	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.981571913 CEST	443	49935	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.981601954 CEST	443	49935	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.983849049 CEST	49951	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.983941078 CEST	443	49951	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:50.984041929 CEST	49951	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.984183073 CEST	49951	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:50.984210014 CEST	443	49951	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.275712967 CEST	49947	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.275743961 CEST	443	49947	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.650866985 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.651444912 CEST	49948	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.651465893 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.651895046 CEST	49948	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.651900053 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.666950941 CEST	443	49949	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.667361975 CEST	49949	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.667386055 CEST	443	49949	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.667815924 CEST	49949	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.667834044 CEST	443	49949	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.707046032 CEST	443	49950	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.707618952 CEST	49950	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.707643986 CEST	443	49950	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.708244085 CEST	49950	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.708250999 CEST	443	49950	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.742809057 CEST	443	49945	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.743386984 CEST	49945	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.743432045 CEST	443	49945	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.743819952 CEST	49945	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.743824959 CEST	443	49945	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.791815996 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.791896105 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.791951895 CEST	49948	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.792406082 CEST	49948	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.792434931 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.792445898 CEST	49948	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.792450905 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.795260906 CEST	49952	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.795294046 CEST	443	49952	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.795384884 CEST	49952	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.795516968 CEST	49952	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.795530081 CEST	443	49952	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.808291912 CEST	443	49949	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.808367968 CEST	443	49949	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.808429003 CEST	49949	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.808506012 CEST	49949	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.808530092 CEST	443	49949	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.808542013 CEST	49949	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.808547974 CEST	443	49949	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.810808897 CEST	49953	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.810839891 CEST	443	49953	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.810909986 CEST	49953	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.811011076 CEST	49953	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.811023951 CEST	443	49953	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.840362072 CEST	443	49950	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.840442896 CEST	443	49950	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.840498924 CEST	49950	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.840699911 CEST	49950	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.840723038 CEST	443	49950	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.840732098 CEST	49950	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.840738058 CEST	443	49950	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.843517065 CEST	49954	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.843549013 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.843627930 CEST	49954	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.843781948 CEST	49954	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.843796968 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.881045103 CEST	443	49945	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.881128073 CEST	443	49945	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.881212950 CEST	49945	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.881381989 CEST	49945	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.881402969 CEST	443	49945	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.881414890 CEST	49945	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.881419897 CEST	443	49945	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.884244919 CEST	49955	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.884295940 CEST	443	49955	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.884377003 CEST	49955	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.884540081 CEST	49955	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.884552956 CEST	443	49955	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.892888069 CEST	443	49951	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.893291950 CEST	49951	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.893368006 CEST	443	49951	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:51.893738031 CEST	49951	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:51.893753052 CEST	443	49951	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.030673981 CEST	443	49951	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.030838966 CEST	443	49951	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.030920982 CEST	49951	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.031027079 CEST	49951	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.031047106 CEST	443	49951	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.031056881 CEST	49951	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.031063080 CEST	443	49951	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.033597946 CEST	49956	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.033651114 CEST	443	49956	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.033746958 CEST	49956	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.033874989 CEST	49956	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.033893108 CEST	443	49956	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.556489944 CEST	443	49953	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.557312012 CEST	49953	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.557343960 CEST	443	49953	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.557853937 CEST	49953	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.557867050 CEST	443	49953	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.563966990 CEST	443	49952	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.564429045 CEST	49952	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.564455032 CEST	443	49952	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.564851046 CEST	49952	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.564856052 CEST	443	49952	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.608722925 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.609198093 CEST	49954	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.609225988 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.609647989 CEST	49954	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.609653950 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.639568090 CEST	443	49955	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.640060902 CEST	49955	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.640083075 CEST	443	49955	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.640542030 CEST	49955	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.640547037 CEST	443	49955	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.693696022 CEST	443	49953	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.693943024 CEST	443	49953	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.694004059 CEST	49953	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.694219112 CEST	49953	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.694246054 CEST	443	49953	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.694259882 CEST	49953	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.694267035 CEST	443	49953	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.697233915 CEST	49957	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.697287083 CEST	443	49957	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.697365999 CEST	49957	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.697506905 CEST	49957	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.697515011 CEST	443	49957	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.706017971 CEST	443	49952	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.706052065 CEST	443	49952	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.706089020 CEST	443	49952	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.706098080 CEST	49952	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.706146955 CEST	49952	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.706325054 CEST	49952	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.706343889 CEST	443	49952	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.706356049 CEST	49952	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.706362009 CEST	443	49952	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.709139109 CEST	49958	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.709239960 CEST	443	49958	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.709328890 CEST	49958	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.709472895 CEST	49958	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.709508896 CEST	443	49958	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.749207020 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.749361992 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.749413013 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.749414921 CEST	49954	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.749464989 CEST	49954	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.749640942 CEST	49954	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.749660015 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.749672890 CEST	49954	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.749677896 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.752268076 CEST	49959	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.752324104 CEST	443	49959	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.752427101 CEST	49959	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.752579927 CEST	49959	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.752599955 CEST	443	49959	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.777492046 CEST	443	49955	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.777568102 CEST	443	49955	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.777618885 CEST	49955	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.777749062 CEST	49955	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.777762890 CEST	443	49955	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.777781010 CEST	49955	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.777786016 CEST	443	49955	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.780560017 CEST	49960	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.780596018 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.780656099 CEST	49960	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.780910015 CEST	49960	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.780922890 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.789963961 CEST	443	49956	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.790338039 CEST	49956	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.790400982 CEST	443	49956	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.790750980 CEST	49956	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.790765047 CEST	443	49956	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.928389072 CEST	443	49956	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.928430080 CEST	443	49956	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.928491116 CEST	443	49956	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.928855896 CEST	49956	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.929008961 CEST	49956	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.929063082 CEST	443	49956	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.929095030 CEST	49956	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.929111958 CEST	443	49956	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.932212114 CEST	49961	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.932271004 CEST	443	49961	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:52.932352066 CEST	49961	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.932507992 CEST	49961	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:52.932527065 CEST	443	49961	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.443654060 CEST	443	49957	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.444406986 CEST	49957	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.444453001 CEST	443	49957	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.445010900 CEST	49957	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.445018053 CEST	443	49957	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.474607944 CEST	443	49958	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.475035906 CEST	49958	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.475070000 CEST	443	49958	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.475426912 CEST	49958	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.475434065 CEST	443	49958	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.519462109 CEST	443	49959	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.519910097 CEST	49959	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.519934893 CEST	443	49959	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.520315886 CEST	49959	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.520323038 CEST	443	49959	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.557161093 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.557780027 CEST	49960	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.557796955 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.558239937 CEST	49960	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.558244944 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.581595898 CEST	443	49957	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.581659079 CEST	443	49957	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.581828117 CEST	49957	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.581983089 CEST	49957	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.582007885 CEST	443	49957	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.582024097 CEST	49957	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.582032919 CEST	443	49957	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.584849119 CEST	49962	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.584886074 CEST	443	49962	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.584963083 CEST	49962	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.585128069 CEST	49962	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.585141897 CEST	443	49962	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.614830971 CEST	443	49958	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.614938021 CEST	443	49958	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.614999056 CEST	49958	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.615150928 CEST	49958	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.615175009 CEST	443	49958	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.615190983 CEST	49958	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.615197897 CEST	443	49958	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.617716074 CEST	49963	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.617769957 CEST	443	49963	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.617855072 CEST	49963	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.617999077 CEST	49963	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.618014097 CEST	443	49963	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.660293102 CEST	443	49959	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.660459995 CEST	443	49959	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.660530090 CEST	49959	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.660609007 CEST	49959	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.660634041 CEST	443	49959	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.660649061 CEST	49959	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.660656929 CEST	443	49959	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.663175106 CEST	49964	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.663214922 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.663295984 CEST	49964	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.663443089 CEST	49964	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.663459063 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.696432114 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.696850061 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.696907997 CEST	49960	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.696918964 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.696933031 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.696980953 CEST	49960	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.697036982 CEST	49960	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.697048903 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.697071075 CEST	49960	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.697077036 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.700404882 CEST	443	49961	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.700705051 CEST	49965	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.700799942 CEST	49961	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.700802088 CEST	443	49965	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.700839043 CEST	443	49961	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.700908899 CEST	49965	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.701121092 CEST	49965	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.701160908 CEST	443	49965	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.701468945 CEST	49961	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.701477051 CEST	443	49961	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.836110115 CEST	443	49961	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.836299896 CEST	443	49961	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.836371899 CEST	49961	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.836471081 CEST	49961	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.836493969 CEST	443	49961	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.836507082 CEST	49961	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.836513042 CEST	443	49961	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.839412928 CEST	49966	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.839457035 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:53.839539051 CEST	49966	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.839695930 CEST	49966	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:53.839705944 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.333076954 CEST	443	49962	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.333692074 CEST	49962	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.333710909 CEST	443	49962	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.334059000 CEST	49962	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.334064007 CEST	443	49962	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.376558065 CEST	443	49963	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.377072096 CEST	49963	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.377114058 CEST	443	49963	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.377510071 CEST	49963	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.377515078 CEST	443	49963	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.425218105 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.425673008 CEST	49964	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.425700903 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.426107883 CEST	49964	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.426117897 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.463840961 CEST	443	49965	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.464396954 CEST	49965	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.464482069 CEST	443	49965	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.464673042 CEST	49965	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.464688063 CEST	443	49965	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.469527006 CEST	443	49962	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.469680071 CEST	443	49962	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.469733000 CEST	49962	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.469769001 CEST	49962	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.469786882 CEST	443	49962	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.469805956 CEST	49962	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.469810963 CEST	443	49962	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.472527981 CEST	49967	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.472593069 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.472675085 CEST	49967	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.472774982 CEST	49967	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.472795963 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.515624046 CEST	443	49963	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.515631914 CEST	443	49963	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.515678883 CEST	49963	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.515696049 CEST	443	49963	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.515710115 CEST	443	49963	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.515753984 CEST	49963	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.515853882 CEST	49963	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.515868902 CEST	443	49963	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.515881062 CEST	49963	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.515886068 CEST	443	49963	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.518296003 CEST	49968	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.518320084 CEST	443	49968	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.518395901 CEST	49968	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.518517017 CEST	49968	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.518532038 CEST	443	49968	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.563152075 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.563344002 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.563410997 CEST	49964	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.563498020 CEST	49964	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.563517094 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.563529015 CEST	49964	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.563534021 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.565927029 CEST	49969	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.565962076 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.566054106 CEST	49969	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.566185951 CEST	49969	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.566199064 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.597352982 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.597870111 CEST	49966	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.597908974 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.598345041 CEST	49966	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.598360062 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.603625059 CEST	443	49965	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.603682041 CEST	443	49965	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.603766918 CEST	49965	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.603813887 CEST	443	49965	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.603847980 CEST	443	49965	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.603904963 CEST	49965	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.603904963 CEST	49965	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.603962898 CEST	49965	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.603990078 CEST	443	49965	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.606556892 CEST	49970	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.606592894 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.606678963 CEST	49970	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.606808901 CEST	49970	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.606823921 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.835535049 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.835561991 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.835628033 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.835762978 CEST	49966	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.835762978 CEST	49966	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.835993052 CEST	49966	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.836014032 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.836029053 CEST	49966	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.836035013 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.839117050 CEST	49971	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.839152098 CEST	443	49971	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:54.839236021 CEST	49971	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.839426041 CEST	49971	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:54.839435101 CEST	443	49971	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.250184059 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.250876904 CEST	49967	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.250916958 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.251405954 CEST	49967	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.251410961 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.280251980 CEST	443	49968	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.286369085 CEST	49968	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.286403894 CEST	443	49968	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.287108898 CEST	49968	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.287116051 CEST	443	49968	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.318487883 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.318934917 CEST	49969	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.318950891 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.319336891 CEST	49969	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.319344044 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.392285109 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.392303944 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.392371893 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.392410040 CEST	49967	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.392441988 CEST	49967	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.392638922 CEST	49967	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.392663002 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.392679930 CEST	49967	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.392685890 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.395625114 CEST	49972	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.395664930 CEST	443	49972	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.395746946 CEST	49972	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.395920038 CEST	49972	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.395939112 CEST	443	49972	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.421439886 CEST	443	49968	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.421464920 CEST	443	49968	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.421520948 CEST	443	49968	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.421677113 CEST	49968	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.421677113 CEST	49968	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.421828032 CEST	49968	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.421854019 CEST	443	49968	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.421868086 CEST	49968	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.421875000 CEST	443	49968	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.424702883 CEST	49973	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.424742937 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.424833059 CEST	49973	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.424989939 CEST	49973	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.425003052 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.456450939 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.456629992 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.456702948 CEST	49969	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.456901073 CEST	49969	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.456918955 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.456932068 CEST	49969	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.456938982 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.459856987 CEST	49974	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.459912062 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.459995985 CEST	49974	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.460153103 CEST	49974	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.460176945 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.592144012 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.592979908 CEST	49970	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.593002081 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.593364000 CEST	49970	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.593367100 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.596384048 CEST	443	49971	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.596693039 CEST	49971	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.596720934 CEST	443	49971	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.597037077 CEST	49971	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.597044945 CEST	443	49971	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.730514050 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.730597973 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.730645895 CEST	49970	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.730830908 CEST	49970	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.730855942 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.730870008 CEST	49970	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.730876923 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.733834028 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.733872890 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.733937025 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.734113932 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.734129906 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.734682083 CEST	443	49971	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.734868050 CEST	443	49971	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.734925032 CEST	49971	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.734976053 CEST	49971	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.734992027 CEST	443	49971	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.735002041 CEST	49971	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.735008001 CEST	443	49971	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.737350941 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.737396002 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:55.737454891 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.737597942 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:55.737616062 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.157183886 CEST	443	49972	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.157744884 CEST	49972	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.157783031 CEST	443	49972	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.158221960 CEST	49972	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.158229113 CEST	443	49972	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.188472033 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.188930988 CEST	49973	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.188954115 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.189367056 CEST	49973	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.189372063 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.207210064 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.207608938 CEST	49974	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.207634926 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.208050013 CEST	49974	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.208056927 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.296498060 CEST	443	49972	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.296574116 CEST	443	49972	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.296674967 CEST	49972	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.301826954 CEST	49972	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.301857948 CEST	443	49972	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.301891088 CEST	49972	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.301897049 CEST	443	49972	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.304945946 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.304991007 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.305092096 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.305233955 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.305243969 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.347585917 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.347621918 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.347744942 CEST	49973	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.347754002 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.348835945 CEST	49973	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.348901033 CEST	49973	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.348918915 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.348932981 CEST	49973	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.348937988 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.350887060 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.350959063 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.351085901 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.351142883 CEST	49974	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.351142883 CEST	49974	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.351193905 CEST	49974	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.351193905 CEST	49974	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.351213932 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.351227999 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.351840019 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.351890087 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.351953983 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.352099895 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.352119923 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.353179932 CEST	49979	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.353220940 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.353290081 CEST	49979	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.353413105 CEST	49979	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.353421926 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.493932009 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.494695902 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.494733095 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.495112896 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.495117903 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.500072956 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.500437975 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.500453949 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.500864029 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.500869036 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.632953882 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.632986069 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.633043051 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.633065939 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.633213043 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.633377075 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.633399963 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.633414984 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.633421898 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.638673067 CEST	49980	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.638719082 CEST	443	49980	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.638812065 CEST	49980	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.639043093 CEST	49980	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.639055014 CEST	443	49980	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.759861946 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.759892941 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.759941101 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.759965897 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.759987116 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.760030031 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.760077953 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.760409117 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.760490894 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.760514975 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.760534048 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.760838032 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.760857105 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.760867119 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.760873079 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.763730049 CEST	49981	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.763780117 CEST	443	49981	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:56.763855934 CEST	49981	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.764003038 CEST	49981	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:56.764020920 CEST	443	49981	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.061682940 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.062247038 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.062272072 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.062721968 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.062730074 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.106946945 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.107656956 CEST	49979	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.107721090 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.108123064 CEST	49979	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.108136892 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.108319998 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.108691931 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.108736038 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.109121084 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.109127045 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.243390083 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.243426085 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.243526936 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.243557930 CEST	49979	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.243597031 CEST	49979	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.243907928 CEST	49979	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.243927956 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.243940115 CEST	49979	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.243946075 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.246722937 CEST	49983	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.246830940 CEST	443	49983	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.246928930 CEST	49983	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.247068882 CEST	49983	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.247096062 CEST	443	49983	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.247549057 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.247570992 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.247638941 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.247670889 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.247687101 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.247720003 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.247747898 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.247798920 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.247816086 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.247827053 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.247832060 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.249813080 CEST	49984	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.249839067 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.249922037 CEST	49984	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.250036001 CEST	49984	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.250051975 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.318485975 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.318511009 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.318525076 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.318609953 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.318634987 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.318656921 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.318679094 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.395447016 CEST	443	49980	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.395872116 CEST	49980	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.395898104 CEST	443	49980	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.396336079 CEST	49980	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.396341085 CEST	443	49980	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.436503887 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.436553955 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.436588049 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.436604023 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.436625957 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.436675072 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.436741114 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.436846018 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.436862946 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.436872005 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.436877966 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.439527988 CEST	49985	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.439573050 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.439661026 CEST	49985	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.439779043 CEST	49985	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.439790010 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.511281967 CEST	443	49981	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.511843920 CEST	49981	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.511914968 CEST	443	49981	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.512309074 CEST	49981	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.512324095 CEST	443	49981	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.531497002 CEST	443	49980	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.531572104 CEST	443	49980	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.531636953 CEST	49980	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.531825066 CEST	49980	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.531850100 CEST	443	49980	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.531867027 CEST	49980	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.531873941 CEST	443	49980	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.534564018 CEST	49986	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.534621954 CEST	443	49986	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.534755945 CEST	49986	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.534895897 CEST	49986	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.534919024 CEST	443	49986	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.827024937 CEST	443	49981	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.827100039 CEST	443	49981	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.827158928 CEST	49981	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.827343941 CEST	49981	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.827368975 CEST	443	49981	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.827382088 CEST	49981	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.827389956 CEST	443	49981	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.830918074 CEST	49987	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.830955029 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.831020117 CEST	49987	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.831181049 CEST	49987	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.831191063 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.992497921 CEST	443	49983	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.992930889 CEST	49983	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.992959023 CEST	443	49983	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:57.995821953 CEST	49983	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:57.995846987 CEST	443	49983	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.002389908 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.002938986 CEST	49984	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.002968073 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.003360987 CEST	49984	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.003372908 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.130569935 CEST	443	49983	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.130726099 CEST	443	49983	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.130825996 CEST	49983	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.131048918 CEST	49983	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.131077051 CEST	443	49983	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.131093025 CEST	49983	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.131099939 CEST	443	49983	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.134284973 CEST	49988	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.134337902 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.134460926 CEST	49988	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.134650946 CEST	49988	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.134663105 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.145427942 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.145627975 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.145730019 CEST	49984	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.145803928 CEST	49984	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.145828009 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.145853043 CEST	49984	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.145860910 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.148894072 CEST	49989	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.148940086 CEST	443	49989	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.149039984 CEST	49989	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.149235964 CEST	49989	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.149250984 CEST	443	49989	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.196674109 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.197427034 CEST	49985	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.197465897 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.197901964 CEST	49985	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.197909117 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.296225071 CEST	443	49986	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.296857119 CEST	49986	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.296890974 CEST	443	49986	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.297343016 CEST	49986	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.297349930 CEST	443	49986	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.333929062 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.333960056 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.334005117 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.334100962 CEST	49985	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.334148884 CEST	49985	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.334419966 CEST	49985	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.334443092 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.334455013 CEST	49985	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.334460974 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.438467979 CEST	443	49986	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.438595057 CEST	443	49986	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.438668966 CEST	49986	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.438883066 CEST	49986	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.438906908 CEST	443	49986	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.438924074 CEST	49986	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.438930035 CEST	443	49986	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.595809937 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.596328974 CEST	49987	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.596349001 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.596877098 CEST	49987	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.596883059 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.734709024 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.734788895 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.734843016 CEST	49987	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.735114098 CEST	49987	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.735130072 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.735140085 CEST	49987	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.735146046 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.911139965 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.911725998 CEST	49988	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.911755085 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.912206888 CEST	49988	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.912213087 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.924628973 CEST	443	49989	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.925024033 CEST	49989	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.925055981 CEST	443	49989	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:58.925383091 CEST	49989	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:58.925390005 CEST	443	49989	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:59.052649021 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:59.052721977 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:59.052793026 CEST	49988	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:59.053010941 CEST	49988	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:59.053033113 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:59.053060055 CEST	49988	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:59.053066015 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:59.066560030 CEST	443	49989	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:59.066787958 CEST	443	49989	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:59.066859007 CEST	49989	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:59.067118883 CEST	49989	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:59.067140102 CEST	443	49989	13.107.253.72	192.168.2.5
Oct 22, 2024 09:03:59.067151070 CEST	49989	443	192.168.2.5	13.107.253.72
Oct 22, 2024 09:03:59.067156076 CEST	443	49989	13.107.253.72	192.168.2.5
Oct 22, 2024 09:04:33.231708050 CEST	49711	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:33.557003975 CEST	49711	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:33.992027044 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:33.992038965 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:34.347470999 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:34.347714901 CEST	49711	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:34.351358891 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:34.354013920 CEST	587	49711	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:34.354130983 CEST	49711	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:34.358727932 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:34.358939886 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:35.041287899 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:35.041555882 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:35.046946049 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:35.201981068 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:35.202128887 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:35.207449913 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:35.359925032 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:35.360148907 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:35.365427971 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:35.651495934 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:35.651633978 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:35.657025099 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:35.820204020 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:35.820370913 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:35.825721025 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:35.997657061 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.003385067 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:36.008863926 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.163836956 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.164371014 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:36.164424896 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:36.164424896 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:36.164508104 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:36.165843010 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:36.171207905 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.171327114 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.171478987 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.171489000 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.172272921 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:36.172987938 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.172997952 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.173007011 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.173016071 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.173024893 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.173036098 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.173053026 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:36.173131943 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.173165083 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:36.173221111 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:36.179023981 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.179723024 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.179761887 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:36.179889917 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.179919004 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:36.180011034 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.180020094 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.180028915 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.180038929 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:36.180075884 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:36.180160046 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.180170059 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.180176973 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.180234909 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:36.186750889 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.186918974 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:36.187064886 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.187074900 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.187206984 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.187216043 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.187349081 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.187360048 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.187369108 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.187488079 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.187496901 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.187505007 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.187515974 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.187599897 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.187609911 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.187618971 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.187628031 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.187635899 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.187645912 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.193770885 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.193809032 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.193820000 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.193829060 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.193840981 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.193850994 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.193860054 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.193906069 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.193914890 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.193923950 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.194034100 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.194045067 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.194061041 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.194070101 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.194178104 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.194188118 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.194310904 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.194319963 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.194861889 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:36.201893091 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.622245073 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.728868961 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:36.900975943 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:36.901027918 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:49.337656021 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:49.343301058 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:49.708329916 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:49.710525990 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:49.710530996 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:49.716386080 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:49.716839075 CEST	587	49990	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:49.716979980 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:49.716980934 CEST	49990	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:50.470732927 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:50.525993109 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:51.039397955 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:51.044876099 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:51.202085972 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:51.209881067 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:51.215388060 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:51.367598057 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:51.367997885 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:51.373322964 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:51.528284073 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:51.553875923 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:51.559228897 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:51.722374916 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:51.722630024 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:51.727961063 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:51.905333042 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:51.905484915 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:51.910830021 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.073060036 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.073357105 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:52.073393106 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:52.073462009 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:52.073546886 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:52.074743032 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:52.079096079 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.079119921 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.079138041 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.079195023 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:52.079581976 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.080857992 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.080904961 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.080931902 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:52.081007957 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:52.085086107 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.085181952 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:52.086493015 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.086560965 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:52.086666107 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.087006092 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:52.087049007 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.087348938 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:52.087563992 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.087641001 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:52.090555906 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.090610981 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.090635061 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:52.090671062 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:52.090712070 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.090766907 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:52.092773914 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.092837095 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:52.092905045 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.093791008 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.093831062 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.093849897 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:52.094286919 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.094474077 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.094540119 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.094578981 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.094739914 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.094750881 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.094763041 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.095195055 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.095206022 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.095215082 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.095225096 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.096880913 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.096918106 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.096939087 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.097009897 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.097027063 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.097043991 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.097067118 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.097084045 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.097126961 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.097188950 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.097199917 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.097203970 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.098670006 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.098680973 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.099169970 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.099224091 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.099935055 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.100383997 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.506867886 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:52.612278938 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:59.454943895 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:59.460644007 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:59.813852072 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:59.814378023 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:59.815567970 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:59.820425034 CEST	587	49991	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:59.821299076 CEST	49991	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:04:59.821510077 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:04:59.821727991 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:00.500264883 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:00.520216942 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:00.525675058 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:00.683501959 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:00.683697939 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:00.689063072 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:00.855382919 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:00.855736017 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:00.862797022 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.017066002 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.017214060 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:01.023247957 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.176981926 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.177134991 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:01.184113979 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.349263906 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.349397898 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:01.355093956 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.524914026 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.525182009 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:01.525263071 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:01.525263071 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:01.525290966 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:01.526570082 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:01.530594110 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.530623913 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.530741930 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.530769110 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.530797005 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:01.532150030 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.532179117 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.532207966 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:01.532227039 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.532252073 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:01.532301903 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.532331944 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:01.532365084 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:01.537106037 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.537151098 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:01.537684917 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.537734985 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.537735939 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:01.537767887 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.537787914 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:01.537820101 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:01.537863016 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.537890911 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.537906885 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:01.537923098 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.537940025 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:01.537971020 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.537980080 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:01.538012981 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.538017035 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:01.538062096 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:01.542659044 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.542716980 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:01.542941093 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.542996883 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:01.543184996 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.543246984 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:01.543414116 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.543442965 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.543524027 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.543571949 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.543600082 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.543657064 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.543684959 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.543714046 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.543761015 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.543788910 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.543817043 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.543844938 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.543900013 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.543942928 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.543971062 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.543998957 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.544029951 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.544056892 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.544085026 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.548147917 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.548365116 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.548434019 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.548461914 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.548512936 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.548541069 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.548568010 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.548594952 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.548645973 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.548674107 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.548706055 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.548733950 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:01.961822987 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:02.025785923 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:15.165632010 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:15.171036005 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:15.525203943 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:15.525399923 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:15.526643038 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:15.531204939 CEST	587	49992	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:15.531277895 CEST	49992	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:15.532020092 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:15.532094955 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:16.227253914 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:16.227433920 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:16.236601114 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:16.396110058 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:16.396359921 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:16.401688099 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:16.564977884 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:16.565212011 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:16.570472002 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:16.845352888 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:16.845493078 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:16.851912975 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:16.999725103 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:16.999952078 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:17.005337954 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.175438881 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.175592899 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:17.180965900 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.330441952 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.330837965 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:17.330837965 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:17.330925941 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:17.331063986 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:17.332314968 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:17.336213112 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.336225986 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.336234093 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.336299896 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:17.336307049 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.337723017 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.337733030 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.337740898 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.337745905 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.337762117 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.337770939 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.337781906 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:17.337786913 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.337811947 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:17.337853909 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:17.341583967 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.341650963 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:17.343072891 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.343116045 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:17.343168974 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.343178988 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.343214035 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.343281984 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:17.343302965 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:17.343307972 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.343328953 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.343353987 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.343364954 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.343367100 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:17.343390942 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:17.343434095 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:17.346990108 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.347057104 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:17.347110033 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.347178936 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:17.348474979 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.348491907 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.348546982 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:17.348638058 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.348654985 