Edit tour

Windows Analysis Report
MSBuild.exe

Overview

General Information

Sample name:	MSBuild.exe
Analysis ID:	1639354
MD5:	0787d35eb5c46f4203cf0555b34eee6b
SHA1:	c527e9c5e6f1babb201dbc53a84ba7cd80bdebaf
SHA256:	5e07f74604e6e7dd476772d83ee6ba27954ec3a4d5fad67c0cf349437a19cb5a
Tags:	exeuser-cuddly59539083
Infos:

Detection

Score:	72
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

.NET source code contains potential unpacker

Connects to many ports of the same IP (likely port scanning)

Joe Sandbox ML detected suspicious sample

Sigma detected: Silenttrinity Stager Msbuild Activity

Abnormal high CPU Usage

Allocates memory with a write watch (potentially for evading sandboxes)

Binary contains a suspicious time stamp

Contains functionality to simulate mouse events

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Drops PE files

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found dropped PE file which has not been started or loaded

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May check the online IP address of the machine

May sleep (evasive loops) to hinder dynamic analysis

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

MSBuild.exe (PID: 7592 cmdline: "C:\Users\user\Desktop\MSBuild.exe" MD5: 0787D35EB5C46F4203CF0555B34EEE6B)

cmd.exe (PID: 2576 cmdline: "C:\Windows\System32\cmd.exe" /c timeout 3 & del C:\Users\user\AppData\Local\Temp\\SharpDX.dll & del C:\Users\user\AppData\Local\Temp\\SharpDX.Direct3D11.dll & del C:\Users\user\AppData\Local\Temp\\SharpDX.DXGI.dll MD5: 8A2122E8162DBEF04694B9C3E0B6CDEE)

conhost.exe (PID: 5928 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

timeout.exe (PID: 5676 cmdline: timeout 3 MD5: 100065E21CFBBDE57CBA2838921F84D6)

WWAHost.exe (PID: 8084 cmdline: "C:\Windows\system32\wwahost.exe" -ServerName:Microsoft.MicrosoftOfficeHub.wwa MD5: 69318AE264A1E45ED570CEDCDC4B7B69)

cleanup

Sigma Signatures

System Summary

Sigma detected: Silenttrinity Stager Msbuild Activity

Source: Network Connection

Author: Kiran kumar s, oscd.community: Data: DestinationIp: 208.95.112.1, DestinationIsIpv6: false, DestinationPort: 80, EventID: 3, Image: C:\Users\user\Desktop\MSBuild.exe, Initiated: true, ProcessId: 7592, Protocol: tcp, SourceIp: 192.168.2.4, SourceIsIpv6: false, SourcePort: 49712

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: MSBuild.exe

Avira: detected

Multi AV Scanner detection for submitted file

Source: MSBuild.exe	Virustotal: Detection: 38%			Perma Link
Source: MSBuild.exe	ReversingLabs: Detection: 41%

Joe Sandbox ML detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Source: unknown	HTTPS traffic detected: 13.107.6.156:443 -> 192.168.2.4:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 158.23.16.71:443 -> 192.168.2.4:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.21.56.51:443 -> 192.168.2.4:49750 version: TLS 1.2

Source: MSBuild.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: D:\Downloads\SharpDX-3.1.0\SharpDX-3.1.0\Source\NET35\SharpDX\bin\Release\SharpDX.pdb source: MSBuild.exe, 00000000.00000002.3530886469.000002F2E1D52000.00000002.00000001.01000000.00000015.sdmp, MSBuild.exe, 00000000.00000002.3530051251.000002F2E1960000.00000004.08000000.00040000.00000000.sdmp, SharpDX.dll.0.dr
Source:	Binary string: D:\Downloads\SharpDX-3.1.0\SharpDX-3.1.0\Source\NET35\SharpDX.DXGI\bin\Release\SharpDX.DXGI.pdb8 source: MSBuild.exe, 00000000.00000002.3528777371.000002F2D920B000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000000.00000002.3530662314.000002F2E1CF2000.00000002.00000001.01000000.00000014.sdmp, MSBuild.exe, 00000000.00000002.3530051251.000002F2E1960000.00000004.08000000.00040000.00000000.sdmp, SharpDX.DXGI.dll.0.dr
Source:	Binary string: D:\Downloads\SharpDX-3.1.0\SharpDX-3.1.0\Source\NET35\SharpDX.DXGI\bin\Release\SharpDX.DXGI.pdb source: MSBuild.exe, 00000000.00000002.3528777371.000002F2D920B000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000000.00000002.3530662314.000002F2E1CF2000.00000002.00000001.01000000.00000014.sdmp, MSBuild.exe, 00000000.00000002.3530051251.000002F2E1960000.00000004.08000000.00040000.00000000.sdmp, SharpDX.DXGI.dll.0.dr
Source:	Binary string: D:\Downloads\desktop-duplication-net-master\desktop-duplication-net-master\libs\SharpDX.Direct3D11.pdb source: MSBuild.exe, 00000000.00000002.3528777371.000002F2D920B000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000000.00000002.3530051251.000002F2E1960000.00000004.08000000.00040000.00000000.sdmp, MSBuild.exe, 00000000.00000002.3530401863.000002F2E1B52000.00000002.00000001.01000000.00000013.sdmp, SharpDX.Direct3D11.dll.0.dr
Source:	Binary string: D:\Downloads\desktop-duplication-net-master\desktop-duplication-net-master\libs\SharpDX.Direct3D11.pdb T source: MSBuild.exe, 00000000.00000002.3528777371.000002F2D920B000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000000.00000002.3530051251.000002F2E1960000.00000004.08000000.00040000.00000000.sdmp, MSBuild.exe, 00000000.00000002.3530401863.000002F2E1B52000.00000002.00000001.01000000.00000013.sdmp, SharpDX.Direct3D11.dll.0.dr

Networking

Connects to many ports of the same IP (likely port scanning)

Source: global traffic

TCP traffic: 147.185.221.26 ports 33295,2,3,5,9,1977

Source: global traffic

TCP traffic: 192.168.2.4:49711 -> 147.185.221.26:33295

Source: global traffic

HTTP traffic detected: GET /xml/?fields=countryCode,query HTTP/1.1Host: ip-api.comConnection: Keep-Alive

Source: Joe Sandbox View	IP Address: 13.107.6.156 13.107.6.156
Source: Joe Sandbox View	IP Address: 208.95.112.1 208.95.112.1

Source: Joe Sandbox View

ASN Name: SALSGIVERUS SALSGIVERUS

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: 6271f898ce5be7dd52b0fc260d0662b3

Source: unknown

DNS query: name: ip-api.com

Source: global traffic

HTTP traffic detected: GET /pwa HTTP/1.1Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8Accept-Language: en-CHUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; MSAppHost/3.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Accept-Encoding: gzip, deflate, brHost: www.office.comConnection: Keep-Alive

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /pwa HTTP/1.1Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8Accept-Language: en-CHUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; MSAppHost/3.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Accept-Encoding: gzip, deflate, brHost: www.office.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /xml/?fields=countryCode,query HTTP/1.1Host: ip-api.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: global traffic	DNS traffic detected: DNS query: entertainment-machinery.gl.at.ply.gg
Source: global traffic	DNS traffic detected: DNS query: ip-api.com
Source: global traffic	DNS traffic detected: DNS query: c.pki.goog
Source: global traffic	DNS traffic detected: DNS query: www.office.com
Source: global traffic	DNS traffic detected: DNS query: 6c6dd065b6a8458980aaedfd14cf1f78.clo.footprintdns.com
Source: global traffic	DNS traffic detected: DNS query: 8d4ffdf450db24a59c10ca2eef1e2974.azr.footprintdns.com

Source: WWAHost.exe, 00000009.00000002.3607426223.000001F31D0B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootG2.crt0B
Source: WWAHost.exe, 00000009.00000002.3607426223.000001F31D0B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootG2.crl0
Source: MSBuild.exe, 00000000.00000002.3527279138.000002F2C91A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ip-api.com/xml/?fields=countryCode
Source: WWAHost.exe, 00000009.00000002.3607426223.000001F31D0B0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: WWAHost.exe, 00000009.00000002.3613338234.000001F31FB36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://react-dnd.github.io/react-dnd/docs/api/drop-target-monitor
Source: MSBuild.exe, 00000000.00000002.3527279138.000002F2C91A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.datacontract.org/2004/07/
Source: MSBuild.exe, 00000000.00000002.3527279138.000002F2C91A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.datacontract.org/2004/07/V3T=
Source: MSBuild.exe, 00000000.00000002.3527279138.000002F2C91A1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: WWAHost.exe, 00000009.00000002.3609274846.000001F31E871000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=DU
Source: WWAHost.exe, 00000009.00000002.3613338234.000001F31FB36000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://reactjs.org/docs/refs-and-the-dom.html#callback-refs
Source: WWAHost.exe, 00000009.00000002.3611442010.000001F31F710000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://res-1.cdn.office.net
Source: WWAHost.exe, 00000009.00000003.1698056279.000001F31E8F2000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609200050.000001F31E842000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3607553662.000001F31D0CC000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697704092.000001F31E855000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1698005381.000001F31E855000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697878255.000001F31E8F1000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609107473.000001F31E804000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697782816.000001F31E855000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1685201361.000001F31E862000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res-1.cdn.office.net"
Source: WWAHost.exe, 00000009.00000002.3607426223.000001F31D075000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697704092.000001F31E855000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697726345.000001F31E85B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.c
Source: WWAHost.exe, 00000009.00000002.3609200050.000001F31E842000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697704092.000001F31E855000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1698005381.000001F31E855000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697782816.000001F31E855000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cce
Source: WWAHost.exe, 00000009.00000002.3609200050.000001F31E842000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609369372.000001F31E8AE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/
Source: WWAHost.exe, 00000009.00000002.3611350044.000001F31F6C0000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609200050.000001F31E842000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3607553662.000001F31D0CC000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3607426223.000001F31D075000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697704092.000001F31E855000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697726345.000001F31E85B000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3610499739.000001F31F3E7000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1685201361.000001F31E862000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/bundles/otel-logger-a79fa4a4c2580f67e6a9.js
Source: WWAHost.exe, 00000009.00000002.3607426223.000001F31D075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/bundles/otel-logger-a79fa4a4c2580f67e6a9.js310
Source: WWAHost.exe, 00000009.00000002.3607426223.000001F31D075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/bundles/otel-logger-a79fa4a4c2580f67e6a9.js310A
Source: WWAHost.exe, 00000009.00000002.3607426223.000001F31D075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/bundles/otel-logger-a79fa4a4c2580f67e6a9.js310AC
Source: WWAHost.exe, 00000009.00000002.3607426223.000001F31D075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/bundles/otel-logger-a79fa4a4c2580f67e6a9.jsc.png
Source: WWAHost.exe, 00000009.00000002.3609200050.000001F31E842000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3608679042.000001F31E6F8000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1723713752.000001F31D2BB000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697704092.000001F31E855000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697726345.000001F31E85B000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3608137412.000001F31D2C5000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1695644390.000001F31E702000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609324011.000001F31E899000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1685201361.000001F31E862000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/bundles/pwaunauth-5f15b4fd4a.css
Source: WWAHost.exe, 00000009.00000002.3609200050.000001F31E842000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3607553662.000001F31D0BE000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3611178885.000001F31F5F8000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697704092.000001F31E855000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697726345.000001F31E85B000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3607054019.000001F31CFCD000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1685201361.000001F31E862000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/bundles/sharedscripts-939520eada.js
Source: WWAHost.exe, 00000009.00000002.3607553662.000001F31D0BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/bundles/sharedscripts-939520eada.js43
Source: WWAHost.exe, 00000009.00000002.3609200050.000001F31E82E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/bundles/sharedscripts-939520eada.js6ce02eadf71.js
Source: WWAHost.exe, 00000009.00000002.3607238316.000001F31D000000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/bundles/sharedscripts-939520eada.js6ce02eadf71.js7a.js
Source: WWAHost.exe, 00000009.00000002.3607553662.000001F31D0BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/bundles/sharedscripts-939520eada.jsAccept
Source: WWAHost.exe, 00000009.00000002.3608220107.000001F31D2E7000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609413951.000001F31E8C0000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1726708847.000001F31D2E7000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609200050.000001F31E842000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609765795.000001F31E9FC000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609324011.000001F31E899000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1685201361.000001F31E862000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3604837967.000001EB18428000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/calendardefaultstates-sprite-ee77e113cd.p
Source: WWAHost.exe, 00000009.00000002.3608220107.000001F31D2E7000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1726708847.000001F31D2E7000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609200050.000001F31E842000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609765795.000001F31E9FC000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609200050.000001F31E82E000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609324011.000001F31E899000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1685201361.000001F31E862000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/document-sprite-f8cd18cf2a.png
Source: WWAHost.exe, 00000009.00000002.3608220107.000001F31D2E7000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1726708847.000001F31D2E7000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3604905504.000001EB18446000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609200050.000001F31E842000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609765795.000001F31E9FC000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609324011.000001F31E899000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1685201361.000001F31E862000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/emptystate-sprite-general-236a6305cf.png
Source: WWAHost.exe, 00000009.00000002.3609765795.000001F31E9FC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/emptystate-sprite-general-236a6305cf.pngh
Source: WWAHost.exe, 00000009.00000002.3609413951.000001F31E8C0000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1726708847.000001F31D2E7000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3604905504.000001EB18446000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609200050.000001F31E842000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609324011.000001F31E899000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1685201361.000001F31E862000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/emptystate-sprite-general-darkmode-a7a65e
Source: WWAHost.exe, 00000009.00000002.3609200050.000001F31E842000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609369372.000001F31E8AE000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609765795.000001F31E9FC000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3607238316.000001F31D000000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609200050.000001F31E82E000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1685201361.000001F31E862000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/lockup-mslogo-color-78c06e8898.png
Source: WWAHost.exe, 00000009.00000002.3607238316.000001F31D000000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/lockup-mslogo-color-78c06e8898.pngDLL
Source: WWAHost.exe, 00000009.00000002.3607238316.000001F31D000000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/lockup-mslogo-color-78c06e8898.pngder
Source: WWAHost.exe, 00000009.00000003.1685201361.000001F31E862000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/new-consumer-experience/empty-state-pinne
Source: WWAHost.exe, 00000009.00000003.1685201361.000001F31E862000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/new-consumer-experience/empty-state-recen
Source: WWAHost.exe, 00000009.00000003.1685201361.000001F31E862000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/new-consumer-experience/empty-state-share
Source: WWAHost.exe, 00000009.00000002.3608220107.000001F31D2E7000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1726708847.000001F31D2E7000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609200050.000001F31E842000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609369372.000001F31E8AE000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609765795.000001F31E9FC000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1698005381.000001F31E855000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609324011.000001F31E899000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697782816.000001F31E855000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1685201361.000001F31E862000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3604837967.000001EB18428000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/no-filesystem-access-6f5752c4c1.png
Source: WWAHost.exe, 00000009.00000002.3608220107.000001F31D2E7000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1726708847.000001F31D2E7000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609200050.000001F31E842000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3607426223.000001F31D075000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609765795.000001F31E9FC000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1698005381.000001F31E855000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609324011.000001F31E899000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697782816.000001F31E855000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1685201361.000001F31E862000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/onedrive-pwa-4db088f12c.png
Source: WWAHost.exe, 00000009.00000002.3609369372.000001F31E8AE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/onedrive-pwa-4db088f12c.pngg
Source: WWAHost.exe, 00000009.00000003.1698056279.000001F31E8F2000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609200050.000001F31E842000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697704092.000001F31E855000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609369372.000001F31E8AE000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609765795.000001F31E9FC000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1698005381.000001F31E855000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697878255.000001F31E8F1000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609200050.000001F31E82E000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697782816.000001F31E855000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1685201361.000001F31E862000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/pwa-unauth-hero-image-aa1ee34a38.png
Source: WWAHost.exe, 00000009.00000002.3609413951.000001F31E8C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/pwa-unauth-hero-image-aa1ee34a38.png...
Source: WWAHost.exe, 00000009.00000002.3607596531.000001F31D0E3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/pwa-unauth-hero-image-aa1ee34a38.png07-32
Source: WWAHost.exe, 00000009.00000002.3607238316.000001F31D000000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/pwa-unauth-hero-image-aa1ee34a38.pnge
Source: WWAHost.exe, 00000009.00000002.3607238316.000001F31D000000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/pwa-unauth-hero-image-aa1ee34a38.pnge:
Source: WWAHost.exe, 00000009.00000002.3609200050.000001F31E82E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/pwa-unauth-hero-image-aa1ee34a38.pnghttps
Source: WWAHost.exe, 00000009.00000002.3609765795.000001F31E9FC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/pwa-unauth-hero-image-aa1ee34a38.pngpng
Source: WWAHost.exe, 00000009.00000002.3607238316.000001F31D000000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1685201361.000001F31E862000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/unauth-checkmark-image-1999f0bf81.png
Source: WWAHost.exe, 00000009.00000002.3609765795.000001F31E9FC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/unauth-checkmark-image-1999f0bf81.png8
Source: WWAHost.exe, 00000009.00000002.3607238316.000001F31D000000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/unauth-checkmark-image-1999f0bf81.png:
Source: WWAHost.exe, 00000009.00000002.3607238316.000001F31D000000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/unauth-checkmark-image-1999f0bf81.pngder
Source: WWAHost.exe, 00000009.00000002.3609765795.000001F31E9FC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/unauth-checkmark-image-1999f0bf81.pngg
Source: WWAHost.exe, 00000009.00000002.3607238316.000001F31D000000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/unauth-checkmark-image-1999f0bf81.pngl
Source: WWAHost.exe, 00000009.00000002.3607238316.000001F31D000000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/unauth-checkmark-image-1999f0bf81.pngs
Source: WWAHost.exe, 00000009.00000002.3608220107.000001F31D2E7000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1726708847.000001F31D2E7000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609200050.000001F31E842000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609369372.000001F31E8AE000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609765795.000001F31E9FC000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609324011.000001F31E899000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1685201361.000001F31E862000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/welcome-sprite-79cda18828.png
Source: WWAHost.exe, 00000009.00000002.3608220107.000001F31D2E7000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1726708847.000001F31D2E7000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609200050.000001F31E842000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609369372.000001F31E8AE000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609765795.000001F31E9FC000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609200050.000001F31E82E000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609324011.000001F31E899000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1685201361.000001F31E862000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/zero-docs-sprite-14795e957f.png
Source: WWAHost.exe, 00000009.00000002.3609200050.000001F31E82E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/images/content/images/zero-docs-sprite-14795e957f.pngjs7
Source: WWAHost.exe, 00000009.00000002.3607238316.000001F31D000000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609200050.000001F31E82E000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1685201361.000001F31E862000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/officestartbundles/main.45541edc0a8783f8d033.css
Source: WWAHost.exe, 00000009.00000002.3609200050.000001F31E82E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/officestartbundles/main.45541edc0a8783f8d033.css1.1
Source: WWAHost.exe, 00000009.00000002.3607426223.000001F31D075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/officestartbundles/main.45541edc0a8783f8d033.cssC
Source: WWAHost.exe, 00000009.00000002.3609200050.000001F31E82E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/officestartbundles/main.45541edc0a8783f8d033.csshttps://res.cdn
Source: WWAHost.exe, 00000009.00000003.1685201361.000001F31E862000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/officestartbundles/main.71e052d7cb81dcea4f7e.js
Source: WWAHost.exe, 00000009.00000002.3607426223.000001F31D075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/officestartbundles/main.71e052d7cb81dcea4f7e.jsAC
Source: WWAHost.exe, 00000009.00000002.3609200050.000001F31E82E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/officestartbundles/main.71e052d7cb81dcea4f7e.jsa.js/
Source: WWAHost.exe, 00000009.00000002.3608679042.000001F31E6F8000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1695644390.000001F31E706000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/officestartbundles/main.71e052d7cb81dcea4f7e.jshttps://res.cdn.
Source: WWAHost.exe, 00000009.00000002.3609200050.000001F31E82E000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1685201361.000001F31E862000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/officestartbundles/pwa-bootstrap.ea485cd64b20cbd3ef7a.js
Source: WWAHost.exe, 00000009.00000002.3609369372.000001F31E8AE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/officestartbundles/pwa-bootstrap.ea485cd64b20cbd3ef7a.jsg
Source: WWAHost.exe, 00000009.00000002.3607238316.000001F31D000000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/officestartbundles/pwa-bootstrap.ea485cd64b20cbd3ef7a.jsviderht
Source: WWAHost.exe, 00000009.00000002.3609200050.000001F31E842000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1722838488.000001F31E7F6000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3607426223.000001F31D075000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697704092.000001F31E855000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609369372.000001F31E8AE000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697726345.000001F31E85B000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609086841.000001F31E7FA000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609200050.000001F31E82E000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1685201361.000001F31E862000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609274846.000001F31E871000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/officestartbundles/vendors.68241257a6ce02eadf71.js
Source: WWAHost.exe, 00000009.00000002.3607426223.000001F31D075000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3610499739.000001F31F3E7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/officestartbundles/vendors.68241257a6ce02eadf71.jshttps://res.c
Source: WWAHost.exe, 00000009.00000003.1726494180.000001F31D2A7000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609200050.000001F31E842000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3608679042.000001F31E6F8000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609438936.000001F31E8DD000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697704092.000001F31E855000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697726345.000001F31E85B000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1695644390.000001F31E702000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3608137412.000001F31D2A7000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1685201361.000001F31E862000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.cdn.office.net/officehub/versionless/officehome/thirdpartynotice.html
Source: WWAHost.exe, 00000009.00000002.3609200050.000001F31E842000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://res.conne
Source: WWAHost.exe, 00000009.00000003.1698056279.000001F31E8F2000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609200050.000001F31E842000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697704092.000001F31E855000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1698005381.000001F31E855000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697878255.000001F31E8F1000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697782816.000001F31E855000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1685201361.000001F31E862000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://signup.live.com/signup?mkt=en-CH&uiflavor=app&lw=1&fl=easi2&client_id=514833
Source: WWAHost.exe, 00000009.00000002.3609152848.000001F31E813000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://signup.live.com/signup?mkt=en-CH&uiflavor=app&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf8
Source: WWAHost.exe, 00000009.00000002.3610399901.000001F31F384000.00000004.00000020.00020000.00000000.sdmp, main.71e052d7cb81dcea4f7e[1].js.9.dr	String found in binary or memory: https://www.ftc.go.kr/bizCommPop.do?wrkr_no=1208105948
Source: WWAHost.exe, 00000009.00000002.3607238316.000001F31D000000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com/spartan/dhpC:
Source: WWAHost.exe, 00000009.00000002.3607238316.000001F31D000000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com/spartan/mmx0N
Source: WWAHost.exe, 00000009.00000002.3607238316.000001F31D000000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com/spartan/ntp
Source: WWAHost.exe, 00000009.00000002.3607238316.000001F31D000000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.msn.com/spartan/ntp_l
Source: WWAHost.exe, 00000009.00000002.3607553662.000001F31D0CC000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3607426223.000001F31D075000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3607553662.000001F31D0BE000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3604941164.000001EB1846D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.office.com
Source: WWAHost.exe, 00000009.00000002.3607553662.000001F31D0CC000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609274846.000001F31E85E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.office.com/
Source: WWAHost.exe, 00000009.00000002.3607553662.000001F31D0CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.office.com/Microsoft
Source: WWAHost.exe, 00000009.00000002.3609274846.000001F31E85E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.office.com/R
Source: WWAHost.exe, 00000009.00000002.3604941164.000001EB1846D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.office.com/h
Source: WWAHost.exe, 00000009.00000002.3609274846.000001F31E85E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.office.com/https://www.office.com/
Source: WWAHost.exe, 00000009.00000002.3605739566.000001F318700000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.office.com/hx
Source: WWAHost.exe, 00000009.00000002.3607238316.000001F31D000000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3610064227.000001F31F2BD000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3604837967.000001EB18428000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.office.com/pwa
Source: WWAHost.exe, 00000009.00000002.3609274846.000001F31E871000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.office.com/pwa3
Source: WWAHost.exe, 00000009.00000002.3609274846.000001F31E871000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.office.com/pwa4
Source: WWAHost.exe, 00000009.00000002.3607426223.000001F31D062000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.office.com/pwa4https://www.office.com/pwa
Source: WWAHost.exe, 00000009.00000002.3609200050.000001F31E842000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.office.com/pwa8
Source: WWAHost.exe, 00000009.00000002.3607426223.000001F31D075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.office.com/pwaC:
Source: WWAHost.exe, 00000009.00000002.3607426223.000001F31D075000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.office.com/pwaP
Source: WWAHost.exe, 00000009.00000002.3604766101.000001EB18400000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.office.com/pwaa
Source: WWAHost.exe, 00000009.00000002.3604837967.000001EB18428000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.office.com/pwab.wwa
Source: WWAHost.exe, 00000009.00000002.3607426223.000001F31D062000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1707856007.000001F31CFCD000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3607054019.000001F31CFCD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.office.com/pwahttps://www.office.com/pwa
Source: WWAHost.exe, 00000009.00000002.3607553662.000001F31D0CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.office.com/pwax
Source: WWAHost.exe, 00000009.00000002.3604766101.000001EB18400000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.office.comV

Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735

Source: unknown	HTTPS traffic detected: 13.107.6.156:443 -> 192.168.2.4:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 158.23.16.71:443 -> 192.168.2.4:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.21.56.51:443 -> 192.168.2.4:49750 version: TLS 1.2

Source: C:\Users\user\Desktop\MSBuild.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\Desktop\MSBuild.exe	Code function: 0_2_00007FFC3DD9E628	0_2_00007FFC3DD9E628
Source: C:\Users\user\Desktop\MSBuild.exe	Code function: 0_2_00007FFC3DD9D502	0_2_00007FFC3DD9D502
Source: C:\Users\user\Desktop\MSBuild.exe	Code function: 0_2_00007FFC3DD9C756	0_2_00007FFC3DD9C756
Source: C:\Users\user\Desktop\MSBuild.exe	Code function: 0_2_00007FFC3DDA0FF2	0_2_00007FFC3DDA0FF2
Source: C:\Users\user\Desktop\MSBuild.exe	Code function: 0_2_00007FFC3DDA0F6D	0_2_00007FFC3DDA0F6D
Source: C:\Users\user\Desktop\MSBuild.exe	Code function: 0_2_00007FFC3DD9917D	0_2_00007FFC3DD9917D
Source: C:\Users\user\Desktop\MSBuild.exe	Code function: 0_2_00007FFC3DDAC18D	0_2_00007FFC3DDAC18D

Source: MSBuild.exe, 00000000.00000002.3530823601.000002F2E1D12000.00000002.00000001.01000000.00000014.sdmp	Binary or memory string: OriginalFilenameSharpDX.DXGI.dll: vs MSBuild.exe
Source: MSBuild.exe, 00000000.00000002.3530886469.000002F2E1D52000.00000002.00000001.01000000.00000015.sdmp	Binary or memory string: OriginalFilenameSharpDX.dll0 vs MSBuild.exe
Source: MSBuild.exe, 00000000.00000002.3531224317.000002F2E443B000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameCmd.Exe.MUIj% vs MSBuild.exe
Source: MSBuild.exe, 00000000.00000002.3528777371.000002F2D920B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameSharpDX.Direct3D11.dllF vs MSBuild.exe
Source: MSBuild.exe, 00000000.00000002.3528777371.000002F2D920B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameSharpDX.DXGI.dll: vs MSBuild.exe
Source: MSBuild.exe, 00000000.00000002.3530051251.000002F2E1960000.00000004.08000000.00040000.00000000.sdmp	Binary or memory string: OriginalFilenameSharpDX.dll0 vs MSBuild.exe
Source: MSBuild.exe, 00000000.00000002.3530051251.000002F2E1960000.00000004.08000000.00040000.00000000.sdmp	Binary or memory string: OriginalFilenameSharpDX.DXGI.dll: vs MSBuild.exe
Source: MSBuild.exe, 00000000.00000002.3530051251.000002F2E1960000.00000004.08000000.00040000.00000000.sdmp	Binary or memory string: OriginalFilenameSharpDX.Direct3D11.dllF vs MSBuild.exe
Source: MSBuild.exe, 00000000.00000002.3530401863.000002F2E1B52000.00000002.00000001.01000000.00000013.sdmp	Binary or memory string: OriginalFilenameSharpDX.Direct3D11.dllF vs MSBuild.exe

Source: MSBuild.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: classification engine

Classification label: mal72.troj.evad.winEXE@7/15@6/3

Source: C:\Users\user\Desktop\MSBuild.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\MSBuild.exe.log

Jump to behavior

Source: C:\Users\user\Desktop\MSBuild.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5928:120:WilError_03
Source: C:\Users\user\Desktop\MSBuild.exe	Mutant created: \Sessions\1\BaseNamedObjects\MSBuild_Vcx2wfeB0nZfHqLA1N2swqQ92P

Source: C:\Users\user\Desktop\MSBuild.exe

File created: C:\Users\user\AppData\Local\Temp\SharpDX.dll

Jump to behavior

Source: MSBuild.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: MSBuild.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 49.80%

Source: C:\Users\user\Desktop\MSBuild.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\MSBuild.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: MSBuild.exe	Virustotal: Detection: 38%
Source: MSBuild.exe	ReversingLabs: Detection: 41%

Source: MSBuild.exe	String found in binary or memory: $F294ACFC-3146-4483-A7BF-ADDCA7C260E2
Source: MSBuild.exe	String found in binary or memory: $F294ACFC-3146-4483-A7BF-ADDCA7C260E2)

Source: unknown	Process created: C:\Users\user\Desktop\MSBuild.exe "C:\Users\user\Desktop\MSBuild.exe"
Source: unknown	Process created: C:\Windows\System32\WWAHost.exe "C:\Windows\system32\wwahost.exe" -ServerName:Microsoft.MicrosoftOfficeHub.wwa
Source: C:\Users\user\Desktop\MSBuild.exe	Process created: C:\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" /c timeout 3 & del C:\Users\user\AppData\Local\Temp\\SharpDX.dll & del C:\Users\user\AppData\Local\Temp\\SharpDX.Direct3D11.dll & del C:\Users\user\AppData\Local\Temp\\SharpDX.DXGI.dll
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout 3
Source: C:\Users\user\Desktop\MSBuild.exe	Process created: C:\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" /c timeout 3 & del C:\Users\user\AppData\Local\Temp\\SharpDX.dll & del C:\Users\user\AppData\Local\Temp\\SharpDX.Direct3D11.dll & del C:\Users\user\AppData\Local\Temp\\SharpDX.DXGI.dll	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout 3	Jump to behavior

Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: windows.staterepositorycore.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: wwaext.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: edgehtml.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: chakra.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: rometadata.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: rmclient.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: icuuc.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: icuin.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: icu.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: srpapi.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: windows.storage.applicationdata.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: mrmcorer.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: windows.staterepositoryclient.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: appxdeploymentclient.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: windows.ui.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: windowmanagementapi.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: inputhost.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: d2d1.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: windows.shell.servicehostbuilder.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: execmodelproxy.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: windows.internal.securitymitigationsbroker.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: uiamanager.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: windows.ui.core.textinput.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: windows.applicationmodel.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: windows.graphics.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: edgemanager.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: ninput.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: edgeiso.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: msimtf.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: directmanipulation.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: profext.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: twinapi.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: wwaapi.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: dataexchange.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: webruntimemanager.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: smartscreenps.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: windows.web.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Windows\System32\timeout.exe	Section loaded: version.dll	Jump to behavior

Source: C:\Users\user\Desktop\MSBuild.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0EE7644B-1BAD-48B1-9889-0281C206EB85}\InprocServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\MSBuild.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source: MSBuild.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: MSBuild.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: MSBuild.exe

Static file information: File size 1274880 > 1048576

Source: MSBuild.exe

Static PE information: Raw size of .text is bigger than: 0x100000 < 0x136c00

Source: MSBuild.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: D:\Downloads\SharpDX-3.1.0\SharpDX-3.1.0\Source\NET35\SharpDX\bin\Release\SharpDX.pdb source: MSBuild.exe, 00000000.00000002.3530886469.000002F2E1D52000.00000002.00000001.01000000.00000015.sdmp, MSBuild.exe, 00000000.00000002.3530051251.000002F2E1960000.00000004.08000000.00040000.00000000.sdmp, SharpDX.dll.0.dr
Source:	Binary string: D:\Downloads\SharpDX-3.1.0\SharpDX-3.1.0\Source\NET35\SharpDX.DXGI\bin\Release\SharpDX.DXGI.pdb8 source: MSBuild.exe, 00000000.00000002.3528777371.000002F2D920B000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000000.00000002.3530662314.000002F2E1CF2000.00000002.00000001.01000000.00000014.sdmp, MSBuild.exe, 00000000.00000002.3530051251.000002F2E1960000.00000004.08000000.00040000.00000000.sdmp, SharpDX.DXGI.dll.0.dr
Source:	Binary string: D:\Downloads\SharpDX-3.1.0\SharpDX-3.1.0\Source\NET35\SharpDX.DXGI\bin\Release\SharpDX.DXGI.pdb source: MSBuild.exe, 00000000.00000002.3528777371.000002F2D920B000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000000.00000002.3530662314.000002F2E1CF2000.00000002.00000001.01000000.00000014.sdmp, MSBuild.exe, 00000000.00000002.3530051251.000002F2E1960000.00000004.08000000.00040000.00000000.sdmp, SharpDX.DXGI.dll.0.dr
Source:	Binary string: D:\Downloads\desktop-duplication-net-master\desktop-duplication-net-master\libs\SharpDX.Direct3D11.pdb source: MSBuild.exe, 00000000.00000002.3528777371.000002F2D920B000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000000.00000002.3530051251.000002F2E1960000.00000004.08000000.00040000.00000000.sdmp, MSBuild.exe, 00000000.00000002.3530401863.000002F2E1B52000.00000002.00000001.01000000.00000013.sdmp, SharpDX.Direct3D11.dll.0.dr
Source:	Binary string: D:\Downloads\desktop-duplication-net-master\desktop-duplication-net-master\libs\SharpDX.Direct3D11.pdb T source: MSBuild.exe, 00000000.00000002.3528777371.000002F2D920B000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000000.00000002.3530051251.000002F2E1960000.00000004.08000000.00040000.00000000.sdmp, MSBuild.exe, 00000000.00000002.3530401863.000002F2E1B52000.00000002.00000001.01000000.00000013.sdmp, SharpDX.Direct3D11.dll.0.dr

Data Obfuscation

.NET source code contains potential unpacker

Source: MSBuild.exe, GTs-.cs	.Net Code: HDs_003D System.Reflection.Assembly.Load(byte[])
Source: MSBuild.exe, 5TE-.cs	.Net Code: DyU_003D System.Reflection.Assembly.Load(byte[])
Source: MSBuild.exe, 5TE-.cs	.Net Code: DyU_003D
Source: MSBuild.exe, WjI-.cs	.Net Code: XDI_003D

Source: MSBuild.exe

Static PE information: 0xE66D5F13 [Thu Jul 3 12:44:03 2092 UTC]

Source: C:\Users\user\Desktop\MSBuild.exe	Code function: 0_2_00007FFC3DD975D3 pushad ; retf	0_2_00007FFC3DD975D9
Source: C:\Users\user\Desktop\MSBuild.exe	Code function: 0_2_00007FFC3DD900BD pushad ; iretd	0_2_00007FFC3DD900C1
Source: C:\Users\user\Desktop\MSBuild.exe	Code function: 0_2_00007FFC3DDA2C4C push ebx; ret	0_2_00007FFC3DDA2C4A
Source: C:\Users\user\Desktop\MSBuild.exe	Code function: 0_2_00007FFC3DDA2C17 push ebx; ret	0_2_00007FFC3DDA2C4A

Source: MSBuild.exe

Static PE information: section name: .text entropy: 7.323575113604736

Source: C:\Users\user\Desktop\MSBuild.exe	File created: C:\Users\user\AppData\Local\Temp\SharpDX.Direct3D11.dll	Jump to dropped file
Source: C:\Users\user\Desktop\MSBuild.exe	File created: C:\Users\user\AppData\Local\Temp\SharpDX.DXGI.dll	Jump to dropped file
Source: C:\Users\user\Desktop\MSBuild.exe	File created: C:\Users\user\AppData\Local\Temp\SharpDX.dll	Jump to dropped file

Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\Desktop\MSBuild.exe	Memory allocated: 2F2C76D0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Memory allocated: 2F2E11A0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Memory allocated: 1F318700000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Memory allocated: 1F31D200000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Memory allocated: 1F31D300000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Memory allocated: 1F31E6D0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Memory allocated: 1F31E710000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Memory allocated: 1F31F710000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Memory allocated: 1F31F840000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Memory allocated: 1F331060000 memory commit \| memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\System32\WWAHost.exe	Memory allocated: 1F331C00000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\Desktop\MSBuild.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\MSBuild.exe

Window / User API: threadDelayed 1497

Jump to behavior

Source: C:\Users\user\Desktop\MSBuild.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\SharpDX.Direct3D11.dll			Jump to dropped file
Source: C:\Users\user\Desktop\MSBuild.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\SharpDX.dll			Jump to dropped file

Source: C:\Users\user\Desktop\MSBuild.exe TID: 4396	Thread sleep time: -30000s >= -30000s			Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe TID: 5940	Thread sleep time: -922337203685477s >= -30000s			Jump to behavior

Source: C:\Users\user\Desktop\MSBuild.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: MSBuild.exe, 00000000.00000002.3530886469.000002F2E1D52000.00000002.00000001.01000000.00000015.sdmp, MSBuild.exe, 00000000.00000002.3530051251.000002F2E1960000.00000004.08000000.00040000.00000000.sdmp, SharpDX.dll.0.dr	Binary or memory string: ClusterResourceIsReplicaVirtualMachine
Source: MSBuild.exe, 00000000.00000002.3529420825.000002F2E18CB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: _NECVMWar&Prod_VMware_SATA_CD00#4&224f42ef&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: MSBuild.exe, 00000000.00000002.3529074918.000002F2E1875000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3607426223.000001F31D075000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\MSBuild.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\MSBuild.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Desktop\MSBuild.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Users\user\Desktop\MSBuild.exe

Code function: 0_2_00007FFC3DDA5835 mouse_event,

0_2_00007FFC3DDA5835

Source: C:\Users\user\Desktop\MSBuild.exe	Process created: C:\Windows\System32\cmd.exe "C:\Windows\System32\cmd.exe" /c timeout 3 & del C:\Users\user\AppData\Local\Temp\\SharpDX.dll & del C:\Users\user\AppData\Local\Temp\\SharpDX.Direct3D11.dll & del C:\Users\user\AppData\Local\Temp\\SharpDX.DXGI.dll			Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\timeout.exe timeout 3			Jump to behavior

Source: C:\Users\user\Desktop\MSBuild.exe	Queries volume information: C:\Users\user\Desktop\MSBuild.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Internals\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Internals.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\SharpDX.Direct3D11.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\SharpDX.DXGI.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\MSBuild.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\SharpDX.dll VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\MSBuild.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Command and Scripting Interpreter	1 DLL Side-Loading	11 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 DLL Side-Loading	1 Disable or Modify Tools	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	31 Virtualization/Sandbox Evasion	Security Account Manager	31 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	11 Process Injection	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	2 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	2 Obfuscated Files or Information	LSA Secrets	1 System Network Configuration Discovery	SSH	Keylogging	13 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	12 Software Packing	Cached Domain Credentials	1 File and Directory Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Timestomp	DCSync	12 System Information Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
MSBuild.exe	38%	Virustotal		Browse
MSBuild.exe	42%	ReversingLabs	Win32.Trojan.Fuery
MSBuild.exe	100%	Avira	TR/Dropper.Gen

Dropped Files

Source	Detection	Scanner
C:\Users\user\AppData\Local\Temp\SharpDX.DXGI.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\SharpDX.Direct3D11.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\SharpDX.dll	0%	ReversingLabs

Source	Detection	Scanner	Label
http://schemas.datacontract.org/2004/07/V3T=	0%	Avira URL Cloud	safe
https://www.office.comV	0%	Avira URL Cloud	safe
https://res.c	0%	Avira URL Cloud	safe
http://react-dnd.github.io/react-dnd/docs/api/drop-target-monitor	0%	Avira URL Cloud	safe
https://res.cce	0%	Avira URL Cloud	safe
https://res.conne	0%	Avira URL Cloud	safe
https://www.ftc.go.kr/bizCommPop.do?wrkr_no=1208105948	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	high
s-part2-t-9999.fb-t-msedge.net	13.107.226.254	true	false	high
s-part-0044.t-0009.fb-t-msedge.net	13.107.253.72	true	false	high
entertainment-machinery.gl.at.ply.gg	147.185.221.26	true	true	unknown
a-9999.a-dc-msedge.net	131.253.33.254	true	false	high
a726.dscd.akamai.net	104.124.11.18	true	false	high
doh20prdapp01-canary-opaph.qatarcentral.cloudapp.azure.com	20.21.56.51	true	false	high
b-0004.b-msedge.net	13.107.6.156	true	false	high
ip-api.com	208.95.112.1	true	false	high
qro21prdapp01-canary.mexicocentral.cloudapp.azure.com	158.23.16.71	true	false	high
pki-goog.l.google.com	142.250.185.67	true	false	high
www.office.com	unknown	unknown	false	high
c.pki.goog	unknown	unknown	false	high
6c6dd065b6a8458980aaedfd14cf1f78.clo.footprintdns.com	unknown	unknown	false	unknown
8d4ffdf450db24a59c10ca2eef1e2974.azr.footprintdns.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://ip-api.com/xml/?fields=countryCode,query	false		high
https://www.office.com/pwa	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.ftc.go.kr/bizCommPop.do?wrkr_no=1208105948	WWAHost.exe, 00000009.00000002.3610399901.000001F31F384000.00000004.00000020.00020000.00000000.sdmp, main.71e052d7cb81dcea4f7e[1].js.9.dr	false	Avira URL Cloud: safe	unknown
https://www.office.com/	WWAHost.exe, 00000009.00000002.3607553662.000001F31D0CC000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609274846.000001F31E85E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://res.cce	WWAHost.exe, 00000009.00000002.3609200050.000001F31E842000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697704092.000001F31E855000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1698005381.000001F31E855000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697782816.000001F31E855000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.datacontract.org/2004/07/V3T=	MSBuild.exe, 00000000.00000002.3527279138.000002F2C91A1000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.office.com/R	WWAHost.exe, 00000009.00000002.3609274846.000001F31E85E000.00000004.00000020.00020000.00000000.sdmp	false		high
http://ip-api.com/xml/?fields=countryCode	MSBuild.exe, 00000000.00000002.3527279138.000002F2C91A1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://signup.live.com/signup?mkt=en-CH&uiflavor=app&lw=1&fl=easi2&client_id=51483342-085c-4d86-bf8	WWAHost.exe, 00000009.00000002.3609152848.000001F31E813000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schemas.datacontract.org/2004/07/	MSBuild.exe, 00000000.00000002.3527279138.000002F2C91A1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.office.com	WWAHost.exe, 00000009.00000002.3607553662.000001F31D0CC000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3607426223.000001F31D075000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3607553662.000001F31D0BE000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3604941164.000001EB1846D000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.office.com/https://www.office.com/	WWAHost.exe, 00000009.00000002.3609274846.000001F31E85E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://res.c	WWAHost.exe, 00000009.00000002.3607426223.000001F31D075000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697704092.000001F31E855000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697726345.000001F31E85B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.office.com/hx	WWAHost.exe, 00000009.00000002.3605739566.000001F318700000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.office.com/pwa4https://www.office.com/pwa	WWAHost.exe, 00000009.00000002.3607426223.000001F31D062000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.office.com/pwaP	WWAHost.exe, 00000009.00000002.3607426223.000001F31D075000.00000004.00000020.00020000.00000000.sdmp	false		high
https://signup.live.com/signup?mkt=en-CH&uiflavor=app&lw=1&fl=easi2&client_id=514833	WWAHost.exe, 00000009.00000003.1698056279.000001F31E8F2000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3609200050.000001F31E842000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697704092.000001F31E855000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1698005381.000001F31E855000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697878255.000001F31E8F1000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1697782816.000001F31E855000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1685201361.000001F31E862000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.office.com/Microsoft	WWAHost.exe, 00000009.00000002.3607553662.000001F31D0CC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.msn.com/spartan/ntp	WWAHost.exe, 00000009.00000002.3607238316.000001F31D000000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.office.com/pwahttps://www.office.com/pwa	WWAHost.exe, 00000009.00000002.3607426223.000001F31D062000.00000004.00000020.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000003.1707856007.000001F31CFCD000.00000004.00000800.00020000.00000000.sdmp, WWAHost.exe, 00000009.00000002.3607054019.000001F31CFCD000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.office.comV	WWAHost.exe, 00000009.00000002.3604766101.000001EB18400000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.office.com/pwaC:	WWAHost.exe, 00000009.00000002.3607426223.000001F31D075000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.office.com/pwaa	WWAHost.exe, 00000009.00000002.3604766101.000001EB18400000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.office.com/pwab.wwa	WWAHost.exe, 00000009.00000002.3604837967.000001EB18428000.00000004.00000020.00020000.00000000.sdmp	false		high
https://reactjs.org/docs/refs-and-the-dom.html#callback-refs	WWAHost.exe, 00000009.00000002.3613338234.000001F31FB36000.00000004.00000020.00020000.00000000.sdmp	false		high
http://react-dnd.github.io/react-dnd/docs/api/drop-target-monitor	WWAHost.exe, 00000009.00000002.3613338234.000001F31FB36000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=DU	WWAHost.exe, 00000009.00000002.3609274846.000001F31E871000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.msn.com/spartan/ntp_l	WWAHost.exe, 00000009.00000002.3607238316.000001F31D000000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.office.com/h	WWAHost.exe, 00000009.00000002.3604941164.000001EB1846D000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.office.com/pwa4	WWAHost.exe, 00000009.00000002.3609274846.000001F31E871000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.msn.com/spartan/dhpC:	WWAHost.exe, 00000009.00000002.3607238316.000001F31D000000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.office.com/pwa3	WWAHost.exe, 00000009.00000002.3609274846.000001F31E871000.00000004.00000020.00020000.00000000.sdmp	false		high
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	MSBuild.exe, 00000000.00000002.3527279138.000002F2C91A1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://res.conne	WWAHost.exe, 00000009.00000002.3609200050.000001F31E842000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.office.com/pwa8	WWAHost.exe, 00000009.00000002.3609200050.000001F31E842000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.office.com/pwax	WWAHost.exe, 00000009.00000002.3607553662.000001F31D0CC000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.msn.com/spartan/mmx0N	WWAHost.exe, 00000009.00000002.3607238316.000001F31D000000.00000004.00000020.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.6.156	b-0004.b-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
208.95.112.1	ip-api.com	United States	53334	TUT-ASUS	false
147.185.221.26	entertainment-machinery.gl.at.ply.gg	United States	12087	SALSGIVERUS	true