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.348702908 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.348881006 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.348982096 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.349011898 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.349045038 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.349210978 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.349245071 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.349315882 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.349324942 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.349503040 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.349512100 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.349586964 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.349596024 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.349611044 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.349620104 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.349631071 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.352652073 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.354295015 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.354305029 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.354320049 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.354331017 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.354363918 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.354374886 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.354384899 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.354396105 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.354410887 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.354419947 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.354448080 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.760917902 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:17.869827986 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:19.259583950 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:19.264894009 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:19.622082949 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:19.622761965 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:19.623291969 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:19.628400087 CEST	587	49993	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:19.628691912 CEST	49993	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:19.629656076 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:19.629749060 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:20.312851906 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:20.312975883 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:20.318244934 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:20.468821049 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:20.469058990 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:20.474328995 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:20.632852077 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:20.633121967 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:20.638525963 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:20.799993992 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:20.800319910 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:20.806925058 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:20.956849098 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:20.957057953 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:20.963082075 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.131726980 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.131973982 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:21.137454987 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.288463116 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.288784027 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:21.288831949 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:21.288847923 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:21.288887024 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:21.294187069 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.294198990 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.294753075 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.294773102 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.313446999 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:21.319127083 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.319140911 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.319150925 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.319251060 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:21.319283009 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:21.319300890 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.319318056 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.319345951 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:21.319375038 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:21.324681044 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.324760914 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:21.324780941 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.324790001 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.324800014 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.324825048 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:21.324827909 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.324836969 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.324866056 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:21.324892998 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.324899912 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:21.324909925 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.324918985 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.324942112 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:21.324970007 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:21.325403929 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.325659037 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:21.330099106 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.330107927 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.330157995 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:21.330178022 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.330187082 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.330210924 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.330219984 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.330291033 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.330300093 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.330311060 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.330404997 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.330413103 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.330423117 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.330432892 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.330471992 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.330481052 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.330490112 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.330498934 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.330544949 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.330553055 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.330562115 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.330573082 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.330589056 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.330598116 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.330605984 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.330971956 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.330984116 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.330992937 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.332761049 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.336883068 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.336894035 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.336903095 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.336911917 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.337034941 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:21.337059975 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:21.342573881 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.745445967 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:21.791419029 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:28.849479914 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:28.855103016 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:29.191659927 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:29.197058916 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:29.197139978 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:29.214673996 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:29.214771986 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:29.215241909 CEST	49996	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:29.220458031 CEST	587	49994	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:29.220521927 CEST	49994	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:29.220613003 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:29.220689058 CEST	49996	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:29.907130957 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:29.908574104 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:29.909138918 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:29.911571026 CEST	49996	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:29.914289951 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:29.917193890 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.062395096 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.062618017 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.067977905 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.068032026 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.068157911 CEST	49996	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.073596954 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.218661070 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.218872070 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.224195957 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.225661993 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.225907087 CEST	49996	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.233508110 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.382428885 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.382741928 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.388117075 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.390382051 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.390662909 CEST	49996	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.397347927 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.538970947 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.539284945 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.544924021 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.573224068 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.573524952 CEST	49996	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.580368042 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.717248917 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.717427015 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.722848892 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.746370077 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.746505022 CEST	49996	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.751928091 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.873039007 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.873354912 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.873408079 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.873447895 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.873501062 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.874619961 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.874650002 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.878657103 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.878716946 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.878726959 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.878772020 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.878839970 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.879968882 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.879988909 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.880037069 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.880060911 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.880089045 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.880111933 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.880173922 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.884321928 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.884397030 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.885384083 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.885446072 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.885482073 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.885494947 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.885518074 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.885525942 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.885528088 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.885545015 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.885585070 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.885601997 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.885622978 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.885667086 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.889730930 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.889786005 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.889799118 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.889848948 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.890743017 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.890799999 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.890815973 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.890840054 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.890861988 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.890995026 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.891012907 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.891036987 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.891113997 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.891124010 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.891130924 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.891170979 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.891180992 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.891189098 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.891206026 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.891215086 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.895076990 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.896003008 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.896013975 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.896023035 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.896033049 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.896049023 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.896059036 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.896111965 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.896121025 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.896136999 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.896146059 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.896156073 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.896207094 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.896215916 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.917272091 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.917557955 CEST	49996	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.917656898 CEST	49996	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.917707920 CEST	49996	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.917763948 CEST	49996	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.919186115 CEST	49996	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.922997952 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.923007011 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.923016071 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.923038960 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.923072100 CEST	49996	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.932286978 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.932408094 CEST	49996	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.937813044 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.937920094 CEST	49996	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.937942982 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.937983990 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.938035011 CEST	49996	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.938086033 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.938146114 CEST	49996	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.946096897 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.946207047 CEST	49996	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.946305037 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.946348906 CEST	49996	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:30.946383953 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.946393967 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.946403027 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.946413040 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.946423054 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.946485043 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.946501970 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.946511984 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.951550007 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.951570034 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.951584101 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.951653957 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.951663017 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.951673031 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.951682091 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.951692104 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.951771021 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:30.951781034 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:31.466833115 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:31.466849089 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:31.522998095 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:31.523065090 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:31.571023941 CEST	587	49996	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:31.571196079 CEST	49996	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:34.345431089 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:34.350847006 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:34.700880051 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:34.701118946 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:34.702527046 CEST	49997	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:34.706734896 CEST	587	49995	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:34.706793070 CEST	49995	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:34.707840919 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:34.707902908 CEST	49997	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:35.476799965 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:35.476943970 CEST	49997	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:35.482290983 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:35.632363081 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:35.632529974 CEST	49997	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:35.637828112 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:35.805201054 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:35.805439949 CEST	49997	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:35.810760975 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:35.969875097 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:35.995439053 CEST	49997	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:36.000750065 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.152339935 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.156054974 CEST	49997	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:36.161453962 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.332145929 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.332452059 CEST	49997	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:36.337793112 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.502892971 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.505661964 CEST	49997	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:36.505717039 CEST	49997	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:36.505717039 CEST	49997	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:36.505825043 CEST	49997	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:36.508171082 CEST	49997	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:36.511131048 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.511148930 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.511157990 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.511171103 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.511245012 CEST	49997	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:36.513699055 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.513771057 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.513811111 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.513940096 CEST	49997	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:36.516666889 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.517529964 CEST	49997	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:36.519385099 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.519464016 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.519488096 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.519536972 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.519573927 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.519582033 CEST	49997	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:36.519629955 CEST	49997	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:36.519746065 CEST	49997	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:36.523004055 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.523016930 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.525001049 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.525074959 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.525124073 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.525142908 CEST	49997	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:36.525192976 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.525226116 CEST	49997	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:36.525242090 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.525252104 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.525289059 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.525298119 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.525306940 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.525335073 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.525345087 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.525377035 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.525387049 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.530503988 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.530534029 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.530548096 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.530550957 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.530569077 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.530572891 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.530585051 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.530616999 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.530750990 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.530761003 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.530797958 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.530806065 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.530838966 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.530910015 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.533648014 CEST	49997	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:36.539140940 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.953130007 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:36.994565964 CEST	49997	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:38.253449917 CEST	49997	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:38.258878946 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:38.624151945 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:38.624357939 CEST	49997	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:38.627477884 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:38.630116940 CEST	587	49997	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:38.632776976 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:38.632869005 CEST	49997	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:38.632942915 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:39.324155092 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:39.324287891 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:39.329718113 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:39.479974985 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:39.480263948 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:39.485687017 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:39.642134905 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:39.642424107 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:39.648552895 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:39.809098959 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:39.809609890 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:39.815416098 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:39.972628117 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:39.972817898 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:39.978071928 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.146785975 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.147078037 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:40.152420998 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.302297115 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.303155899 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:40.303155899 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:40.303200960 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:40.303200960 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:40.304456949 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:40.308773994 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.308787107 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.308794022 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.308887959 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.308933973 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:40.310113907 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.310142040 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.310148001 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.310239077 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.310385942 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:40.310504913 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:40.314349890 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.315681934 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:40.315776110 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.315843105 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.315855980 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.315876961 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.315884113 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:40.315910101 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.315922022 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:40.315924883 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.315948009 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:40.315948009 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.315984011 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.315992117 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:40.316037893 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:40.316123009 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:40.321136951 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.321151972 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.321291924 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.321345091 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:40.321352959 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.321388006 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:05:40.321428061 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.321549892 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.321696043 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.321707964 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.321731091 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.321768045 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.321805954 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.321866035 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.321875095 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.321989059 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.321999073 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.322007895 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.322017908 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.322035074 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.322042942 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.322092056 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.322103024 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.326709986 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.326725960 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.326745987 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.326756001 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.326793909 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.326807022 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.326833010 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.326843023 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.326893091 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.326901913 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.326947927 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.326960087 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.744677067 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:05:40.791452885 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:04.001493931 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:04.006824970 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:04.361892939 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:04.362150908 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:04.362979889 CEST	49999	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:04.367799997 CEST	587	49998	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:04.368067026 CEST	49998	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:04.368288994 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:04.368614912 CEST	49999	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:05.010807991 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:05.010967970 CEST	49999	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:05.016381979 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:05.167140961 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:05.179663897 CEST	49999	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:05.184972048 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:05.350572109 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:05.351412058 CEST	49999	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:05.357831955 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:05.653897047 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:05.654894114 CEST	49999	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:05.660269022 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:05.810266972 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:05.811851978 CEST	49999	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:05.817234039 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:05.988554955 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:05.989622116 CEST	49999	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:05.995151043 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.146178961 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.146560907 CEST	49999	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:06.146560907 CEST	49999	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:06.146560907 CEST	49999	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:06.146699905 CEST	49999	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:06.147908926 CEST	49999	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:06.152053118 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.152067900 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.152086973 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.152096987 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.153378963 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.153389931 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.153408051 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.153417110 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.153479099 CEST	49999	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:06.153479099 CEST	49999	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:06.153496027 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.153507948 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.153541088 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.153661966 CEST	49999	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:06.159127951 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.159188986 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.159239054 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.159279108 CEST	49999	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:06.159321070 CEST	49999	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:06.159322023 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.159395933 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.159419060 CEST	49999	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:06.159506083 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.159508944 CEST	49999	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:06.159550905 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.159638882 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.159682035 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.159692049 CEST	49999	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:06.159843922 CEST	49999	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:06.166048050 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.166074038 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.166115046 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.166224957 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.166245937 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.166280031 CEST	49999	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:06.166322947 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.166385889 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.166476011 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.166486025 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.166548014 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.166600943 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.166632891 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.166799068 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.166810036 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.166816950 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.166841984 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.166851044 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.166858912 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.166913986 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.166932106 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.170866966 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.170878887 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.171550989 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.171619892 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.171629906 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.171684980 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.171704054 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.171725035 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.171739101 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.171763897 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.171772957 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.171811104 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.171818018 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.171833038 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.173480988 CEST	49999	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:06.178757906 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.582487106 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:06.713327885 CEST	49999	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:09.908685923 CEST	49999	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:09.914158106 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:10.266833067 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:10.267134905 CEST	49999	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:10.268013954 CEST	50000	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:10.272886038 CEST	587	49999	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:10.273119926 CEST	49999	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:10.273381948 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:10.276310921 CEST	50000	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:10.984836102 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:10.984996080 CEST	50000	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:10.990420103 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:11.149859905 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:11.150080919 CEST	50000	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:11.155457020 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:11.309284925 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:11.309484005 CEST	50000	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:11.314845085 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:11.473535061 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:11.473697901 CEST	50000	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:11.479079008 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:11.651860952 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:11.653491020 CEST	50000	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:11.658816099 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:11.836956024 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:11.837286949 CEST	50000	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:11.842741966 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:11.995210886 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:11.995481014 CEST	50000	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:11.995481014 CEST	50000	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:11.995541096 CEST	50000	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:11.995619059 CEST	50000	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:11.996998072 CEST	50000	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:12.001806021 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.001817942 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.001826048 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.001833916 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.001914024 CEST	50000	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:12.004473925 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.004487991 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.004497051 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.004597902 CEST	50000	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:12.004623890 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.004781961 CEST	50000	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:12.008275032 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.009951115 CEST	50000	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:12.010978937 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.011105061 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.011116028 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.011123896 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.011130095 CEST	50000	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:12.011239052 CEST	50000	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:12.011281013 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.011460066 CEST	50000	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:12.016171932 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.016340017 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.016376019 CEST	50000	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:12.016444921 CEST	50000	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:12.017414093 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.017426014 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.017436028 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.017446041 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.017523050 CEST	50000	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:12.017556906 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.017566919 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.017699957 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.017709970 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.017756939 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.017766953 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.017893076 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.017903090 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.017913103 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.017923117 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.018044949 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.018054008 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.018062115 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.022500992 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.022542000 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.022552013 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.022566080 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.022567987 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.022571087 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.022578955 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.022588015 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.022838116 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.022849083 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.022859097 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.022876024 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.022953033 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.022964001 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.023072958 CEST	50000	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:12.031568050 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.427865982 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:12.511878014 CEST	50000	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:13.402811050 CEST	50000	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:13.408162117 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:13.761034012 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:13.761169910 CEST	50000	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:13.762151003 CEST	50001	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:13.766891003 CEST	587	50000	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:13.766964912 CEST	50000	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:13.767478943 CEST	587	50001	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:13.767628908 CEST	50001	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:14.394035101 CEST	587	50001	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:14.395888090 CEST	50001	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:14.401305914 CEST	587	50001	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:14.526041031 CEST	50001	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:14.531630039 CEST	587	50001	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:14.531789064 CEST	50001	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:14.585504055 CEST	50002	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:14.590893984 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:14.591012955 CEST	50002	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:15.200895071 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:15.201060057 CEST	50002	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:15.206357002 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:15.355138063 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:15.355330944 CEST	50002	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:15.360694885 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:15.511545897 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:15.511965990 CEST	50002	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:15.518006086 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:15.673106909 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:15.675623894 CEST	50002	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:15.681054115 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:15.829265118 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:15.829750061 CEST	50002	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:15.835094929 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.002749920 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.004348993 CEST	50002	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:16.010559082 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.160126925 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.160389900 CEST	50002	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:16.160428047 CEST	50002	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:16.160645962 CEST	50002	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:16.160645962 CEST	50002	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:16.164196968 CEST	50002	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:16.165738106 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.165987968 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.165992975 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.166029930 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.166465044 CEST	50002	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:16.169615030 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.169687986 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.169764042 CEST	50002	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:16.169792891 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.169895887 CEST	50002	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:16.169992924 CEST	50002	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:16.175122023 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.175324917 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.175328970 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.175447941 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.175451994 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.175456047 CEST	50002	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:16.175494909 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.175520897 CEST	50002	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:16.175590038 CEST	50002	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:16.180895090 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.180963993 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.181149006 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.181246042 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.181251049 CEST	50002	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:16.181253910 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.181272984 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.181309938 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.181334019 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.181360960 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.181365013 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.181412935 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.181416988 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.181467056 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.181472063 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.181499004 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.186655045 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.186660051 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.186702013 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.186707020 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.186753988 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.186758995 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.186774969 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.186779976 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.186868906 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.186872959 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.599179983 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.807089090 CEST	50002	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:16.811017036 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:16.811064959 CEST	50002	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:25.579863071 CEST	50002	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:25.585176945 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:25.941410065 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:25.942552090 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:25.942568064 CEST	50002	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:25.947971106 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:25.948123932 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:25.948376894 CEST	587	50002	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:25.949599028 CEST	50002	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:26.710093021 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:26.710266113 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:26.715676069 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:26.866894007 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:26.867276907 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:26.872715950 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.043351889 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.043653965 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:27.048943043 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.216878891 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.217087984 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:27.222534895 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.382076979 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.382249117 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:27.387676954 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.558821917 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.558949947 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:27.564285994 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.732723951 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.733000040 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:27.733058929 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:27.733088017 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:27.733135939 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:27.736803055 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:27.738260984 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.738328934 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.738338947 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.738379002 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:27.738459110 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.742208004 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.742259026 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.742278099 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:27.742305040 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.742332935 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:27.742350101 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:27.743673086 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.743767977 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:27.747703075 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.747756004 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.747765064 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:27.747814894 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:27.747836113 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.747889996 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:27.747904062 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.747925043 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.747980118 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:27.747993946 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.748061895 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:27.748117924 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.748128891 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.748199940 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:27.748262882 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:27.749258041 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.749325037 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:27.749377012 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.749429941 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:27.753197908 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.753258944 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.753257990 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:27.753328085 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:27.753329039 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.753431082 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.753460884 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.753544092 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.753586054 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.753735065 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.753899097 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.754014015 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.754160881 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.754235029 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.754331112 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.754364967 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.754431963 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.754441977 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.754457951 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.754467964 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.754492998 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.754512072 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.754810095 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.754854918 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.754931927 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.754947901 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.755043030 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.755094051 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.755104065 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.755135059 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.758900881 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.758908033 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.758909941 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.758913040 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.758913994 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.758917093 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.758929014 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:27.758940935 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:28.180541992 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:28.231441021 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:30.597558975 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:30.602876902 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:30.954294920 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:30.954451084 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:30.955724955 CEST	50004	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:30.960843086 CEST	587	50003	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:30.960911036 CEST	50003	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:30.961004972 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:30.961082935 CEST	50004	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:31.572717905 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:31.572949886 CEST	50004	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:31.578258991 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:31.730474949 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:31.731354952 CEST	50004	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:31.736902952 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:31.887660027 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:31.892376900 CEST	50004	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:31.897789955 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.049501896 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.051949024 CEST	50004	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:32.057368994 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.207180977 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.208939075 CEST	50004	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:32.214251041 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.377075911 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.378232956 CEST	50004	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:32.383553028 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.533489943 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.535855055 CEST	50004	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:32.535912991 CEST	50004	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:32.535912991 CEST	50004	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:32.536035061 CEST	50004	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:32.537097931 CEST	50004	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:32.541213989 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.541265965 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.541276932 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.541337967 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.541371107 CEST	50004	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:32.542619944 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.542731047 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.544698000 CEST	50004	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:32.550098896 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.550158024 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.550246954 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.550283909 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.550355911 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.550436974 CEST	50004	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:32.550451994 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.550462961 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.550474882 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.550549984 CEST	50004	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:32.550661087 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.553630114 CEST	50004	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:32.555855989 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.555962086 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.556104898 CEST	50004	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:32.556324005 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.556452036 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.556476116 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.556497097 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.556504011 CEST	50004	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:32.556505919 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.556536913 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.556546926 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.556571007 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.559099913 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.559123039 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.559196949 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.559250116 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.561575890 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.561587095 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.561741114 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.561750889 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.561758995 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.561769962 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.561779022 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.561790943 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.561961889 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.562103987 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:32.966538906 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:33.010222912 CEST	50004	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:39.393625975 CEST	50004	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:39.399044991 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:39.750741005 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:39.750854015 CEST	50004	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:39.751940966 CEST	50005	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:39.756417990 CEST	587	50004	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:39.756514072 CEST	50004	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:39.757335901 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:39.757543087 CEST	50005	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:40.411864996 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:40.412291050 CEST	50005	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:40.419706106 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:40.573256969 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:40.573476076 CEST	50005	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:40.578795910 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:40.739198923 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:40.743506908 CEST	50005	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:40.748939037 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:40.923285961 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:40.923477888 CEST	50005	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:40.929367065 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.082210064 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.082459927 CEST	50005	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:41.087820053 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.263983965 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.264148951 CEST	50005	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:41.269475937 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.434222937 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.435668945 CEST	50005	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:41.435668945 CEST	50005	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:41.435864925 CEST	50005	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:41.435864925 CEST	50005	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:41.436881065 CEST	50005	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:41.440952063 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.441078901 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.441169977 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.441359043 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.441551924 CEST	50005	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:41.442240000 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.442289114 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.442332029 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.442363977 CEST	50005	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:41.442410946 CEST	50005	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:41.442853928 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.443377972 CEST	50005	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:41.447905064 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.447959900 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.448036909 CEST	50005	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:41.448260069 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.448399067 CEST	50005	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:41.448474884 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.448697090 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.448753119 CEST	50005	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:41.448868990 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.448932886 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.448987961 CEST	50005	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:41.449035883 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.449141979 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.449203014 CEST	50005	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:41.453563929 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.453618050 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.453672886 CEST	50005	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:41.453695059 CEST	50005	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:41.453768015 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.453846931 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.453917980 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.454041958 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.454313040 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.454361916 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.454432011 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.454476118 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.454493999 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.454562902 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.454610109 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.454618931 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.454651117 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.454667091 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.455106974 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.455117941 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.455135107 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.455138922 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.455167055 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.455172062 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.455205917 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.459116936 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.459156990 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.459166050 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.459211111 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.459220886 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.459275961 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.459280968 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.459305048 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:41.872461081 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:42.026055098 CEST	50005	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:50.498843908 CEST	50005	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:50.504132032 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:50.859891891 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:50.860393047 CEST	50005	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:50.861253023 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:50.866029978 CEST	587	50005	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:50.866122961 CEST	50005	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:50.866581917 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:50.866709948 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:51.543927908 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:51.544471025 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:51.549853086 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:51.712639093 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:51.712994099 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:51.718282938 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:51.888473034 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:51.888890982 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:51.896040916 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.056266069 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.056814909 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:52.062233925 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.227364063 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.227533102 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:52.232858896 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.408142090 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.408492088 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:52.414869070 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.566411972 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.566855907 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:52.566884041 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:52.566920042 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:52.567032099 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:52.568207979 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:52.572196960 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.572213888 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.572230101 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.572294950 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.572294950 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:52.573708057 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.573769093 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:52.573795080 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.573847055 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:52.579037905 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.579104900 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:52.579220057 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.579229116 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.579293013 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.579302073 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.579304934 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:52.579333067 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:52.579345942 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:52.579350948 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.579368114 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.579380035 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:52.579396963 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.579442978 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:52.579458952 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.579515934 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:52.584522963 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.584577084 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:52.584676027 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.584737062 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:52.584759951 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.584803104 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:52.584886074 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.584892988 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.584955931 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.585017920 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.585025072 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.585086107 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.585129976 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.585210085 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.585216045 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.585257053 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.585263014 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.585315943 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.585321903 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.585335016 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.585340977 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.585468054 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.585474968 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.585488081 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.585494041 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.585509062 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.585514069 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.590684891 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.590703964 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.590739012 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.590744972 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.590763092 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.590770006 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.590790033 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.590795994 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.590807915 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.590814114 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:52.590893030 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:06:52.596719980 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:53.012059927 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:06:53.153575897 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:07:01.772347927 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:07:01.777714014 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:07:02.140059948 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:07:02.140433073 CEST	50007	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:07:02.140490055 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:07:02.145832062 CEST	587	50007	74.119.238.7	192.168.2.5
Oct 22, 2024 09:07:02.146013021 CEST	50007	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:07:02.146102905 CEST	587	50006	74.119.238.7	192.168.2.5
Oct 22, 2024 09:07:02.146260977 CEST	50006	587	192.168.2.5	74.119.238.7
Oct 22, 2024 09:07:03.043538094 CEST	587	50007	74.119.238.7	192.168.2.5
Oct 22, 2024 09:07:03.051129103 CEST	587	50007	74.119.238.7	192.168.2.5
Oct 22, 2024 09:07:03.051189899 CEST	50007	587	192.168.2.5	74.119.238.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 22, 2024 09:02:54.233926058 CEST	51847	53	192.168.2.5	1.1.1.1
Oct 22, 2024 09:02:54.548921108 CEST	53	51847	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 22, 2024 09:02:54.233926058 CEST	192.168.2.5	1.1.1.1	0x7608	Standard query (0)	mail.alhoneycomb.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 22, 2024 09:02:53.348120928 CEST	1.1.1.1	192.168.2.5	0x9899	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 22, 2024 09:02:53.348120928 CEST	1.1.1.1	192.168.2.5	0x9899	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 22, 2024 09:02:54.548921108 CEST	1.1.1.1	192.168.2.5	0x7608	No error (0)	mail.alhoneycomb.com		74.119.238.7	A (IP address)	IN (0x0001)	false
Oct 22, 2024 09:02:55.020472050 CEST	1.1.1.1	192.168.2.5	0x6748	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 09:02:55.020472050 CEST	1.1.1.1	192.168.2.5	0x6748	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 22, 2024 09:03:05.865128994 CEST	1.1.1.1	192.168.2.5	0xd81a	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 09:03:05.865128994 CEST	1.1.1.1	192.168.2.5	0xd81a	No error (0)	dual.s-part-0044.t-0009.fb-t-msedge.net	s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 22, 2024 09:03:05.865128994 CEST	1.1.1.1	192.168.2.5	0xd81a	No error (0)	s-part-0044.t-0009.fb-t-msedge.net		13.107.253.72	A (IP address)	IN (0x0001)	false
Oct 22, 2024 09:03:56.912098885 CEST	1.1.1.1	192.168.2.5	0xf0d8	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 22, 2024 09:03:56.912098885 CEST	1.1.1.1	192.168.2.5	0xf0d8	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false

SMTP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP	Commands
Oct 22, 2024 09:02:55.261603117 CEST	587	49706	74.119.238.7	192.168.2.5	220-md-la-5.webhostbox.net ESMTP Exim 4.96.2 #2 Tue, 22 Oct 2024 12:32:55 +0530 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Oct 22, 2024 09:02:55.266787052 CEST	49706	587	192.168.2.5	74.119.238.7	EHLO 445817
Oct 22, 2024 09:02:55.423363924 CEST	587	49706	74.119.238.7	192.168.2.5	250-md-la-5.webhostbox.net Hello 445817 [173.254.250.76] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Oct 22, 2024 09:02:55.434384108 CEST	49706	587	192.168.2.5	74.119.238.7	AUTH login YmxvZ0BhbGhvbmV5Y29tYi5jb20=
Oct 22, 2024 09:02:55.605912924 CEST	587	49706	74.119.238.7	192.168.2.5	334 UGFzc3dvcmQ6
Oct 22, 2024 09:02:55.929517031 CEST	587	49706	74.119.238.7	192.168.2.5	235 Authentication succeeded
Oct 22, 2024 09:02:55.929750919 CEST	49706	587	192.168.2.5	74.119.238.7	MAIL FROM:<blog@alhoneycomb.com>
Oct 22, 2024 09:02:56.084588051 CEST	587	49706	74.119.238.7	192.168.2.5	250 OK
Oct 22, 2024 09:02:56.085109949 CEST	49706	587	192.168.2.5	74.119.238.7	RCPT TO:<blog@alhoneycomb.com>
Oct 22, 2024 09:02:56.258503914 CEST	587	49706	74.119.238.7	192.168.2.5	250 Accepted
Oct 22, 2024 09:02:56.258833885 CEST	49706	587	192.168.2.5	74.119.238.7	DATA
Oct 22, 2024 09:02:56.431674957 CEST	587	49706	74.119.238.7	192.168.2.5	354 Enter message, ending with "." on a line by itself
Oct 22, 2024 09:02:56.432579041 CEST	49706	587	192.168.2.5	74.119.238.7	.
Oct 22, 2024 09:02:56.601468086 CEST	587	49706	74.119.238.7	192.168.2.5	250 OK id=1t38uu-001fy7-15
Oct 22, 2024 09:02:56.648634911 CEST	49706	587	192.168.2.5	74.119.238.7	QUIT
Oct 22, 2024 09:02:57.007237911 CEST	587	49706	74.119.238.7	192.168.2.5	221 md-la-5.webhostbox.net closing connection
Oct 22, 2024 09:02:57.741430044 CEST	587	49711	74.119.238.7	192.168.2.5	220-md-la-5.webhostbox.net ESMTP Exim 4.96.2 #2 Tue, 22 Oct 2024 12:32:57 +0530 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Oct 22, 2024 09:02:57.741746902 CEST	49711	587	192.168.2.5	74.119.238.7	EHLO 445817
Oct 22, 2024 09:02:57.915916920 CEST	587	49711	74.119.238.7	192.168.2.5	250-md-la-5.webhostbox.net Hello 445817 [173.254.250.76] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Oct 22, 2024 09:02:57.916351080 CEST	49711	587	192.168.2.5	74.119.238.7	AUTH login YmxvZ0BhbGhvbmV5Y29tYi5jb20=
Oct 22, 2024 09:02:58.211925983 CEST	587	49711	74.119.238.7	192.168.2.5	334 UGFzc3dvcmQ6
Oct 22, 2024 09:02:58.372947931 CEST	587	49711	74.119.238.7	192.168.2.5	235 Authentication succeeded
Oct 22, 2024 09:02:58.373207092 CEST	49711	587	192.168.2.5	74.119.238.7	MAIL FROM:<blog@alhoneycomb.com>
Oct 22, 2024 09:02:58.545290947 CEST	587	49711	74.119.238.7	192.168.2.5	250 OK
Oct 22, 2024 09:02:58.545465946 CEST	49711	587	192.168.2.5	74.119.238.7	RCPT TO:<blog@alhoneycomb.com>
Oct 22, 2024 09:02:58.735726118 CEST	587	49711	74.119.238.7	192.168.2.5	250 Accepted
Oct 22, 2024 09:02:58.735889912 CEST	49711	587	192.168.2.5	74.119.238.7	DATA
Oct 22, 2024 09:02:58.891288042 CEST	587	49711	74.119.238.7	192.168.2.5	354 Enter message, ending with "." on a line by itself
Oct 22, 2024 09:02:58.892795086 CEST	49711	587	192.168.2.5	74.119.238.7	.
Oct 22, 2024 09:02:59.054728985 CEST	587	49711	74.119.238.7	192.168.2.5	250 OK id=1t38uw-001g0J-2c
Oct 22, 2024 09:02:59.432804108 CEST	587	49711	74.119.238.7	192.168.2.5	250 OK id=1t38uw-001g0J-2c
Oct 22, 2024 09:04:33.231708050 CEST	49711	587	192.168.2.5	74.119.238.7	QUIT
Oct 22, 2024 09:04:33.557003975 CEST	49711	587	192.168.2.5	74.119.238.7	QUIT
Oct 22, 2024 09:04:34.347470999 CEST	587	49711	74.119.238.7	192.168.2.5	221 md-la-5.webhostbox.net closing connection
Oct 22, 2024 09:04:35.041287899 CEST	587	49990	74.119.238.7	192.168.2.5	220-md-la-5.webhostbox.net ESMTP Exim 4.96.2 #2 Tue, 22 Oct 2024 12:34:34 +0530 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Oct 22, 2024 09:04:35.041555882 CEST	49990	587	192.168.2.5	74.119.238.7	EHLO 445817
Oct 22, 2024 09:04:35.201981068 CEST	587	49990	74.119.238.7	192.168.2.5	250-md-la-5.webhostbox.net Hello 445817 [173.254.250.76] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Oct 22, 2024 09:04:35.202128887 CEST	49990	587	192.168.2.5	74.119.238.7	AUTH login YmxvZ0BhbGhvbmV5Y29tYi5jb20=
Oct 22, 2024 09:04:35.359925032 CEST	587	49990	74.119.238.7	192.168.2.5	334 UGFzc3dvcmQ6
Oct 22, 2024 09:04:35.651495934 CEST	587	49990	74.119.238.7	192.168.2.5	235 Authentication succeeded
Oct 22, 2024 09:04:35.651633978 CEST	49990	587	192.168.2.5	74.119.238.7	MAIL FROM:<blog@alhoneycomb.com>
Oct 22, 2024 09:04:35.820204020 CEST	587	49990	74.119.238.7	192.168.2.5	250 OK
Oct 22, 2024 09:04:35.820370913 CEST	49990	587	192.168.2.5	74.119.238.7	RCPT TO:<blog@alhoneycomb.com>
Oct 22, 2024 09:04:35.997657061 CEST	587	49990	74.119.238.7	192.168.2.5	250 Accepted
Oct 22, 2024 09:04:36.003385067 CEST	49990	587	192.168.2.5	74.119.238.7	DATA
Oct 22, 2024 09:04:36.163836956 CEST	587	49990	74.119.238.7	192.168.2.5	354 Enter message, ending with "." on a line by itself
Oct 22, 2024 09:04:36.194861889 CEST	49990	587	192.168.2.5	74.119.238.7	.
Oct 22, 2024 09:04:36.622245073 CEST	587	49990	74.119.238.7	192.168.2.5	250 OK id=1t38wW-001h4z-0F
Oct 22, 2024 09:04:36.900975943 CEST	587	49990	74.119.238.7	192.168.2.5	250 OK id=1t38wW-001h4z-0F
Oct 22, 2024 09:04:49.337656021 CEST	49990	587	192.168.2.5	74.119.238.7	QUIT
Oct 22, 2024 09:04:49.708329916 CEST	587	49990	74.119.238.7	192.168.2.5	221 md-la-5.webhostbox.net closing connection
Oct 22, 2024 09:04:50.470732927 CEST	587	49991	74.119.238.7	192.168.2.5	220-md-la-5.webhostbox.net ESMTP Exim 4.96.2 #2 Tue, 22 Oct 2024 12:34:50 +0530 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Oct 22, 2024 09:04:51.039397955 CEST	49991	587	192.168.2.5	74.119.238.7	EHLO 445817
Oct 22, 2024 09:04:51.202085972 CEST	587	49991	74.119.238.7	192.168.2.5	250-md-la-5.webhostbox.net Hello 445817 [173.254.250.76] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Oct 22, 2024 09:04:51.209881067 CEST	49991	587	192.168.2.5	74.119.238.7	AUTH login YmxvZ0BhbGhvbmV5Y29tYi5jb20=
Oct 22, 2024 09:04:51.367598057 CEST	587	49991	74.119.238.7	192.168.2.5	334 UGFzc3dvcmQ6
Oct 22, 2024 09:04:51.528284073 CEST	587	49991	74.119.238.7	192.168.2.5	235 Authentication succeeded
Oct 22, 2024 09:04:51.553875923 CEST	49991	587	192.168.2.5	74.119.238.7	MAIL FROM:<blog@alhoneycomb.com>
Oct 22, 2024 09:04:51.722374916 CEST	587	49991	74.119.238.7	192.168.2.5	250 OK
Oct 22, 2024 09:04:51.722630024 CEST	49991	587	192.168.2.5	74.119.238.7	RCPT TO:<blog@alhoneycomb.com>
Oct 22, 2024 09:04:51.905333042 CEST	587	49991	74.119.238.7	192.168.2.5	250 Accepted
Oct 22, 2024 09:04:51.905484915 CEST	49991	587	192.168.2.5	74.119.238.7	DATA
Oct 22, 2024 09:04:52.073060036 CEST	587	49991	74.119.238.7	192.168.2.5	354 Enter message, ending with "." on a line by itself
Oct 22, 2024 09:04:52.506867886 CEST	587	49991	74.119.238.7	192.168.2.5	250 OK id=1t38wl-001hJa-3B
Oct 22, 2024 09:04:59.454943895 CEST	49991	587	192.168.2.5	74.119.238.7	QUIT
Oct 22, 2024 09:04:59.813852072 CEST	587	49991	74.119.238.7	192.168.2.5	221 md-la-5.webhostbox.net closing connection
Oct 22, 2024 09:05:00.500264883 CEST	587	49992	74.119.238.7	192.168.2.5	220-md-la-5.webhostbox.net ESMTP Exim 4.96.2 #2 Tue, 22 Oct 2024 12:35:00 +0530 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Oct 22, 2024 09:05:00.520216942 CEST	49992	587	192.168.2.5	74.119.238.7	EHLO 445817
Oct 22, 2024 09:05:00.683501959 CEST	587	49992	74.119.238.7	192.168.2.5	250-md-la-5.webhostbox.net Hello 445817 [173.254.250.76] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Oct 22, 2024 09:05:00.683697939 CEST	49992	587	192.168.2.5	74.119.238.7	AUTH login YmxvZ0BhbGhvbmV5Y29tYi5jb20=
Oct 22, 2024 09:05:00.855382919 CEST	587	49992	74.119.238.7	192.168.2.5	334 UGFzc3dvcmQ6
Oct 22, 2024 09:05:01.017066002 CEST	587	49992	74.119.238.7	192.168.2.5	235 Authentication succeeded
Oct 22, 2024 09:05:01.017214060 CEST	49992	587	192.168.2.5	74.119.238.7	MAIL FROM:<blog@alhoneycomb.com>
Oct 22, 2024 09:05:01.176981926 CEST	587	49992	74.119.238.7	192.168.2.5	250 OK
Oct 22, 2024 09:05:01.177134991 CEST	49992	587	192.168.2.5	74.119.238.7	RCPT TO:<blog@alhoneycomb.com>
Oct 22, 2024 09:05:01.349263906 CEST	587	49992	74.119.238.7	192.168.2.5	250 Accepted
Oct 22, 2024 09:05:01.349397898 CEST	49992	587	192.168.2.5	74.119.238.7	DATA
Oct 22, 2024 09:05:01.524914026 CEST	587	49992	74.119.238.7	192.168.2.5	354 Enter message, ending with "." on a line by itself
Oct 22, 2024 09:05:01.961822987 CEST	587	49992	74.119.238.7	192.168.2.5	250 OK id=1t38wv-001hO7-1O
Oct 22, 2024 09:05:15.165632010 CEST	49992	587	192.168.2.5	74.119.238.7	QUIT
Oct 22, 2024 09:05:15.525203943 CEST	587	49992	74.119.238.7	192.168.2.5	221 md-la-5.webhostbox.net closing connection
Oct 22, 2024 09:05:16.227253914 CEST	587	49993	74.119.238.7	192.168.2.5	220-md-la-5.webhostbox.net ESMTP Exim 4.96.2 #2 Tue, 22 Oct 2024 12:35:16 +0530 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Oct 22, 2024 09:05:16.227433920 CEST	49993	587	192.168.2.5	74.119.238.7	EHLO 445817
Oct 22, 2024 09:05:16.396110058 CEST	587	49993	74.119.238.7	192.168.2.5	250-md-la-5.webhostbox.net Hello 445817 [173.254.250.76] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Oct 22, 2024 09:05:16.396359921 CEST	49993	587	192.168.2.5	74.119.238.7	AUTH login YmxvZ0BhbGhvbmV5Y29tYi5jb20=
Oct 22, 2024 09:05:16.564977884 CEST	587	49993	74.119.238.7	192.168.2.5	334 UGFzc3dvcmQ6
Oct 22, 2024 09:05:16.845352888 CEST	587	49993	74.119.238.7	192.168.2.5	235 Authentication succeeded
Oct 22, 2024 09:05:16.845493078 CEST	49993	587	192.168.2.5	74.119.238.7	MAIL FROM:<blog@alhoneycomb.com>
Oct 22, 2024 09:05:16.999725103 CEST	587	49993	74.119.238.7	192.168.2.5	250 OK
Oct 22, 2024 09:05:16.999952078 CEST	49993	587	192.168.2.5	74.119.238.7	RCPT TO:<blog@alhoneycomb.com>
Oct 22, 2024 09:05:17.175438881 CEST	587	49993	74.119.238.7	192.168.2.5	250 Accepted
Oct 22, 2024 09:05:17.175592899 CEST	49993	587	192.168.2.5	74.119.238.7	DATA
Oct 22, 2024 09:05:17.330441952 CEST	587	49993	74.119.238.7	192.168.2.5	354 Enter message, ending with "." on a line by itself
Oct 22, 2024 09:05:17.760917902 CEST	587	49993	74.119.238.7	192.168.2.5	250 OK id=1t38xB-001hXt-0n
Oct 22, 2024 09:05:19.259583950 CEST	49993	587	192.168.2.5	74.119.238.7	QUIT
Oct 22, 2024 09:05:19.622082949 CEST	587	49993	74.119.238.7	192.168.2.5	221 md-la-5.webhostbox.net closing connection
Oct 22, 2024 09:05:20.312851906 CEST	587	49994	74.119.238.7	192.168.2.5	220-md-la-5.webhostbox.net ESMTP Exim 4.96.2 #2 Tue, 22 Oct 2024 12:35:20 +0530 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Oct 22, 2024 09:05:20.312975883 CEST	49994	587	192.168.2.5	74.119.238.7	EHLO 445817
Oct 22, 2024 09:05:20.468821049 CEST	587	49994	74.119.238.7	192.168.2.5	250-md-la-5.webhostbox.net Hello 445817 [173.254.250.76] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Oct 22, 2024 09:05:20.469058990 CEST	49994	587	192.168.2.5	74.119.238.7	AUTH login YmxvZ0BhbGhvbmV5Y29tYi5jb20=
Oct 22, 2024 09:05:20.632852077 CEST	587	49994	74.119.238.7	192.168.2.5	334 UGFzc3dvcmQ6
Oct 22, 2024 09:05:20.799993992 CEST	587	49994	74.119.238.7	192.168.2.5	235 Authentication succeeded
Oct 22, 2024 09:05:20.800319910 CEST	49994	587	192.168.2.5	74.119.238.7	MAIL FROM:<blog@alhoneycomb.com>
Oct 22, 2024 09:05:20.956849098 CEST	587	49994	74.119.238.7	192.168.2.5	250 OK
Oct 22, 2024 09:05:20.957057953 CEST	49994	587	192.168.2.5	74.119.238.7	RCPT TO:<blog@alhoneycomb.com>
Oct 22, 2024 09:05:21.131726980 CEST	587	49994	74.119.238.7	192.168.2.5	250 Accepted
Oct 22, 2024 09:05:21.131973982 CEST	49994	587	192.168.2.5	74.119.238.7	DATA
Oct 22, 2024 09:05:21.288463116 CEST	587	49994	74.119.238.7	192.168.2.5	354 Enter message, ending with "." on a line by itself
Oct 22, 2024 09:05:21.337059975 CEST	49994	587	192.168.2.5	74.119.238.7	.
Oct 22, 2024 09:05:21.745445967 CEST	587	49994	74.119.238.7	192.168.2.5	250 OK id=1t38xF-001hYm-0f
Oct 22, 2024 09:05:28.849479914 CEST	49994	587	192.168.2.5	74.119.238.7	QUIT
Oct 22, 2024 09:05:29.214673996 CEST	587	49994	74.119.238.7	192.168.2.5	221 md-la-5.webhostbox.net closing connection
Oct 22, 2024 09:05:29.907130957 CEST	587	49995	74.119.238.7	192.168.2.5	220-md-la-5.webhostbox.net ESMTP Exim 4.96.2 #2 Tue, 22 Oct 2024 12:35:29 +0530 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Oct 22, 2024 09:05:29.908574104 CEST	49995	587	192.168.2.5	74.119.238.7	EHLO 445817
Oct 22, 2024 09:05:29.909138918 CEST	587	49996	74.119.238.7	192.168.2.5	220-md-la-5.webhostbox.net ESMTP Exim 4.96.2 #2 Tue, 22 Oct 2024 12:35:29 +0530 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Oct 22, 2024 09:05:29.911571026 CEST	49996	587	192.168.2.5	74.119.238.7	EHLO 445817
Oct 22, 2024 09:05:30.062395096 CEST	587	49995	74.119.238.7	192.168.2.5	250-md-la-5.webhostbox.net Hello 445817 [173.254.250.76] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Oct 22, 2024 09:05:30.062618017 CEST	49995	587	192.168.2.5	74.119.238.7	AUTH login YmxvZ0BhbGhvbmV5Y29tYi5jb20=
Oct 22, 2024 09:05:30.067977905 CEST	587	49996	74.119.238.7	192.168.2.5	250-md-la-5.webhostbox.net Hello 445817 [173.254.250.76] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Oct 22, 2024 09:05:30.068157911 CEST	49996	587	192.168.2.5	74.119.238.7	AUTH login YmxvZ0BhbGhvbmV5Y29tYi5jb20=
Oct 22, 2024 09:05:30.218661070 CEST	587	49995	74.119.238.7	192.168.2.5	334 UGFzc3dvcmQ6
Oct 22, 2024 09:05:30.225661993 CEST	587	49996	74.119.238.7	192.168.2.5	334 UGFzc3dvcmQ6
Oct 22, 2024 09:05:30.382428885 CEST	587	49995	74.119.238.7	192.168.2.5	235 Authentication succeeded
Oct 22, 2024 09:05:30.382741928 CEST	49995	587	192.168.2.5	74.119.238.7	MAIL FROM:<blog@alhoneycomb.com>
Oct 22, 2024 09:05:30.390382051 CEST	587	49996	74.119.238.7	192.168.2.5	235 Authentication succeeded
Oct 22, 2024 09:05:30.390662909 CEST	49996	587	192.168.2.5	74.119.238.7	MAIL FROM:<blog@alhoneycomb.com>
Oct 22, 2024 09:05:30.538970947 CEST	587	49995	74.119.238.7	192.168.2.5	250 OK
Oct 22, 2024 09:05:30.539284945 CEST	49995	587	192.168.2.5	74.119.238.7	RCPT TO:<blog@alhoneycomb.com>
Oct 22, 2024 09:05:30.573224068 CEST	587	49996	74.119.238.7	192.168.2.5	250 OK
Oct 22, 2024 09:05:30.573524952 CEST	49996	587	192.168.2.5	74.119.238.7	RCPT TO:<blog@alhoneycomb.com>
Oct 22, 2024 09:05:30.717248917 CEST	587	49995	74.119.238.7	192.168.2.5	250 Accepted
Oct 22, 2024 09:05:30.717427015 CEST	49995	587	192.168.2.5	74.119.238.7	DATA
Oct 22, 2024 09:05:30.746370077 CEST	587	49996	74.119.238.7	192.168.2.5	250 Accepted
Oct 22, 2024 09:05:30.746505022 CEST	49996	587	192.168.2.5	74.119.238.7	DATA
Oct 22, 2024 09:05:30.873039007 CEST	587	49995	74.119.238.7	192.168.2.5	354 Enter message, ending with "." on a line by itself
Oct 22, 2024 09:05:30.917272091 CEST	587	49996	74.119.238.7	192.168.2.5	354 Enter message, ending with "." on a line by itself
Oct 22, 2024 09:05:31.466833115 CEST	587	49995	74.119.238.7	192.168.2.5	250 OK id=1t38xO-001hfM-2Y
Oct 22, 2024 09:05:31.466849089 CEST	587	49996	74.119.238.7	192.168.2.5	250 OK id=1t38xO-001hfN-2e
Oct 22, 2024 09:05:31.522998095 CEST	587	49995	74.119.238.7	192.168.2.5	250 OK id=1t38xO-001hfM-2Y
Oct 22, 2024 09:05:31.571023941 CEST	587	49996	74.119.238.7	192.168.2.5	250 OK id=1t38xO-001hfN-2e
Oct 22, 2024 09:05:34.345431089 CEST	49995	587	192.168.2.5	74.119.238.7	QUIT
Oct 22, 2024 09:05:34.700880051 CEST	587	49995	74.119.238.7	192.168.2.5	221 md-la-5.webhostbox.net closing connection
Oct 22, 2024 09:05:35.476799965 CEST	587	49997	74.119.238.7	192.168.2.5	220-md-la-5.webhostbox.net ESMTP Exim 4.96.2 #2 Tue, 22 Oct 2024 12:35:35 +0530 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Oct 22, 2024 09:05:35.476943970 CEST	49997	587	192.168.2.5	74.119.238.7	EHLO 445817
Oct 22, 2024 09:05:35.632363081 CEST	587	49997	74.119.238.7	192.168.2.5	250-md-la-5.webhostbox.net Hello 445817 [173.254.250.76] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Oct 22, 2024 09:05:35.632529974 CEST	49997	587	192.168.2.5	74.119.238.7	AUTH login YmxvZ0BhbGhvbmV5Y29tYi5jb20=
Oct 22, 2024 09:05:35.805201054 CEST	587	49997	74.119.238.7	192.168.2.5	334 UGFzc3dvcmQ6
Oct 22, 2024 09:05:35.969875097 CEST	587	49997	74.119.238.7	192.168.2.5	235 Authentication succeeded
Oct 22, 2024 09:05:35.995439053 CEST	49997	587	192.168.2.5	74.119.238.7	MAIL FROM:<blog@alhoneycomb.com>
Oct 22, 2024 09:05:36.152339935 CEST	587	49997	74.119.238.7	192.168.2.5	250 OK
Oct 22, 2024 09:05:36.156054974 CEST	49997	587	192.168.2.5	74.119.238.7	RCPT TO:<blog@alhoneycomb.com>
Oct 22, 2024 09:05:36.332145929 CEST	587	49997	74.119.238.7	192.168.2.5	250 Accepted
Oct 22, 2024 09:05:36.332452059 CEST	49997	587	192.168.2.5	74.119.238.7	DATA
Oct 22, 2024 09:05:36.502892971 CEST	587	49997	74.119.238.7	192.168.2.5	354 Enter message, ending with "." on a line by itself
Oct 22, 2024 09:05:36.533648014 CEST	49997	587	192.168.2.5	74.119.238.7	.
Oct 22, 2024 09:05:36.953130007 CEST	587	49997	74.119.238.7	192.168.2.5	250 OK id=1t38xU-001hiY-1K
Oct 22, 2024 09:05:38.253449917 CEST	49997	587	192.168.2.5	74.119.238.7	QUIT
Oct 22, 2024 09:05:38.624151945 CEST	587	49997	74.119.238.7	192.168.2.5	221 md-la-5.webhostbox.net closing connection
Oct 22, 2024 09:05:39.324155092 CEST	587	49998	74.119.238.7	192.168.2.5	220-md-la-5.webhostbox.net ESMTP Exim 4.96.2 #2 Tue, 22 Oct 2024 12:35:39 +0530 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Oct 22, 2024 09:05:39.324287891 CEST	49998	587	192.168.2.5	74.119.238.7	EHLO 445817
Oct 22, 2024 09:05:39.479974985 CEST	587	49998	74.119.238.7	192.168.2.5	250-md-la-5.webhostbox.net Hello 445817 [173.254.250.76] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Oct 22, 2024 09:05:39.480263948 CEST	49998	587	192.168.2.5	74.119.238.7	AUTH login YmxvZ0BhbGhvbmV5Y29tYi5jb20=
Oct 22, 2024 09:05:39.642134905 CEST	587	49998	74.119.238.7	192.168.2.5	334 UGFzc3dvcmQ6
Oct 22, 2024 09:05:39.809098959 CEST	587	49998	74.119.238.7	192.168.2.5	235 Authentication succeeded
Oct 22, 2024 09:05:39.809609890 CEST	49998	587	192.168.2.5	74.119.238.7	MAIL FROM:<blog@alhoneycomb.com>
Oct 22, 2024 09:05:39.972628117 CEST	587	49998	74.119.238.7	192.168.2.5	250 OK
Oct 22, 2024 09:05:39.972817898 CEST	49998	587	192.168.2.5	74.119.238.7	RCPT TO:<blog@alhoneycomb.com>
Oct 22, 2024 09:05:40.146785975 CEST	587	49998	74.119.238.7	192.168.2.5	250 Accepted
Oct 22, 2024 09:05:40.147078037 CEST	49998	587	192.168.2.5	74.119.238.7	DATA
Oct 22, 2024 09:05:40.302297115 CEST	587	49998	74.119.238.7	192.168.2.5	354 Enter message, ending with "." on a line by itself
Oct 22, 2024 09:05:40.744677067 CEST	587	49998	74.119.238.7	192.168.2.5	250 OK id=1t38xY-001hlY-0i
Oct 22, 2024 09:06:04.001493931 CEST	49998	587	192.168.2.5	74.119.238.7	QUIT
Oct 22, 2024 09:06:04.361892939 CEST	587	49998	74.119.238.7	192.168.2.5	221 md-la-5.webhostbox.net closing connection
Oct 22, 2024 09:06:05.010807991 CEST	587	49999	74.119.238.7	192.168.2.5	220-md-la-5.webhostbox.net ESMTP Exim 4.96.2 #2 Tue, 22 Oct 2024 12:36:04 +0530 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Oct 22, 2024 09:06:05.010967970 CEST	49999	587	192.168.2.5	74.119.238.7	EHLO 445817
Oct 22, 2024 09:06:05.167140961 CEST	587	49999	74.119.238.7	192.168.2.5	250-md-la-5.webhostbox.net Hello 445817 [173.254.250.76] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Oct 22, 2024 09:06:05.179663897 CEST	49999	587	192.168.2.5	74.119.238.7	AUTH login YmxvZ0BhbGhvbmV5Y29tYi5jb20=
Oct 22, 2024 09:06:05.350572109 CEST	587	49999	74.119.238.7	192.168.2.5	334 UGFzc3dvcmQ6
Oct 22, 2024 09:06:05.653897047 CEST	587	49999	74.119.238.7	192.168.2.5	235 Authentication succeeded
Oct 22, 2024 09:06:05.654894114 CEST	49999	587	192.168.2.5	74.119.238.7	MAIL FROM:<blog@alhoneycomb.com>
Oct 22, 2024 09:06:05.810266972 CEST	587	49999	74.119.238.7	192.168.2.5	250 OK
Oct 22, 2024 09:06:05.811851978 CEST	49999	587	192.168.2.5	74.119.238.7	RCPT TO:<blog@alhoneycomb.com>
Oct 22, 2024 09:06:05.988554955 CEST	587	49999	74.119.238.7	192.168.2.5	250 Accepted
Oct 22, 2024 09:06:05.989622116 CEST	49999	587	192.168.2.5	74.119.238.7	DATA
Oct 22, 2024 09:06:06.146178961 CEST	587	49999	74.119.238.7	192.168.2.5	354 Enter message, ending with "." on a line by itself
Oct 22, 2024 09:06:06.173480988 CEST	49999	587	192.168.2.5	74.119.238.7	.
Oct 22, 2024 09:06:06.582487106 CEST	587	49999	74.119.238.7	192.168.2.5	250 OK id=1t38xy-001hzx-0C
Oct 22, 2024 09:06:09.908685923 CEST	49999	587	192.168.2.5	74.119.238.7	QUIT
Oct 22, 2024 09:06:10.266833067 CEST	587	49999	74.119.238.7	192.168.2.5	221 md-la-5.webhostbox.net closing connection
Oct 22, 2024 09:06:10.984836102 CEST	587	50000	74.119.238.7	192.168.2.5	220-md-la-5.webhostbox.net ESMTP Exim 4.96.2 #2 Tue, 22 Oct 2024 12:36:10 +0530 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Oct 22, 2024 09:06:10.984996080 CEST	50000	587	192.168.2.5	74.119.238.7	EHLO 445817
Oct 22, 2024 09:06:11.149859905 CEST	587	50000	74.119.238.7	192.168.2.5	250-md-la-5.webhostbox.net Hello 445817 [173.254.250.76] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Oct 22, 2024 09:06:11.150080919 CEST	50000	587	192.168.2.5	74.119.238.7	AUTH login YmxvZ0BhbGhvbmV5Y29tYi5jb20=
Oct 22, 2024 09:06:11.309284925 CEST	587	50000	74.119.238.7	192.168.2.5	334 UGFzc3dvcmQ6
Oct 22, 2024 09:06:11.473535061 CEST	587	50000	74.119.238.7	192.168.2.5	235 Authentication succeeded
Oct 22, 2024 09:06:11.473697901 CEST	50000	587	192.168.2.5	74.119.238.7	MAIL FROM:<blog@alhoneycomb.com>
Oct 22, 2024 09:06:11.651860952 CEST	587	50000	74.119.238.7	192.168.2.5	250 OK
Oct 22, 2024 09:06:11.653491020 CEST	50000	587	192.168.2.5	74.119.238.7	RCPT TO:<blog@alhoneycomb.com>
Oct 22, 2024 09:06:11.836956024 CEST	587	50000	74.119.238.7	192.168.2.5	250 Accepted
Oct 22, 2024 09:06:11.837286949 CEST	50000	587	192.168.2.5	74.119.238.7	DATA
Oct 22, 2024 09:06:11.995210886 CEST	587	50000	74.119.238.7	192.168.2.5	354 Enter message, ending with "." on a line by itself
Oct 22, 2024 09:06:12.023072958 CEST	50000	587	192.168.2.5	74.119.238.7	.
Oct 22, 2024 09:06:12.427865982 CEST	587	50000	74.119.238.7	192.168.2.5	250 OK id=1t38y3-001i3K-2w
Oct 22, 2024 09:06:13.402811050 CEST	50000	587	192.168.2.5	74.119.238.7	QUIT
Oct 22, 2024 09:06:13.761034012 CEST	587	50000	74.119.238.7	192.168.2.5	221 md-la-5.webhostbox.net closing connection
Oct 22, 2024 09:06:14.394035101 CEST	587	50001	74.119.238.7	192.168.2.5	220-md-la-5.webhostbox.net ESMTP Exim 4.96.2 #2 Tue, 22 Oct 2024 12:36:14 +0530 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Oct 22, 2024 09:06:14.395888090 CEST	50001	587	192.168.2.5	74.119.238.7	EHLO 445817
Oct 22, 2024 09:06:15.200895071 CEST	587	50002	74.119.238.7	192.168.2.5	220-md-la-5.webhostbox.net ESMTP Exim 4.96.2 #2 Tue, 22 Oct 2024 12:36:15 +0530 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Oct 22, 2024 09:06:15.201060057 CEST	50002	587	192.168.2.5	74.119.238.7	EHLO 445817
Oct 22, 2024 09:06:15.355138063 CEST	587	50002	74.119.238.7	192.168.2.5	250-md-la-5.webhostbox.net Hello 445817 [173.254.250.76] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Oct 22, 2024 09:06:15.355330944 CEST	50002	587	192.168.2.5	74.119.238.7	AUTH login YmxvZ0BhbGhvbmV5Y29tYi5jb20=
Oct 22, 2024 09:06:15.511545897 CEST	587	50002	74.119.238.7	192.168.2.5	334 UGFzc3dvcmQ6
Oct 22, 2024 09:06:15.673106909 CEST	587	50002	74.119.238.7	192.168.2.5	235 Authentication succeeded
Oct 22, 2024 09:06:15.675623894 CEST	50002	587	192.168.2.5	74.119.238.7	MAIL FROM:<blog@alhoneycomb.com>
Oct 22, 2024 09:06:15.829265118 CEST	587	50002	74.119.238.7	192.168.2.5	250 OK
Oct 22, 2024 09:06:15.829750061 CEST	50002	587	192.168.2.5	74.119.238.7	RCPT TO:<blog@alhoneycomb.com>
Oct 22, 2024 09:06:16.002749920 CEST	587	50002	74.119.238.7	192.168.2.5	250 Accepted
Oct 22, 2024 09:06:16.004348993 CEST	50002	587	192.168.2.5	74.119.238.7	DATA
Oct 22, 2024 09:06:16.160126925 CEST	587	50002	74.119.238.7	192.168.2.5	354 Enter message, ending with "." on a line by itself
Oct 22, 2024 09:06:16.599179983 CEST	587	50002	74.119.238.7	192.168.2.5	250 OK id=1t38y8-001i89-0F
Oct 22, 2024 09:06:16.811017036 CEST	587	50002	74.119.238.7	192.168.2.5	250 OK id=1t38y8-001i89-0F
Oct 22, 2024 09:06:25.579863071 CEST	50002	587	192.168.2.5	74.119.238.7	QUIT
Oct 22, 2024 09:06:25.941410065 CEST	587	50002	74.119.238.7	192.168.2.5	221 md-la-5.webhostbox.net closing connection
Oct 22, 2024 09:06:26.710093021 CEST	587	50003	74.119.238.7	192.168.2.5	220-md-la-5.webhostbox.net ESMTP Exim 4.96.2 #2 Tue, 22 Oct 2024 12:36:26 +0530 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Oct 22, 2024 09:06:26.710266113 CEST	50003	587	192.168.2.5	74.119.238.7	EHLO 445817
Oct 22, 2024 09:06:26.866894007 CEST	587	50003	74.119.238.7	192.168.2.5	250-md-la-5.webhostbox.net Hello 445817 [173.254.250.76] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Oct 22, 2024 09:06:26.867276907 CEST	50003	587	192.168.2.5	74.119.238.7	AUTH login YmxvZ0BhbGhvbmV5Y29tYi5jb20=
Oct 22, 2024 09:06:27.043351889 CEST	587	50003	74.119.238.7	192.168.2.5	334 UGFzc3dvcmQ6
Oct 22, 2024 09:06:27.216878891 CEST	587	50003	74.119.238.7	192.168.2.5	235 Authentication succeeded
Oct 22, 2024 09:06:27.217087984 CEST	50003	587	192.168.2.5	74.119.238.7	MAIL FROM:<blog@alhoneycomb.com>
Oct 22, 2024 09:06:27.382076979 CEST	587	50003	74.119.238.7	192.168.2.5	250 OK
Oct 22, 2024 09:06:27.382249117 CEST	50003	587	192.168.2.5	74.119.238.7	RCPT TO:<blog@alhoneycomb.com>
Oct 22, 2024 09:06:27.558821917 CEST	587	50003	74.119.238.7	192.168.2.5	250 Accepted
Oct 22, 2024 09:06:27.558949947 CEST	50003	587	192.168.2.5	74.119.238.7	DATA
Oct 22, 2024 09:06:27.732723951 CEST	587	50003	74.119.238.7	192.168.2.5	354 Enter message, ending with "." on a line by itself
Oct 22, 2024 09:06:28.180541992 CEST	587	50003	74.119.238.7	192.168.2.5	250 OK id=1t38yJ-001iUF-24
Oct 22, 2024 09:06:30.597558975 CEST	50003	587	192.168.2.5	74.119.238.7	QUIT
Oct 22, 2024 09:06:30.954294920 CEST	587	50003	74.119.238.7	192.168.2.5	221 md-la-5.webhostbox.net closing connection
Oct 22, 2024 09:06:31.572717905 CEST	587	50004	74.119.238.7	192.168.2.5	220-md-la-5.webhostbox.net ESMTP Exim 4.96.2 #2 Tue, 22 Oct 2024 12:36:31 +0530 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Oct 22, 2024 09:06:31.572949886 CEST	50004	587	192.168.2.5	74.119.238.7	EHLO 445817
Oct 22, 2024 09:06:31.730474949 CEST	587	50004	74.119.238.7	192.168.2.5	250-md-la-5.webhostbox.net Hello 445817 [173.254.250.76] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Oct 22, 2024 09:06:31.731354952 CEST	50004	587	192.168.2.5	74.119.238.7	AUTH login YmxvZ0BhbGhvbmV5Y29tYi5jb20=
Oct 22, 2024 09:06:31.887660027 CEST	587	50004	74.119.238.7	192.168.2.5	334 UGFzc3dvcmQ6
Oct 22, 2024 09:06:32.049501896 CEST	587	50004	74.119.238.7	192.168.2.5	235 Authentication succeeded
Oct 22, 2024 09:06:32.051949024 CEST	50004	587	192.168.2.5	74.119.238.7	MAIL FROM:<blog@alhoneycomb.com>
Oct 22, 2024 09:06:32.207180977 CEST	587	50004	74.119.238.7	192.168.2.5	250 OK
Oct 22, 2024 09:06:32.208939075 CEST	50004	587	192.168.2.5	74.119.238.7	RCPT TO:<blog@alhoneycomb.com>
Oct 22, 2024 09:06:32.377075911 CEST	587	50004	74.119.238.7	192.168.2.5	250 Accepted
Oct 22, 2024 09:06:32.378232956 CEST	50004	587	192.168.2.5	74.119.238.7	DATA
Oct 22, 2024 09:06:32.533489943 CEST	587	50004	74.119.238.7	192.168.2.5	354 Enter message, ending with "." on a line by itself
Oct 22, 2024 09:06:32.966538906 CEST	587	50004	74.119.238.7	192.168.2.5	250 OK id=1t38yO-001iW5-1S
Oct 22, 2024 09:06:39.393625975 CEST	50004	587	192.168.2.5	74.119.238.7	QUIT
Oct 22, 2024 09:06:39.750741005 CEST	587	50004	74.119.238.7	192.168.2.5	221 md-la-5.webhostbox.net closing connection
Oct 22, 2024 09:06:40.411864996 CEST	587	50005	74.119.238.7	192.168.2.5	220-md-la-5.webhostbox.net ESMTP Exim 4.96.2 #2 Tue, 22 Oct 2024 12:36:40 +0530 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Oct 22, 2024 09:06:40.412291050 CEST	50005	587	192.168.2.5	74.119.238.7	EHLO 445817
Oct 22, 2024 09:06:40.573256969 CEST	587	50005	74.119.238.7	192.168.2.5	250-md-la-5.webhostbox.net Hello 445817 [173.254.250.76] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Oct 22, 2024 09:06:40.573476076 CEST	50005	587	192.168.2.5	74.119.238.7	AUTH login YmxvZ0BhbGhvbmV5Y29tYi5jb20=
Oct 22, 2024 09:06:40.739198923 CEST	587	50005	74.119.238.7	192.168.2.5	334 UGFzc3dvcmQ6
Oct 22, 2024 09:06:40.923285961 CEST	587	50005	74.119.238.7	192.168.2.5	235 Authentication succeeded
Oct 22, 2024 09:06:40.923477888 CEST	50005	587	192.168.2.5	74.119.238.7	MAIL FROM:<blog@alhoneycomb.com>
Oct 22, 2024 09:06:41.082210064 CEST	587	50005	74.119.238.7	192.168.2.5	250 OK
Oct 22, 2024 09:06:41.082459927 CEST	50005	587	192.168.2.5	74.119.238.7	RCPT TO:<blog@alhoneycomb.com>
Oct 22, 2024 09:06:41.263983965 CEST	587	50005	74.119.238.7	192.168.2.5	250 Accepted
Oct 22, 2024 09:06:41.264148951 CEST	50005	587	192.168.2.5	74.119.238.7	DATA
Oct 22, 2024 09:06:41.434222937 CEST	587	50005	74.119.238.7	192.168.2.5	354 Enter message, ending with "." on a line by itself
Oct 22, 2024 09:06:41.872461081 CEST	587	50005	74.119.238.7	192.168.2.5	250 OK id=1t38yX-001iaW-16
Oct 22, 2024 09:06:50.498843908 CEST	50005	587	192.168.2.5	74.119.238.7	QUIT
Oct 22, 2024 09:06:50.859891891 CEST	587	50005	74.119.238.7	192.168.2.5	221 md-la-5.webhostbox.net closing connection
Oct 22, 2024 09:06:51.543927908 CEST	587	50006	74.119.238.7	192.168.2.5	220-md-la-5.webhostbox.net ESMTP Exim 4.96.2 #2 Tue, 22 Oct 2024 12:36:51 +0530 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Oct 22, 2024 09:06:51.544471025 CEST	50006	587	192.168.2.5	74.119.238.7	EHLO 445817
Oct 22, 2024 09:06:51.712639093 CEST	587	50006	74.119.238.7	192.168.2.5	250-md-la-5.webhostbox.net Hello 445817 [173.254.250.76] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP
Oct 22, 2024 09:06:51.712994099 CEST	50006	587	192.168.2.5	74.119.238.7	AUTH login YmxvZ0BhbGhvbmV5Y29tYi5jb20=
Oct 22, 2024 09:06:51.888473034 CEST	587	50006	74.119.238.7	192.168.2.5	334 UGFzc3dvcmQ6
Oct 22, 2024 09:06:52.056266069 CEST	587	50006	74.119.238.7	192.168.2.5	235 Authentication succeeded
Oct 22, 2024 09:06:52.056814909 CEST	50006	587	192.168.2.5	74.119.238.7	MAIL FROM:<blog@alhoneycomb.com>
Oct 22, 2024 09:06:52.227364063 CEST	587	50006	74.119.238.7	192.168.2.5	250 OK
Oct 22, 2024 09:06:52.227533102 CEST	50006	587	192.168.2.5	74.119.238.7	RCPT TO:<blog@alhoneycomb.com>
Oct 22, 2024 09:06:52.408142090 CEST	587	50006	74.119.238.7	192.168.2.5	250 Accepted
Oct 22, 2024 09:06:52.408492088 CEST	50006	587	192.168.2.5	74.119.238.7	DATA
Oct 22, 2024 09:06:52.566411972 CEST	587	50006	74.119.238.7	192.168.2.5	354 Enter message, ending with "." on a line by itself
Oct 22, 2024 09:06:52.590893030 CEST	50006	587	192.168.2.5	74.119.238.7	.
Oct 22, 2024 09:06:53.012059927 CEST	587	50006	74.119.238.7	192.168.2.5	250 OK id=1t38yi-001igj-1Y
Oct 22, 2024 09:07:01.772347927 CEST	50006	587	192.168.2.5	74.119.238.7	QUIT
Oct 22, 2024 09:07:02.140059948 CEST	587	50006	74.119.238.7	192.168.2.5	221 md-la-5.webhostbox.net closing connection
Oct 22, 2024 09:07:03.043538094 CEST	587	50007	74.119.238.7	192.168.2.5	220-md-la-5.webhostbox.net ESMTP Exim 4.96.2 #2 Tue, 22 Oct 2024 12:37:02 +0530 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.
Oct 22, 2024 09:07:03.051129103 CEST	587	50007	74.119.238.7	192.168.2.5	220-md-la-5.webhostbox.net ESMTP Exim 4.96.2 #2 Tue, 22 Oct 2024 12:37:02 +0530 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail.