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1639354
Start date and time:	2025-03-15 11:53:10 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 9m 23s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	MSBuild.exe
Detection:	MAL
Classification:	mal72.troj.evad.winEXE@7/15@6/3
EGA Information:	Successful, ratio: 50%
HCA Information:	Successful, ratio: 92% Number of executed functions: 34 Number of non-executed functions: 4
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240s for sample files taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, RuntimeBroker.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.199.214.10, 2.23.77.188, 199.232.214.172, 172.202.163.200, 40.69.42.241, 20.12.23.50, 13.95.31.18, 20.242.39.171, 20.190.159.73, 40.126.31.1, 20.190.159.130, 40.126.31.73, 20.190.159.2, 40.126.31.67, 20.190.159.4, 40.126.31.71, 4.175.223.124, 51.137.3.145, 204.79.197.254, 199.232.210.172, 204.79.197.222, 104.124.11.18, 13.107.253.72, 184.86.251.8, 13.107.226.254
Excluded domains from analysis (whitelisted): a-ring-fallback.msedge.net, fp.msedge.net, prod-atm-wds-nav.trafficmanager.net, slscr.update.microsoft.com, data-edge.smartscreen.microsoft.com, e3913.cd.akamaiedge.net, res-1.cdn.office.net, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, e16604.dscf.akamaiedge.net, nav.smartscreen.microsoft.com, firstparty-azurefd-prod-first.trafficmanager.net, prod-agic-we-10.westeurope.cloudapp.azure.com, ocsp.digicert.com, login.live.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, fp-afd-nocache.afd.azureedge.net, a-ring.msedge.net, fp-afd-nocache.azureedge.net, prod.fs.microsoft.com.akadns.net, a-ring.a-9999.a-msedge.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.bing.com, prod-agic-we-2.westeurope.cloudapp.azure.com, prdv4a.aadg.msidentity.com, fs.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, www.tm.v4.a.prd.aadg.trafficmana
Execution Graph export aborted for target WWAHost.exe, PID 8084 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.

Simulations

Behavior and APIs

Time	Type	Description
06:54:57	API Interceptor	1x Sleep call for process: WWAHost.exe modified
06:58:03	API Interceptor	1x Sleep call for process: MSBuild.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.6.156	http://laserbyyas.com.au/double/PDF	Get hash	malicious	HTMLPhisher	Browse	www.office.com/
13.107.6.156	https://www.meg-claimpymnt.net	Get hash	malicious	HTMLPhisher	Browse	www.office.com/
208.95.112.1	detalle_transferencia_14-03-2025_4845655.js	Get hash	malicious	AgentTesla	Browse	ip-api.com/line/?fields=hosting
	PO-2513203-PDF.js	Get hash	malicious	AgentTesla	Browse	ip-api.com/line/?fields=hosting
	Shipping documents.pdf.lnk	Get hash	malicious	Unknown	Browse	ip-api.com/line/?fields
	Shipping documents.pdf.lnk	Get hash	malicious	Unknown	Browse	ip-api.com/line/?fields
	VSAXXKuhCu.exe	Get hash	malicious	Amadey, AsyncRAT	Browse	ip-api.com/json
	no.exe	Get hash	malicious	AsyncRAT, XWorm	Browse	ip-api.com/line/?fields=hosting
	Software Installer.exe	Get hash	malicious	Unknown	Browse	ip-api.com/json/8.46.123.189
	Exodus.exe.bin.exe	Get hash	malicious	Python Stealer, Blank Grabber	Browse	ip-api.com/json/?fields=225545
	Exodus25.9.2.exe.bin.exe	Get hash	malicious	Python Stealer, Blank Grabber	Browse	ip-api.com/json/?fields=225545
	Built.exe.bin.exe	Get hash	malicious	Python Stealer, Blank Grabber	Browse	ip-api.com/json/?fields=225545

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part2-t-9999.fb-t-msedge.net	OmPzU0Hl9J.exe	Get hash	malicious	Unknown	Browse	13.107.226.254
	https://innerworks621-my.sharepoint.com/:w:/g/personal/fbayoumi_iwexpress_com/EV18-ULK3bBFgswwIocxhGgB_RycisFJYnuNE85X0INcoQ?rtime=X7A0bhVM3Ug	Get hash	malicious	Unknown	Browse	13.107.226.254
	https://www.zdescargas.org/adobe-acrobat-pro-dc-2022-full-v15-12-2023/	Get hash	malicious	HTMLPhisher	Browse	13.107.226.254
a-9999.a-dc-msedge.net	Orden de compra__pdf.exe	Get hash	malicious	DarkCloud	Browse	131.253.33.254
	CalcForkbomber.A.bat	Get hash	malicious	Unknown	Browse	131.253.33.254
	pid.kvai.exe	Get hash	malicious	Unknown	Browse	131.253.33.254
	SecuriteInfo.com.Variant.Genie.8DN.315.18074.27911.exe	Get hash	malicious	FormBook	Browse	131.253.33.254
	VirusShare_53518afe3805b8b43ae97946b65a0d018804c78ecbec76d3dce7967aa87a64a2.exe	Get hash	malicious	Unknown	Browse	131.253.33.254
	9Fat24-jfN6-5Skq7-T70.msi	Get hash	malicious	Unknown	Browse	131.253.33.254
	Legjong.exe	Get hash	malicious	Unknown	Browse	131.253.33.254
	PBuqd1KwaW.vbs	Get hash	malicious	MoDiRAT	Browse	131.253.33.254
	OmPzU0Hl9J.exe	Get hash	malicious	Unknown	Browse	131.253.33.254
	kdfWuwngo2.exe	Get hash	malicious	Unknown	Browse	131.253.33.254
bg.microsoft.map.fastly.net	BBVA-P53269.pdf.exe	Get hash	malicious	DarkCloud	Browse	199.232.214.172
	Purchase Order Braiconf SA #U2013 26.09.2024.bat	Get hash	malicious	AsyncRAT, Batch Injector, VenomRAT	Browse	199.232.210.172
	VSAXXKuhCu.exe	Get hash	malicious	Amadey, AsyncRAT	Browse	199.232.214.172
	Our Order.xls	Get hash	malicious	Unknown	Browse	199.232.210.172
	FORMULARZ ODPRAWY CELNEJ DHL.xls	Get hash	malicious	Unknown	Browse	199.232.210.172
	PO-ARJ-2025-15ACA.xla.xlsx	Get hash	malicious	Unknown	Browse	199.232.214.172
	Account statement Payment release.xls	Get hash	malicious	Unknown	Browse	199.232.210.172
	NEW_TENDER_LIST.xlsx	Get hash	malicious	Unknown	Browse	199.232.214.172
	PO-ARJ-2025-15ACA.xla.xlsx	Get hash	malicious	Unknown	Browse	199.232.214.172
	nZsqQiT9Wr.lnk	Get hash	malicious	Unknown	Browse	199.232.214.172
s-part-0044.t-0009.fb-t-msedge.net	NEW_TENDER_LIST.xlsx	Get hash	malicious	Unknown	Browse	13.107.253.72
	SecuriteInfo.com.Other.Malware-gen.17831.10614.xlsx	Get hash	malicious	Unknown	Browse	13.107.253.72
	https://staemcommunuttly.com/gift/activation=Dor5Fhnm1w	Get hash	malicious	Unknown	Browse	13.107.253.72
	ATT50896.svg	Get hash	malicious	HTMLPhisher	Browse	13.107.253.72
	Quotation.xls	Get hash	malicious	Unknown	Browse	13.107.253.72
	http://modeltest.newworkventures.org/	Get hash	malicious	HTMLPhisher	Browse	13.107.253.72
	https://modeltest.newworkventures.org/signin-oidc	Get hash	malicious	HTMLPhisher	Browse	13.107.253.72
	http://soportedecuenta.github.io/	Get hash	malicious	Unknown	Browse	13.107.253.72
	https://safelinks.mygo1.com/ls/click?upn=u001.1mDt7ytPYCJSVG-2BhF04StW2tROdwwKr6jRaBFQun7DQsPCpIDdXBBFCv8a7W8LK7Rl6rwBC0tgURk55SBHyIzH8o575VHCM17sxou55q5sU-2BB8ESFPqFu-2FbpVoTlNake-2FQOhgnc23GE2x5-2BOAS2qCBGctpZ2IMzpWiWBU435uwa5-2FmA2HTxNem3-2Bt0ionxJjkqo4GGNcUs5-2BGYyYk-2FC6syojaGqt-2FBR8V6d6AroZskWO-2Btp2xcBwLL3o-2FZl7OSQxQ18gwEx-2BCrEr2XCC-2BjFJ7-2BDOC15dowjH72795CZZSHA-3Da76R_h5tndX3XP82u2CVP7HmVo430WGiFRFD0yG4tHzfM60QIQKknMz-2Bv4cvubxA4sUh-2F1aJ6qoya6273blXHvxERqm-2FEO-2BkfpUsxJp1Gre7i4RpcU3-2BZM-2Bz6eR0jjyehedttUWDFeqz7YehgBaJvqe4tJbDwyMaBzpAl1ycrHcR0yCJQvaIQ4aeF-2BQ-2B79-2B-2FlIK6fkzG-2B9ka9kfr1u2tUL7UElQ6I6ve-2BmqguhJR37zflsfTCQ6XW-2B9olHHI-2F-2FliITE0nSfPOkW6-2FWiGzwdjHPW9q36TssasiqezSGGoZpPD2wXb44aCqqvSglmXXnDeasuIi4iEVz8lUI9WDaOvlSsORhE9XfmCNPK7IqW58SgKJzo1pyrc2FIEkiket3ZcM2Ytr	Get hash	malicious	Unknown	Browse	13.107.253.72
	http://lookerstudio%2e%67%6f%6f%67%6c%65%2e%63%6f%6d/s/tVpHSqKmotA	Get hash	malicious	HTMLPhisher	Browse	13.107.253.72

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
TUT-ASUS	detalle_transferencia_14-03-2025_4845655.js	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	PO-2513203-PDF.js	Get hash	malicious	AgentTesla	Browse	208.95.112.1
	Shipping documents.pdf.lnk	Get hash	malicious	Unknown	Browse	208.95.112.1
	Shipping documents.pdf.lnk	Get hash	malicious	Unknown	Browse	208.95.112.1
	no.exe	Get hash	malicious	AsyncRAT, XWorm	Browse	208.95.112.1
	Software Installer.exe	Get hash	malicious	Unknown	Browse	208.95.112.1
	Exodus.exe.bin.exe	Get hash	malicious	Python Stealer, Blank Grabber	Browse	208.95.112.1
	Exodus25.9.2.exe.bin.exe	Get hash	malicious	Python Stealer, Blank Grabber	Browse	208.95.112.1
	Built.exe.bin.exe	Get hash	malicious	Python Stealer, Blank Grabber	Browse	208.95.112.1
	COMSurrogate.exe.bin.exe	Get hash	malicious	XWorm	Browse	208.95.112.1
SALSGIVERUS	KKveTTgaAAsecNNaaaa.ppc.elf	Get hash	malicious	Unknown	Browse	147.170.233.0
	no.exe	Get hash	malicious	AsyncRAT, XWorm	Browse	147.185.221.26
	Planck Scale Lantern.exe	Get hash	malicious	SheetRat	Browse	147.185.221.26
	COMSurrogate.exe.bin.exe	Get hash	malicious	XWorm	Browse	147.185.221.26
	1.exe.bin.exe	Get hash	malicious	XWorm	Browse	147.185.221.26
	NursultanClient.exe1.exe	Get hash	malicious	Unknown	Browse	147.185.221.26
	NursultanClient.exe1.exe	Get hash	malicious	Unknown	Browse	147.185.221.26
	Nursultan Alpha.exe1.exe	Get hash	malicious	AsyncRAT, XWorm	Browse	147.185.221.26
	WeanCline.exe1.exe	Get hash	malicious	XWorm	Browse	147.185.221.23
	general2.exe	Get hash	malicious	XWorm	Browse	147.185.221.26
MICROSOFT-CORP-MSN-AS-BLOCKUS	#U0437#U0430#U043a#U0430#U0437#U0430_03M4138.docx.doc	Get hash	malicious	Unknown	Browse	13.107.246.60
	#U0437#U0430#U043a#U0430#U0437#U0430_03M4138.docx.doc	Get hash	malicious	Unknown	Browse	13.107.246.60
	Our Order.xls	Get hash	malicious	Unknown	Browse	13.107.246.60
	Proof of Payment and Statement.xls	Get hash	malicious	Unknown	Browse	13.107.246.60
	APC2_240708172813545null_847608629.xls	Get hash	malicious	Unknown	Browse	13.107.246.60
	FORMULARZ ODPRAWY CELNEJ DHL.xls	Get hash	malicious	Unknown	Browse	52.123.128.14
	VSAXXKuhCu.exe	Get hash	malicious	Amadey, AsyncRAT	Browse	20.206.204.9
	Our Order.xls	Get hash	malicious	Unknown	Browse	13.107.246.60
	Proof of Payment and Statement.xls	Get hash	malicious	Unknown	Browse	13.107.246.60
	APC2_240708172813545null_847608629.xls	Get hash	malicious	Unknown	Browse	13.107.246.60

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://qnbcepteislem.duckdns.org/	Get hash	malicious	Unknown	Browse	20.21.56.51 158.23.16.71
	http://shivamsinghmer.github.io/Netflix-Web/	Get hash	malicious	HTMLPhisher	Browse	20.21.56.51 158.23.16.71
	https://valliappan2125.github.io/Amazon-Clone-Using-HTML-CSS-and-JS/	Get hash	malicious	HTMLPhisher	Browse	20.21.56.51 158.23.16.71
	https://accountreviewsocialflair.vercel.app/3a36efff&cf6=5a&1eG=K9dHF3da4b=D400e	Get hash	malicious	HTMLPhisher	Browse	20.21.56.51 158.23.16.71
	http://authe-ndax-login-can.webflow.io/	Get hash	malicious	HTMLPhisher	Browse	20.21.56.51 158.23.16.71
	http://help----content---ledger.webflow.io/	Get hash	malicious	HTMLPhisher	Browse	20.21.56.51 158.23.16.71
	http://case-id-1000228255935.counselschambers.co.uk/	Get hash	malicious	Unknown	Browse	20.21.56.51 158.23.16.71
	https://sarsgov.tax/296pe	Get hash	malicious	Unknown	Browse	20.21.56.51 158.23.16.71
	https://trezaerwallet.webflow.io/	Get hash	malicious	HTMLPhisher	Browse	20.21.56.51 158.23.16.71
	http://auth--m--ledger--sso.webflow.io/	Get hash	malicious	HTMLPhisher	Browse	20.21.56.51 158.23.16.71
6271f898ce5be7dd52b0fc260d0662b3	Our Order.xls	Get hash	malicious	Unknown	Browse	13.107.6.156
	Proof of Payment and Statement.xls	Get hash	malicious	Unknown	Browse	13.107.6.156
	APC2_240708172813545null_847608629.xls	Get hash	malicious	Unknown	Browse	13.107.6.156
	Proof of Payment and Statement.xls	Get hash	malicious	Unknown	Browse	13.107.6.156
	Account statement Payment release.xls	Get hash	malicious	Unknown	Browse	13.107.6.156
	DHL 733988905ZHH.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.6.156
	(Ref PO24777.xls	Get hash	malicious	Unknown	Browse	13.107.6.156
	SecuriteInfo.com.Other.Malware-gen.8493.9635.xlsx	Get hash	malicious	Unknown	Browse	13.107.6.156
	DHL 733988905ZHH.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.6.156
	(Ref PO24777.xls	Get hash	malicious	Unknown	Browse	13.107.6.156

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\SharpDX.DXGI.dll	CheatHubLauncher.exe	Get hash	malicious	Orcus	Browse
C:\Users\user\AppData\Local\Temp\SharpDX.DXGI.dll	Abboba.exe	Get hash	malicious	Orcus	Browse
C:\Users\user\AppData\Local\Temp\SharpDX.Direct3D11.dll	CheatHubLauncher.exe	Get hash	malicious	Orcus	Browse
C:\Users\user\AppData\Local\Temp\SharpDX.Direct3D11.dll	Abboba.exe	Get hash	malicious	Orcus	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\MSBuild.exe.log

Download File

Process:	C:\Users\user\Desktop\MSBuild.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2161
Entropy (8bit):	5.374288386557906
Encrypted:	false
SSDEEP:	48:MxHKQwYHKGSI6o1HKlT4UHK5AHKKkrTHmtHTHK1qHGIs0HK9+vxp3/elZHNpv:iqbYqGSI6o1qZ4Uq2qKkfGtzHKwmj0q1
MD5:	671F86CD090FDE8F8DE4422170B34EBC
SHA1:	D00C17200E53337616DF1F42AD77AFB46080BC5F
SHA-256:	E19F86C07E7CD657A2DA5C4C605900DCF3D2D99358CDDA353FAD8B42ACF1E09F
SHA-512:	FD20A411648952C118C194A51E89F9313ED3AC4C66C90C80AD7195F125D67F03E6128FD43146E62C7B977F88D90CE8051CE195F571470DBD815ABCD57E636EC4
Malicious:	true
Reputation:	low
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System\b187b7f31cee3e87b56c8edca55324e0\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\31326613607f69254f3284ec964796c8\System.Core.ni.dll",0..3,"System.Runtime.Serialization, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Runteb92aa12#\59b895279ce98e3656dc73dc2d6aa911\System.Runtime.Serialization.ni.dll",0..2,"SMDiagnostics, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",0..3,"System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Xml\db3df155ec9c0595b0198c4487f36ca1\System.Xml.ni.dll",0..2,"System.ServiceModel.Internals, Version=4.0.0.0

C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\IINQQITY\lockup-mslogo-color-78c06e8898[1].png

Download File

Process:	C:\Windows\System32\WWAHost.exe
File Type:	PNG image data, 270 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4810
Entropy (8bit):	7.855581951358708
Encrypted:	false
SSDEEP:	96:i84g14EtPpOs4y6g9/0MMfwXYgOxRzeSzXBV8tBzmAa2BW:l42pOVOfMfOYgozeSzXsBql2w
MD5:	78C06E8898D2AC40434FB9F09053F06E
SHA1:	269B39D77BFA1EEB114AD12D626B6F41953E5267
SHA-256:	80697DA1AF54CC7E68F99DAC55B6AFF97D9FC5CE6EA09232F521E4AA3477E52E
SHA-512:	F5BE00BCB099FF7FC7603BFE879FD9916B3126F26F67AB29C0F8E4A4BF920D6232DE75E5BF9C08DFB55151EAC198128453883AA2D803557493D5089441FA8912
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......0...........tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c138 79.159824, 2016/09/14-01:09:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:6EDA39961C6D11E7B34FB74D95634B77" xmpMM:InstanceID="xmp.iid:6EDA39951C6D11E7B34FB74D95634B77" xmp:CreatorTool="Adobe Photoshop CC 2017 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9B3C621D0DDF11E7A7E3F34350026390" stRef:documentID="xmp.did:9B3C621E0DDF11E7A7E3F34350026390"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>b E....8IDATx..].tT......DAPL...8.....Q.JDk...i.lQ*hm..;.F .dw.>H.X.Uz...+B-.@.I.....X).....M.&..........d7.....