Target ID:	0
Start time:	03:02:46
Start date:	22/10/2024
Path:	C:\Users\user\Desktop\hesaphareketi-01.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\hesaphareketi-01.exe"
Imagebase:	0x1559c2a0000
File size:	1'625'154 bytes
MD5 hash:	E4197FA29371D990625FE9A93B1ECD13
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_UACBypassusingCMSTP, Description: Yara detected UAC Bypass using CMSTP, Source: 00000000.00000002.2266085780.000001559E3C3000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000002.2266776507.00000155AE057000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000000.00000002.2266776507.00000155AE057000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	03:02:49
Start date:	22/10/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\msbuild.exe"
Imagebase:	0x640000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000002.00000002.4489457598.0000000000402000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000002.00000002.4489457598.0000000000402000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000002.00000002.4498926450.0000000002A51000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000002.00000002.4498926450.0000000002A51000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	03:02:49
Start date:	22/10/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\msbuild.exe"
Imagebase:	0x10000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	03:02:49
Start date:	22/10/2024
Path:	C:\Windows\System32\WerFault.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\WerFault.exe -u -p 6848 -s 856
Imagebase:	0x7ff7aeae0000
File size:	570'736 bytes
MD5 hash:	FD27D9F6D02763BDE32511B5DF7FF7A0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	11%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	1.5%
Total number of Nodes:	340
Total number of Limit Nodes:	36