C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\KAT9HXAG\main.45541edc0a8783f8d033[1].css

Download File

Process:	C:\Windows\System32\WWAHost.exe
File Type:	Unicode text, UTF-8 text, with very long lines (61284)
Category:	dropped
Size (bytes):	147114
Entropy (8bit):	5.890904192670751
Encrypted:	false
SSDEEP:	3072:gwafwJam/iwWYbxQjpflnmx0i5aVZJAiMJKrIzk:dQlXYbxQjX4IVZPMJgIzk
MD5:	286A435BE5CA2E3220AF86F8D04AAE9E
SHA1:	10E015662038705C9C9A328A56D414F70D72C3D3
SHA-256:	30A613DED75D86F967F40BAF238A22BE64C6FF5A7F5A5F5A2D238C5B20159D56
SHA-512:	8135E6CECA41C4626E85F1661E93A21226353C405A3564E3F7C1117408BB70973B26D4C4C9FFB5AAE9D1BA54E87DF1FA99681D4AF6FBCCADD38F6B66AF5AB1CF
Malicious:	false
Reputation:	low
Preview:	body {. margin: 0;. padding: 0;. height: 100vh;. font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Roboto',. 'Oxygen', 'Ubuntu', 'Cantarell', 'Fira Sans', 'Droid Sans',. 'Helvetica Neue', sans-serif;. -webkit-font-smoothing: antialiased;. -moz-osx-font-smoothing: grayscale;. overflow-y: hidden;.}..code {. font-family: source-code-pro, Menlo, Monaco, Consolas, 'Courier New',. monospace;.}...ms-ohp-Icon,.ms-ohp-Icon:before{font-weight:normal;font-variant:normal;text-transform:none;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;vertical-align:middle;display:inline-block;line-height:1em;font-size:24px}.ms-ohp-Icon--wordLogo:before{content:".";position:relative;z-index:1}.ms-ohp-Icon--wordLogoFill{position:relative;z-index:1}.ms-ohp-Icon--wordLogoFill:after{content:".";position:absolute;bottom:0;color:#fff;z-index:-1}[dir=ltr] .ms-ohp-Icon--wordLogoFill:after{left:0}[dir=rtl] .ms-ohp-Icon--wordLogoFill:after{r

C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\KAT9HXAG\main.71e052d7cb81dcea4f7e[1].js

Download File

Process:	C:\Windows\System32\WWAHost.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1168931
Entropy (8bit):	5.524458916073665
Encrypted:	false
SSDEEP:	24576:0/Q1x0QOpRNlK7y4mWHqHNDTIlnvj7SNwS8sLIK8u+rTs+2SYeJFC2l2Xq6XHGOX:0/wx0QOpRNlK7y4mWHqHNDTIlnvj7SN/
MD5:	9244322877080711AA95467A325824F2
SHA1:	274F48890EF9CE1B6A20F78B29489B8699B2D630
SHA-256:	5ED02F58149051E80822C076EE4B5558720B88EC964125F65F31F9BA6F0135BA
SHA-512:	EA3B12E03AC5D2A5E998ECB2E147A087E6EB3437331ACE31BEE2ED403885728FA58FA8245FD73F6173E45647044E9831C0B263E0CE0382239AEB2DB18FD8F401
Malicious:	false
Reputation:	low
Preview:	(()=>{"use strict";var e={114404:()=>{},130667:(e,t,o)=>{o.d(t,{A:()=>n});const n={"flex-col-container":"CommonAppHostControlStyles-module__flex-col-container__Au_UX",container:"CommonAppHostControlStyles-module__container__ENe7h","container-no-grow":"CommonAppHostControlStyles-module__container-no-grow__kbHI0","container-center":"CommonAppHostControlStyles-module__container-center__OsaVE",transparentBackground:"CommonAppHostControlStyles-module__transparentBackground__uGsib"}},717222:(e,t,o)=>{o.d(t,{A:()=>n});const n={"centered-flex-container":"EdgeworthItemControl-module__centered-flex-container__CUZYW","centered-flex-container__justify-space-between":"EdgeworthItemControl-module__centered-flex-container__justify-space-between__za3wa","list-item__height-restrictor":"EdgeworthItemControl-module__list-item__height-restrictor__ufsjm","commanding-item":"EdgeworthItemControl-module__commanding-item__kNoO6","document-list-item":"EdgeworthItemControl-module__document-list-item__X0liy","doc

C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\KAT9HXAG\otel-logger-a79fa4a4c2580f67e6a9[1].js

Download File

Process:	C:\Windows\System32\WWAHost.exe
File Type:	ASCII text, with very long lines (65446)
Category:	dropped
Size (bytes):	96560
Entropy (8bit):	5.283950110976788
Encrypted:	false
SSDEEP:	768:n/49x86KxB+bBIQLCe3V8D+3QvQ6owf94eHnTWyjj5qKFbc3G06xrOZe0iUDWrJ0:n/4A338AY1eRFbF9ORKrqE/2l/U8d
MD5:	FD377D8A8A79E2F2E31FB94A67B8317A
SHA1:	AA5A48EA239E4B3B11C681723C74EF546F285314
SHA-256:	2A0F4FF92BC0D812C3AD1E8A92BC09ABD8EE25FB4D336864C44C04C407A67DAE
SHA-512:	2425607A18D01BAFB5CE117E91E4EBD2A6AFA6B5890FC6CE716356C273A11800B30357E5D30646EE4C93D7F012D979DEADB9C410462482AF542B0814110C5233
Malicious:	false
Reputation:	low
Preview:	/! For license information please see otel-logger-a79fa4a4c2580f67e6a9.js.LICENSE.txt /.!function(e){var n={};function t(r){if(n[r])return n[r].exports;var i=n[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,t),i.l=!0,i.exports}t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:r})},t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t.t=function(e,n){if(1&n&&(e=t(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(t.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var i in e)t.d(r,i,function(n){return e[n]}.bind(null,i));return r},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,n){return Object.prototype.hasOwnProperty.call(e,n)},t.p="",t(t.s="BV

C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\KAT9HXAG\pwa-bootstrap.ea485cd64b20cbd3ef7a[1].js

Download File

Process:	C:\Windows\System32\WWAHost.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	108626
Entropy (8bit):	5.26329986561442
Encrypted:	false
SSDEEP:	1536:ObCiKg/LZqGsWMcQjrWlfIfh40EsQdoMjOA1Q/XlfQ5xKTjspO:wFqG1QjrWlwfnEpz18l0k
MD5:	80196D208341C4BE3FF8F10AAA4AE1AF
SHA1:	BAB08A043BD06BA5638897FC6C0D304FBAC49DF8
SHA-256:	65B9CE50828D34D71E77763ABCA2FEE548401FC4B288D078534FB22B0415B261
SHA-512:	98AFDEB574BA22E7FDC28A1977290612EE50E0F33FAFB9A69BAEACAE848A50674F7AD7E51DC169B8E47241582BC89A779BDFA2B752F3BDC1712E4D9B766C0DE4
Malicious:	false
Preview:	(()=>{"use strict";var e={175491:(e,t,n)=>{var r=n(217576),o=n(999686);let i=!1;function a(){return(0,r.__awaiter)(this,void 0,void 0,(function(){if(!i)try{const e=o.Zm,t=(0,o._j)();yield(0,o.By)({channel:t,logger:e}),i=!0}catch(e){}}))}const s="Launcher";function c(e){return(0,r.__awaiter)(this,void 0,void 0,(function(){const t=yield(0,o.hj)(function(){return(0,o.O3)(s).getId()}(),"launchUri",[(0,o.w7)(e)],void 0,864e5),n=function(e){return(0,o.O5)(e),{success:(0,o.Vf)(e),errorCode:(0,o.N2)(e),errorMessage:(0,o.JU)(e),additionalInfo:(0,o.JU)(e)}}(t);return t.verifyAtEndOfMessage("launchUri"),n}))}let u;(0,o.Mb)(s,{addedHandler:function(e){for(const t of e.methodNames)"LaunchUri"===t&&(u=c)},revokedHandler:function(){u=void 0}});var l=n(173243),d=n.n(l);const f=()=>"function"==typeof(null===performance\|\|void 0===performance?void 0:performance.getEntriesByType)&&performance.getEntriesByType("resource").find((e=>(e=>("link"===e.initiatorType\|\|"script"===e.initiatorType)&&(e.name.includ

C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\KAT9HXAG\sharedscripts-939520eada[1].js

Download File

Process:	C:\Windows\System32\WWAHost.exe
File Type:	ASCII text, with very long lines (31932)
Category:	dropped
Size (bytes):	53194
Entropy (8bit):	5.382571760823651
Encrypted:	false
SSDEEP:	768:JmneBhpLkzObU/cOTEShONa7zUVvHCIMDzwzOuVrxYrJr0tBt7F4dZkBgeUfU7aE:DBhrbU0OTEShONylIRTrrlEQT
MD5:	939520EADA638AF9C1CCAB3DEBB8B14B
SHA1:	8A3F7D9992E48620C61C58DC1C251DCCE524173F
SHA-256:	57604CC987E25FE54B77B409E487ABEB52CCD8F7FBF8BB08D31D98ED977FD6EC
SHA-512:	4212982022961F884493DC4FE09902C49E01F4FB922608A1DA12DBADB4F3BFC4DC80AED325FEF79B137A3C445A3402B71FD80AEB4182AB091678228303DA5EB5
Malicious:	false
Preview:	!function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t();else if("function"==typeof define&&define.amd)define([],t);else{var i=t();for(var n in i)("object"==typeof exports?exports:e)[n]=i[n]}}(this,function(){return function(e){function t(n){if(i[n])return i[n].exports;var r=i[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,t),r.l=!0,r.exports}var i={};return t.m=e,t.c=i,t.i=function(e){return e},t.d=function(e,i,n){t.o(e,i)\|\|Object.defineProperty(e,i,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var i=e&&e.e?function(){return e.default}:function(){return e};return t.d(i,"a",i),i},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="",t(t.s=30)}([function(e,t,i){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),function(e){e[e.Unspecified=0]="Unspecified",e[e.String=1]="String",e[e.Int64=2]="Int64",e[e.Double=3]="Double",e[e.Boolean=4]="Boolean"}(t.AWTPropertyType\|\|(t.AWTPropertyType={})),function(e

C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\KAT9HXAG\vendors.68241257a6ce02eadf71[1].js

Download File

Process:	C:\Windows\System32\WWAHost.exe
File Type:	ASCII text, with very long lines (65450)
Category:	dropped
Size (bytes):	1827016
Entropy (8bit):	5.471614872707118
Encrypted:	false
SSDEEP:	49152:Iwz9yGU1oYFQbMjh5RRVkJSe3JhkJTAjucy2j6fQHe3JbDvpttZwJbhTJrSK4Vxz:OLp
MD5:	8DD995CDF1976189CE27C3B36D11382A
SHA1:	A6C6886BE4701A0DDDC23FF26FC574A0584A842F
SHA-256:	3E89B9B96E5582D92C196FBBE23207E8F0197271E541ACE5F3D842EC15737978
SHA-512:	4E08D2E968FA0F595E11655BE5A7929BCFDA45EA9C11175C292564AFF547CE958C05BF4A9468F49E14D55A7073A5C6EFED6CAFE91FABFF97D85EBE0C0638C4DC
Malicious:	false
Preview:	/! For license information please see vendors.68241257a6ce02eadf71.js.LICENSE.txt /.(self.webpackChunkoffice_home=self.webpackChunkoffice_home\|\|[]).push([[18096],{725284:(e,t,r)=>{"use strict";r.d(t,{E:()=>B});var n=r(608911),i=r(273287),o=r(193462),a=r(280454),s=r(618928),c=r(579750),l=r(546379),u=r(204785),d=r(813475),h=r(911161),f=r(767922),p=r(16244),g=r(724366),v=r(250134),m=r(107821),y=r(306882);function b(e){return{preferredInteractionType:null,brokerRedirectParams:{},actAsBroker:!1,allowBrokering:!1,trustedBrokerDomains:[],brokerHandshakeTimeout:e?.brokerHandshakeTimeout\|\|u.gL,brokerMessageTimeout:e?.brokerMessageTimeout\|\|y.YH+1e3,brokerInteractionTimeout:e?.brokerInteractionTimeout\|\|u.Jq,...e}}var S=r(248375),w=r(569393),C=r(766675),A=r(892706),E=r(266407);class k extends m.v{constructor(e,t,r){super(e),this.currentBrokerRedirectResponse=void 0,this.hybridAuthPromise=void 0,this.pwbBrokerAppConfiguration=b(t),this.redirectResponseMap=new Map,this.embeddedAppConfigMap=new Map

C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\LCNHN4MU\pwa-unauth-hero-image-aa1ee34a38[1].png

Download File

Process:	C:\Windows\System32\WWAHost.exe
File Type:	PNG image data, 2834 x 1630, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5496395
Entropy (8bit):	7.992384838003121
Encrypted:	true
SSDEEP:	98304:ztKCMlZNPdJogHfOVOvu/bc1hTGtcVaLl0W3x6fDIL9Asb+fGwU/uGuWmM0JNM9L:zQCSlHDvu/bcCmcLb089AswB8evjlo
MD5:	AA1EE34A38A96BC7E62820F240B7CC98
SHA1:	1E6E75BF8FD0817F53878E7E39035355640364B3
SHA-256:	0957AF5018B6E1FE7F91CBB6DDA66504B7ABE306A1B89C783BD82979A4697569
SHA-512:	B7350FE1CA72F6580BFB4256F4BAA7B285245325A5164D3FFD2F6AE6263A708F99890EDBC11508EFEA9C9DB924C6ABFF8CF716D2FDB7A0A87DBED5345AC879D1
Malicious:	false
Preview:	.PNG........IHDR.......^.....n..>....pHYs...%...%.IR$.....sRGB.........gAMA......a..S..IDATx.....+............1..4.. ..'!.k...L.?.B.B7p8\...w%..V..[...m...s.....[...X..#.n...\|......~.7.1....l...h.C7.0..&.....>].t.1U.5...$.....>..J.../i+9.e.\.........[.?I........X..=.L9K0w.._?6..Mw...jz.r[../..;?i.<}.....Z......66.3..Q..:.mf>.\|m....Ec......ab..<......eJ..c#..t,~.....*......~.....6....w...In..>ly.d.b.....S?".1.X...d;...OV...=.1....s.[...O.(..>.Y....>....C..7.w$w}.K.[q\|..n.>.V..0......<..2?.]....\|96........%.....V..U....5......Z.=`...S....5.....j.]{..b`.._v1.e.........U...Ao.c.F.\\|a...;..=]......]....... .^..S....TUw!...O:^}..\.....0.dhZ..CA..K3vK...HWRn..T.d... H..>;..-O.o.._...9...6?..5.......mf.......T......=..?...E......._#...c.......Z.}D.s.T...W4~W.yc..2.D.......l.4....z...B\.q...g........d....>=.'....]..T.I.Q>....S...6K.^X...Q.9.mp.C......{.u.1Or..kQ=.......r..kq..F.z..r.{.d.3.z.A...M......]<Gc..<..9..S..)~.{..."...).!.9+.g.=j.NKY...

C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\LCNHN4MU\unauth-checkmark-image-1999f0bf81[1].png

Download File

Process:	C:\Windows\System32\WWAHost.exe
File Type:	PNG image data, 22 x 17, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	291
Entropy (8bit):	6.692324959468803
Encrypted:	false
SSDEEP:	6:6v/lhPotBT7IR/jvBLR4xSi7jwj6ah25w6Df+/5h9CIIm33kRkup:6v/7qc/jvB94sIeN36DCh9MWpc
MD5:	1999F0BF815BCE72E4FF30C9F11057C8
SHA1:	F4F3B71117510404AFB11A0CA4A4394B04D2537B
SHA-256:	92E650094CD9A15483537C9CC43DD043211BE6A0D3F5EBC1AC6326B989811554
SHA-512:	4AF6740B7526F8FC592331EA967EC05F3245D98795EE384AAE0801289DD5370D69729EDB7A06B8F720AF013DD761B0DC4BD49F1260A35C452970ECCBD824EC62
Malicious:	false
Preview:	.PNG........IHDR..............\.....pHYs...%...%.IR$.....sRGB.........gAMA......a.....IDATx......0...$.....AGp"......&..#....a..j.J[h......w-.R.....E.xaB7....\|p..7.<@.\|..a...n..(].G....J....u....h......B.1<..`Q.M! .8.E........Hw4..G.6..j..>n..P........8R.0l.e*J...X.<.......IEND.B`.

C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\Settings\settings.dat

Download File

Process:	C:\Windows\System32\WWAHost.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.8327948613370115
Encrypted:	false
SSDEEP:	24:c44WvBKnIlDuUbwB7V1SypN/+wB7KD59nQZPou:pJpiU87V1z/7KDUn
MD5:	E5DFA30462F673C41B78C4A3B84D6ECC
SHA1:	D487D76A82E8CD34AD333041452748CB9F96423A
SHA-256:	7106A84D1DD48277751CE4BA0F1615328FECE1355BE33F49941ADABC728B9A59
SHA-512:	30A97D0464D073B316EF10DDE5D3C7324C372C8FDF4AE84ECB609D4579EE0B6B74E55D24D7F4645A4707E3961192EB1FC77523B16DE0D4D704FA0D45A33D6581
Malicious:	false
Preview:	regf........b.Q.7.................. ...........y.b.3.d.8.b.b.w.e.\.S.e.t.t.i.n.g.s.\.s.e.t.t.i.n.g.s...d.a.t...y..j.....J.....y..j.....J.........z..j.....J.....rmtm.c....................................................................................................................................................................................................................................................................................................................................................&........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\Settings\settings.dat.LOG1

Download File

Process:	C:\Windows\System32\WWAHost.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	8192
Entropy (8bit):	0.8709946775232296
Encrypted:	false
SSDEEP:	24:J144Wv7WjOO7nIlDuUbwB7V1SypN/+wB7KD59nQZPou:YJGjU87V1z/7KDUn
MD5:	F416AD082C5249DB3F26BFBB11E403E7
SHA1:	75F78A11F8DD42A7844FEB86149E21DF1E5326D4
SHA-256:	E56A70C96C80488390131D62DEC35003FFAB5CE8E321D9EA6DD9C2AFC015AFE2
SHA-512:	7F75E069A18ADE4BFCD14CC2FADE14A3C17B5FA8331A966B24D4549D6B571CEC744D9D1AD88FD8C96CE6B36C4371B43F9DB73661C09CE0898C332608EF9CC076
Malicious:	false
Preview:	regf........b.Q.7.................. ...........y.b.3.d.8.b.b.w.e.\.S.e.t.t.i.n.g.s.\.s.e.t.t.i.n.g.s...d.a.t...y..j.....J.....y..j.....J.........z..j.....J.....rmtm.c....................................................................................................................................................................................................................................................................................................................................................&HvLE....................7.=e...Ah.g*q@..........hbin................b.Q.7..........nk,.T...7..................................x...............................Test....p...sk..h...h.......t.......H...X.............4.........?.......................?....................... ... ...............YQ..fr]%dc;.............vk..R...0...........bridgeInstance..............vk......h...........SplashImageWidth........p...sk..x...x.......t.......H...X.............4.........?.......................

C:\Users\user\AppData\Local\Temp\SharpDX.DXGI.dll

Download File

Process:	C:\Users\user\Desktop\MSBuild.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	128512
Entropy (8bit):	5.974873724347634
Encrypted:	false
SSDEEP:	1536:taSL4xpOaI0PXSgMkPXsHIrPQkrNCivO5Ib6VU3x8w85SMxcnqNojG5JW/UlibAs:taSLYpfI0fTtP8HIbQkreK
MD5:	2B44C70C49B70D797FBB748158B5D9BB
SHA1:	93E00E6527E461C45C7868D14CF05C007E478081
SHA-256:	3762D43C83AF69CD38C9341A927CA6BD00F6BAE8217C874D693047D6DF4705BF
SHA-512:	FACED62F6ECBFA2EE0D7A47E300302D23030D1F28758CBE9C442E9D8D4F8359C59088AA6237A28103E43D248C8EFC7EEAF2C184028701B752DF6CCE92D6854D0
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: CheatHubLauncher.exe, Detection: malicious, Browse Filename: Abboba.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...".EX...........!................^.... ........@.. .......................`............@.....................................K.... .......................@......\|................................................ ............... ..H............text...d.... ...................... ..`.rsrc........ ......................@..@.reloc.......@......................@..B................@.......H........y..............................................................(......0..8.......s.......o......(....~...(....(....-..,...o....+..o.....0..............(.......0................(......(.....J......(.....(......0............(.....(.......(.......0..............(.......(.......0..-.............(....~...(....(....-..,..o......X.+....."..($......Z.~....(....-..s.......0.............(........0..E.......~......{.........{....M........ZXM)....(......~....(....

C:\Users\user\AppData\Local\Temp\SharpDX.Direct3D11.dll

Download File

Process:	C:\Users\user\Desktop\MSBuild.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	278016
Entropy (8bit):	5.936561200969171
Encrypted:	false
SSDEEP:	3072:6ccUvNf/AThDrcfiSDt0XN3ZDoyz91Sy0KwbwgG5OHDyGQsnHZ09K3vJqlQ1VcTS:zRfi+SmNgOHDyGQsucvJqW6Ts4dDjJZ
MD5:	98EB5BA5871ACDEAEBF3A3B0F64BE449
SHA1:	C965284F60EF789B00B10B3DF60EE682B4497DE3
SHA-256:	D7617D926648849CBFEF450B8F48E458EE52E2793FB2251A30094B778AA8848C
SHA-512:	A60025E304713D333E4B82B2D0BE28087950688B049C98D2DB5910C00B8D45B92E16D25AC8A58FF1318DE019DE3A9A00C7CBF8A6AD4B5BB1CB175DAFA1B9BEA2
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: CheatHubLauncher.exe, Detection: malicious, Browse Filename: Abboba.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....EX...........!.....6..........NT... ........@.. ....................................@..................................S..S....`..............................\S............................................... ............... ..H............text...T4... ...6.................. ..`.rsrc........`.......8..............@..@.reloc...............<..............@..B................0T......H.......h....?...........................................................(r......(....V.~....(........o......"..(.......Z.~....(....-..s.......0.............(........0..8................{........{....M........ZXM)..............(....V.~....(........o......"..(.......Z.~....(....-..s.......0.............(........0..8................{........{....M........ZXM)..............(.....0.....................(....}.......(....}........(.......+r..."....(....}......."....}.

C:\Users\user\AppData\Local\Temp\SharpDX.dll

Download File

Process:	C:\Users\user\Desktop\MSBuild.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	252928
Entropy (8bit):	6.009569774467475
Encrypted:	false
SSDEEP:	6144:/yx2FKVw+6LRnencMdWqtFhdpGFfnbJoeeYr:6w+Ienc1qf6bJrd
MD5:	FFB4B61CC11BEC6D48226027C2C26704
SHA1:	FA8B9E344ACCBDC4DFFA9B5D821D23F0716DA29E
SHA-256:	061542FF3FB36039B7BBFFDF3E07B66176B264C1DFD834A14B09C08620717303
SHA-512:	48AA6130BF1F5BD6DE19256BBDF754C0158B43DD122CEC47BB801A7A7B56F2DA268BFDEC24D135621764A23278EAD3DCC35911A057E2DFA55A348BAE8EF7B8A9
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...DjDX...........!................N.... ........@.. .......................@............@.....................................W............................ ......h................................................ ............... ..H............text...T.... ...................... ..`.rsrc...............................@..@.reloc....... ......................@..B................0.......H...........dP...........................................................(....(......(.....0.. ........,....o....,..o....o......o......{...."..}.........(.....0..[........(......}.....~....}.....{....,:..i........}......(...+Z..(....}......+......(......X...2....(...........}......(...+Z..(....}......{....N.{....,..{.....i.&.{..........{.........{....(............ZXMoP......{........{....(............ZX.oO.......,...}.....{....(.....~....}......2.{....o.......

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	7.3190147468149105
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.80% Win32 Executable (generic) a (10002005/4) 49.75% Generic CIL Executable (.NET, Mono, etc.) (73296/58) 0.36% Windows Screen Saver (13104/52) 0.07% Generic Win/DOS Executable (2004/3) 0.01%
File name:	MSBuild.exe
File size:	1'274'880 bytes
MD5:	0787d35eb5c46f4203cf0555b34eee6b
SHA1:	c527e9c5e6f1babb201dbc53a84ba7cd80bdebaf
SHA256:	5e07f74604e6e7dd476772d83ee6ba27954ec3a4d5fad67c0cf349437a19cb5a
SHA512:	eb6199fd055318cd07470453bbeb6a2d197bb88860910bfd136db5daac3e249aee54b34592dbbe1f112cae6b6770fb37499f527945195c87b6f05427fb893c1a
SSDEEP:	24576:trgmuhVNHKfTo7FMMvgo09V9fdY79o2evPCq0Dl6HpoFd:jNTo7Oh99fd6C28xO
TLSH:	C045DF8127B49A37C28F42B5E062E7144BF0E0453B93A74BAF62E9FB6C837D14D29517
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...._m..........."...0..l..........N.... ........@.. ....................................`................................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x538b4e
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0xE66D5F13 [Thu Jul 3 12:44:03 2092 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x138af4	0x57	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x13a000	0x242	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x13c000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x136b54	0x136c00	c3e79a635fb846e8ad0b29ad6f0229c5	False	0.7278108972747386	data	7.323575113604736	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0x13a000	0x242	0x400	c7f077a351319185a91e95c1893a65f5	False	0.306640625	data	3.526286411687027	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x13c000	0xc	0x200	010635b6d714472e828d5544cd9f9a19	False	0.044921875	data	0.10191042566270775	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x13a058	0x1ea	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators			0.5489795918367347