Executed Functions

Function 05FE6E50 Relevance: 8.0, Strings: 6, Instructions: 545
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$]q, xrefs: 05FE757F
$]q, xrefs: 05FE7573
$]q, xrefs: 05FE7526
$]q, xrefs: 05FE754F
$]q, xrefs: 05FE7532
$]q, xrefs: 05FE755B

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q$$]q$$]q
API String ID: 0-3723351465
Opcode ID: f9cf589f30eecc8994bf1f7fdbbbcb427b6d7fd3c578a9c0b326f2f851684f5a
Instruction ID: ea42319ee000b6af3981072e13cfe094d58ce1025924eb384cacad8130bb13b3
Opcode Fuzzy Hash: f9cf589f30eecc8994bf1f7fdbbbcb427b6d7fd3c578a9c0b326f2f851684f5a
Instruction Fuzzy Hash: AD324131E1075ACFCB15EF78D89459DB7B6FFC9300F10866AD409A7265EB34A986CB80

Function 05FEBF38 Relevance: 3.0, Strings: 2, Instructions: 469
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$]q, xrefs: 05FEC2A7
$]q, xrefs: 05FEC29B

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID: $]q$$]q
API String ID: 0-127220927
Opcode ID: d8acb5a12bbe570ee1354604c224173d1cf7faf1e672ea892212e8d0476b2587
Instruction ID: b0e7ee3243b3791072fc76d6dbdf9445cb88d1c66e79a3930c43a5a26f119007
Opcode Fuzzy Hash: d8acb5a12bbe570ee1354604c224173d1cf7faf1e672ea892212e8d0476b2587
Instruction Fuzzy Hash: DB026B31B002058FDB14DFA8D994A6EB7E6FF84314F148529E40AEB395DB39ED46CB81

Function 060246B8 Relevance: 2.9, Strings: 2, Instructions: 359
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$]q, xrefs: 060247EE
Xaq, xrefs: 06024807

Memory Dump Source

Source File: 00000002.00000002.4541468378.0000000006020000.00000040.00000800.00020000.00000000.sdmp, Offset: 06020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6020000_MSBuild.jbxd

Similarity

API ID:
String ID: Xaq$$]q
API String ID: 0-1280934391
Opcode ID: a57ae45d4f3abf3ce44569b68cdc193895df896034a400b6a117637bb3460c1b
Instruction ID: 3cf2f119adf490cb44ef4aec05fdbf58ce4f0918347b004520c53a632b6d3cf5
Opcode Fuzzy Hash: a57ae45d4f3abf3ce44569b68cdc193895df896034a400b6a117637bb3460c1b
Instruction Fuzzy Hash: 56C1B030B052698FDB48AF79986466F7FE7BFC9710B05846ED046EB394CE388C068795

Function 05FE07F8 Relevance: 2.8, Instructions: 2824COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1c459d3f2313c92b971acf5a26976b2b922214638dd965a90ca7d000e82e619e
Instruction ID: f944d28825c05e80fc12ec8e267466498a4ada28c4852dee7f7f45ee30407b20
Opcode Fuzzy Hash: 1c459d3f2313c92b971acf5a26976b2b922214638dd965a90ca7d000e82e619e
Instruction Fuzzy Hash: 1E53F631D10B1A8ADB51EF68C8845A9F7B1FF99300F11C79AE4587B121EF70AAD5CB81

Function 05FE3B38 Relevance: 2.2, Instructions: 2223COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fcac4425dc23aee8e6b3b957c6a0cfdf2b75dbd780a4d975faf273dae0d99ff9
Instruction ID: c81e77712e6c2660d18cb164bfb93d217365fdbc5202afc5a97dc9e0d450a187
Opcode Fuzzy Hash: fcac4425dc23aee8e6b3b957c6a0cfdf2b75dbd780a4d975faf273dae0d99ff9
Instruction Fuzzy Hash: 20231E31D107198ECB11EF68C894AADF7B1FF99300F15C79AE449A7211EB70AAD5CB81

Function 064993D0 Relevance: 1.9, APIs: 1, Instructions: 396COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4542855425.0000000006490000.00000040.00000800.00020000.00000000.sdmp, Offset: 06490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6490000_MSBuild.jbxd

Similarity

API ID: DispatchMessage
String ID:
API String ID: 2061451462-0
Opcode ID: 1b3ab6efab26ff2828d1d29129628cc092ddd2e6f126d7d1fc1cfeb0cf33ee5c
Instruction ID: a5ac08835b4b17863f824843b04ee2304b0c40b74035552c49b843b7d676d91b
Opcode Fuzzy Hash: 1b3ab6efab26ff2828d1d29129628cc092ddd2e6f126d7d1fc1cfeb0cf33ee5c
Instruction Fuzzy Hash: D7F13A30E40208CFDF59DFA9C944B9EBBF1BF48314F18856AD405AB365DB74A945CBA0

Function 05FEA7A8 Relevance: .8, Instructions: 812COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b24b651746f096487355434be2a167fe2c4d95b0731404314288fb76944b1431
Instruction ID: c4c102c2fb474626776e5450f31e017eae6f7cd72a2dc3e3661a0059586b26e0
Opcode Fuzzy Hash: b24b651746f096487355434be2a167fe2c4d95b0731404314288fb76944b1431
Instruction Fuzzy Hash: 03626B34B002049FDB15DB68D598AAEB7F6FF84314F148469E44AEB395DB39EC42CB90

Function 05FEF3EF Relevance: .6, Instructions: 567COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 200f338fee50824f246bab026eba5d59419a5d52f9a96830082d6306938e7218
Instruction ID: 1558051ff16b4833d85c8dad1505e741cd0644c508575a4cef351263fe38b65d
Opcode Fuzzy Hash: 200f338fee50824f246bab026eba5d59419a5d52f9a96830082d6306938e7218
Instruction Fuzzy Hash: 02226030E001099FDF24DB68D490BAEB7B6FB45310F608925E449EB3A5DB39DD81CB51

Function 00EA4330 Relevance: .3, Instructions: 281COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4495897365.0000000000EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ea0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 33fd886ff9e748a65aff9bd2e2a7d26a6cf59b4520467bfe85d3233288bf5102
Instruction ID: 8518d75ba167dcba0cf35881067a592879bd06e1d8999feba378ac470ce4afdc
Opcode Fuzzy Hash: 33fd886ff9e748a65aff9bd2e2a7d26a6cf59b4520467bfe85d3233288bf5102
Instruction Fuzzy Hash: 59B12EB0E002099FDF14CFA9D98579DBBF2AF8D708F149129D415BB294EBB4A845CB81

Function 00EA4C00 Relevance: .3, Instructions: 266COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4495897365.0000000000EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ea0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 895579e8c2f48188c4e14413c503bdbeead7508eacc175767a30a5c79cfea9bc
Instruction ID: f746b218132bcab78412d5d5ba4407ad373e9a206c1611aab15ff4b321554948
Opcode Fuzzy Hash: 895579e8c2f48188c4e14413c503bdbeead7508eacc175767a30a5c79cfea9bc
Instruction Fuzzy Hash: 16B151B0E00209DFDF14CFA9D98179DBBF2BF89718F149529D415BB294EBB4A841CB81

Function 06029BE4 Relevance: .3, Instructions: 253COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4541468378.0000000006020000.00000040.00000800.00020000.00000000.sdmp, Offset: 06020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6020000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: caffd347d45583e371f77860c4864b0b342ded21a0b1925699b351b92de65077
Instruction ID: 1ec6f5a89b41703ca03b1115990fc013135f12c17968eaae06d05485419cbbff
Opcode Fuzzy Hash: caffd347d45583e371f77860c4864b0b342ded21a0b1925699b351b92de65077
Instruction Fuzzy Hash: C8A18E35E4031A8FCB44DFB4D8949DDBBBAFF89314F148219E419AB2A5DB30E941CB51

Function 00EA3FE8 Relevance: .2, Instructions: 238COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4495897365.0000000000EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ea0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e8d0853fc2ce079071086f8c3da5c6e76e6f8c78ad15807d9f58a642378230bf
Instruction ID: bef1beb51c40bb62b73f85915f5edc12d08106aefcb2d8996e985b2ce027ffca
Opcode Fuzzy Hash: e8d0853fc2ce079071086f8c3da5c6e76e6f8c78ad15807d9f58a642378230bf
Instruction Fuzzy Hash: DE914FB0E00209DFDF14CFA9C9817DDBBF2AF99308F149129E405BB294DB74A885CB91

Function 0602B470 Relevance: .2, Instructions: 225COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4541468378.0000000006020000.00000040.00000800.00020000.00000000.sdmp, Offset: 06020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6020000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed82753cbb14ff454a482fece8ac4666ff98b71e3534308a6f7d393de473e7ff
Instruction ID: 31389ba073d49a8e7b6ebb4a78502ec5459e21e0dd6ff1ee9b1dc1a6c9177fff
Opcode Fuzzy Hash: ed82753cbb14ff454a482fece8ac4666ff98b71e3534308a6f7d393de473e7ff
Instruction Fuzzy Hash: 53919035E0031A8FCB05DFB0D8949DDFBBAFF89314F148619E419AB2A5DB30A946CB51

Function 06029BD8 Relevance: .2, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4541468378.0000000006020000.00000040.00000800.00020000.00000000.sdmp, Offset: 06020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6020000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 137d7c5c5cece11b74b065411846c6dc6cbad24dca654f010454f9771b14c440
Instruction ID: afaba9e35f7f722b4113897e4c161a160bfb182b6c799c4ba1a81b2e202d08f3
Opcode Fuzzy Hash: 137d7c5c5cece11b74b065411846c6dc6cbad24dca654f010454f9771b14c440
Instruction Fuzzy Hash: C9917D35E0031A8FCB44DFB4D8949DDFBBAFF89314F248215E519AB2A4DB30A946CB51

Function 00EA9CD8 Relevance: 23.2, APIs: 1, Strings: 12, Instructions: 418
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetActiveWindow.USER32 ref: 00EA9F2F

Strings

4b, xrefs: 00EAA077
Haq, xrefs: 00EAA14B
4b, xrefs: 00EAA217
4b, xrefs: 00EAA1BA
4b, xrefs: 00EAA1A1
4b, xrefs: 00EAA15C
4b, xrefs: 00EAA175
Haq, xrefs: 00EAA190
4b, xrefs: 00EAA0B1
4b, xrefs: 00EAA1F2
4b, xrefs: 00EAA129
4b, xrefs: 00EAA0ED

Memory Dump Source

Source File: 00000002.00000002.4495897365.0000000000EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ea0000_MSBuild.jbxd

Similarity

API ID: ActiveWindow
String ID: 4b$4b$4b$4b$4b$4b$4b$4b$4b$4b$Haq$Haq
API String ID: 2558294473-2138146038
Opcode ID: b85e93cd14c033aa76a3d96f53d29aae01437f1f486e3d27f65d7f55860b1cae
Instruction ID: b263e7eda4e971345c12e222be6855b412fe1d16e19a337e1c334c17df91fa08
Opcode Fuzzy Hash: b85e93cd14c033aa76a3d96f53d29aae01437f1f486e3d27f65d7f55860b1cae
Instruction Fuzzy Hash: ECE14434B043854FDB159F7888583AEBFE6EF8A304F2885A9D545EB292DF348C46C791

Function 05FEEE98 Relevance: 10.4, Strings: 8, Instructions: 394
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$]q, xrefs: 05FEF00C
$]q, xrefs: 05FEF070
$]q, xrefs: 05FEF03B
$]q, xrefs: 05FEF064
$]q, xrefs: 05FEF047
$]q, xrefs: 05FEEFB9
$]q, xrefs: 05FEF018
$]q, xrefs: 05FEEFC5

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q
API String ID: 0-1273862796
Opcode ID: ee8725f72a5fcc2207993b6f9b4b9cc97a707c41b90e3daac1c1999471653156
Instruction ID: f969aba7278c9c7ce105d429b424dd772933d019ee08c4fdff38287946420213
Opcode Fuzzy Hash: ee8725f72a5fcc2207993b6f9b4b9cc97a707c41b90e3daac1c1999471653156
Instruction Fuzzy Hash: 8AE14D31E002098FDB29DF69E890AAEB7B6FF85300F108529D509EB355DB79DC46CB91

Function 05FEF808 Relevance: 8.0, Strings: 6, Instructions: 475COMMON

Download Yara Rule

Strings

$]q, xrefs: 05FEFDB7
$]q, xrefs: 05FEFD83
$]q, xrefs: 05FEFD43
$]q, xrefs: 05FEFD77
$]q, xrefs: 05FEFDAB
$]q, xrefs: 05FEFD4F

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q$$]q$$]q
API String ID: 0-3723351465
Opcode ID: d917305bf6f8caef1c629d5735da0c3cf396623ccb7f22c2433c0f0d02f9f2a8
Instruction ID: c6f3408961362e75dff840ede3a7cca302545e7dd734830233c1245194af04a3
Opcode Fuzzy Hash: d917305bf6f8caef1c629d5735da0c3cf396623ccb7f22c2433c0f0d02f9f2a8
Instruction Fuzzy Hash: 19029031E0020A9FDB24DF68D590AADB7B6FF85310F608566D409EB355DB38DD86CB81

Function 00EA9CC8 Relevance: 6.1, APIs: 4, Instructions: 132
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcess.KERNEL32 ref: 00EAAE86
GetCurrentThread.KERNEL32 ref: 00EAAEC3
GetCurrentProcess.KERNEL32 ref: 00EAAF00
GetCurrentThreadId.KERNEL32 ref: 00EAAF59

Memory Dump Source

Source File: 00000002.00000002.4495897365.0000000000EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ea0000_MSBuild.jbxd

Similarity

API ID: Current$ProcessThread
String ID:
API String ID: 2063062207-0
Opcode ID: 64f8b4fbe46368e4d8b409cd3432e4db8a24d0a8943c3c4604622192f53bbd41
Instruction ID: c095bb91f0c9927ba3f66c5e065dd0390f2cc9deabbf72217b3f3a57eb35fae0
Opcode Fuzzy Hash: 64f8b4fbe46368e4d8b409cd3432e4db8a24d0a8943c3c4604622192f53bbd41
Instruction Fuzzy Hash: 385169B4900309DFDB18DFA9D548BAEBBF1FF89314F248469E009B7250D778A984CB65

Function 00EAAE06 Relevance: 6.1, APIs: 4, Instructions: 126
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcess.KERNEL32 ref: 00EAAE86
GetCurrentThread.KERNEL32 ref: 00EAAEC3
GetCurrentProcess.KERNEL32 ref: 00EAAF00
GetCurrentThreadId.KERNEL32 ref: 00EAAF59

Memory Dump Source

Source File: 00000002.00000002.4495897365.0000000000EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ea0000_MSBuild.jbxd

Similarity

API ID: Current$ProcessThread
String ID:
API String ID: 2063062207-0
Opcode ID: 31ffe5a37f300046cf504a3ada23207c7b79ef675179aa54256f62bb2145aaea
Instruction ID: 0a9841de3c7d6060efd559d293e7caaa1181d8bddcd68d787a56a0aaf0852945
Opcode Fuzzy Hash: 31ffe5a37f300046cf504a3ada23207c7b79ef675179aa54256f62bb2145aaea
Instruction Fuzzy Hash: 645158B4900309CFDB19DFA9D548BAEBBF1EF89314F248459E009B7250D778A984CB65

Function 05FED310 Relevance: 5.2, Strings: 4, Instructions: 231
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$]q, xrefs: 05FED38C
$]q, xrefs: 05FED3BB
$]q, xrefs: 05FED3C7
$]q, xrefs: 05FED380

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q
API String ID: 0-858218434
Opcode ID: f9de338f4e47f624079545526674ab9e52156837fdb31428a1a7025a25d38988
Instruction ID: c9134e5db3bb56feaa786dc1e795d538d36010a747d270f577f52b1f52fe8292
Opcode Fuzzy Hash: f9de338f4e47f624079545526674ab9e52156837fdb31428a1a7025a25d38988
Instruction Fuzzy Hash: 0D914F31B0020A8FDB54DF69D950BAEB3F6FF84204F108569C409EB799EF749D468B92

Function 05FE8958 Relevance: 3.9, Strings: 3, Instructions: 186
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

fbq, xrefs: 05FE8983
XPbq, xrefs: 05FE8AA9
\Obq, xrefs: 05FE8B33

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID: fbq$XPbq$\Obq
API String ID: 0-4057264190
Opcode ID: aa89fdac94beda50695f3dbee468f402f882d581a280b38ac94cb54bd1f6308e
Instruction ID: e3c12036a168d5b2b8ca51cb593c5cf334b8c4bae280b8bf5dab5cff823cce77
Opcode Fuzzy Hash: aa89fdac94beda50695f3dbee468f402f882d581a280b38ac94cb54bd1f6308e
Instruction Fuzzy Hash: 05619030F002099FEB149FB4C954BAEBAF6FF88340F208529E106AB395DF798C418B51

Function 06024B88 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 127
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

y, xrefs: 06024C3C

Memory Dump Source

Source File: 00000002.00000002.4541468378.0000000006020000.00000040.00000800.00020000.00000000.sdmp, Offset: 06020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6020000_MSBuild.jbxd

Similarity

API ID:
String ID: y
API String ID: 0-4225443349
Opcode ID: c7a1728fdabfff34c68455f5d58e8575d8adf196707e2ae94aa8b5bb0e4430fa
Instruction ID: 89c296bce60b7269e2de13a7fbede273c830d439ac478ca8744fe8fe7d55f0bc
Opcode Fuzzy Hash: c7a1728fdabfff34c68455f5d58e8575d8adf196707e2ae94aa8b5bb0e4430fa
Instruction Fuzzy Hash: 8441E472D043968FCB55CFA9D840299BFF0AF8A310F1585AAD448E7651D7789885CBE0

Function 05FED301 Relevance: 2.7, Strings: 2, Instructions: 166COMMON

Download Yara Rule

Strings

$]q, xrefs: 05FED3BB
$]q, xrefs: 05FED380

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID: $]q$$]q
API String ID: 0-127220927
Opcode ID: adbbe82213cd8a06eef3706ecd31b1d2535bc46cf8527e2c136cf621ecd36493
Instruction ID: 27f430d7bc7343f7b8c3fa5498e76502f3223b60bb38e3ea54fe8efafe0dd69a
Opcode Fuzzy Hash: adbbe82213cd8a06eef3706ecd31b1d2535bc46cf8527e2c136cf621ecd36493
Instruction Fuzzy Hash: 5D514F31B002059FDB54EB79D990BAE73F6FB88204F148469C50AEB399EB35DC478B91

Function 05FE8949 Relevance: 2.6, Strings: 2, Instructions: 139COMMON

Download Yara Rule

Strings

fbq, xrefs: 05FE8983
XPbq, xrefs: 05FE8AA9

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID: fbq$XPbq
API String ID: 0-2292610095
Opcode ID: 201bab1b086f8a948356154143d15cbb4a7f374976f31fd5501577758645ab41
Instruction ID: 282b53baaf2091a7e70e0bc160b0773b64c07523a456cfa9d08580dfda5045c9
Opcode Fuzzy Hash: 201bab1b086f8a948356154143d15cbb4a7f374976f31fd5501577758645ab41
Instruction Fuzzy Hash: 19517370F002099FDB149FB5C955BAEBAF6FF88700F208529E106AB395DA758C018B91

Function 0602AAFC Relevance: 1.6, APIs: 1, Instructions: 128COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNELBASE(00000000), ref: 0602AAC6

Memory Dump Source

Source File: 00000002.00000002.4541468378.0000000006020000.00000040.00000800.00020000.00000000.sdmp, Offset: 06020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6020000_MSBuild.jbxd

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: 0409b31272bc0e02dc9fc6921037eeea4f419437ffcfe488c032b1de17ad826a
Instruction ID: 4a32f6eb896ca6cdac6c3088c1d8e1612fbcfe057953e27c277c523ffc391a85
Opcode Fuzzy Hash: 0409b31272bc0e02dc9fc6921037eeea4f419437ffcfe488c032b1de17ad826a
Instruction Fuzzy Hash: BC5153B1E0025A8FCB54CFA9C84579EBFF1EF09310F20846AE819A7241D778A485CFA5

Function 0602B187 Relevance: 1.6, APIs: 1, Instructions: 116COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 0602B2A2

Memory Dump Source

Source File: 00000002.00000002.4541468378.0000000006020000.00000040.00000800.00020000.00000000.sdmp, Offset: 06020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6020000_MSBuild.jbxd

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: 0dd44ffb2732ece3651b226f3e0e8a03640dc26d552924412d975e31f8fd097c
Instruction ID: 015cdde8e86c7cc8c232de6628a57a1b31c1604dcc22ff6158c721bf00ec3903
Opcode Fuzzy Hash: 0dd44ffb2732ece3651b226f3e0e8a03640dc26d552924412d975e31f8fd097c
Instruction Fuzzy Hash: 3F51C0B1D103199FDB14CF9AC984ADEBFB5FF48314F24852AE818AB250D775A885CF90

Function 0602B190 Relevance: 1.6, APIs: 1, Instructions: 113COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 0602B2A2

Memory Dump Source

Source File: 00000002.00000002.4541468378.0000000006020000.00000040.00000800.00020000.00000000.sdmp, Offset: 06020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6020000_MSBuild.jbxd

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: 159dc292bd3869724af3893a2695dcf2fb6cb81a125388223470a317691dafef
Instruction ID: b6b57c2ab379864a1a7c069bbe118ace05b0e74ea377019ec30fa3d3ed153e96
Opcode Fuzzy Hash: 159dc292bd3869724af3893a2695dcf2fb6cb81a125388223470a317691dafef
Instruction Fuzzy Hash: 9141BEB1D103199FDB14CF9AC984ADEBFB5FF48314F24812AE818AB250D775A885CF90

Function 06029CD4 Relevance: 1.6, APIs: 1, Instructions: 97COMMON

Download Yara Rule

APIs

CallWindowProcW.USER32(?,?,?,?,?), ref: 0602C369

Memory Dump Source

Source File: 00000002.00000002.4541468378.0000000006020000.00000040.00000800.00020000.00000000.sdmp, Offset: 06020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6020000_MSBuild.jbxd

Similarity

API ID: CallProcWindow
String ID:
API String ID: 2714655100-0
Opcode ID: 6284b882d50b540304291dba1a1efc05bc938c1b5bf85b67e8d8744467403a89
Instruction ID: 9958f1993b7e3570b739e4df923a039f42940154f2b417323d440ad7ad3bcf81
Opcode Fuzzy Hash: 6284b882d50b540304291dba1a1efc05bc938c1b5bf85b67e8d8744467403a89
Instruction Fuzzy Hash: 514129B89002158FDB94DF99C488AAEFBF5FF88314F24C899D519A7321D374A845CBA0

Function 0602CEF4 Relevance: 1.6, APIs: 1, Instructions: 74comclipboardCOMMON

Download Yara Rule

APIs

OleGetClipboard.OLE32(?), ref: 0602CF88

Memory Dump Source

Source File: 00000002.00000002.4541468378.0000000006020000.00000040.00000800.00020000.00000000.sdmp, Offset: 06020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6020000_MSBuild.jbxd

Similarity

API ID: Clipboard
String ID:
API String ID: 220874293-0
Opcode ID: 5617d3990280b86d2c446dd55bc09f5cd127199ce8891a5c8b7f2a6115a9069c
Instruction ID: 1b6b74996a2b10537333b88445108c0727e3cd4119b402e8fcf10def0d4a291a
Opcode Fuzzy Hash: 5617d3990280b86d2c446dd55bc09f5cd127199ce8891a5c8b7f2a6115a9069c
Instruction Fuzzy Hash: 8C3101B0D41259DFEB94DFA9C985B8EBBF1EF48304F208029E408BB290D775A945CB95

Function 0602C8EC Relevance: 1.6, APIs: 1, Instructions: 74comclipboardCOMMON

Download Yara Rule

APIs

OleGetClipboard.OLE32(?), ref: 0602CF88

Memory Dump Source

Source File: 00000002.00000002.4541468378.0000000006020000.00000040.00000800.00020000.00000000.sdmp, Offset: 06020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6020000_MSBuild.jbxd

Similarity

API ID: Clipboard
String ID:
API String ID: 220874293-0
Opcode ID: 158a8e5d4b5aa00f3446299b4701d77b2b0e332758d59329527d80ee029080f1
Instruction ID: 4e3b7601eb89e2a3376142548544dc717dd0a2f9af2b4b2f5856a20bf72b7293
Opcode Fuzzy Hash: 158a8e5d4b5aa00f3446299b4701d77b2b0e332758d59329527d80ee029080f1
Instruction Fuzzy Hash: 4A3120B0D41219DFEB90CF99C984B8EBFF5EF08304F208029E404BB290D7B5A944CBA5

Function 00EACC30 Relevance: 1.6, APIs: 1, Instructions: 68threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 00EACCC2

Memory Dump Source

Source File: 00000002.00000002.4495897365.0000000000EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ea0000_MSBuild.jbxd

Similarity

API ID: CurrentThread
String ID:
API String ID: 2882836952-0
Opcode ID: 0647a05f391c5d2bba765e0d6bb283d75749e0ff6c169d17a65b5c788ee2abca
Instruction ID: ed60942b1b4ed94ccd86f95a78e2b5aa9218ecf0b3b8f8d27cd01a49c8fc0b39
Opcode Fuzzy Hash: 0647a05f391c5d2bba765e0d6bb283d75749e0ff6c169d17a65b5c788ee2abca
Instruction Fuzzy Hash: ED3143B59002498FCB01DFA9D940A9EFFF4FB49314F14855AD419BB252D338A949CFA1

Function 00EAB048 Relevance: 1.6, APIs: 1, Instructions: 65COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 00EAB0D7

Memory Dump Source

Source File: 00000002.00000002.4495897365.0000000000EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ea0000_MSBuild.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: fe296d8ca159c80343abbf4f5e3aa037ceab2bde940963ccb24918bc47731149
Instruction ID: 93a9ddaf6e53a3ecfcca48e1b54ad866cb9eda698b885c04cfaebd9460658f1f
Opcode Fuzzy Hash: fe296d8ca159c80343abbf4f5e3aa037ceab2bde940963ccb24918bc47731149
Instruction Fuzzy Hash: DC21E3B5900208DFDB10CF9AD984AEEFBF9EB49310F14801AE918B7351D379A950CFA5

Function 00EAB050 Relevance: 1.6, APIs: 1, Instructions: 62COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 00EAB0D7

Memory Dump Source

Source File: 00000002.00000002.4495897365.0000000000EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ea0000_MSBuild.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 3851452dbfbc0836598a284d7684ea696c2c1b88fa0691ce3c95c9098f39ee1a
Instruction ID: 6e71ca5977161a169f004628a95463784fb67c11af6527ba4639d5485f5a0d21
Opcode Fuzzy Hash: 3851452dbfbc0836598a284d7684ea696c2c1b88fa0691ce3c95c9098f39ee1a
Instruction Fuzzy Hash: C321E3B59002089FDB10CF9AD584ADEFBF9EB48310F14801AE918A7250D378A940CFA4

Function 06024C57 Relevance: 1.6, APIs: 1, Instructions: 62COMMON

Download Yara Rule

APIs

GlobalMemoryStatusEx.KERNELBASE ref: 06024CD7

Memory Dump Source

Source File: 00000002.00000002.4541468378.0000000006020000.00000040.00000800.00020000.00000000.sdmp, Offset: 06020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6020000_MSBuild.jbxd

Similarity

API ID: GlobalMemoryStatus
String ID:
API String ID: 1890195054-0
Opcode ID: fa29434f0b6a518d4d5dc170a2238e234ec9829c46360024f71d8d963391ed57
Instruction ID: 5a97cbf31616eb3423dd6c833db64773b0fcf86e2bd38d1b75287042561747eb
Opcode Fuzzy Hash: fa29434f0b6a518d4d5dc170a2238e234ec9829c46360024f71d8d963391ed57
Instruction Fuzzy Hash: 6D2124B1C102599FCB10CFAAD544A9EFFF4AF49310F15856AD418A7251D378A944CFA1

Function 0602EB41 Relevance: 1.6, APIs: 1, Instructions: 62COMMON

Download Yara Rule

APIs

SetWindowsHookExA.USER32(?,00000000,?,?), ref: 0602EBC3

Memory Dump Source

Source File: 00000002.00000002.4541468378.0000000006020000.00000040.00000800.00020000.00000000.sdmp, Offset: 06020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6020000_MSBuild.jbxd

Similarity

API ID: HookWindows
String ID:
API String ID: 2559412058-0
Opcode ID: 56ea682fed8f2cd8bcca0fb1bd7d07c3c18d53b9fa781af3be988bc3fdb20019
Instruction ID: 3c6047e7d72cbeb2e5ead1f11ffd4e747ca7aa9a69579597e21073ed475ccc0c
Opcode Fuzzy Hash: 56ea682fed8f2cd8bcca0fb1bd7d07c3c18d53b9fa781af3be988bc3fdb20019
Instruction Fuzzy Hash: B021F3B59002199FCB54DFA9D944BEEFBF5EF88310F20842AE419A7250C774A940CFA1

Function 00EACD28 Relevance: 1.6, APIs: 1, Instructions: 61threadCOMMON

Download Yara Rule

APIs

EnumThreadWindows.USER32(?,00000000,?), ref: 00EACDA1

Memory Dump Source

Source File: 00000002.00000002.4495897365.0000000000EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ea0000_MSBuild.jbxd

Similarity

API ID: EnumThreadWindows
String ID:
API String ID: 2941952884-0
Opcode ID: e960c28261c41e18c1197cf5eaa7da0f59c84a7465c956c42ac932035ef9c6a9
Instruction ID: fc3bdb3276958a457a15a71a6cfc66a275917e0bdf4320506ba6d076092f8796
Opcode Fuzzy Hash: e960c28261c41e18c1197cf5eaa7da0f59c84a7465c956c42ac932035ef9c6a9
Instruction Fuzzy Hash: 972147B1D002098FDB14CF9AC844BEEFBF5FB89310F14842AD458A7290D778A945CFA5

Function 00EACD30 Relevance: 1.6, APIs: 1, Instructions: 59threadCOMMON

Download Yara Rule

APIs

EnumThreadWindows.USER32(?,00000000,?), ref: 00EACDA1

Memory Dump Source

Source File: 00000002.00000002.4495897365.0000000000EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ea0000_MSBuild.jbxd

Similarity

API ID: EnumThreadWindows
String ID:
API String ID: 2941952884-0
Opcode ID: ef19cf07f3fbd55e5fa5e018f4748efd42dd7faf86d0058f3bc93625ad26d2f9
Instruction ID: d2d351c87d896da65de114e37b3b22a27de6b499cc32b93142241307d0dd01fe
Opcode Fuzzy Hash: ef19cf07f3fbd55e5fa5e018f4748efd42dd7faf86d0058f3bc93625ad26d2f9
Instruction Fuzzy Hash: 302124B19002098FDB14CF9AC844BEEFBF9FB89320F14842AD458A7250D778A945CFA5

Function 00EAD4B9 Relevance: 1.6, APIs: 1, Instructions: 59windowCOMMON

Download Yara Rule

APIs

MessageBoxW.USER32(?,00000000,00000000,?), ref: 00EAD53D

Memory Dump Source

Source File: 00000002.00000002.4495897365.0000000000EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ea0000_MSBuild.jbxd

Similarity

API ID: Message
String ID:
API String ID: 2030045667-0
Opcode ID: 7096bedb57c9d63f5bc7562f70ae21efdc4d1bf6a6b1c0f62b73b7c48a41b665
Instruction ID: 40162a30f6bdd017da507264a442e57afc85c8f5f4f4ab482bd86e91abd57622
Opcode Fuzzy Hash: 7096bedb57c9d63f5bc7562f70ae21efdc4d1bf6a6b1c0f62b73b7c48a41b665
Instruction Fuzzy Hash: 1221F3B5C01349DFCB10CF9AD884ADEFBB5FB49314F10842AE419B7600C375A945CBA4

Function 00EAD4C0 Relevance: 1.6, APIs: 1, Instructions: 57windowCOMMON

Download Yara Rule

APIs

MessageBoxW.USER32(?,00000000,00000000,?), ref: 00EAD53D

Memory Dump Source

Source File: 00000002.00000002.4495897365.0000000000EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ea0000_MSBuild.jbxd

Similarity

API ID: Message
String ID:
API String ID: 2030045667-0
Opcode ID: be0ed31bac8d54ccdac7960e20154dc7d4f6d4853fe03a40c0db01fa81ed2c6d
Instruction ID: c56964f92953dc387bc26b45dd501cc0fd9b9a9492d48e751c2bdab7ca477967
Opcode Fuzzy Hash: be0ed31bac8d54ccdac7960e20154dc7d4f6d4853fe03a40c0db01fa81ed2c6d
Instruction Fuzzy Hash: 1521E2B6C00349DFCB14CF9AD884ADEFBB5FB49314F10852AE519BB600C375A944CBA4

Function 0602EB48 Relevance: 1.6, APIs: 1, Instructions: 57COMMON

Download Yara Rule

APIs

SetWindowsHookExA.USER32(?,00000000,?,?), ref: 0602EBC3

Memory Dump Source

Source File: 00000002.00000002.4541468378.0000000006020000.00000040.00000800.00020000.00000000.sdmp, Offset: 06020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6020000_MSBuild.jbxd

Similarity

API ID: HookWindows
String ID:
API String ID: 2559412058-0
Opcode ID: 1ec78b093ccc732493c56a7f64472cd71085993915575c7347c7818bbaadc3ab
Instruction ID: 4c17a9986cdef6b90bc5a983af4559fe7d0ac16b60eb27c47cfb24c8d0485646
Opcode Fuzzy Hash: 1ec78b093ccc732493c56a7f64472cd71085993915575c7347c7818bbaadc3ab
Instruction Fuzzy Hash: 96210FB59002198FCB54DF9AC844BEEFBF5EF88320F10842AE419A7250C778A940CFA1

Function 0602AA58 Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNELBASE(00000000), ref: 0602AAC6

Memory Dump Source

Source File: 00000002.00000002.4541468378.0000000006020000.00000040.00000800.00020000.00000000.sdmp, Offset: 06020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6020000_MSBuild.jbxd

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: 48c28d7607646437eed61c461fcce916f73bade09664333c92614350328c6a39
Instruction ID: b1a019e5fada8b1eb49b843860fa28af7adcc470335230bb2d5fd0b4b0e96eb6
Opcode Fuzzy Hash: 48c28d7607646437eed61c461fcce916f73bade09664333c92614350328c6a39
Instruction Fuzzy Hash: 82111FB5C003598FCB10CFAAD944ADEFFF8EF89220F10845AD818A7600C379A545CFA1

Function 06024C70 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GlobalMemoryStatusEx.KERNELBASE ref: 06024CD7

Memory Dump Source

Source File: 00000002.00000002.4541468378.0000000006020000.00000040.00000800.00020000.00000000.sdmp, Offset: 06020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6020000_MSBuild.jbxd

Similarity

API ID: GlobalMemoryStatus
String ID:
API String ID: 1890195054-0
Opcode ID: f33429fa163d1c1280df4da5ef523564ef826d46ffa26fe38d7dd004af5a1e90
Instruction ID: bc7937712d0dbde9a2f17d62f18b9a24bc18a8827a5b1e8045c1eab3806f73cd
Opcode Fuzzy Hash: f33429fa163d1c1280df4da5ef523564ef826d46ffa26fe38d7dd004af5a1e90
Instruction Fuzzy Hash: 7211EFB5C0066A9BCB10DF9AC544B9EFBF4BF48720F14856AD818B7240D778A944CFA5

Function 0602C5D9 Relevance: 1.5, APIs: 1, Instructions: 48COMMON

Download Yara Rule

APIs

KiUserCallbackDispatcher.NTDLL(?,?,?,?,?,0602C5B5), ref: 0602C63F

Memory Dump Source

Source File: 00000002.00000002.4541468378.0000000006020000.00000040.00000800.00020000.00000000.sdmp, Offset: 06020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6020000_MSBuild.jbxd

Similarity

API ID: CallbackDispatcherUser
String ID:
API String ID: 2492992576-0
Opcode ID: 695ce1acbb478928f87653ee0f9d0239a2e25b9835c225e0efe8e0039e11aae4
Instruction ID: 3da1c825a44307b352b9878947a63a7310074e3c6797485815c44b54b0503bf6
Opcode Fuzzy Hash: 695ce1acbb478928f87653ee0f9d0239a2e25b9835c225e0efe8e0039e11aae4
Instruction Fuzzy Hash: C11113B58002498FCB60DFA9D449BDEFFF8EF49320F20845AD558A7240C7746984CFA5

Function 0602AA60 Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNELBASE(00000000), ref: 0602AAC6

Memory Dump Source

Source File: 00000002.00000002.4541468378.0000000006020000.00000040.00000800.00020000.00000000.sdmp, Offset: 06020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6020000_MSBuild.jbxd

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: d0a94e4d075086caddd73318a4f237558be7fb2562c120662c01f74a9d5e975b
Instruction ID: bb9f64d353f78a8868f0ec73f9aae5851068a0e7146dda1e865b4451eaa66eb7
Opcode Fuzzy Hash: d0a94e4d075086caddd73318a4f237558be7fb2562c120662c01f74a9d5e975b
Instruction Fuzzy Hash: 721110B5D002498FCB10DF9AC544ADEFBF5EF89320F10841AD418B7600C379A545CFA5

Function 0649A138 Relevance: 1.5, APIs: 1, Instructions: 47windowCOMMON

Download Yara Rule

APIs

DispatchMessageW.USER32(?,?,?,?,?,?,00000000,-00000018,?,064996F7), ref: 0649A19D

Memory Dump Source

Source File: 00000002.00000002.4542855425.0000000006490000.00000040.00000800.00020000.00000000.sdmp, Offset: 06490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6490000_MSBuild.jbxd

Similarity

API ID: DispatchMessage
String ID:
API String ID: 2061451462-0
Opcode ID: 9c5aaf43b5aea0d0e0dcfb0e7fd6f932895fb7be982fbf1e6e441f3e0efd687e
Instruction ID: 81c9466c6a9c0404310a85bf8592f472e4e18dd0fc5f62da87039b396d9fb813
Opcode Fuzzy Hash: 9c5aaf43b5aea0d0e0dcfb0e7fd6f932895fb7be982fbf1e6e441f3e0efd687e
Instruction Fuzzy Hash: 4411E0B5C006489ECB10DF9AD945ADEFBF4EB49310F10851AD418A7244D378A584CFA5

Function 00EAB920 Relevance: 1.5, APIs: 1, Instructions: 46comCOMMON

Download Yara Rule

APIs

OleInitialize.OLE32(00000000), ref: 00EABED5

Memory Dump Source

Source File: 00000002.00000002.4495897365.0000000000EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ea0000_MSBuild.jbxd

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: c6abcfee4774b0d40c67c5c6ab12f18281a267115030ba3a2aab51f792f84fee
Instruction ID: 34ba8310f1f778c742516aa0c8ea2ea43175241a403c2a3bd7fdf1dca7a0b132
Opcode Fuzzy Hash: c6abcfee4774b0d40c67c5c6ab12f18281a267115030ba3a2aab51f792f84fee
Instruction Fuzzy Hash: 151100B590064C8FCB20DF9AC589BDEFBF8EB49724F208459D618B7211C379A944CFA5

Function 06029D2C Relevance: 1.5, APIs: 1, Instructions: 46COMMON

Download Yara Rule

APIs

KiUserCallbackDispatcher.NTDLL(?,?,?,?,?,0602C5B5), ref: 0602C63F

Memory Dump Source

Source File: 00000002.00000002.4541468378.0000000006020000.00000040.00000800.00020000.00000000.sdmp, Offset: 06020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6020000_MSBuild.jbxd

Similarity

API ID: CallbackDispatcherUser
String ID:
API String ID: 2492992576-0
Opcode ID: a6bcc7f10d99b629a2adeddce855f82a3c844c7d1ce32eb918238c9628a26069
Instruction ID: d7e00c7f5f8689e8b9f26dc4e779e26e6f49ac2b91c6dd45d9249681fe938675
Opcode Fuzzy Hash: a6bcc7f10d99b629a2adeddce855f82a3c844c7d1ce32eb918238c9628a26069
Instruction Fuzzy Hash: 851103B58002598FDB60DF9AC588BAEFFF8EF49314F20845AD519B7240D378A944CFA5

Function 0649889C Relevance: 1.5, APIs: 1, Instructions: 46windowCOMMON

Download Yara Rule

APIs

DispatchMessageW.USER32(?,?,?,?,?,?,00000000,-00000018,?,064996F7), ref: 0649A19D

Memory Dump Source

Source File: 00000002.00000002.4542855425.0000000006490000.00000040.00000800.00020000.00000000.sdmp, Offset: 06490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6490000_MSBuild.jbxd

Similarity

API ID: DispatchMessage
String ID:
API String ID: 2061451462-0
Opcode ID: f9754250514b87091af37d6d1bd120debd2e938a9a21d868b53df239c803e6de
Instruction ID: 767fbe16b2713ae30dd9b5cc2037325c1fb26abbfbdbde78d686004949806c99
Opcode Fuzzy Hash: f9754250514b87091af37d6d1bd120debd2e938a9a21d868b53df239c803e6de
Instruction Fuzzy Hash: 5211FEB5C046488FCB10DF9AD945B9EFFF4EB49310F10846AE918B7250D378A544CFA9

Function 00EABE78 Relevance: 1.5, APIs: 1, Instructions: 45comCOMMON

Download Yara Rule

APIs

OleInitialize.OLE32(00000000), ref: 00EABED5

Memory Dump Source

Source File: 00000002.00000002.4495897365.0000000000EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ea0000_MSBuild.jbxd

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: 031d36af14565985511dfd626a6fca6e791f51239f37b5c76ce98d3a1aab706f
Instruction ID: 7eca9177310ff875836a2a32b8add7dfc49bee9ca06ea36f3f94ea05ac97e2db
Opcode Fuzzy Hash: 031d36af14565985511dfd626a6fca6e791f51239f37b5c76ce98d3a1aab706f
Instruction Fuzzy Hash: 2F1103B58002489FCB20DF9AD545BDEBFF8EB49314F10845AD518A7241C379A944CFA5

Function 0602C66C Relevance: 1.5, APIs: 1, Instructions: 31COMMON

Download Yara Rule

APIs

KiUserCallbackDispatcher.NTDLL(?,?,?,?,?,0602C5B5), ref: 0602C63F

Memory Dump Source

Source File: 00000002.00000002.4541468378.0000000006020000.00000040.00000800.00020000.00000000.sdmp, Offset: 06020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6020000_MSBuild.jbxd

Similarity

API ID: CallbackDispatcherUser
String ID:
API String ID: 2492992576-0
Opcode ID: d99f2c40157050128ea6374872dad65793a4cb8d1509a16f56c6a0ab50d530b8
Instruction ID: 67923c4c99a15c4acc5365528417fa76499720e6c1ec8864122dd257852e2c44
Opcode Fuzzy Hash: d99f2c40157050128ea6374872dad65793a4cb8d1509a16f56c6a0ab50d530b8
Instruction Fuzzy Hash: 3BF0F0B2C043918EEBA08B99C88D3AEBFF0EF55304F14808AC15AA7251D37D5145CB91

Function 00BF2928 Relevance: 1.5, Strings: 1, Instructions: 258COMMON

Download Yara Rule

Strings

(aq, xrefs: 00BF2AAD

Memory Dump Source

Source File: 00000002.00000002.4491732942.0000000000BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_bf0000_MSBuild.jbxd

Similarity

API ID:
String ID: (aq
API String ID: 0-600464949
Opcode ID: 3eff4883dcfa54485b2a685bf98e6d097b134bab3df2fd5da08dd3eb342a0639
Instruction ID: 02d9889638b7d07626fd7db42325f3973e653b2e75f22f7d5186c212940aaf47
Opcode Fuzzy Hash: 3eff4883dcfa54485b2a685bf98e6d097b134bab3df2fd5da08dd3eb342a0639
Instruction Fuzzy Hash: 7EA1AF35E002498FCB14DFA8C8546AEFBF1FF89300F1485AAD905AB351EB34AD45CB91

Function 00BF2A94 Relevance: 1.4, Strings: 1, Instructions: 138COMMON

Download Yara Rule

Strings

(aq, xrefs: 00BF2AAD

Memory Dump Source

Source File: 00000002.00000002.4491732942.0000000000BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_bf0000_MSBuild.jbxd

Similarity

API ID:
String ID: (aq
API String ID: 0-600464949
Opcode ID: bcf1fdf0d44cab96da77818959a120ec20ec4981b7a8104b241a187bcb4edb07
Instruction ID: fb5ca9d034b6683da3dbe4a921c3754854978d017ea5f8da4f6ace5bc0b28eb1
Opcode Fuzzy Hash: bcf1fdf0d44cab96da77818959a120ec20ec4981b7a8104b241a187bcb4edb07
Instruction Fuzzy Hash: 7941B535F0025D8FCB04DFA8C951AFEBBF2AF89300F154599D901AB391DA349D05CBA1

Function 05FE5FC8 Relevance: 1.4, Strings: 1, Instructions: 105COMMON

Download Yara Rule

Strings

PH]q, xrefs: 05FE6103

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID: PH]q
API String ID: 0-3168235125
Opcode ID: 6f4ac5cb728e88b45035a1544d40f11cd28c3507c99a19304a769c7ccd1e1da9
Instruction ID: 5388ff04d7282900de72c96a5bbc73ee0c92db331e8dac10d6cf0733a1b521bc
Opcode Fuzzy Hash: 6f4ac5cb728e88b45035a1544d40f11cd28c3507c99a19304a769c7ccd1e1da9
Instruction Fuzzy Hash: 9231D030B002158FDB19AB34E92466F7AE7BF89250F104928D406DB395EF7ADD06C791