Imports

DLL	Import
mscoree.dll	_CorExeMain

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 15, 2025 11:54:05.760165930 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:05.764862061 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:05.765028954 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:06.795981884 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:06.845489025 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:07.411473989 CET	49712	80	192.168.2.4	208.95.112.1
Mar 15, 2025 11:54:07.416152954 CET	80	49712	208.95.112.1	192.168.2.4
Mar 15, 2025 11:54:07.416209936 CET	49712	80	192.168.2.4	208.95.112.1
Mar 15, 2025 11:54:07.416426897 CET	49712	80	192.168.2.4	208.95.112.1
Mar 15, 2025 11:54:07.421091080 CET	80	49712	208.95.112.1	192.168.2.4
Mar 15, 2025 11:54:07.881222963 CET	80	49712	208.95.112.1	192.168.2.4
Mar 15, 2025 11:54:07.896097898 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:07.900743008 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:07.923566103 CET	49712	80	192.168.2.4	208.95.112.1
Mar 15, 2025 11:54:09.189539909 CET	49671	443	192.168.2.4	204.79.197.203
Mar 15, 2025 11:54:09.501702070 CET	49671	443	192.168.2.4	204.79.197.203
Mar 15, 2025 11:54:10.111073017 CET	49671	443	192.168.2.4	204.79.197.203
Mar 15, 2025 11:54:11.317497015 CET	49671	443	192.168.2.4	204.79.197.203
Mar 15, 2025 11:54:13.720458984 CET	49671	443	192.168.2.4	204.79.197.203
Mar 15, 2025 11:54:17.957829952 CET	49678	443	192.168.2.4	20.189.173.27
Mar 15, 2025 11:54:18.267388105 CET	49678	443	192.168.2.4	20.189.173.27
Mar 15, 2025 11:54:18.502677917 CET	49681	80	192.168.2.4	2.17.190.73
Mar 15, 2025 11:54:18.532996893 CET	49671	443	192.168.2.4	204.79.197.203
Mar 15, 2025 11:54:18.814204931 CET	49681	80	192.168.2.4	2.17.190.73
Mar 15, 2025 11:54:18.876717091 CET	49678	443	192.168.2.4	20.189.173.27
Mar 15, 2025 11:54:19.191567898 CET	49709	443	192.168.2.4	131.253.33.254
Mar 15, 2025 11:54:19.196208954 CET	443	49709	131.253.33.254	192.168.2.4
Mar 15, 2025 11:54:19.206882954 CET	49709	443	192.168.2.4	131.253.33.254
Mar 15, 2025 11:54:19.206921101 CET	49709	443	192.168.2.4	131.253.33.254
Mar 15, 2025 11:54:19.211488008 CET	443	49709	131.253.33.254	192.168.2.4
Mar 15, 2025 11:54:19.211529016 CET	443	49709	131.253.33.254	192.168.2.4
Mar 15, 2025 11:54:19.290060997 CET	443	49709	131.253.33.254	192.168.2.4
Mar 15, 2025 11:54:19.290111065 CET	49709	443	192.168.2.4	131.253.33.254
Mar 15, 2025 11:54:19.290633917 CET	49709	443	192.168.2.4	131.253.33.254
Mar 15, 2025 11:54:19.295224905 CET	443	49709	131.253.33.254	192.168.2.4
Mar 15, 2025 11:54:19.423579931 CET	49681	80	192.168.2.4	2.17.190.73
Mar 15, 2025 11:54:19.657376051 CET	49721	80	192.168.2.4	142.250.185.67
Mar 15, 2025 11:54:19.662103891 CET	80	49721	142.250.185.67	192.168.2.4
Mar 15, 2025 11:54:19.662198067 CET	49721	80	192.168.2.4	142.250.185.67
Mar 15, 2025 11:54:19.662275076 CET	49721	80	192.168.2.4	142.250.185.67
Mar 15, 2025 11:54:19.666910887 CET	80	49721	142.250.185.67	192.168.2.4
Mar 15, 2025 11:54:20.173631907 CET	49678	443	192.168.2.4	20.189.173.27
Mar 15, 2025 11:54:20.286817074 CET	80	49721	142.250.185.67	192.168.2.4
Mar 15, 2025 11:54:20.337660074 CET	49721	80	192.168.2.4	142.250.185.67
Mar 15, 2025 11:54:20.344028950 CET	80	49721	142.250.185.67	192.168.2.4
Mar 15, 2025 11:54:20.521595001 CET	80	49721	142.250.185.67	192.168.2.4
Mar 15, 2025 11:54:20.673589945 CET	49721	80	192.168.2.4	142.250.185.67
Mar 15, 2025 11:54:20.673607111 CET	49681	80	192.168.2.4	2.17.190.73
Mar 15, 2025 11:54:22.675947905 CET	49678	443	192.168.2.4	20.189.173.27
Mar 15, 2025 11:54:23.173590899 CET	49681	80	192.168.2.4	2.17.190.73
Mar 15, 2025 11:54:23.521692038 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:23.531294107 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:23.536521912 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:23.536587000 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:23.647809982 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:23.652553082 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:23.712814093 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:24.869275093 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:24.970714092 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:24.994565964 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:24.999249935 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:24.999260902 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:24.999314070 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:24.999319077 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:24.999329090 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:24.999342918 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:24.999365091 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:24.999385118 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:24.999464989 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:24.999475002 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:24.999491930 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:24.999500036 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:24.999597073 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:25.004059076 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:25.004069090 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:25.004084110 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:25.004086971 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:25.004091024 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:25.004093885 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:25.004101992 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:26.607361078 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:26.672070026 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:26.676812887 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:26.676822901 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:26.676831961 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:26.676971912 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:26.676980019 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:26.677033901 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:26.677042961 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:26.677099943 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:26.677117109 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:26.677144051 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:26.681385040 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:26.681394100 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:26.681418896 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:26.681427002 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:26.681435108 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:26.681555986 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:26.682547092 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:27.657994032 CET	49678	443	192.168.2.4	20.189.173.27
Mar 15, 2025 11:54:27.795612097 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:27.844024897 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:27.848879099 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:27.848927021 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:27.849133015 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:27.849142075 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:27.849266052 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:27.849275112 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:27.849344969 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:27.849358082 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:27.849448919 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:27.849457979 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:27.853425980 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:27.853503942 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:27.853513002 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:27.853583097 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:27.853586912 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:27.853645086 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:27.853648901 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:28.064234972 CET	49681	80	192.168.2.4	2.17.190.73
Mar 15, 2025 11:54:28.220509052 CET	49671	443	192.168.2.4	204.79.197.203
Mar 15, 2025 11:54:29.225050926 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:29.267374992 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:29.273010015 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:29.278611898 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:29.278621912 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:29.278676987 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:29.278683901 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:29.278692961 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:29.279192924 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:29.279201984 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:29.279320955 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:29.279381990 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:29.279392958 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:29.284451008 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:29.284459114 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:29.284544945 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:29.284553051 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:29.284574032 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:29.285130024 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:29.285137892 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:30.345804930 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:30.391747952 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:30.396437883 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:30.396550894 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:30.396559954 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:30.396580935 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:30.396589994 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:30.396749020 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:30.396756887 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:30.396831989 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:30.396840096 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:30.396847963 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:30.401067972 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:30.401076078 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:30.401117086 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:30.401160002 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:30.401186943 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:30.401195049 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:30.401248932 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:30.401257992 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:30.401266098 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:31.636535883 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:31.672391891 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:31.677261114 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:31.677273035 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:31.677303076 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:31.677310944 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:31.677402973 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:31.677412033 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:31.677428007 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:31.677436113 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:31.677489042 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:31.677498102 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:31.681853056 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:31.681862116 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:31.681910038 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:31.681919098 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:31.681931019 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:31.681937933 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:31.681996107 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:32.626946926 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:32.673625946 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:32.673897028 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:32.678611040 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:32.678621054 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:32.678661108 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:32.678669930 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:32.678734064 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:32.678742886 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:32.678793907 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:32.678802013 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:32.678807020 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:32.683186054 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:32.683196068 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:32.683204889 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:32.683235884 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:32.683267117 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:32.683275938 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:32.683321953 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:32.683331013 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:33.661211967 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:33.704875946 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:33.719504118 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:33.724360943 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:33.724370956 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:33.724380970 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:33.724389076 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:33.724395990 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:33.724402905 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:33.724411011 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:33.728945971 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:33.728996992 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:33.729005098 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:33.729036093 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:33.729043961 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:33.729052067 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:33.729059935 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:33.729063034 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:33.729065895 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:33.729074955 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:34.665318966 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:34.720513105 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:34.721323967 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:34.726176023 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:34.726186991 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:34.726203918 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:34.726212025 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:34.726214886 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:34.726218939 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:34.726366043 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:34.726433992 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:34.726443052 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:34.730752945 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:34.730763912 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:34.730777979 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:34.730787039 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:34.730837107 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:34.730844975 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:34.730904102 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:34.730918884 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:35.586431980 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:35.626863956 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:35.627315998 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:35.632045984 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:35.632056952 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:35.632092953 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:35.632101059 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:35.632164955 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:35.632174015 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:35.632220984 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:35.632230043 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:35.632240057 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:35.636744022 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:35.636754990 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:35.636764050 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:35.636771917 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:35.636780024 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:35.636797905 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:35.636805058 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:35.636823893 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:36.415479898 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:36.455032110 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:36.459810019 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:36.459820032 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:36.459839106 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:36.459847927 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:36.459924936 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:36.459933996 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:36.459944963 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:36.459973097 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:36.459981918 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:36.460017920 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:36.464365005 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:36.464374065 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:36.464390039 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:36.464397907 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:36.464467049 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:36.464476109 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:36.464483976 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:37.267482996 CET	49678	443	192.168.2.4	20.189.173.27
Mar 15, 2025 11:54:37.673626900 CET	49681	80	192.168.2.4	2.17.190.73
Mar 15, 2025 11:54:37.933234930 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:37.988939047 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:38.160056114 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:38.164848089 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:38.164860010 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:38.164874077 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:38.164882898 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:38.164892912 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:38.164988041 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:38.164994955 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:38.165035963 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:38.165044069 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:38.165131092 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:38.169385910 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:38.169394970 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:38.169493914 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:38.169502974 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:38.169509888 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:38.169517994 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:38.169526100 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:39.684408903 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:39.719803095 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:39.724598885 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:39.724610090 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:39.724617004 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:39.724625111 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:39.724662066 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:39.724809885 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:39.724817991 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:39.724853039 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:39.724860907 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:39.724942923 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:39.729108095 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:39.729115963 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:39.729198933 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:39.729206085 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:39.729247093 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:39.729254961 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:39.729263067 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:40.487219095 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:40.533013105 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:40.936496019 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:40.941658020 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:40.941670895 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:40.941715002 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:40.941734076 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:40.941814899 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:40.941823006 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:40.941832066 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:40.941838980 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:40.941847086 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:40.941857100 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:40.946209908 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:40.946218014 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:40.946259022 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:40.946266890 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:40.946275949 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:40.946589947 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:40.946598053 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:42.207626104 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:42.251761913 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:42.274693966 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:42.279392958 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:42.279402971 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:42.279567003 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:42.279575109 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:42.279582024 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:42.279589891 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:42.279597998 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:42.283966064 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:42.283973932 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:42.283982038 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:42.283988953 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:42.284208059 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:42.284215927 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:42.284251928 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:42.284259081 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:42.284275055 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:42.284282923 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:43.225040913 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:43.267524958 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:43.269118071 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:43.273803949 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:43.273886919 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:43.273896933 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:43.273932934 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:43.273941040 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:43.273992062 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:43.274000883 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:43.274029016 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:43.274036884 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:43.278358936 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:43.278367043 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:43.278444052 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:43.278451920 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:43.278491020 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:43.278507948 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:43.278604984 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:43.278611898 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:44.071042061 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:44.114069939 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:44.121294975 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:44.121309042 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:44.121407986 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:44.121417046 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:44.121500015 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:44.121510029 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:44.121546984 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:44.121562004 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:44.121658087 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:44.121666908 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:44.128951073 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:44.128966093 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:44.128973961 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:44.128993988 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:44.129002094 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:44.129009962 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:44.129018068 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.215265989 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.267412901 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:45.281723976 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:45.286454916 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.286464930 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.286612988 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.286621094 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.286628008 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.286637068 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.286639929 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.291050911 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.291062117 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.291115046 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.291122913 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.291203022 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.291210890 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.291264057 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.291271925 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.291320086 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.291327953 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.900624990 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.955003023 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:45.970671892 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:45.975985050 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.975996017 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.976006031 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.976183891 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.976191998 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.976237059 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.976244926 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.980566025 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.980573893 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.980603933 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.980612993 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.980667114 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.980679989 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.980770111 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.980777025 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.980803013 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:45.980811119 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:47.186784983 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:47.236171007 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:47.239110947 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:47.243853092 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:47.243861914 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:47.243884087 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:47.243891954 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:47.243896008 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:47.243901014 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:47.243947983 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:47.244007111 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:47.244016886 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:47.248389006 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:47.248399019 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:47.248450994 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:47.248460054 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:47.248477936 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:47.248486996 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:47.248536110 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:47.248544931 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:47.989330053 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.032923937 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:48.038144112 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.038153887 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.038180113 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.038404942 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.038413048 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.038466930 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.038475990 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.038556099 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.038563013 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.038594007 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.043380022 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.043387890 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.043497086 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.043505907 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.043673038 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.043680906 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.043689966 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.836638927 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.876764059 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:48.891489983 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:48.896226883 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.896238089 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.896248102 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.896255970 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.896301031 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.896313906 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.896344900 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.900832891 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.900840998 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.900856972 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.900865078 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.900881052 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.900888920 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.900933027 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.900940895 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.900989056 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:48.900998116 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:49.555165052 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:49.611129999 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:49.647787094 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:49.652523994 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:49.652535915 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:49.652652025 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:49.652682066 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:49.652690887 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:49.652700901 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:49.652715921 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:49.657150984 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:49.657160044 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:49.657177925 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:49.657186985 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:49.657233000 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:49.657310009 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:49.657318115 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:49.657363892 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:49.657371998 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:49.657377958 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:50.504631996 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:50.548652887 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:50.568984985 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:50.574486017 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:50.574496031 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:50.574673891 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:50.574681997 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:50.574688911 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:50.574697971 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:50.574706078 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:50.574712992 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:50.574721098 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:50.579101086 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:50.579108953 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:50.579113960 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:50.579119921 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:50.579175949 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:50.579185009 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:50.579237938 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:50.579246044 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:50.579262972 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:50.579324007 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:51.400542021 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:51.439135075 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:51.443907022 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:51.443917990 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:51.443936110 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:51.443944931 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:51.443977118 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:51.444036007 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:51.444045067 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:51.444052935 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:51.444122076 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:51.444129944 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:51.448626041 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:51.448636055 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:51.448640108 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:51.448648930 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:51.448664904 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:51.448673964 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:51.448707104 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:52.555469036 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:52.601392984 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:52.606187105 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:52.606197119 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:52.606245995 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:52.606255054 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:52.606265068 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:52.606276989 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:52.606302023 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:52.606311083 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:52.606359005 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:52.606368065 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:52.611212015 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:52.611219883 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:52.611223936 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:52.611229897 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:52.611236095 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:52.611243010 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:52.611351013 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:53.239226103 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:53.283246040 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:53.287689924 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:53.292474985 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:53.292558908 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:53.292567968 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:53.292603016 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:53.292721987 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:53.292782068 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:53.292803049 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:53.297111034 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:53.297118902 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:53.297166109 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:53.297173977 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:53.297218084 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:53.297225952 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:53.297271967 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:53.297280073 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:53.297314882 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:53.297322989 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:54.050857067 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:54.095540047 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:54.099558115 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:54.104301929 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:54.104317904 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:54.104329109 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:54.104336977 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:54.104360104 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:54.104370117 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:54.104425907 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:54.109095097 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:54.109105110 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:54.109148026 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:54.109155893 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:54.109164953 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:54.109172106 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:54.109189034 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:54.109199047 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:54.109249115 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:54.109256983 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:55.301470995 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:55.344527960 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:55.350069046 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:55.350079060 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:55.350086927 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:55.350090027 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:55.350199938 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:55.350207090 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:55.350215912 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:55.350224972 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:55.350233078 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:55.350240946 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:55.354742050 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:55.354749918 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:55.354829073 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:55.354840994 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:55.354912043 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:55.354923964 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:55.354933023 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:55.971199989 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:56.111169100 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:56.137269974 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:56.173657894 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:56.176809072 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:56.178400993 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:56.178410053 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:56.178416014 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:56.178510904 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:56.178519964 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:56.178595066 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:56.178602934 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:56.178694010 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:56.178702116 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:56.178733110 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:56.183042049 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:56.183049917 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:56.183103085 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:56.183110952 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:56.183223009 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:56.183232069 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:56.183239937 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:56.220555067 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:56.391258001 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:56.517441988 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:56.601547003 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:56.720580101 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:56.807112932 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:56.908041000 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:57.044043064 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:57.097434044 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:57.142437935 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:57.144244909 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:57.216831923 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:57.221606970 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:57.221617937 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:57.221673012 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:57.221681118 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:57.221720934 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:57.221729040 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:57.221806049 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:57.221815109 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:57.221843958 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:57.221894026 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:57.226306915 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:57.226315022 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:57.226321936 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:57.226330042 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:57.226335049 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:57.226349115 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:57.226438999 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:57.226490974 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:57.226500988 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:57.239146948 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:57.314316988 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:58.360385895 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:58.423703909 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:58.427304983 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:58.432034016 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:58.432044029 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:58.432092905 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:58.432101965 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:58.432166100 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:58.432173967 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:58.432207108 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:58.432215929 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:58.432224989 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:58.432948112 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:58.432956934 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:58.436559916 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:58.436569929 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:58.436626911 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:58.436724901 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:58.436772108 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:58.436820030 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:59.302561998 CET	49725	443	192.168.2.4	13.107.6.156
Mar 15, 2025 11:54:59.302594900 CET	443	49725	13.107.6.156	192.168.2.4
Mar 15, 2025 11:54:59.302648067 CET	49725	443	192.168.2.4	13.107.6.156
Mar 15, 2025 11:54:59.312747955 CET	49725	443	192.168.2.4	13.107.6.156
Mar 15, 2025 11:54:59.312767982 CET	443	49725	13.107.6.156	192.168.2.4
Mar 15, 2025 11:54:59.362538099 CET	49726	443	192.168.2.4	158.23.16.71
Mar 15, 2025 11:54:59.362600088 CET	443	49726	158.23.16.71	192.168.2.4
Mar 15, 2025 11:54:59.362699986 CET	49726	443	192.168.2.4	158.23.16.71
Mar 15, 2025 11:54:59.363029957 CET	49726	443	192.168.2.4	158.23.16.71
Mar 15, 2025 11:54:59.363046885 CET	443	49726	158.23.16.71	192.168.2.4
Mar 15, 2025 11:54:59.404983044 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:59.501574993 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:54:59.506467104 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:59.506477118 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:59.506570101 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:59.506577969 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:59.506648064 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:59.506695986 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:59.506834030 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:59.506843090 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:59.506854057 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:54:59.866029024 CET	443	49725	13.107.6.156	192.168.2.4
Mar 15, 2025 11:54:59.866103888 CET	49725	443	192.168.2.4	13.107.6.156
Mar 15, 2025 11:54:59.866118908 CET	443	49725	13.107.6.156	192.168.2.4
Mar 15, 2025 11:54:59.866154909 CET	49725	443	192.168.2.4	13.107.6.156
Mar 15, 2025 11:54:59.940984011 CET	49725	443	192.168.2.4	13.107.6.156
Mar 15, 2025 11:54:59.941000938 CET	443	49725	13.107.6.156	192.168.2.4
Mar 15, 2025 11:54:59.941200972 CET	49725	443	192.168.2.4	13.107.6.156
Mar 15, 2025 11:54:59.941210032 CET	443	49725	13.107.6.156	192.168.2.4
Mar 15, 2025 11:54:59.941250086 CET	443	49725	13.107.6.156	192.168.2.4
Mar 15, 2025 11:54:59.941292048 CET	49725	443	192.168.2.4	13.107.6.156
Mar 15, 2025 11:55:00.049338102 CET	443	49725	13.107.6.156	192.168.2.4
Mar 15, 2025 11:55:00.049356937 CET	443	49725	13.107.6.156	192.168.2.4
Mar 15, 2025 11:55:00.049382925 CET	443	49725	13.107.6.156	192.168.2.4
Mar 15, 2025 11:55:00.049402952 CET	49725	443	192.168.2.4	13.107.6.156
Mar 15, 2025 11:55:00.049420118 CET	443	49725	13.107.6.156	192.168.2.4
Mar 15, 2025 11:55:00.049429893 CET	49725	443	192.168.2.4	13.107.6.156
Mar 15, 2025 11:55:00.049458981 CET	49725	443	192.168.2.4	13.107.6.156
Mar 15, 2025 11:55:00.049683094 CET	443	49725	13.107.6.156	192.168.2.4
Mar 15, 2025 11:55:00.049729109 CET	49725	443	192.168.2.4	13.107.6.156
Mar 15, 2025 11:55:00.050168991 CET	443	49725	13.107.6.156	192.168.2.4
Mar 15, 2025 11:55:00.050200939 CET	443	49725	13.107.6.156	192.168.2.4
Mar 15, 2025 11:55:00.050225019 CET	49725	443	192.168.2.4	13.107.6.156
Mar 15, 2025 11:55:00.050230980 CET	443	49725	13.107.6.156	192.168.2.4
Mar 15, 2025 11:55:00.050261021 CET	49725	443	192.168.2.4	13.107.6.156
Mar 15, 2025 11:55:00.050273895 CET	49725	443	192.168.2.4	13.107.6.156
Mar 15, 2025 11:55:00.050277948 CET	443	49725	13.107.6.156	192.168.2.4
Mar 15, 2025 11:55:00.050326109 CET	49725	443	192.168.2.4	13.107.6.156
Mar 15, 2025 11:55:00.050851107 CET	49725	443	192.168.2.4	13.107.6.156
Mar 15, 2025 11:55:00.050870895 CET	443	49725	13.107.6.156	192.168.2.4
Mar 15, 2025 11:55:00.050905943 CET	443	49725	13.107.6.156	192.168.2.4
Mar 15, 2025 11:55:00.050961971 CET	49725	443	192.168.2.4	13.107.6.156
Mar 15, 2025 11:55:00.088957071 CET	443	49726	158.23.16.71	192.168.2.4
Mar 15, 2025 11:55:00.089041948 CET	49726	443	192.168.2.4	158.23.16.71
Mar 15, 2025 11:55:00.110980988 CET	49726	443	192.168.2.4	158.23.16.71
Mar 15, 2025 11:55:00.110997915 CET	443	49726	158.23.16.71	192.168.2.4
Mar 15, 2025 11:55:00.111274004 CET	443	49726	158.23.16.71	192.168.2.4
Mar 15, 2025 11:55:00.111342907 CET	49726	443	192.168.2.4	158.23.16.71
Mar 15, 2025 11:55:00.111890078 CET	49726	443	192.168.2.4	158.23.16.71
Mar 15, 2025 11:55:00.156322956 CET	443	49726	158.23.16.71	192.168.2.4
Mar 15, 2025 11:55:00.287365913 CET	443	49726	158.23.16.71	192.168.2.4
Mar 15, 2025 11:55:00.287415981 CET	443	49726	158.23.16.71	192.168.2.4
Mar 15, 2025 11:55:00.287416935 CET	49726	443	192.168.2.4	158.23.16.71
Mar 15, 2025 11:55:00.287456989 CET	49726	443	192.168.2.4	158.23.16.71
Mar 15, 2025 11:55:00.288495064 CET	49726	443	192.168.2.4	158.23.16.71
Mar 15, 2025 11:55:00.288513899 CET	443	49726	158.23.16.71	192.168.2.4
Mar 15, 2025 11:55:00.291215897 CET	49735	443	192.168.2.4	158.23.16.71
Mar 15, 2025 11:55:00.291249990 CET	443	49735	158.23.16.71	192.168.2.4
Mar 15, 2025 11:55:00.291388988 CET	49735	443	192.168.2.4	158.23.16.71
Mar 15, 2025 11:55:00.291646957 CET	49735	443	192.168.2.4	158.23.16.71
Mar 15, 2025 11:55:00.291659117 CET	443	49735	158.23.16.71	192.168.2.4
Mar 15, 2025 11:55:01.013911009 CET	443	49735	158.23.16.71	192.168.2.4
Mar 15, 2025 11:55:01.013972044 CET	49735	443	192.168.2.4	158.23.16.71
Mar 15, 2025 11:55:01.014708996 CET	49735	443	192.168.2.4	158.23.16.71
Mar 15, 2025 11:55:01.014717102 CET	443	49735	158.23.16.71	192.168.2.4
Mar 15, 2025 11:55:01.015089035 CET	49735	443	192.168.2.4	158.23.16.71
Mar 15, 2025 11:55:01.015094042 CET	443	49735	158.23.16.71	192.168.2.4
Mar 15, 2025 11:55:01.019264936 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:01.075556040 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:01.080310106 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:01.080322027 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:01.080332041 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:01.080341101 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:01.080357075 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:01.080363989 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:01.080425024 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:01.080435038 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:01.080444098 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:01.223350048 CET	443	49735	158.23.16.71	192.168.2.4
Mar 15, 2025 11:55:01.223400116 CET	443	49735	158.23.16.71	192.168.2.4
Mar 15, 2025 11:55:01.225775957 CET	49735	443	192.168.2.4	158.23.16.71
Mar 15, 2025 11:55:01.295993090 CET	49735	443	192.168.2.4	158.23.16.71
Mar 15, 2025 11:55:01.296019077 CET	443	49735	158.23.16.71	192.168.2.4
Mar 15, 2025 11:55:01.855576992 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:01.923657894 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:01.973417997 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:01.978137970 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:01.978286028 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:01.978311062 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:01.978424072 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:01.978434086 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:01.978441000 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:01.978449106 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:01.978514910 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:01.978523970 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:03.284904957 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:03.387212038 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:03.392040014 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:03.392050982 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:03.392066956 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:03.392076015 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:03.392131090 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:03.392138958 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:03.392147064 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:03.955404997 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:04.042151928 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:04.047352076 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:04.047363997 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:04.047378063 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:04.047679901 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:04.047712088 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:04.047823906 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:04.047832966 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:04.475030899 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:04.630573988 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:04.746954918 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:04.751660109 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:04.751672983 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:04.751682997 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:04.751857996 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:04.751867056 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:04.751909971 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:04.751918077 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:05.183103085 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:05.214315891 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:05.219044924 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:05.219054937 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:05.219063044 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:05.219101906 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:05.219110966 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:05.219173908 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:05.219182014 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:06.075737953 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:06.207602024 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:06.269076109 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:06.314289093 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:06.601012945 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:06.621088982 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:06.655951977 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:06.660674095 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:06.660682917 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:06.660691023 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:06.660839081 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:06.660847902 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:06.660898924 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:06.660907984 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:06.720611095 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:06.761451960 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:06.908267975 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:06.967324972 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:07.017540932 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:07.179339886 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:07.314299107 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:07.381522894 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:07.517421007 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:07.900554895 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:07.900573015 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:07.901571035 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:07.901586056 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:07.901612997 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:07.901683092 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:07.901715040 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:07.901756048 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:07.938755035 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:07.943507910 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:07.943516970 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:07.943571091 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:07.943578959 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:07.997252941 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:08.125165939 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:08.816907883 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:08.923685074 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:08.993571043 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:08.999439001 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:08.999449015 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:08.999499083 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:09.000395060 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:09.405683994 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:09.435786009 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:09.440567017 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:09.440577030 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:09.440583944 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:09.440594912 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:09.690968037 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:09.715671062 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:09.720957041 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:09.720967054 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:09.720973969 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:09.720982075 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:09.997220993 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:10.026334047 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:10.031050920 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:10.031059980 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:10.031069040 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:10.031296968 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:10.291148901 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:10.423718929 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:10.424906969 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:10.429600954 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:10.819401979 CET	80	49712	208.95.112.1	192.168.2.4
Mar 15, 2025 11:55:10.821593046 CET	49712	80	192.168.2.4	208.95.112.1
Mar 15, 2025 11:55:10.997663021 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:11.111186981 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:11.313146114 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:11.423677921 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:11.487458944 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:11.611309052 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:11.787533045 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:11.923696041 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:11.941276073 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:12.057985067 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:12.149507046 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:12.220556974 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:14.415988922 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:14.485758066 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:14.492611885 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:14.492621899 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:14.492650986 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:14.494885921 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:14.494894981 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:14.761462927 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:14.814306974 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:14.838069916 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:14.843293905 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:14.843303919 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:14.843316078 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:14.843323946 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:14.843327045 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:14.843333960 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:14.843436956 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:15.266968966 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:15.314305067 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:15.382848024 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:15.387578011 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:15.387588024 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:15.387597084 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:15.387850046 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:15.387859106 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:15.387866974 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:15.387876034 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:15.834392071 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:15.882823944 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:15.888691902 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:15.888701916 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:15.888714075 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:15.889692068 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:15.889806986 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:15.889816999 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:15.891422987 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:16.335079908 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:16.407167912 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:16.411994934 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:16.412003994 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:16.412008047 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:16.412259102 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:16.412266970 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:16.412282944 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:16.412291050 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:16.686372042 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:16.814325094 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:16.834578037 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:16.840460062 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:16.840471029 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:16.840482950 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:16.841353893 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:16.841362000 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:16.841370106 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:16.842483044 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:17.769762039 CET	49750	443	192.168.2.4	20.21.56.51
Mar 15, 2025 11:55:17.769804001 CET	443	49750	20.21.56.51	192.168.2.4
Mar 15, 2025 11:55:17.770031929 CET	49750	443	192.168.2.4	20.21.56.51
Mar 15, 2025 11:55:17.770683050 CET	49750	443	192.168.2.4	20.21.56.51
Mar 15, 2025 11:55:17.770698071 CET	443	49750	20.21.56.51	192.168.2.4
Mar 15, 2025 11:55:17.890816927 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:17.947181940 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:17.951963902 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:17.951973915 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:17.951992989 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:17.952153921 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:17.952162981 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:17.952238083 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:17.952245951 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:18.384236097 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:18.463186026 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:18.468930960 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:18.468941927 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:18.469082117 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:18.469520092 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:18.469530106 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:18.469537020 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:18.469546080 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:18.897294998 CET	443	49750	20.21.56.51	192.168.2.4
Mar 15, 2025 11:55:18.897473097 CET	49750	443	192.168.2.4	20.21.56.51
Mar 15, 2025 11:55:19.101072073 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:19.181983948 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:19.186781883 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:19.186920881 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:19.186949968 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:19.187004089 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:19.187031984 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:19.187079906 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:19.187107086 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:19.454524994 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:19.516382933 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:19.521212101 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:19.521223068 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:19.521233082 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:19.521354914 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:19.521363974 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:19.521370888 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:19.521379948 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:19.802627087 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:19.872066975 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:19.878098965 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:19.878109932 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:19.878349066 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:19.878393888 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:19.878401995 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:19.878410101 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:19.878421068 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:20.297071934 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:20.368825912 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:20.373949051 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:20.373960018 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:20.373970985 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:20.374553919 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:20.374562025 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:20.374599934 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:20.374608040 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:21.095786095 CET	49721	80	192.168.2.4	142.250.185.67
Mar 15, 2025 11:55:21.100703001 CET	80	49721	142.250.185.67	192.168.2.4
Mar 15, 2025 11:55:21.100811005 CET	49721	80	192.168.2.4	142.250.185.67
Mar 15, 2025 11:55:21.265372992 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:21.314376116 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:21.340822935 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:21.345571041 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:21.345581055 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:21.345591068 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:21.345791101 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:21.345799923 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:21.345840931 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:21.345849991 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:21.790767908 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:21.838522911 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:21.843503952 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:21.843518972 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:21.843525887 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:21.843537092 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:21.843545914 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:21.843554020 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:21.843621016 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:22.329186916 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:22.388364077 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:22.393520117 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:22.393532038 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:22.393539906 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:22.393552065 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:22.393559933 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:22.393784046 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:22.393794060 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:22.977498055 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:23.033134937 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:23.057450056 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:23.062195063 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:23.062203884 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:23.062211990 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:23.062386036 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:23.062395096 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:23.062403917 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:23.062412977 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:23.665220022 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:23.720588923 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:23.727546930 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:23.733335972 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:23.733345032 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:23.733355045 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:23.733927011 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:23.733936071 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:23.733968019 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:23.733977079 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:24.569360018 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:24.611210108 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:24.641875029 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:24.646787882 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:24.646800995 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:24.646805048 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:24.646811008 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:24.646820068 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:24.646857977 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:24.646869898 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:25.913117886 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:25.954973936 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:25.977257967 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:25.982079029 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:25.982091904 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:25.982136965 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:25.982146025 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:25.982279062 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:25.982287884 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:25.982296944 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:26.601458073 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:26.645232916 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:26.649106979 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:26.653850079 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:26.653862953 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:26.653893948 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:26.654036999 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:26.654047012 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:26.654059887 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:26.654161930 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:27.183214903 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:27.226591110 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:27.231839895 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:27.231849909 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:27.231978893 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:27.231987000 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:27.232382059 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:27.232391119 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:27.232398987 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:27.711648941 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:27.751847982 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:27.768116951 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:27.774799109 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:27.774912119 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:27.774920940 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:27.774930954 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:27.774939060 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:27.774946928 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:27.774955034 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:28.325320959 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:28.369005919 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:28.373739004 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:28.373754025 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:28.373764038 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:28.373938084 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:28.373945951 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:28.373979092 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:28.373986959 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:28.808718920 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:28.852534056 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:28.857445955 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:28.857456923 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:28.857465982 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:28.857604027 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:28.857611895 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:28.857620955 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:28.857630968 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:29.153368950 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:29.204996109 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:29.211137056 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:29.215949059 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:29.215959072 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:29.215967894 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:29.216150999 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:29.216160059 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:29.216222048 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:29.216229916 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:29.629276037 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:29.673706055 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:29.694520950 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:29.699284077 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:29.699295044 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:29.699331999 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:29.699414015 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:29.699421883 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:29.699445009 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:29.699459076 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:30.114196062 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:30.159120083 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:30.176136017 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:30.181384087 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:30.181394100 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:30.181400061 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:30.181407928 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:30.181415081 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:30.181417942 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:30.181426048 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:30.449103117 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:30.501878977 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:30.505553007 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:30.510288000 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:30.510298967 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:30.510308981 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:30.510472059 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:30.510481119 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:30.510521889 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:30.510529995 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:31.474973917 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:31.517486095 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:31.523597956 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:31.528357029 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:31.528367043 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:31.528422117 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:31.528527021 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:31.528536081 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:31.528563023 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:31.528574944 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:32.814752102 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:32.861284971 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:32.880220890 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:32.884944916 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:32.884955883 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:32.884984970 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:32.885086060 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:32.885094881 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:32.885118961 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:32.885128975 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:33.441476107 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:33.486356974 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:33.492582083 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:33.497324944 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:33.497335911 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:33.497345924 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:33.497488976 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:33.497498035 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:33.497524977 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:33.497539043 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:34.155064106 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:34.204963923 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:34.264749050 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:34.269527912 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:34.269540071 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:34.269550085 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:34.269614935 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:34.269692898 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:34.269702911 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:34.269735098 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:35.030731916 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:35.079994917 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:35.102637053 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:35.107364893 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:35.107377052 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:35.107386112 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:35.107496023 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:35.107505083 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:35.107574940 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:35.107584000 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:35.877160072 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:35.923719883 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:35.983385086 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:35.989491940 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:35.989502907 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:35.989510059 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:35.989517927 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:35.989526987 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:35.989533901 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:35.989537001 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:36.418936014 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:36.462054968 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:36.466845989 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:36.466856956 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:36.466936111 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:36.466944933 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:36.466984034 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:36.466991901 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:36.467091084 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:36.941461086 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:36.986248970 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:36.993165016 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:36.997914076 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:36.997925043 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:36.997936010 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:36.998061895 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:36.998071909 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:36.998117924 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:36.998131037 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:37.410748959 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:37.455034971 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:37.470119953 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:37.474822044 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:37.474832058 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:37.474842072 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:37.474967003 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:37.474976063 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:37.475035906 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:37.475044012 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:38.067683935 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:38.111299992 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:38.120407104 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:38.126840115 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:38.126916885 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:38.126925945 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:38.127957106 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:38.127965927 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:38.127969027 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:38.127973080 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:38.555882931 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:38.600816011 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:38.777436972 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:38.777611017 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:38.777734041 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:38.777744055 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:38.777753115 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:38.777764082 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:38.777796984 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:39.869259119 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:39.923747063 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:39.932157993 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:39.938945055 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:39.938955069 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:39.938963890 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:39.938972950 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:39.938982010 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:39.938990116 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:39.939069986 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:40.708935022 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:40.754620075 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:40.777734041 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:40.782515049 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:40.782525063 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:40.782589912 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:40.782736063 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:40.782743931 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:40.782752037 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:40.782874107 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:41.243479967 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:41.288914919 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:41.293776989 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:41.293791056 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:41.293800116 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:41.294154882 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:41.294162989 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:41.294173956 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:41.294267893 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:42.199060917 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:42.251876116 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:42.285998106 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:42.291089058 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:42.291099072 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:42.291101933 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:42.291105986 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:42.291110039 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:42.291112900 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:42.291115999 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:42.564790010 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:42.611418962 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:42.618168116 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:42.622947931 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:42.622957945 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:42.623018026 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:42.623104095 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:42.623119116 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:42.623126984 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:42.623368025 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:43.059427023 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:43.102996111 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:43.107858896 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:43.107867956 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:43.108005047 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:43.108014107 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:43.108021975 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:43.108031988 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:43.108040094 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:43.697580099 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:43.742202997 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:43.746973991 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:43.746984005 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:43.747080088 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:43.747087955 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:43.747158051 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:43.747165918 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:43.747195005 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:44.362488985 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:44.408241987 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:44.413029909 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:44.417781115 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:44.417790890 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:44.417843103 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:44.417907000 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:44.417915106 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:44.417984009 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:44.417993069 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:44.844742060 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:44.892605066 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:44.899194956 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:44.903934956 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:44.903944016 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:44.903953075 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:44.904028893 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:44.904038906 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:44.904055119 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:44.904062033 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:45.317075968 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:45.361268997 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:45.373092890 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:45.377844095 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:45.377852917 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:45.377861977 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:45.377964973 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:45.377974033 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:45.378000975 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:45.378009081 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:45.807487011 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:45.861349106 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:45.885862112 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:45.891067982 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:45.891077995 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:45.891087055 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:45.891098976 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:45.891107082 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:45.891113997 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:45.891202927 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:46.941020966 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:46.986896038 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:47.012032986 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:47.016808987 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:47.016819000 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:47.016832113 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:47.016974926 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:47.016983032 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:47.016987085 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:47.016994953 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:47.895906925 CET	49712	80	192.168.2.4	208.95.112.1
Mar 15, 2025 11:55:48.204989910 CET	49712	80	192.168.2.4	208.95.112.1
Mar 15, 2025 11:55:48.395064116 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:48.396348953 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:48.396410942 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:48.396449089 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:48.396486044 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:48.396877050 CET	80	49712	208.95.112.1	192.168.2.4
Mar 15, 2025 11:55:48.396886110 CET	80	49712	208.95.112.1	192.168.2.4
Mar 15, 2025 11:55:48.396945000 CET	49712	80	192.168.2.4	208.95.112.1
Mar 15, 2025 11:55:48.451170921 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:48.455965996 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:48.455976009 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:48.455982924 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:48.456347942 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:48.456356049 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:48.456403017 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:48.456423044 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:48.885096073 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:48.929739952 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:48.937062979 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:48.937072039 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:48.937082052 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:48.939862967 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:48.939872026 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:48.939914942 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:48.942622900 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:49.406871080 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:49.455005884 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:49.462390900 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:49.469094992 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:49.469105959 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:49.469115019 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:49.470285892 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:49.470293045 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:49.470302105 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:49.473062992 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:49.749260902 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:49.798751116 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:49.815167904 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:49.819991112 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:49.820008039 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:49.820019007 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:49.820065975 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:49.820075035 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:49.820084095 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:49.820230007 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:50.248874903 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:50.298758984 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:50.322009087 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:50.326819897 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:50.326828957 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:50.326920986 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:50.326950073 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:50.326962948 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:50.326972008 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:50.327035904 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:50.601090908 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:50.642518044 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:50.649369955 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:50.654232979 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:50.654249907 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:50.654386044 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:50.654396057 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:50.654405117 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:50.654414892 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:50.654743910 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:51.087116003 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:51.142627954 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:51.165280104 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:51.170108080 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:51.170120001 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:51.170213938 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:51.170257092 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:51.170412064 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:51.170419931 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:51.170428991 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:51.615441084 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:51.658246994 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:51.666584015 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:51.671374083 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:51.671384096 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:51.671391010 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:51.671438932 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:51.671513081 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:51.671521902 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:51.671530008 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:52.105508089 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:52.158232927 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:52.213044882 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:52.219918966 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:52.219928980 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:52.219938993 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:52.221142054 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:52.221152067 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:52.221160889 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:52.221168041 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:52.481030941 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:52.524059057 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:52.530611992 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:52.530623913 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:52.530632019 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:52.530642033 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:52.530649900 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:52.530659914 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:52.530668020 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:52.814908028 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:52.861382008 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:52.885313034 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:52.890100956 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:52.890115976 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:52.890126944 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:52.890252113 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:52.890259981 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:52.890300989 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:52.890310049 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:53.317394972 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:53.361383915 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:53.367465019 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:53.372303963 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:53.372318029 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:53.372328043 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:53.372361898 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:53.372370958 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:53.372380972 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:53.372426033 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:53.814870119 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:53.861378908 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:53.921019077 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:53.926114082 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:53.926124096 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:53.926230907 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:53.926239014 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:53.926244974 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:53.926254034 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:53.926261902 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:54.355051994 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:54.408149004 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:54.433542967 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:54.438719988 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:54.438730955 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:54.438986063 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:54.438994884 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:54.439007998 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:54.439011097 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:54.439018965 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:55.562963963 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:55.611291885 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:55.633486032 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:55.638300896 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:55.638310909 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:55.638356924 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:55.638365984 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:55.638513088 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:55.638521910 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:55.638529062 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:57.268714905 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:57.314507008 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:57.321156025 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:57.325947046 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:57.325958014 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:57.325967073 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:57.326061010 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:57.326069117 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:57.326108932 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:57.326117039 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:57.815223932 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:57.861287117 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:57.867815971 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:57.872586966 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:57.872600079 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:57.872607946 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:57.872617960 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:57.872694969 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:57.872703075 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:57.872714996 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:58.293330908 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:58.333431959 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:58.370120049 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:58.374821901 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:58.374886036 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:58.374896049 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:58.375015974 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:58.375026941 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:58.375123024 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:58.375132084 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:58.805025101 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:58.845669031 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:58.853511095 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:58.858328104 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:58.858339071 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:58.858341932 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:58.858447075 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:58.858455896 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:58.858463049 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:58.858498096 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:59.281383991 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:59.330013990 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:59.386301994 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:59.391057968 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:59.391067982 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:59.391071081 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:59.391196012 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:59.391204119 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:59.391233921 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:59.391242027 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:59.841139078 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:59.892606020 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:59.914074898 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:55:59.919248104 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:59.919259071 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:59.919266939 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:59.919275999 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:59.919285059 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:59.919291973 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:55:59.919691086 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:00.349553108 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:00.398322105 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:00.442672968 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:00.447405100 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:00.447417021 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:00.447432041 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:00.447699070 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:00.447709084 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:00.447717905 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:00.447812080 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:00.866667032 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:00.908135891 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:00.952931881 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:00.957725048 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:00.957757950 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:00.957792044 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:00.957870007 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:00.957900047 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:00.957932949 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:00.957966089 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:01.394841909 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:01.439393997 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:01.479707003 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:01.484424114 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:01.484435081 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:01.484447956 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:01.484597921 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:01.484606981 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:01.484709978 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:01.484719038 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:01.933918953 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:01.989613056 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:02.008883953 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:02.013571978 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:02.013581991 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:02.013607979 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:02.013767958 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:02.013776064 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:02.013798952 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:02.013808966 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:04.003655910 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:04.003710985 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:04.003776073 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:04.003820896 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:04.003860950 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:04.071152925 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:04.076095104 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:04.076106071 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:04.076117039 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:04.076684952 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:04.080616951 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:04.080626965 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:04.080635071 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:04.530787945 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:04.580034018 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:04.601515055 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:04.606239080 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:04.606247902 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:04.606301069 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:04.606312990 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:04.606349945 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:04.606359959 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:04.606364965 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:05.043899059 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:05.083257914 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:05.088267088 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:05.088278055 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:05.088288069 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:05.088295937 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:05.088303089 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:05.088316917 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:05.088325024 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:05.530756950 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:05.580035925 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:05.587021112 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:05.594544888 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:05.594558001 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:05.594564915 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:05.594573975 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:05.594582081 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:05.594584942 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:05.594593048 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:06.027142048 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:06.080035925 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:06.117212057 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:06.121910095 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:06.121932983 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:06.121946096 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:06.122173071 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:06.122185946 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:06.122204065 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:06.122215986 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:06.565325975 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:06.617522001 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:06.619786978 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:06.624531031 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:06.624546051 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:06.624557972 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:06.624691010 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:06.624703884 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:06.624715090 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:06.624983072 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:07.059614897 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:07.103241920 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:07.108021975 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:07.108031988 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:07.108038902 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:07.108122110 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:07.108160973 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:07.108169079 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:07.108175993 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:07.643457890 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:07.689389944 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:07.773751020 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:07.778481007 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:07.778508902 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:07.778518915 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:07.779068947 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:07.779078960 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:07.779089928 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:07.779098034 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:09.414838076 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:09.461324930 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:09.466187000 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:09.466197968 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:09.466204882 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:09.466428995 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:09.466442108 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:09.466449976 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:09.466545105 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:09.956209898 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:10.003484011 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:10.159660101 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:10.164426088 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:10.164438009 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:10.164446115 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:10.164573908 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:10.164582968 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:10.164592981 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:10.164601088 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:10.576831102 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:10.635386944 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:10.640157938 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:10.640167952 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:10.640178919 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:10.640330076 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:10.640337944 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:10.640347958 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:10.640477896 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:10.909637928 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:10.978754997 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:10.983520985 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:10.983530998 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:10.983566046 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:10.983573914 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:10.983620882 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:10.983628035 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:10.983637094 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:11.265522957 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:11.319957018 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:11.324754000 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:11.324764967 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:11.324773073 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:11.324868917 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:11.324878931 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:11.324888945 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:11.324897051 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:11.597117901 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:11.648622036 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:11.653331041 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:11.653343916 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:11.653354883 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:11.653515100 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:11.653527021 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:11.653537989 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:11.653547049 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:12.140690088 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:12.229724884 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:12.234477043 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:12.234505892 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:12.234551907 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:12.234622002 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:12.234632015 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:12.234667063 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:12.234675884 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:13.149112940 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:13.155606985 CET	49752	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:13.160377979 CET	33295	49752	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:13.160445929 CET	49752	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:13.166484118 CET	49752	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:13.171118021 CET	33295	49752	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:13.248893023 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:13.311430931 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:13.314472914 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:13.316658974 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:13.316670895 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:13.316683054 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:13.316698074 