Function 00BF2C31 Relevance: 1.3, Strings: 1, Instructions: 97COMMON

Download Yara Rule

Strings

(aq, xrefs: 00BF2C3F

Memory Dump Source

Source File: 00000002.00000002.4491732942.0000000000BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_bf0000_MSBuild.jbxd

Similarity

API ID:
String ID: (aq
API String ID: 0-600464949
Opcode ID: d30243b09e664c28932cb370bf203923f539a27c7b9267923c53eed5435f4226
Instruction ID: 49e927a362820cddffe200e68678a9443a9d5e528a1e6062db79d7321c4071cf
Opcode Fuzzy Hash: d30243b09e664c28932cb370bf203923f539a27c7b9267923c53eed5435f4226
Instruction Fuzzy Hash: 0D3116B4D01208DFDB24DFA9C584B9EBFF5EF49310F2484AAE504AB390C7749849CB61

Function 00BF0760 Relevance: 1.3, Strings: 1, Instructions: 59COMMON

Download Yara Rule

Strings

(aq, xrefs: 00BF077A

Memory Dump Source

Source File: 00000002.00000002.4491732942.0000000000BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_bf0000_MSBuild.jbxd

Similarity

API ID:
String ID: (aq
API String ID: 0-600464949
Opcode ID: 9704dc60565c1cef7b9a3c014534cc230e22d1aa933da4193a414409267c9bbe
Instruction ID: f06c2f4294f1df94a0151d04d848e2dcd29dc2cba49e4ac628e998fd4ac4d863
Opcode Fuzzy Hash: 9704dc60565c1cef7b9a3c014534cc230e22d1aa933da4193a414409267c9bbe
Instruction Fuzzy Hash: 3F11E93950A3486FD716AF74DC119AB3FA9EF82350F14849AF58087562C930AD15C7F3

Function 05FE8841 Relevance: 1.3, Strings: 1, Instructions: 25COMMON

Download Yara Rule

Strings

\Obq, xrefs: 05FE884D

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID: \Obq
API String ID: 0-2878401908
Opcode ID: ccf4d00ccfdfe178353d9c96c0ed7629614b10a9ff110fe36c696952158e4d76
Instruction ID: 4ec815451bbd6c97e8aa84f87ffa31bd64e094566a0bca8205c3a3f3caff368c
Opcode Fuzzy Hash: ccf4d00ccfdfe178353d9c96c0ed7629614b10a9ff110fe36c696952158e4d76
Instruction Fuzzy Hash: FFF0DA31A50129DBDB14EF94E959BAE7BB6FF84741F20451AE502A7294CBB41D41CB80

Function 05FE6140 Relevance: 1.0, Instructions: 1001COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fbcae588dbf0c4a0084027289f8eae5c77707c4963a42d824594fe79b9533f94
Instruction ID: 72f307ba8dc89821ead0f1ffc0c511c526929baf4598dad4b3c9f8073cd62563
Opcode Fuzzy Hash: fbcae588dbf0c4a0084027289f8eae5c77707c4963a42d824594fe79b9533f94
Instruction Fuzzy Hash: 50920634E002088FDB24DB68D594AADBBF2FF45314F5584A9D41AEB365DB39EC46CB80

Function 05FE0040 Relevance: .4, Instructions: 407COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7a4ce383a584c3867e1a3769634fda9e5c65e06ae3cdff6db2bc031e29417047
Instruction ID: ff94df7913a1c15cc87da8af3e2f27c1726956174092b86acfa1afb718a9b942
Opcode Fuzzy Hash: 7a4ce383a584c3867e1a3769634fda9e5c65e06ae3cdff6db2bc031e29417047
Instruction Fuzzy Hash: 1AE16035A002058FDB14DF64D998AAEBBBAFF88310F148429E406E7395DF79DC42CB91

Function 05FE0019 Relevance: .2, Instructions: 248COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6ad37eeed36ab4078e2dacceb7b719fb95361e7083ae06734ad39e85c15ebda
Instruction ID: b8c1afbda6528aa5c058258ca83e76ba10ca5612895375ac80ab13041ce04ffd
Opcode Fuzzy Hash: e6ad37eeed36ab4078e2dacceb7b719fb95361e7083ae06734ad39e85c15ebda
Instruction Fuzzy Hash: 31914E35A00204CFCB15DB64D998AADBBFAEF88310F148569E406E7365DF79EC42CB50

Function 05FE9438 Relevance: .2, Instructions: 245COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7d7b532ba582da260d8fce55c5b3eb17dc2825085e238438f3e0c2dc5bcbb302
Instruction ID: 12113692a605ca8b4991354376532de746d65aaef98753e47742fd6cf86e607f
Opcode Fuzzy Hash: 7d7b532ba582da260d8fce55c5b3eb17dc2825085e238438f3e0c2dc5bcbb302
Instruction Fuzzy Hash: 0281D471E042159FDF308A68D680BBDBBA2FB42310F15C466D869DB282C6BDDD81C7B1

Function 05FE9FA0 Relevance: .2, Instructions: 229COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0a576e90092f90c383d21dbad5ccca878b9ad2e90565fa057c294c389c74cee3
Instruction ID: 3186cb0eefefa556989a681086bdc0358f99177a765c9fc8bfd96935d42c0617
Opcode Fuzzy Hash: 0a576e90092f90c383d21dbad5ccca878b9ad2e90565fa057c294c389c74cee3
Instruction Fuzzy Hash: EA61C171F001114FDB15AA7ED884A6FBADBAFD4220F144479D80EDB364DEA9DD0287D1

Function 05FE7FA8 Relevance: .2, Instructions: 221COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0cacf0ceaa4ee311420aaa72282e73ce6045f0fad57e6452b00319cdcb79fde9
Instruction ID: d791b4f00f253d83f1c950622647f96b018c97b16e923ec7c9ef6e0c8a253620
Opcode Fuzzy Hash: 0cacf0ceaa4ee311420aaa72282e73ce6045f0fad57e6452b00319cdcb79fde9
Instruction Fuzzy Hash: 76912F30E006198FDF20DF68C890B9DB7B2FF89314F208695D549BB295DB74AA85CF91

Function 05FE7C8A Relevance: .2, Instructions: 221COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f3ab5793a540a5d5357b13aaf5367368e7f53dde10dae430b125de79e23d4ab6
Instruction ID: dbffb232b0a9032221232c4dae9949b54d9608e02729081384e866e1286a97ef
Opcode Fuzzy Hash: f3ab5793a540a5d5357b13aaf5367368e7f53dde10dae430b125de79e23d4ab6
Instruction Fuzzy Hash: A8815C30B012458BDB14EFA9D4546AEB7F3EF89304F108529D40AEB399EB35DC468B91

Function 05FE0558 Relevance: .2, Instructions: 213COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 717ad014aa3ce2042a45a4205fbeca6e677dbfd80ebe079a4287b7f041d06472
Instruction ID: 68132bec4e0f280bf48c3d832cc92faf3d6be55bc32c576d1410e78f71725309
Opcode Fuzzy Hash: 717ad014aa3ce2042a45a4205fbeca6e677dbfd80ebe079a4287b7f041d06472
Instruction Fuzzy Hash: F1715B71A002058FDB04DF69D988B9DBBF6FF88310F14C569E909AB395EBB4D845CB90

Function 05FE7FC0 Relevance: .2, Instructions: 210COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c24e2d4dcc7dd7852134ce7d5666a6db2930dc52a5684162415aefe2a350dcd1
Instruction ID: d04d55fa3b9bbeb40fc9d8bfae2bfed38c3c2da0b31f64820606221a49010964
Opcode Fuzzy Hash: c24e2d4dcc7dd7852134ce7d5666a6db2930dc52a5684162415aefe2a350dcd1
Instruction Fuzzy Hash: E3912E30E006198BDF20DFA8C890B9DB7B2FF89314F208599D54DBB255DB74AA85CF51

Function 05FE9208 Relevance: .1, Instructions: 132COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e375d09265a4e2af3e193851245321d4b2602f4e018a7271255b34eeb61f193f
Instruction ID: 8c606719cf69b4e9ae0a2c18bbec79ee2cf32730e598abaf0e6a972dc4dc4cca
Opcode Fuzzy Hash: e375d09265a4e2af3e193851245321d4b2602f4e018a7271255b34eeb61f193f
Instruction Fuzzy Hash: 3C415F71E002098FDF20CEA9D9C0ABFFBB6FB84310F10492AD15AD7650D775E9458BA1

Function 05FEA5E8 Relevance: .1, Instructions: 110COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a105aeea740f678509f9a803c9d1a863c8ea1ef66690df8d16fa4782f480aa20
Instruction ID: a2e357e0b85fb74e97776affba1041308e2b0551130ff22390b6c57c9eadf822
Opcode Fuzzy Hash: a105aeea740f678509f9a803c9d1a863c8ea1ef66690df8d16fa4782f480aa20
Instruction Fuzzy Hash: C541DFB2D052599FDB00CFA8C995BDEBFB4FF0A310F14846AE448E7241D3789905CBA4

Function 05FE5E79 Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 637e8b0a2af8f4d77c43877d1f23574ff07ed5375a2c74eadc7b473c4b53f096
Instruction ID: 495a9ac5373a8be7496fce1dc6140ec6214e2034102438027246e5611605ef70
Opcode Fuzzy Hash: 637e8b0a2af8f4d77c43877d1f23574ff07ed5375a2c74eadc7b473c4b53f096
Instruction Fuzzy Hash: 44317035E1020A9BCB19CFA5D994A9EBBF6FF89304F10C529E806E7750DB74AC46CB40

Function 00BF3160 Relevance: .1, Instructions: 94COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4491732942.0000000000BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_bf0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1d376fb07de314465e92a87a1e7cf95c2f3b61d7848ebce479e108a5b2e419d4
Instruction ID: ab672d88abc20e9ae5378b2be8ad7b2f8bea3d3a71a61bdf84a1bf52f693af83
Opcode Fuzzy Hash: 1d376fb07de314465e92a87a1e7cf95c2f3b61d7848ebce479e108a5b2e419d4
Instruction Fuzzy Hash: 58318270A0020A8FCF54EF68E880AAE7BF5EF49304F104529D105EB365DB35ED06CB91

Function 00BF3152 Relevance: .1, Instructions: 94COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4491732942.0000000000BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_bf0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5cd0ccbddb9f5b22e8d6066c6def7684e5a5a165fbb3b7b8983226981a0065c3
Instruction ID: de3c927a54dba95953420eefb57296b7f5ab1cafcce7b089f9fb3a4b1a3d448c
Opcode Fuzzy Hash: 5cd0ccbddb9f5b22e8d6066c6def7684e5a5a165fbb3b7b8983226981a0065c3
Instruction Fuzzy Hash: C5319070A0020A8FDF54EF68E980AAEBBF5EF49304F104569D505EB365DB35ED0ACB91

Function 05FE5E88 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 66f1ec0d5e23c4ca568d6c39107fe285dfcd04a53adc75dcc63258dfe2ebbfc8
Instruction ID: 7f83f5b9f1bbee967e72dd645cb62ec9cb1e85a06a3a5643ecb7c5b85c1b76ff
Opcode Fuzzy Hash: 66f1ec0d5e23c4ca568d6c39107fe285dfcd04a53adc75dcc63258dfe2ebbfc8
Instruction Fuzzy Hash: 67316E35E1020A9BCB19CFA5D594AAEBBB6FF89304F10C529E806E7750DB74AC46CB40

Function 00BF0ECF Relevance: .1, Instructions: 85COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4491732942.0000000000BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_bf0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 06365931c8f80e724b6e87d637f08cb136645be0db11b4701f7fb11d23bb4bcb
Instruction ID: 3d3b067197b1c4e9f12b86f1910710fc09571c72e7aa09b98e48f6980f5267d0
Opcode Fuzzy Hash: 06365931c8f80e724b6e87d637f08cb136645be0db11b4701f7fb11d23bb4bcb
Instruction Fuzzy Hash: F12149716143048FC329BF34D8A56AA7BE6EF85314B2445BED245CB362EB319C0AC791

Function 05FE7892 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3000be9128c03898b33c2a0846b1a528a8668bf790be8a6458d79be80cf2088d
Instruction ID: 7c34e288b94f426693602e99944cc865e1e9b2a7c84811d0d9a21a4933316d7e
Opcode Fuzzy Hash: 3000be9128c03898b33c2a0846b1a528a8668bf790be8a6458d79be80cf2088d
Instruction Fuzzy Hash: 6C219C75F012159FDB00EF69D881AAEBBF6EB48210F108029E909E7351E739D9428B91

Function 05FE78A0 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0a17a0f243e9d1287e1a69bd4fd277a9c47fb1f24d743fd2306c612b5cec7d33
Instruction ID: 841502083e5edaf194e5bad8bd02127e50c6fb3abc55deaa2033aa287e2202c2
Opcode Fuzzy Hash: 0a17a0f243e9d1287e1a69bd4fd277a9c47fb1f24d743fd2306c612b5cec7d33
Instruction Fuzzy Hash: A1214A75F012159FDB10EFA9D880AAEB7F6FB48710F108029EA09E7351E735D942CB91

Function 00E5D468 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4495522511.0000000000E5D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E5D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_e5d000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5468a3c303c3e55b88055b19444c5ecab9c8037b50fa2f5befea1c69615e863e
Instruction ID: 29fefa675e92a7a03ef32df601d97054f5ba913c43f61ee31a84ddd53a2216a0
Opcode Fuzzy Hash: 5468a3c303c3e55b88055b19444c5ecab9c8037b50fa2f5befea1c69615e863e
Instruction Fuzzy Hash: 94213471508204EFCB24CF64D9C0B26BB65FB84319F24C96DEC095B356D33AE80ACB62

Function 00E5D2B8 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4495522511.0000000000E5D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E5D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_e5d000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7ca1408114b4f6148df6d91d73e6dd4b788cc06ee0f4c1a8f2143b5174005d16
Instruction ID: 5f1f89816b6b9de5f34f1d47931ced70cdbdf59bd7a1540b147c233822c53ad1
Opcode Fuzzy Hash: 7ca1408114b4f6148df6d91d73e6dd4b788cc06ee0f4c1a8f2143b5174005d16
Instruction Fuzzy Hash: 2D213871508244DFDB24DF14DDC4B2ABF65FB84325F24C969DC096B355C33AD80ACAA2

Function 00BF2C88 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4491732942.0000000000BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_bf0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cb1b053066fb334004dbf717364f0274ffda92adde2cb38c7565ac42885d123c
Instruction ID: d7608653c4bbe8dfc260dd17167e47d716db1ba28aca95d0f11d09e04d51ceec
Opcode Fuzzy Hash: cb1b053066fb334004dbf717364f0274ffda92adde2cb38c7565ac42885d123c
Instruction Fuzzy Hash: 5631FFB5C012089FDB24CF99C588B9EBBF5AB08310F20806AE504BB250C7B4A845CBA4

Function 00BF0F32 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4491732942.0000000000BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_bf0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0d315ccfcdba9d6e7a21802a60bcca9c96534d67289ec001170e40cecfc1c0cf
Instruction ID: f55307811b08173221073f637d7766e96b6d215d67ae6f7e05650c1be24674e7
Opcode Fuzzy Hash: 0d315ccfcdba9d6e7a21802a60bcca9c96534d67289ec001170e40cecfc1c0cf
Instruction Fuzzy Hash: 4111B1713002058FD728AF38E890A5ABBE6EF85314B20497DD11A9B355EF36DD09CB90

Function 05FE79B0 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2822ef6ba0141f66d4b1a24ee8fd0af434404f06a6e3f9d0c22990e9bb9fa266
Instruction ID: e9ea171eca6b0a5907a43681b98d322de144f5b31594c5c5d4c5c972c773f718
Opcode Fuzzy Hash: 2822ef6ba0141f66d4b1a24ee8fd0af434404f06a6e3f9d0c22990e9bb9fa266
Instruction Fuzzy Hash: 4211A132B001294BDB45EA78C814ABF77EBEBC9610F004539D50AE7354EE29DD068B91

Function 00BF0F40 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4491732942.0000000000BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_bf0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c66b27395c2b7626ce54eeec3c001d2ea07f80f2e1f019d9d8a2ddcb091044bd
Instruction ID: c823a6ddd1c5aaeba10ee26c07fc16113d8980c83a2af2c38af41a31ea4c28af
Opcode Fuzzy Hash: c66b27395c2b7626ce54eeec3c001d2ea07f80f2e1f019d9d8a2ddcb091044bd
Instruction Fuzzy Hash: 4D118F317002058FD728AF39E89495ABBEAFF85314B208A7DD15A9B355DF36DC09CB90

Function 05FE79A2 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 28cb3bec63cb03757fc091f57769a168461d711220610fcd60caabc74d17152a
Instruction ID: 414bcf445597302a5856b28584914f37a340bffeaa6d0b1913d585005c9d960b
Opcode Fuzzy Hash: 28cb3bec63cb03757fc091f57769a168461d711220610fcd60caabc74d17152a
Instruction Fuzzy Hash: 9501F137B010551BEB45A678CC12AFF33BFEBC8610F00443AD10AE3254EE69C80647D2

Function 05FE7668 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa9ed35671b95c634870d436fa012402d397adc09c1a2e72b6a52e86decd455a
Instruction ID: 0bef0ab81883c01836d3f12ab5972ffa395494ba3e280445ee04edb9941743b7
Opcode Fuzzy Hash: aa9ed35671b95c634870d436fa012402d397adc09c1a2e72b6a52e86decd455a
Instruction Fuzzy Hash: 4621E0B5C01259AFCB00DF9AD984A8EFFB4FB49310F10816AE918B7240C378A944CBA5

Function 05FE7BE7 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 790f098421ef516917fb60379098fb51d5dedc2f4602a22140f4408b5d28d2ba
Instruction ID: 22f94e95a3ab7102731ebfa3f04ed89034a382068fdae7fd2e5f44741473cb83
Opcode Fuzzy Hash: 790f098421ef516917fb60379098fb51d5dedc2f4602a22140f4408b5d28d2ba
Instruction Fuzzy Hash: 4C01D432B004501BDB15B67DE455B2FA6EFDBC9610F148839E00AD7390DE6ADC424382

Function 00E5D463 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4495522511.0000000000E5D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E5D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_e5d000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 945d3a080ad63b5e32bcc5b18ec1e97d0272151c1fb78e482730898ede984437
Instruction ID: 9dbfddefa6cbbc02ac4597e16168198835d549011fa45a37f63181fa028a5179
Opcode Fuzzy Hash: 945d3a080ad63b5e32bcc5b18ec1e97d0272151c1fb78e482730898ede984437
Instruction Fuzzy Hash: AB11BE75508240CFCB12CF10D9C4B15BB62FB84318F24CAA9DC494B256D33AD80ACB62

Function 00E5D2B3 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4495522511.0000000000E5D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E5D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_e5d000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 58489c3f61924d27558184a5eb21aea17821769c0c96028cc0fb4c2ef8240ab9
Instruction ID: 61c38ebcf04cc6c92b5065b97e981d3a42d5115aac8728faf8f90da728abbf0c
Opcode Fuzzy Hash: 58489c3f61924d27558184a5eb21aea17821769c0c96028cc0fb4c2ef8240ab9
Instruction Fuzzy Hash: 35119375504244CFDB11CF14D9C4B19BF61FB84324F24C5A9DC495B656C33AD41ACB62

Function 05FEE4C8 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 28ddc57e2c72398c42e9db13388f85bca7db8a389cf8ab9f77450192bf969dae
Instruction ID: 67c8d948be9099f626451663f21348d305b039838ffab1d6c057b72ac88e4697
Opcode Fuzzy Hash: 28ddc57e2c72398c42e9db13388f85bca7db8a389cf8ab9f77450192bf969dae
Instruction Fuzzy Hash: E5018435B002140BD7259E7CE855B2A77EAE785610F108829F20AD7354FF15ED034380

Function 05FE7670 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d57303cfa1a3b309976a45d8b9786bd2e0434f587590b7fb86e8c012db8b38e6
Instruction ID: 877934ba7def5454291b63bf97dd0b0bb1a0c901baacdfa9e157a1fdb9213a09
Opcode Fuzzy Hash: d57303cfa1a3b309976a45d8b9786bd2e0434f587590b7fb86e8c012db8b38e6
Instruction Fuzzy Hash: 3B11A2B5D012599FCB00DF9AD984ADEFBB4FB49714F10812AE518B7240C3786954CBA5

Function 05FE7BF8 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e5ed6b45a94d4aeda8e633072fa3c4f7346d12e664f11f848c5b4ae5d9597454
Instruction ID: f664df885c08e221752dd23d0bdc161beb12c0c1eaad6bab91162bf63a0c837b
Opcode Fuzzy Hash: e5ed6b45a94d4aeda8e633072fa3c4f7346d12e664f11f848c5b4ae5d9597454
Instruction Fuzzy Hash: 3701A431B004500BDB25B57EE454B2BA6DFDBC9714F108839E10ED7394DE6ADD434392

Function 00BF13FC Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4491732942.0000000000BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_bf0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 678415f6794cf0df9fc83b4f8b224fa9b7f23c6fc61bd6fd17a504f8aabbdac6
Instruction ID: 690f9976e5d505007c7e08600fef4b868f546ddf568933f07108555e17afe02c
Opcode Fuzzy Hash: 678415f6794cf0df9fc83b4f8b224fa9b7f23c6fc61bd6fd17a504f8aabbdac6
Instruction Fuzzy Hash: 15015E74604744DBC3288B3DA898937BBF5FF84700B148D9DE94687A10DB71E80ADB51

Function 05FEE4D8 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0a5511f1e9849d7961f5f63f8ccc86ec6a9524c9a7541cfef32e788bb50c4148
Instruction ID: 52b1846ac1428135ec73f6b1214866e80ebd9c61bea78157b54bafca079c952a
Opcode Fuzzy Hash: 0a5511f1e9849d7961f5f63f8ccc86ec6a9524c9a7541cfef32e788bb50c4148
Instruction Fuzzy Hash: AC018135B002140BDB25AA7DF854B2A77EAEBC9610F108839E20EC7354FF25EC438381

Function 00BF2862 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4491732942.0000000000BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_bf0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ec334828f3dd7a0b379928781595913eeb32f858631d0ca99e554548c981815f
Instruction ID: 8686f80ca47d86bd5936714b42f3af8b09cd2ac5f5ca3ef70301ead2898e5988
Opcode Fuzzy Hash: ec334828f3dd7a0b379928781595913eeb32f858631d0ca99e554548c981815f
Instruction Fuzzy Hash: C811E0B59002488FCB20DF9AD544BEEBBF4AB48310F20845AD559A7350D378A948CFA5

Function 00BF2868 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4491732942.0000000000BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_bf0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 269fd5f94ca95a59f6fc4d60721fb7390df326a67baf0c32e8be56259fd41c6d
Instruction ID: 73ac0f66300c863808da58de706791f073c3c90e1706fae7cef412a941b3ebd4
Opcode Fuzzy Hash: 269fd5f94ca95a59f6fc4d60721fb7390df326a67baf0c32e8be56259fd41c6d
Instruction Fuzzy Hash: 1811CEB59002488FCB20DF9AD544B9EFBF8EB48320F20845AD959A7350D379A948CFA5

Function 00E5D133 Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4495522511.0000000000E5D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E5D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_e5d000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9956d279ede19234609cd30ee5e4659c3dcca7f72e0d2afd9948bf3e42a57ba1
Instruction ID: 7c8d28d80773449a9f087920563ca2270bab051383fa96056c6ad0d6affab094
Opcode Fuzzy Hash: 9956d279ede19234609cd30ee5e4659c3dcca7f72e0d2afd9948bf3e42a57ba1
Instruction Fuzzy Hash: 1D018FB55082409FDB14CF64D9C4A16BFA1EF84328F28C9AEDD494F35AC23BE41ACB51