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:13.316706896 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:13.316715002 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:13.316996098 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:14.139275074 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:14.224977016 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:14.229706049 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:14.229722023 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:14.229729891 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:14.229928970 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:14.229938984 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:14.229954004 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:14.229962111 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:14.669264078 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:14.709443092 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:14.714972019 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:14.714983940 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:14.714992046 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:14.715217113 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:14.715226889 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:14.715234995 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:14.715329885 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:15.864356041 CET	33295	49752	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:15.906889915 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:15.955081940 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:16.006107092 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:16.010961056 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:16.010973930 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:16.010986090 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:16.011076927 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:16.011085987 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:16.011311054 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:16.011320114 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:16.017549038 CET	49752	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:16.285223007 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:16.335380077 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:16.382936001 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:16.389723063 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:16.389735937 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:16.389744043 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:16.391933918 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:16.391943932 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:16.391952991 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:16.391963005 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:17.006844044 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:17.048834085 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:17.063087940 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:17.067889929 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:17.067903996 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:17.067910910 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:17.068051100 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:17.068058968 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:17.068064928 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:17.068073034 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:17.324825048 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:17.376966953 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:17.398688078 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:17.403413057 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:17.403448105 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:17.403459072 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:17.403762102 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:17.403772116 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:17.403783083 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:17.403882980 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:17.677349091 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:17.720715046 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:17.747333050 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:17.752049923 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:17.752060890 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:17.752065897 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:17.752295971 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:17.752310038 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:17.752319098 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:17.752329111 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:18.182988882 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:18.236335993 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:18.271799088 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:18.276532888 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:18.276544094 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:18.276551962 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:18.276669025 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:18.276679993 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:18.276804924 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:18.276819944 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:18.851347923 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:18.892599106 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:18.914808989 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:18.919862986 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:18.919872999 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:18.919882059 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:18.919889927 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:18.919897079 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:18.919907093 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:18.919914961 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:19.671124935 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:19.720726967 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:19.757184029 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:19.761907101 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:19.761917114 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:19.761925936 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:19.762259960 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:19.762268066 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:19.762274981 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:19.762326956 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:20.174196959 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:20.236299038 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:20.241956949 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:20.247724056 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:20.247734070 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:20.247767925 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:20.247777939 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:20.247982979 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:20.247992992 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:20.248002052 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:20.667520046 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:20.720710039 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:20.739489079 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:20.744311094 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:20.744324923 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:20.744432926 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:20.744441986 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:20.744452000 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:20.744461060 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:20.744512081 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:21.478719950 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:21.533216000 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:21.535223961 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:21.540054083 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:21.540065050 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:21.540074110 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:21.540118933 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:21.540127993 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:21.540139914 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:21.540218115 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:21.955122948 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:22.002053976 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:22.032572985 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:22.038230896 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:22.038240910 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:22.038249969 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:22.038840055 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:22.038849115 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:22.038857937 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:22.038865089 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:22.916708946 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:22.970841885 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:22.980087996 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:22.984889984 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:22.984900951 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:22.984910011 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:22.984952927 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:22.984961033 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:22.984971046 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:22.985052109 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:23.670531988 CET	33295	49752	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:23.683460951 CET	49752	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:23.688325882 CET	33295	49752	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:23.879153013 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:23.923923016 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:23.930206060 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:23.935023069 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:23.935034037 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:23.935043097 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:23.935122967 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:23.935132027 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:23.935153008 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:23.935163021 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:24.356817961 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:24.400233984 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:24.404980898 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:24.404990911 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:24.405087948 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:24.405193090 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:24.405201912 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:24.405210972 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:24.405220985 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:24.825162888 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:24.870316029 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:24.875196934 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:24.875210047 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:24.875220060 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:24.875242949 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:24.875258923 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:24.875267982 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:24.875276089 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:25.177345037 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:25.220724106 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:25.243154049 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:25.247908115 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:25.247920036 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:25.247931004 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:25.248075008 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:25.248085022 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:25.248119116 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:25.248127937 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:25.248202085 CET	33295	49752	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:25.253269911 CET	49752	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:25.257965088 CET	33295	49752	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:25.664684057 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:25.705121040 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:25.706738949 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:25.711555958 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:25.711566925 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:25.711575985 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:25.711667061 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:25.711675882 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:25.711683035 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:25.711694956 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:25.982944012 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:26.033201933 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:26.039030075 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:26.043872118 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:26.043888092 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:26.043900013 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:26.043904066 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:26.043906927 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:26.043965101 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:26.043976068 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:26.318941116 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:26.322554111 CET	33295	49752	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:26.325752020 CET	49752	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:26.330516100 CET	33295	49752	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:26.330591917 CET	33295	49752	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:26.361331940 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:26.369581938 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:26.374352932 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:26.374362946 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:26.374372959 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:26.375523090 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:26.375534058 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:26.375541925 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:26.375550032 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:26.805248022 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:26.861363888 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:26.868813038 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:26.874403000 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:26.874414921 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:26.874538898 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:26.874552965 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:26.874561071 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:26.874571085 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:26.874684095 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:27.574668884 CET	33295	49752	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:27.578807116 CET	49752	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:27.583578110 CET	33295	49752	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:27.642813921 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:27.689449072 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:27.728924036 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:27.733762026 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:27.733772993 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:27.733784914 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:27.733995914 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:27.734004021 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:27.734011889 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:27.734016895 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:28.164907932 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:28.205091000 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:28.210726976 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:28.216058016 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:28.216183901 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:28.216192961 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:28.216202974 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:28.216209888 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:28.216217041 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:28.216224909 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:28.645240068 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:28.689450026 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:28.729907036 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:28.734738111 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:28.734750032 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:28.734833956 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:28.734843016 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:28.734874010 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:28.734882116 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:28.734961987 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:29.017481089 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:29.064451933 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:29.100779057 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:29.105602026 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:29.105614901 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:29.105626106 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:29.105634928 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:29.105681896 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:29.105693102 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:29.105703115 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:29.846815109 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:29.892579079 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:29.895457983 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:29.900171041 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:29.900183916 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:29.900211096 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:29.900352955 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:29.900362015 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:29.900401115 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:29.900408983 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:30.338973045 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:30.392611980 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:30.397921085 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:30.402683020 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:30.402693033 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:30.402707100 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:30.402715921 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:30.402842045 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:30.402849913 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:30.402853966 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:31.202981949 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:31.252038002 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:31.273592949 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:31.278446913 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:31.278458118 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:31.278507948 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:31.278517008 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:31.278554916 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:31.278565884 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:31.278589964 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:31.688410997 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:31.736361027 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:31.738059998 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:31.742885113 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:31.742898941 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:31.742952108 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:31.742960930 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:31.743032932 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:31.743041039 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:31.743079901 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:32.341290951 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:32.392587900 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:32.414208889 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:32.419003963 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:32.419014931 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:32.419023991 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:32.419084072 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:32.419092894 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:32.419135094 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:32.419142962 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:32.694924116 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:32.736573935 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:32.740232944 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:32.744951010 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:32.744962931 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:32.744973898 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:32.745166063 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:32.745176077 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:32.745183945 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:32.745296001 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:32.915486097 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:32.918629885 CET	49753	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:32.923463106 CET	33295	49753	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:32.923532009 CET	49753	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:32.925473928 CET	49753	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:32.930169106 CET	33295	49753	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:32.970712900 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:33.031198025 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:33.080085993 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:33.085269928 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:33.090015888 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:33.090032101 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:33.090043068 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:33.090131998 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:33.090141058 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:33.090184927 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:33.090193987 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:33.356040001 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:33.398752928 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:33.403522968 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:33.403533936 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:33.403542042 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:33.403630018 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:33.403718948 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:33.403728008 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:33.403731108 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:33.675005913 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:33.720717907 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:33.742429018 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:33.747158051 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:33.747169018 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:33.747256994 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:33.747383118 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:33.747391939 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:33.747430086 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:33.747437954 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:34.185481071 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:34.236351967 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:34.242703915 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:34.245064974 CET	33295	49753	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:34.247423887 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:34.247435093 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:34.247456074 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:34.247581005 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:34.247591972 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:34.247646093 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:34.247658014 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:34.298840046 CET	49753	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:34.363061905 CET	49753	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:34.367891073 CET	33295	49753	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:34.367904902 CET	33295	49753	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:34.367929935 CET	33295	49753	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:34.367940903 CET	33295	49753	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:34.367986917 CET	33295	49753	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:34.367995977 CET	33295	49753	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:34.368005037 CET	33295	49753	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:34.666655064 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:34.720699072 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:34.750662088 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:34.755392075 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:34.755403042 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:34.755456924 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:34.755553961 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:34.755563974 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:34.755592108 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:34.755601883 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:35.190746069 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:35.236345053 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:35.289478064 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:35.294213057 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:35.294224024 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:35.294234991 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:35.294379950 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:35.294389009 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:35.294420958 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:35.294430971 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:35.726994991 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:35.767597914 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:35.772859097 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:35.779093981 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:35.779103994 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:35.779112101 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:35.780760050 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:35.780767918 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:35.780785084 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:35.782177925 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:36.064719915 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:36.111351967 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:36.134248018 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:36.139029980 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:36.139041901 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:36.139058113 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:36.139203072 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:36.139213085 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:36.139223099 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:36.139430046 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:36.570976019 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:36.612061977 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:36.638313055 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:36.643109083 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:36.643124104 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:36.643131971 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:36.643292904 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:36.643300056 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:36.643309116 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:36.643318892 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:36.914614916 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:36.955091953 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:36.992949963 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:36.997648954 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:36.997659922 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:36.997668982 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:36.997792006 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:36.997838020 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:36.997847080 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:36.997932911 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:37.417002916 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:37.463021994 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:37.467797041 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:37.467807055 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:37.467811108 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:37.467899084 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:37.467940092 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:37.467948914 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:37.468014956 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:37.730423927 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:37.783214092 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:37.808963060 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:37.813745022 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:37.813755989 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:37.813855886 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:37.813864946 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:37.813926935 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:37.813935041 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:37.813945055 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:38.357368946 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:38.408335924 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:38.416554928 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:38.421286106 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:38.421297073 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:38.421308041 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:38.421395063 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:38.421405077 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:38.421639919 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:38.422029972 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:38.857314110 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:38.908238888 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:38.914736986 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:38.919436932 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:38.919446945 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:38.919500113 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:38.919632912 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:38.919641972 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:38.919719934 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:38.919729948 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:39.503541946 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:39.549072027 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:39.555022001 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:39.559708118 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:39.559839964 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:39.559849977 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:39.560025930 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:39.560035944 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:39.560045958 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:39.560055017 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:39.840998888 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:39.892638922 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:39.898979902 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:39.903708935 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:39.903722048 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:39.903733015 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:39.903873920 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:39.903883934 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:39.904005051 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:39.904015064 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:40.346952915 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:40.392600060 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:40.430732012 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:40.435415983 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:40.435503006 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:40.435513973 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:40.435633898 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:40.435643911 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:40.435658932 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:40.435714006 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:40.867182016 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:40.908240080 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:40.914493084 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:40.919265032 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:40.919276953 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:40.919291019 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:40.919447899 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:40.919456959 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:40.919466972 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:40.919534922 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:41.343244076 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:41.392616987 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:41.429644108 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:41.434493065 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:41.434506893 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:41.434519053 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:41.434571981 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:41.434581995 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:41.434681892 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:41.434691906 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:41.875739098 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:41.923861027 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:41.934149027 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:41.938893080 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:41.938910961 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:41.938921928 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:41.939050913 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:41.939060926 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:41.939069033 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:41.939137936 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:42.540909052 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:42.595853090 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:42.603123903 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:42.607903004 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:42.607917070 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:42.607928038 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:42.607944965 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:42.608045101 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:42.608055115 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:42.608093023 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:42.879065990 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:42.923873901 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:42.944813013 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:42.949544907 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:42.949561119 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:42.949605942 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:42.949722052 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:42.949763060 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:42.949783087 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:42.949791908 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:43.394207954 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:43.439505100 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:43.487430096 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:43.492341995 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:43.492352962 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:43.492363930 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:43.492396116 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:43.492446899 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:43.492455959 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:43.492490053 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:43.947400093 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:44.001998901 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:44.008189917 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:44.012887955 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:44.012907028 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:44.012962103 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:44.013046980 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:44.013057947 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:44.013169050 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:44.013209105 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:44.519998074 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:44.564515114 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:44.596256018 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:44.600975037 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:44.600986004 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:44.600996971 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:44.601118088 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:44.601128101 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:44.601205111 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:44.601221085 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:45.034652948 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:45.080120087 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:45.086047888 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:45.090778112 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:45.090815067 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:45.090873957 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:45.090915918 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:45.090925932 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:45.090992928 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:45.091002941 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:45.582895041 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:45.627018929 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:45.634037018 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:45.638793945 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:45.638806105 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:45.638816118 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:45.638933897 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:45.638943911 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:45.638952971 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:45.638962984 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:46.214195967 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:46.267672062 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:46.273538113 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:46.278304100 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:46.278314114 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:46.278383017 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:46.278392076 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:46.278403997 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:46.278414011 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:46.278423071 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:46.716573000 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:46.767613888 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:46.796999931 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:46.801747084 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:46.801757097 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:46.801765919 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:46.801867008 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:46.801876068 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:46.801930904 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:46.801939964 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:47.264617920 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:47.314497948 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:47.346462965 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:47.351701975 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:47.351721048 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:47.351732969 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:47.351749897 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:47.351761103 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:47.351773024 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:47.351783991 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:48.275079966 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:48.344945908 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:48.348733902 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:48.353420973 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:48.353482008 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:48.353491068 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:48.353790998 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:48.353801012 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:48.353809118 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:48.353817940 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:48.930922985 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:48.986407042 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:49.032355070 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:49.037116051 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:49.037128925 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:49.037142038 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:49.037292957 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:49.037302971 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:49.037375927 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:49.037385941 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:49.478830099 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:49.525676012 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:49.530492067 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:49.530503035 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:49.530514002 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:49.530656099 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:49.530663967 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:49.530699015 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:49.530818939 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:49.965415001 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:50.017623901 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:50.047213078 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:50.052009106 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:50.052036047 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:50.052146912 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:50.052156925 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:50.052222967 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:50.052232027 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:50.052282095 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:50.525408983 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:50.580243111 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:50.602257967 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:50.607017994 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:50.607028961 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:50.607038975 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:50.607131004 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:50.607140064 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:50.607268095 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:50.607276917 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:51.022685051 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:51.064536095 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:51.109426022 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:51.115854025 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:51.115865946 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:51.115875006 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:51.116291046 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:51.116301060 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:51.116322041 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:51.116333961 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:51.551562071 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:51.595762014 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:51.627738953 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:51.632536888 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:51.632549047 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:51.632631063 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:51.632641077 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:51.632754087 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:51.632764101 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:51.632775068 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:52.055105925 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:52.095771074 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:52.111725092 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:52.116493940 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:52.116504908 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:52.116513968 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:52.116688967 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:52.116698027 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:52.116713047 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:52.116729975 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:52.539248943 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:52.580138922 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:52.596632957 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:52.601408005 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:52.601418972 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:52.601428032 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:52.601629019 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:52.601641893 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:52.601676941 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:52.601763010 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:53.049045086 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:53.095763922 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:53.146142960 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:53.150830030 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:53.150875092 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:53.150892019 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:53.151035070 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:53.151042938 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:53.151088953 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:53.151098013 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:53.568623066 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:53.611473083 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:53.639590025 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:53.644274950 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:53.644284010 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:53.644289970 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:53.644438982 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:53.644448042 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:53.644478083 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:53.644603968 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:54.523005009 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:54.564505100 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:54.590130091 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:54.594835043 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:54.594876051 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:54.594903946 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:54.595019102 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:54.595027924 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:54.595071077 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:54.595084906 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:55.885118008 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:55.936090946 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:55.940887928 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:55.940901995 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:55.940915108 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:55.941026926 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:55.941040993 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:55.941052914 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:55.941066027 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:57.240847111 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:57.283277988 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:57.293504000 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:57.298280954 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:57.298307896 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:57.298321962 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:57.298346043 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:57.298360109 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:57.298372984 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:57.298388958 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:57.877357960 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:57.923934937 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:57.952768087 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:57.957598925 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:57.957631111 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:57.957659006 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:57.957751989 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:57.957782984 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:57.957834959 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:57.957865953 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:58.534589052 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:58.580279112 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:58.612507105 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:58.617206097 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:58.617300034 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:58.617336988 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:58.617434025 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:58.617449045 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:58.617470980 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:58.617489100 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:59.063333035 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:59.111510038 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:59.139210939 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:59.144053936 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:59.144103050 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:59.144226074 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:59.144238949 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:59.144256115 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:59.144300938 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:59.144324064 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:59.763454914 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:59.814533949 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:59.821274042 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:56:59.826077938 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:59.826093912 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:59.826106071 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:59.826255083 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:59.826268911 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:59.826280117 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:56:59.826292992 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:00.253714085 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:00.299074888 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:00.338326931 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:00.343117952 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:00.343148947 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:00.343163967 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:00.343281031 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:00.343293905 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:00.343364954 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:00.343379021 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:00.780606985 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:00.830205917 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:00.849127054 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:00.853924036 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:00.853962898 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:00.854018927 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:00.854052067 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:00.854087114 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:00.854137897 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:00.854165077 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:01.123089075 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:01.173935890 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:01.199295044 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:01.204200029 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:01.204237938 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:01.204267025 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:01.204299927 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:01.204349041 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:01.204379082 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:01.204411983 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:01.780826092 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:01.830153942 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:01.874691963 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:01.880002975 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:01.880028009 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:01.880043030 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:01.880057096 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:01.880069971 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:01.880083084 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:01.880101919 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:02.456598997 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:02.503611088 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:02.528769970 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:02.533618927 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:02.533637047 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:02.533651114 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:02.533832073 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:02.533848047 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:02.533941031 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:02.533968925 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:02.802841902 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:02.845801115 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:02.865156889 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:02.869941950 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:02.869976997 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:02.870023012 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:02.870219946 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:02.870250940 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:02.870282888 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:02.870310068 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:03.303014994 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:03.345814943 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:03.361226082 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:03.366130114 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:03.366146088 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:03.366158962 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:03.366275072 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:03.366290092 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:03.366302013 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:03.366348982 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:03.809609890 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:03.861207962 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:03.866041899 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:03.866059065 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:03.866070986 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:03.866148949 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:03.866162062 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:03.866234064 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:03.866246939 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:04.921473980 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:04.970915079 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:04.996150017 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:05.001085997 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:05.001133919 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:05.001168966 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:05.001197100 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:05.001226902 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:05.001249075 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:05.001264095 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:05.602587938 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:05.658390999 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:05.675049067 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:05.680068970 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:05.680085897 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:05.680099964 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:05.680135965 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:05.680149078 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:05.680165052 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:05.680393934 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:06.110641003 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:06.158420086 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:06.210897923 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:06.215724945 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:06.215847969 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:06.215861082 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:06.215954065 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:06.215972900 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:06.216118097 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:06.216130018 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:06.725222111 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:06.767781973 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:06.805399895 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:06.810256004 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:06.810277939 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:06.810288906 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:06.810343027 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:06.810353041 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:06.810453892 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:06.810465097 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:07.225012064 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:07.267698050 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:07.285770893 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:07.290530920 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:07.290544033 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:07.290554047 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:07.290646076 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:07.290656090 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:07.290733099 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:07.290741920 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:07.696945906 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:07.752042055 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:07.752906084 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:07.757656097 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:07.757668018 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:07.757678986 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:07.757797956 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:07.757807016 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:07.757817984 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:07.757827997 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:08.034624100 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:08.080195904 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:08.092715025 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:08.097440004 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:08.097456932 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:08.097465992 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:08.097604036 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:08.097614050 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:08.097659111 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:08.097668886 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:08.391249895 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:08.439610004 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:08.476478100 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:08.482314110 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:08.482327938 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:08.482340097 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:08.482867956 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:08.482877970 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:08.482887983 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:08.482898951 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:08.904640913 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:08.955281019 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:08.981865883 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:08.986639023 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:08.986651897 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:08.986660957 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:08.986994982 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:08.987031937 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:08.987088919 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:08.987098932 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:09.251312017 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:09.299043894 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:09.315107107 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:09.319962978 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:09.320015907 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:09.320034981 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:09.320081949 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:09.320091009 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:09.320106030 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:09.320115089 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:09.750943899 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:09.798926115 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:09.831938982 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:09.836726904 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:09.836739063 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:09.836747885 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:09.836883068 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:09.836891890 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:09.836987972 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:09.836997986 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:10.426616907 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:10.471173048 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:10.491183043 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:10.495985031 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:10.495997906 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:10.496006012 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:10.496109009 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:10.496119976 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:10.496128082 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:10.496242046 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:10.929430008 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:10.970844984 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:11.053884983 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:11.059071064 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:11.059083939 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:11.059092045 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:11.059103012 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:11.059113026 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:11.059123039 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:11.059130907 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:11.940829992 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:11.986454964 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:12.042515993 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:12.047461033 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:12.047477007 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:12.047487974 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:12.047498941 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:12.047509909 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:12.047710896 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:12.047720909 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:13.271282911 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:13.314578056 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:13.352236986 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:13.357845068 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:13.357856035 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:13.357866049 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:13.358366966 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:13.358376980 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:13.358990908 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:13.359000921 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:14.247478008 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:14.298955917 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:14.305026054 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:14.309788942 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:14.309802055 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:14.309813023 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:14.309984922 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:14.309994936 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:14.310026884 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:14.310173035 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:14.772609949 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:14.814614058 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:14.834671974 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:14.839420080 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:14.839432001 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:14.839483976 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:14.839493990 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:14.839533091 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:14.839541912 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:14.839575052 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:15.753901005 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:15.798955917 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:15.846082926 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:15.851320028 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:15.851335049 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:15.851342916 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:15.851414919 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:15.851424932 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:15.851433039 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:15.851444006 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:16.456233025 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:16.502160072 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:16.550803900 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:16.556058884 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:16.556071997 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:16.556081057 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:16.556092978 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:16.556107044 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:16.556117058 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:16.556127071 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:16.977824926 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:17.033454895 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:17.036124945 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:17.040818930 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:17.040863037 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:17.040877104 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:17.041006088 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:17.041016102 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:17.041026115 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:17.041179895 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:17.463301897 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:17.504528046 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:17.565258980 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:17.570089102 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:17.570101023 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:17.570112944 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:17.570122004 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:17.570295095 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:17.570303917 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:17.570312977 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:18.219172955 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:18.267743111 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:18.309873104 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:18.314587116 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:18.314600945 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:18.314610958 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:18.314819098 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:18.314827919 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:18.314840078 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:18.314848900 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:19.055779934 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:19.111480951 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:19.118350983 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:19.123388052 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:19.123399019 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:19.123409033 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:19.123418093 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:19.123426914 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:19.123435974 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:19.123444080 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:19.890961885 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:19.939696074 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:19.982083082 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:20.147420883 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:20.147443056 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:20.147459030 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:20.147520065 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:20.147563934 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:20.147604942 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:20.147645950 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:20.930604935 CET	443	49750	20.21.56.51	192.168.2.4
Mar 15, 2025 11:57:20.930819988 CET	49750	443	192.168.2.4	20.21.56.51
Mar 15, 2025 11:57:21.361571074 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:21.408344984 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:21.420166016 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:21.425230026 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:21.425244093 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:21.425252914 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:21.425666094 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:21.425674915 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:21.425683022 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:21.425693989 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:22.037204027 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:22.080204010 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:22.104182005 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:22.109100103 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:22.109112024 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:22.109122038 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:22.109181881 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:22.109193087 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:22.109231949 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:22.109241962 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:22.555202961 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:22.595808983 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:22.623395920 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:22.628182888 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:22.628194094 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:22.628209114 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:22.628361940 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:22.628371000 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:22.628380060 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:22.628552914 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:23.065171957 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:23.111457109 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:23.117187023 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:23.121972084 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:23.121998072 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:23.122090101 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:23.122107983 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:23.122251987 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:23.122261047 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:23.122271061 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:23.567013979 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:23.611469030 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:23.637192011 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:23.642419100 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:23.642432928 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:23.642442942 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:23.642455101 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:23.642463923 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:23.642472982 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:23.642481089 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:23.931206942 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:23.970849991 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:23.978147030 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:23.982916117 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:23.982928991 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:23.982970953 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:23.983061075 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:23.983071089 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:23.983205080 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:23.983213902 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:24.410998106 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:24.455209970 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:24.481651068 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:24.486432076 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:24.486444950 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:24.486454010 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:24.486509085 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:24.486612082 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:24.486620903 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:24.486629009 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:25.525239944 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:25.574906111 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:25.580193043 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:25.580204010 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:25.580214977 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:25.580775023 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:25.580789089 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:25.580837965 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:25.580852032 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:26.477340937 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:26.533370018 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:26.536760092 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:26.542099953 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:26.542112112 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:26.542119980 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:26.542129993 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:26.542139053 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:26.542145967 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:26.542155981 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:27.167460918 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:27.236543894 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:27.242568970 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:27.247376919 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:27.247389078 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:27.247400045 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:27.247714043 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:27.247724056 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:27.247793913 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:27.247807026 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:27.853859901 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:27.908337116 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:27.925488949 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:27.930227995 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:27.930238962 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:27.930248976 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:27.930418968 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:27.930428982 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:27.930476904 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:27.930485964 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:28.409029007 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:28.455212116 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:28.487911940 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:28.492724895 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:28.492741108 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:28.492752075 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:28.492830992 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:28.492872000 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:28.492881060 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:28.492891073 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:29.100814104 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:29.142805099 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:29.163407087 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:29.168114901 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:29.168170929 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:29.168270111 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:29.168312073 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:29.168353081 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:29.168363094 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:29.168396950 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:29.622658014 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:29.673949003 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:29.706212997 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:29.710927963 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:29.710944891 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:29.710958958 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:29.711303949 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:29.711317062 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:29.711328983 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:29.711343050 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:30.835372925 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:30.877100945 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:30.915637016 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:30.920521975 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:30.920541048 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:30.920602083 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:30.920614958 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:30.920645952 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:30.920660973 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:30.920675993 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:31.348862886 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:31.392714977 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:31.409303904 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:31.414069891 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:31.414097071 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:31.414110899 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:31.414124966 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:31.414146900 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:31.414160013 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:31.414201975 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:32.534951925 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:32.580233097 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:32.604839087 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:32.609611988 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:32.609625101 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:32.609639883 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:32.609750032 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:32.609760046 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:32.609821081 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:32.609831095 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:33.233971119 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:33.298960924 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:33.321109056 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:33.325860023 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:33.325874090 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:33.325922012 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:33.326030016 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:33.326083899 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:33.326133966 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:33.326143026 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:33.755413055 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:33.799105883 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:33.816082954 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:33.820847988 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:33.820868015 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:33.820911884 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:33.820921898 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:33.820945024 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:33.820955038 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:33.820965052 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:34.721107006 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:34.767870903 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:34.783107996 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:34.787908077 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:34.787919998 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:34.787929058 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:34.788044930 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:34.788055897 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:34.788093090 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:34.788101912 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:35.267110109 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:35.314608097 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:35.334351063 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:35.339128971 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:35.339143038 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:35.339153051 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:35.339365959 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:35.339375973 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:35.339413881 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:35.339422941 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:35.765115023 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:35.814619064 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:35.852085114 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:35.856957912 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:35.856972933 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:35.856985092 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:35.857021093 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:35.857031107 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:35.857124090 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:35.857134104 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:36.291246891 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:36.345860004 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:36.363272905 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:36.368071079 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:36.368114948 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:36.368225098 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:36.368235111 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:36.368333101 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:36.368343115 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:36.368436098 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:36.778928995 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:36.830250978 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:36.831496000 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:36.836285114 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:36.836298943 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:36.836317062 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:36.836360931 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:36.836375952 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:36.836385965 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:36.836579084 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:37.249509096 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:37.298980951 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:37.315464020 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:37.320697069 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:37.320712090 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:37.321089983 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:37.321213961 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:37.321224928 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:37.321234941 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:37.321244955 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:37.589404106 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:37.630300999 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:37.674217939 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:37.679013968 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:37.679027081 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:37.679039001 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:37.679187059 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:37.679197073 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:37.679205894 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:37.679214954 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:38.693232059 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:38.736502886 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:38.749033928 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:38.753851891 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:38.753865957 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:38.753875017 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:38.753941059 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:38.753957033 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:38.754024029 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:38.754034042 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:39.157535076 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:39.205257893 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:39.220432043 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:39.226598024 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:39.226612091 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:39.226630926 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:39.227782011 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:39.227792025 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:39.227814913 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:39.229509115 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:39.959474087 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:39.966542959 CET	49754	1977	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:39.971272945 CET	1977	49754	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:39.971349001 CET	49754	1977	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:40.002130032 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:40.714309931 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:40.767826080 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:40.776582003 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:40.782433033 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:40.782449007 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:40.782460928 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:40.783015966 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:40.783027887 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:40.783090115 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:40.783101082 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:41.557007074 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:41.611478090 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:41.620469093 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:41.625261068 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:41.625273943 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:41.625313044 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:41.625324011 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:41.625408888 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:41.625435114 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:41.625516891 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:42.067605019 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:42.111479998 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:42.123672009 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:42.130753994 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:42.130765915 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:42.130776882 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:42.130786896 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:42.130796909 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:42.130801916 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:42.130810022 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:43.827370882 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:43.827775955 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:43.827888966 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:43.827912092 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:43.828061104 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:43.885082960 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:43.889883041 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:43.889895916 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:43.889904022 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:43.890006065 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:43.890014887 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:43.890031099 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:43.890039921 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:44.297357082 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:44.345869064 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:44.383965969 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:44.388719082 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:44.388731003 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:44.388771057 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:44.388870001 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:44.388880014 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:44.388899088 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:44.388910055 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:44.796909094 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:44.845854998 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:44.857795954 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:44.862540960 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:44.862591982 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:44.862601042 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:44.862674952 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:44.862684011 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:44.862694979 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:44.862885952 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:45.621840000 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:45.674058914 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:45.690587997 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:45.695791006 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:45.695806026 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:45.695816040 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:45.696057081 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:45.696067095 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:45.696166992 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:45.696177006 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:46.148708105 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:46.189642906 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:46.198004007 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:46.202761889 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:46.202775002 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:46.202786922 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:46.202874899 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:46.202883959 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:46.202923059 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:46.202934980 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:46.785252094 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:46.830276966 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:46.888366938 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:46.893167019 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:46.893182993 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:46.893210888 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:46.893224001 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:46.893270969 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:46.893306017 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:46.893316031 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:48.245668888 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:48.299123049 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:48.322911024 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:48.327687025 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:48.327698946 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:48.327707052 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:48.327791929 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:48.327801943 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:48.327812910 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:48.327821970 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:48.762056112 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:48.814668894 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:48.822948933 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:48.829874992 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:48.829889059 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:48.829900026 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:48.829910994 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:48.829920053 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:48.829929113 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:48.829972029 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:49.257213116 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:49.299316883 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:49.307032108 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:49.311729908 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:49.311739922 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:49.311748981 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:49.311975956 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:49.311985016 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:49.311992884 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:49.312002897 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:49.737360954 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:49.783369064 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:49.815077066 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:49.819895029 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:49.819907904 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:49.819916964 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:49.819969893 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:49.819981098 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:49.819992065 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:49.820132971 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:50.395288944 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:50.439636946 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:50.448272943 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:50.453078985 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:50.453088999 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:50.453099966 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:50.453160048 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:50.453170061 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:50.453178883 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:50.453274012 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:50.891295910 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:50.940052032 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:50.950279951 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:50.955013990 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:50.955025911 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:50.955037117 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:50.955111980 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:50.955195904 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:50.955204964 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:50.955214977 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:51.557550907 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:51.611504078 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:51.618877888 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:51.623600960 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:51.623611927 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:51.623624086 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:51.623754978 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:51.623764038 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:51.623773098 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:51.623785019 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:52.060892105 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:52.111490011 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:52.127965927 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:52.132704020 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:52.132718086 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:52.132728100 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:52.132860899 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:52.132869959 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:52.132880926 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:52.132890940 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:52.853444099 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:52.907385111 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:52.912913084 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:52.913403988 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:52.913415909 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:52.913949013 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:52.913959026 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:52.913969040 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:52.913979053 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:53.337007999 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:53.377135992 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:53.384623051 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:53.389344931 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:53.389358044 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:53.389369011 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:53.389542103 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:53.389552116 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:53.389561892 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:53.389571905 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:53.836534977 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:53.877120018 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:53.904905081 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:53.909739017 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:53.909751892 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:53.909763098 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:53.909852028 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:53.909862041 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:53.909903049 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:53.909945011 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:54.351207972 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:54.400719881 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:54.405550957 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:54.405567884 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:54.405576944 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:54.405600071 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:54.405693054 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:54.405706882 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:54.406156063 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:54.812783003 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:54.861520052 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:54.891196012 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:54.896239042 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:54.896250963 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:54.896260023 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:54.896269083 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:54.896277905 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:54.896354914 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:54.896363974 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:55.708717108 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:55.752183914 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:55.760765076 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:55.765563965 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:55.765574932 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:55.765585899 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:55.765625954 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:55.765635967 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:55.765650988 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:55.765661001 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:56.029491901 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:56.073723078 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:56.079236984 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:56.079247952 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:56.079267025 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:56.079277039 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:56.079292059 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:56.079301119 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:56.079312086 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:56.344861031 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:56.392926931 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:56.417546034 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:56.422261953 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:56.422274113 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:56.422290087 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:56.422378063 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:56.422426939 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:56.422435999 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:56.422457933 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:56.706715107 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:56.752125978 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:56.767261982 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:56.771970034 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:56.771982908 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:56.771991014 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:56.772113085 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:56.772121906 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:56.772146940 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:56.772156000 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:57.191098928 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:57.236707926 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:57.261125088 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:57.267509937 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:57.267522097 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:57.267533064 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:57.269275904 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:57.269285917 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:57.269294977 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:57.269304037 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:57.712649107 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:57.767966986 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:57.789803028 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:57.794485092 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:57.794496059 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:57.794503927 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:57.794635057 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:57.794645071 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:57.794661999 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:57.794671059 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:58.068706989 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:58.111624956 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:58.137283087 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:58.142028093 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:58.142040014 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:58.142093897 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:58.142103910 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:58.142191887 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:58.142200947 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:58.142210007 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:58.421197891 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:58.470871925 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:58.509076118 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:58.513818979 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:58.513830900 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:58.513845921 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:58.513951063 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:58.513959885 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:58.513994932 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:58.514090061 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:58.962949038 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:59.012540102 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:59.018748999 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:59.018760920 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:59.018773079 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:59.020467043 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:59.020477057 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:59.020484924 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:59.020494938 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:59.441190004 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:59.486536980 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:59.494226933 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:59.498908997 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:59.498922110 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:59.498933077 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:59.499140978 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:59.499150038 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:59.499157906 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:59.499195099 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:59.787116051 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:57:59.830259085 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:57:59.862816095 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:58:00.036370993 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:00.036477089 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:00.036541939 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:00.036551952 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:00.036562920 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:00.036590099 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:00.036600113 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:00.460406065 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:00.502161026 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:58:00.509460926 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:58:00.514177084 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:00.514188051 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:00.514199972 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:00.514797926 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:00.514806986 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:00.514831066 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:00.514842033 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:00.926580906 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:00.972378016 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:58:00.997739077 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:58:01.005705118 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:01.005719900 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:01.005728006 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:01.007754087 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:01.007764101 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:01.007771969 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:01.007782936 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:01.353565931 CET	1977	49754	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:01.353641987 CET	49754	1977	192.168.2.4	147.185.221.26
Mar 15, 2025 11:58:01.435436010 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:01.479010105 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:58:01.485785007 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:01.485800028 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:01.485816956 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:01.486387968 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:01.486397982 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:01.486407042 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:01.486416101 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:01.904684067 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:01.960377932 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:58:01.987025023 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:58:01.991816998 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:01.991831064 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:01.991838932 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:01.991857052 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:01.991938114 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:01.991947889 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:01.991955996 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:03.026710033 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:03.074704885 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:58:03.079504967 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:03.079519033 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:03.079540014 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:03.079783916 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:03.079951048 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:03.080168009 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:03.080179930 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:03.515167952 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:03.564696074 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:58:03.679517031 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:58:03.684355021 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:03.684371948 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:03.684385061 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:03.684400082 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:03.684444904 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:03.684456110 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:03.684468031 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:03.696819067 CET	33295	49711	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:03.799014091 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:58:03.973762989 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:04.043791056 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:58:04.048621893 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:04.048644066 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:04.048655033 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:04.048760891 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:04.048773050 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:04.048851013 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:04.048862934 CET	33295	49724	147.185.221.26	192.168.2.4
Mar 15, 2025 11:58:04.120131969 CET	49724	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:58:04.120574951 CET	49754	1977	192.168.2.4	147.185.221.26
Mar 15, 2025 11:58:04.120620012 CET	49753	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:58:04.120657921 CET	49711	33295	192.168.2.4	147.185.221.26
Mar 15, 2025 11:58:04.120795012 CET	49752	33295	192.168.2.4	147.185.221.26

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 15, 2025 11:54:05.741997004 CET	60599	53	192.168.2.4	1.1.1.1
Mar 15, 2025 11:54:05.753863096 CET	53	60599	1.1.1.1	192.168.2.4
Mar 15, 2025 11:54:07.396682978 CET	49182	53	192.168.2.4	1.1.1.1
Mar 15, 2025 11:54:07.405118942 CET	53	49182	1.1.1.1	192.168.2.4
Mar 15, 2025 11:54:19.650346994 CET	63509	53	192.168.2.4	1.1.1.1
Mar 15, 2025 11:54:19.656904936 CET	53	63509	1.1.1.1	192.168.2.4
Mar 15, 2025 11:54:59.280268908 CET	53575	53	192.168.2.4	1.1.1.1
Mar 15, 2025 11:54:59.288100958 CET	53	53575	1.1.1.1	192.168.2.4
Mar 15, 2025 11:54:59.325221062 CET	59472	53	192.168.2.4	1.1.1.1
Mar 15, 2025 11:54:59.361805916 CET	53	59472	1.1.1.1	192.168.2.4
Mar 15, 2025 11:55:17.704704046 CET	53	52545	1.1.1.1	192.168.2.4
Mar 15, 2025 11:55:17.713571072 CET	61732	53	192.168.2.4	1.1.1.1
Mar 15, 2025 11:55:17.768064022 CET	53	61732	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 15, 2025 11:54:05.741997004 CET	192.168.2.4	1.1.1.1	0x7f9f	Standard query (0)	entertainment-machinery.gl.at.ply.gg	A (IP address)	IN (0x0001)	false
Mar 15, 2025 11:54:07.396682978 CET	192.168.2.4	1.1.1.1	0x432d	Standard query (0)	ip-api.com	A (IP address)	IN (0x0001)	false
Mar 15, 2025 11:54:19.650346994 CET	192.168.2.4	1.1.1.1	0x668b	Standard query (0)	c.pki.goog	A (IP address)	IN (0x0001)	false
Mar 15, 2025 11:54:59.280268908 CET	192.168.2.4	1.1.1.1	0xb56b	Standard query (0)	www.office.com	A (IP address)	IN (0x0001)	false
Mar 15, 2025 11:54:59.325221062 CET	192.168.2.4	1.1.1.1	0x3afc	Standard query (0)	6c6dd065b6a8458980aaedfd14cf1f78.clo.footprintdns.com	A (IP address)	IN (0x0001)	false
Mar 15, 2025 11:55:17.713571072 CET	192.168.2.4	1.1.1.1	0xfa4d	Standard query (0)	8d4ffdf450db24a59c10ca2eef1e2974.azr.footprintdns.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 15, 2025 11:54:05.753863096 CET	1.1.1.1	192.168.2.4	0x7f9f	No error (0)	entertainment-machinery.gl.at.ply.gg		147.185.221.26	A (IP address)	IN (0x0001)	false
Mar 15, 2025 11:54:07.405118942 CET	1.1.1.1	192.168.2.4	0x432d	No error (0)	ip-api.com		208.95.112.1	A (IP address)	IN (0x0001)	false
Mar 15, 2025 11:54:19.185635090 CET	1.1.1.1	192.168.2.4	0x6e08	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Mar 15, 2025 11:54:19.185635090 CET	1.1.1.1	192.168.2.4	0x6e08	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Mar 15, 2025 11:54:19.332000017 CET	1.1.1.1	192.168.2.4	0xcba2	No error (0)	a-9999.a-dc-msedge.net		131.253.33.254	A (IP address)	IN (0x0001)	false
Mar 15, 2025 11:54:19.656904936 CET	1.1.1.1	192.168.2.4	0x668b	No error (0)	c.pki.goog	pki-goog.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2025 11:54:19.656904936 CET	1.1.1.1	192.168.2.4	0x668b	No error (0)	pki-goog.l.google.com		142.250.185.67	A (IP address)	IN (0x0001)	false
Mar 15, 2025 11:54:59.288100958 CET	1.1.1.1	192.168.2.4	0xb56b	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2025 11:54:59.288100958 CET	1.1.1.1	192.