Function 05FEFEB0 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ad53bfdb6c87932e46b8d37741a2ac7e48043202eb7f1f4a2e38bc2ebf8abbfc
Instruction ID: 85fdc571f3ba575792d5fc36a772ab449705762b20606fb6fcd41449da678ee4
Opcode Fuzzy Hash: ad53bfdb6c87932e46b8d37741a2ac7e48043202eb7f1f4a2e38bc2ebf8abbfc
Instruction Fuzzy Hash: A2F0F6352413459FC704AF78D490C9A7BBAEF8A350314406AF104CF225DB35AC4ACBE0

Function 00BF3370 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4491732942.0000000000BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_bf0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 698f76f1201ea41647620be941f44c4b830efa0954e8b1b6e328ddf92104b427
Instruction ID: 9de98ce769f9847191dd6c9aad3cac10ae6937777cc4b6fc9ab975005feeec8d
Opcode Fuzzy Hash: 698f76f1201ea41647620be941f44c4b830efa0954e8b1b6e328ddf92104b427
Instruction Fuzzy Hash: 31F0F9B4E0021AAFD714DFA9C841AAEBFF4AB08340F504469A514EB351EB70D6458BA0

Function 05FEFEC0 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 11235e9c43b6f7879922d4dafc7777dbe64bb1b68733d36816b6367a97ae5407
Instruction ID: 419a32f19725923fdff7291ded7aba6a2a082d42c4514d4f06ed3aa2746ddac6
Opcode Fuzzy Hash: 11235e9c43b6f7879922d4dafc7777dbe64bb1b68733d36816b6367a97ae5407
Instruction Fuzzy Hash: 0AF030357403459FCB08EF69D494CAA77AAEF9A354314446AF504CF228DB75AC02CBD0

Function 00BF3380 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4491732942.0000000000BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_bf0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1931626650c5845e6a8377ccc51702771fcdcb081372081d31072c174f0acc16
Instruction ID: 06b4244b3449e5d2c71be8dcac65b95eb97be7fe398c71a7f5034465e13fd4ca
Opcode Fuzzy Hash: 1931626650c5845e6a8377ccc51702771fcdcb081372081d31072c174f0acc16
Instruction Fuzzy Hash: 54F0B7B0E0420A9FDB54DFA9C842ABEBBF4EB48700F1045A9D518E7351EB7196458B94

Function 00BF1F50 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4491732942.0000000000BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_bf0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a7582a32b9f6bc89d3df591204f9ccfbdc0fde252b64e280745d0f321f6af333
Instruction ID: ed8e42fbeb10e4ecdc222f6dec543a90886ac369b3ab9dab0d928177f750f3ab
Opcode Fuzzy Hash: a7582a32b9f6bc89d3df591204f9ccfbdc0fde252b64e280745d0f321f6af333
Instruction Fuzzy Hash: 47F0A0367047009B831AAB2D696456FFBEBDFC53107284DAFE146DB316EF248C094795

Function 00BF1F60 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4491732942.0000000000BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_bf0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f5484a31055d0e7fbb4bc47e3b00d4515a55488476b1dde97f63c4da4d64f56
Instruction ID: f7292b41b535aa8b8dd127a0c262ea113c5e870837ceebb7b328ed7a70d093f5
Opcode Fuzzy Hash: 3f5484a31055d0e7fbb4bc47e3b00d4515a55488476b1dde97f63c4da4d64f56
Instruction Fuzzy Hash: 91E092367006048B4329672DA45546FBBEBDFC57103144DAEE14ACB314DF65DC094BD5

Function 00BF3318 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4491732942.0000000000BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_bf0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4da18b9c9d912558711fd93cd4fed398d5e1f826997d99a87bc00516b54b26a0
Instruction ID: 1f4fd040a91932531aca394efb0d0421d9e8f22408830492d39e0768a21894f3
Opcode Fuzzy Hash: 4da18b9c9d912558711fd93cd4fed398d5e1f826997d99a87bc00516b54b26a0
Instruction Fuzzy Hash: 61F06DB0D4022EAFD750DF78CD45A9EBBF0AB08710F6084A9D405EB251DB7486058B92

Function 00BF340F Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4491732942.0000000000BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_bf0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a3d19a04228a245ac4f0534415bbcdf01d2f7674049bb77f71df52e598f1b5e1
Instruction ID: 96bfa7af3bea033d62fcaf3c0644d62e7ac64f4e7506c6cd74e06f09b805adc7
Opcode Fuzzy Hash: a3d19a04228a245ac4f0534415bbcdf01d2f7674049bb77f71df52e598f1b5e1
Instruction Fuzzy Hash: 77E0C2B36840481EF702CAA4DC40DDA3BD1EB30350B008076B404C71A2E312C12ADB02

Function 00BF22C8 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4491732942.0000000000BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_bf0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 36e954aee35eeda3cb37571cf40cfe64f9fee0ab05c02282bbf08f7815037fb3
Instruction ID: decaab7bd921906cc3ae919ec620a025d7cd965420855244b7f894cdb7e0426a
Opcode Fuzzy Hash: 36e954aee35eeda3cb37571cf40cfe64f9fee0ab05c02282bbf08f7815037fb3
Instruction Fuzzy Hash: 39D0A73125916527D71AA29D7821AFE3BCE4781260F800457E60983A418D86489102F7

Function 00BF3328 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4491732942.0000000000BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_bf0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cd6bf1cd17bb66f6ce4cbfb1bb458b79ded93c40ac57b67d04081052cbea79ba
Instruction ID: 3d3dca0f4ae14a0f6c9c5c8fe41d7f541c50f35020d68f3799079d7ca6092d7c
Opcode Fuzzy Hash: cd6bf1cd17bb66f6ce4cbfb1bb458b79ded93c40ac57b67d04081052cbea79ba
Instruction Fuzzy Hash: 62E046B0D0020ADFC780EFB9C944A6EBBF0BF08700F2184A9C018E7221EB708A048F81

Function 00BF1E80 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4491732942.0000000000BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_bf0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 185a2fc1b65c081f122df19c4e0e1aa7edadc364e9601d5ea12e3998673cbe2c
Instruction ID: c29a2dfe9f272b00486141f415d44b969eea0b2c452bc880112f5fcb1b1df4c2
Opcode Fuzzy Hash: 185a2fc1b65c081f122df19c4e0e1aa7edadc364e9601d5ea12e3998673cbe2c
Instruction Fuzzy Hash: 58D0231264D2E41AD709516C78307FD3F854B47314F0900EFD54EC7AC2D8C54C474396

Function 00BF07C0 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4491732942.0000000000BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_bf0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8c1f826dd38f73393dd1ba203ecbf8c2c4b3885116af8ed3f6779f9478b46133
Instruction ID: 96ec5c0b41f98235370cb8f1e059217a87b656ac61559476d57897863eed7aa9
Opcode Fuzzy Hash: 8c1f826dd38f73393dd1ba203ecbf8c2c4b3885116af8ed3f6779f9478b46133
Instruction Fuzzy Hash: 27D0923614021DBB8F41AE85EC01DEB3F2EEF897A0B148016FE1457211C272E971EBE0

Function 00BF1E90 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4491732942.0000000000BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_bf0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5f301a358bab6405ec24833b6c7c6624fe06c220ecc135227ae268c421f1bb28
Instruction ID: 53b0b6972d0e1912d59112024213d158d839a8de854c2817bb93ed0385db7e31
Opcode Fuzzy Hash: 5f301a358bab6405ec24833b6c7c6624fe06c220ecc135227ae268c421f1bb28
Instruction Fuzzy Hash: 74B09B2135413913D60C319D7411ABE72CE8785664F000467A61D877419CC59C4102DE

Function 00BF22D8 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4491732942.0000000000BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_bf0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aadc08a821b94fc1ed2e4148dec645eed803c2bcd7b07a0334afe2489cc42ab5
Instruction ID: 11ee4a043554f338f5ece7700cf489ed5a7665eda9b7541114a847f499b6ba72
Opcode Fuzzy Hash: aadc08a821b94fc1ed2e4148dec645eed803c2bcd7b07a0334afe2489cc42ab5
Instruction Fuzzy Hash: 57B09B2131413913D708319D74116BD72CE47C5765F400467A61D977419CC59C8103EA

Function 00BF0A0B Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4491732942.0000000000BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_bf0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ef1f2f58bbb0b3f9062f87605f4da3f9cf290627fe1264292ccda54334d5f48a
Instruction ID: eb935ef36f35096fb8a803978ca706f9364ac324c998c3ca2578c552af4f353f
Opcode Fuzzy Hash: ef1f2f58bbb0b3f9062f87605f4da3f9cf290627fe1264292ccda54334d5f48a
Instruction Fuzzy Hash: C8D0927486031ECFEB20AF81D9287BEBBB0FB04304F104469C112A61B2C7B90A0ECF50

Function 00BF0B03 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4491732942.0000000000BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_bf0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 684aef28e986e5a87436b6aef30d3d3155cacb07192fd44525d9911f8e29b4ce
Instruction ID: 09c4f188f0ebffb367d80a94ced9968882d6f37dd954844dec3899adad1af67d
Opcode Fuzzy Hash: 684aef28e986e5a87436b6aef30d3d3155cacb07192fd44525d9911f8e29b4ce
Instruction Fuzzy Hash: 96C08C0200E3D50AC34311600C2AAD26FA00A03304F4C00C7918085A93A158450D83B2

Function 00BF0B18 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4491732942.0000000000BF0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00BF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_bf0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 96f91298778c8dcc9e37a68578d88e4895b25980c38b8288ffa3c1ff14525efa
Instruction ID: 53e731e10cc553037fa181c7cd9b90621f051136d372dfc654af0cbffcc235d1
Opcode Fuzzy Hash: 96f91298778c8dcc9e37a68578d88e4895b25980c38b8288ffa3c1ff14525efa
Instruction Fuzzy Hash: 33B002D6D151508DE74B11711D545C1576464659523CD02DB988585757704D550D4531

Non-executed Functions

Function 05FEB858 Relevance: 13.0, Strings: 10, Instructions: 468COMMON

Download Yara Rule

Strings

$]q, xrefs: 05FEB979
$]q, xrefs: 05FEB948
$]q, xrefs: 05FEBDC6
$]q, xrefs: 05FEBD11
$]q, xrefs: 05FEBDB0
$]q, xrefs: 05FEBD05
$]q, xrefs: 05FEBDA4
$]q, xrefs: 05FEB954
$]q, xrefs: 05FEBDBA
$]q, xrefs: 05FEB985

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q
API String ID: 0-2843079600
Opcode ID: f1abb261af5201edef5edaf9834e5d4bcbddec35ef73e624c6d9eeb6e11d17ed
Instruction ID: 389b29bd79e062d0a2b5cf05817d51bddaba513a63eeeeaa793003c8e4e76f1d
Opcode Fuzzy Hash: f1abb261af5201edef5edaf9834e5d4bcbddec35ef73e624c6d9eeb6e11d17ed
Instruction Fuzzy Hash: 17123130E002198FDB28DF69C994AAEB7F6FF89304F208569D509AB365DB349D45CF81

Function 06027838 Relevance: 5.3, Strings: 4, Instructions: 312COMMON

Download Yara Rule

Strings

nKuq, xrefs: 060278ED
D@, xrefs: 06027AA4
D@, xrefs: 06027993
D@, xrefs: 06027AE3

Memory Dump Source

Source File: 00000002.00000002.4541468378.0000000006020000.00000040.00000800.00020000.00000000.sdmp, Offset: 06020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6020000_MSBuild.jbxd

Similarity

API ID:
String ID: D@$D@$D@$nKuq
API String ID: 0-3708153952
Opcode ID: 5716118523ce9b0f7ae7444be2740d720818b6efad1b59401204eb95bc50cc08
Instruction ID: 9a1c98163ee5f584772bd4cb4db18eac78ce1c8e72b42c150cda825bf53315b1
Opcode Fuzzy Hash: 5716118523ce9b0f7ae7444be2740d720818b6efad1b59401204eb95bc50cc08
Instruction Fuzzy Hash: 7AB1CF71E1022A9FDBA1DFA9D8407AEBFF6FF88310F10492AE505E7290D7349901CB91

Function 05FE9A8B Relevance: 2.9, Strings: 2, Instructions: 419COMMON

Download Yara Rule

Strings

XPbq, xrefs: 05FE9BB1
\Obq, xrefs: 05FE9BE1

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID: XPbq$\Obq
API String ID: 0-409418754
Opcode ID: e9c8266898be3cb825a4b07a2d44a125ec5157f7ed923b5d687281593765305a
Instruction ID: bff14f77685da36b1e4a242ef3f2533d5f0dceaeaa76f81a764d484ba257e5d1
Opcode Fuzzy Hash: e9c8266898be3cb825a4b07a2d44a125ec5157f7ed923b5d687281593765305a
Instruction Fuzzy Hash: C4D1E631B001148FDB24DB68D590ABEB7F2FF89710F24846AE54ADB395CAB9DC45C7A0

Function 060226F0 Relevance: 1.9, Strings: 1, Instructions: 603COMMON

Download Yara Rule

Strings

PH]q, xrefs: 06022950

Memory Dump Source

Source File: 00000002.00000002.4541468378.0000000006020000.00000040.00000800.00020000.00000000.sdmp, Offset: 06020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6020000_MSBuild.jbxd

Similarity

API ID:
String ID: PH]q
API String ID: 0-3168235125
Opcode ID: f6ea47258e98c0450478024264129e6f64a2afa344ddb1f2901d67392ee99005
Instruction ID: ae29027bab40aa416990d24d4a6ec1d481df3cbdc7eb5d24fd3234e9646eb171
Opcode Fuzzy Hash: f6ea47258e98c0450478024264129e6f64a2afa344ddb1f2901d67392ee99005
Instruction Fuzzy Hash: 9722D030B402168FDB94DBB8D494A5DBBF6EF89310F208569E40ADB361DB34ED46CB51

Function 00EABF20 Relevance: .3, Instructions: 315COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4495897365.0000000000EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ea0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 44deda0e9751594475d9dd3f65a1077b6c401b58d5896fb3b202ce387b5fcfc0
Instruction ID: 329d0f22ea55bc4333734e40208921a06721743a7c846c37510b6d3ed5c4d574
Opcode Fuzzy Hash: 44deda0e9751594475d9dd3f65a1077b6c401b58d5896fb3b202ce387b5fcfc0
Instruction Fuzzy Hash: D51296B8C817458AEB10CF25E84C1893BB1B755718FF04A29D2613B6E5DBBC35AACF44

Function 0649F648 Relevance: .3, Instructions: 269COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4542855425.0000000006490000.00000040.00000800.00020000.00000000.sdmp, Offset: 06490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6490000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa5d078a10edd24865b1d9f4000a48a480d37863c50cd26cef030308c1df51c9
Instruction ID: c05c1ae8875de0573a413aacfcfa3c2167cd332aa91b5f04dc9c24b1599d22bd
Opcode Fuzzy Hash: aa5d078a10edd24865b1d9f4000a48a480d37863c50cd26cef030308c1df51c9
Instruction Fuzzy Hash: 66D1F331D2075ACACB15EB74D950A9DF3B5FF95300F1097AAD0093B225EB706AC9CB91

Function 064944A0 Relevance: .3, Instructions: 264COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4542855425.0000000006490000.00000040.00000800.00020000.00000000.sdmp, Offset: 06490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6490000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3592f1403f7fc11206159c930cb3521ca901d02e0bd27a4592638698b008ce59
Instruction ID: 92a74440538fd3ce4c9134b1ff4f25b904f23440bcbea0041a122a0a555e60a5
Opcode Fuzzy Hash: 3592f1403f7fc11206159c930cb3521ca901d02e0bd27a4592638698b008ce59
Instruction Fuzzy Hash: CEA1B032E40205CFCF4ADFB5C8444AEBBF2FF85314B15416AE915AB265EB31D946CB90

Function 0649F658 Relevance: .3, Instructions: 264COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4542855425.0000000006490000.00000040.00000800.00020000.00000000.sdmp, Offset: 06490000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_6490000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 37928e60d3fb77f6ab6fb6788493814efe50a3f336bc6a52391b782d7dfb48c3
Instruction ID: b7475507cfc3d27d2b978138fd26e70971b5cb2254d4f9a873cbc126765e83f9
Opcode Fuzzy Hash: 37928e60d3fb77f6ab6fb6788493814efe50a3f336bc6a52391b782d7dfb48c3
Instruction Fuzzy Hash: B0D1D331D2075ACACB15EB74D950A9DF3B5FF95300F1097AAD0093B224EB706ACACB91

Function 00EABF13 Relevance: .2, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.4495897365.0000000000EA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ea0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 12e9ae94ceea7972faee6e52d3071340b9762684269e822b043ba6e373094f27
Instruction ID: 94dddc05d7bfa89c68532d1a456ae439d6e36c4de3984f73fbb3cb1e2b2caa88
Opcode Fuzzy Hash: 12e9ae94ceea7972faee6e52d3071340b9762684269e822b043ba6e373094f27
Instruction Fuzzy Hash: A4C1FDB9C807458AEB10CF64E8481897BB1BB95314FF04B29D2617B2E4DBBC35A6CF44

Function 05FEEB00 Relevance: 10.2, Strings: 8, Instructions: 229COMMON

Download Yara Rule

Strings

$]q, xrefs: 05FEEC02
$]q, xrefs: 05FEECB2
$]q, xrefs: 05FEEC51
$]q, xrefs: 05FEECBE
$]q, xrefs: 05FEEC7C
$]q, xrefs: 05FEEC88
$]q, xrefs: 05FEEC5D
$]q, xrefs: 05FEEBF6

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q$$]q$$]q$$]q$$]q
API String ID: 0-1273862796
Opcode ID: dd29110d3cdbe4edd7e47aac57cef3e97fd3862193e03e0779c6bcf2b6d5fb98
Instruction ID: 52dee7bf11e34557f573737d22732d0ad24391b127abd99f2841656a2e94b2d1
Opcode Fuzzy Hash: dd29110d3cdbe4edd7e47aac57cef3e97fd3862193e03e0779c6bcf2b6d5fb98
Instruction Fuzzy Hash: B4916530A00209DFDB28EF69E995BAE77FAFF44300F108529D506AB365DB789D45CB90

Function 05FEB258 Relevance: 9.2, Strings: 7, Instructions: 405COMMON

Download Yara Rule

Strings

$]q, xrefs: 05FEB6F4
.5uq, xrefs: 05FEB2B3
$]q, xrefs: 05FEB760
$]q, xrefs: 05FEB53A
$]q, xrefs: 05FEB5A0
$]q, xrefs: 05FEB594
$]q, xrefs: 05FEB76C

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID: .5uq$$]q$$]q$$]q$$]q$$]q$$]q
API String ID: 0-981061697
Opcode ID: 6d4f4a4354c956a3f15ce856c32ebdee468985d17cd052919d7ce13916bf1f0e
Instruction ID: 19f5876021463af250e0dff8c2d2b9e6b73ca2e026405977db162dbff0a6291e
Opcode Fuzzy Hash: 6d4f4a4354c956a3f15ce856c32ebdee468985d17cd052919d7ce13916bf1f0e
Instruction Fuzzy Hash: 80F11B30A00205CFDB19EFA5D594A6EB7F6FF89300F248568D405AB369DB39ED42CB90

Function 05FEC590 Relevance: 5.3, Strings: 4, Instructions: 282COMMON

Download Yara Rule

Strings

$]q, xrefs: 05FEC7EA
$]q, xrefs: 05FEC85B
$]q, xrefs: 05FEC7F6
$]q, xrefs: 05FEC84F

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q
API String ID: 0-858218434
Opcode ID: daa225f71e2d2c3c41c82ce13bd990b555ec7304b0d9ea9fc56b6ef1eee4457b
Instruction ID: bf28f953f4e97e19cbadf0ffe23ccc69f81cbfa67b742a85ce9cf560f0484e4a
Opcode Fuzzy Hash: daa225f71e2d2c3c41c82ce13bd990b555ec7304b0d9ea9fc56b6ef1eee4457b
Instruction Fuzzy Hash: 94B12D30A002088FDB14DFA9D594A6EB7F7FF84304F248929E405AB355DB79DD86CB80

Function 05FEC9A8 Relevance: 5.2, Strings: 4, Instructions: 168COMMON

Download Yara Rule

Strings

LR]q, xrefs: 05FECA9B
LR]q, xrefs: 05FECAEA
$]q, xrefs: 05FECA27
$]q, xrefs: 05FECA33

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID: LR]q$LR]q$$]q$$]q
API String ID: 0-3527005858
Opcode ID: 9d65ca31f2aafc4e60e2786f0fbcd4c7f17978a684bc56185d8593cad8f4115b
Instruction ID: 131277e20317e423450c63db57a5484c6fd6ca54296586a67defdcb26d56b20b
Opcode Fuzzy Hash: 9d65ca31f2aafc4e60e2786f0fbcd4c7f17978a684bc56185d8593cad8f4115b
Instruction Fuzzy Hash: 2A51A030B002019FDB18EF68D995A6E77F6FF89704F148569E4069B365DB38EC41CB90

Function 05FEEE88 Relevance: 5.2, Strings: 4, Instructions: 159COMMON

Download Yara Rule

Strings

$]q, xrefs: 05FEF00C
$]q, xrefs: 05FEF03B
$]q, xrefs: 05FEF064
$]q, xrefs: 05FEEFB9

Memory Dump Source

Source File: 00000002.00000002.4540897596.0000000005FE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 05FE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_5fe0000_MSBuild.jbxd

Similarity

API ID:
String ID: $]q$$]q$$]q$$]q
API String ID: 0-858218434
Opcode ID: 4c8c14270c691d147b92c468421adaf8f2befac77f4b2fec7ba389158bbf002e
Instruction ID: 0cae495fe889b49b8486d7bfc816d9bfd9ba3d2dd90b386f792997ae14425c37
Opcode Fuzzy Hash: 4c8c14270c691d147b92c468421adaf8f2befac77f4b2fec7ba389158bbf002e
Instruction Fuzzy Hash: 8F515F35A002048BDF25EB64E580AAEB7F7FF89310F148529E506EB355DB39EC42CB51

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search the Registry on compromised systems for insecurely stored credentials. The Windows Registry stores configuration information that can be used by the system or other programs. Adversaries may query the Registry looking for credentials and passwords that have been stored for use by other programs or services. Sometimes these credentials are used for automatic logons.
Tactics:	Credential Access
Data Sources:	Command: Command Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may collect data stored in the clipboard from users copying information within or between applications.
Tactics:	Collection
Data Sources:	Command: Command Execution, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report hesaphareketi-01.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Agenttesla

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

Networking

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Exploits

Compliance

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_hesaphareketi-01_90b82cb3f85c944cacad82af54fa85589b762785_be022f20_2cedb2d7-065a-4f4a-8a55-93fcada01eb3\Report.wer

C:\ProgramData\Microsoft\Windows\WER\Temp\WERD907.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WERDAAD.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WERDB0C.tmp.xml

C:\Windows\appcompat\Programs\Amcache.hve

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Windows Analysis Report
hesaphareketi-01.exe

Function 05FE6E50 Relevance: 8.0, Strings: 6, Instructions: 545
COMMON

Function 05FEBF38 Relevance: 3.0, Strings: 2, Instructions: 469
COMMON

Function 060246B8 Relevance: 2.9, Strings: 2, Instructions: 359
COMMON

Function 00EA9CD8 Relevance: 23.2, APIs: 1, Strings: 12, Instructions: 418
COMMON

Function 05FEEE98 Relevance: 10.4, Strings: 8, Instructions: 394
COMMON

Function 00EA9CC8 Relevance: 6.1, APIs: 4, Instructions: 132
threadCOMMON

Function 00EAAE06 Relevance: 6.1, APIs: 4, Instructions: 126
threadCOMMON

Function 05FED310 Relevance: 5.2, Strings: 4, Instructions: 231
COMMON

Function 05FE8958 Relevance: 3.9, Strings: 3, Instructions: 186
COMMON

Function 06024B88 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 127
COMMON

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre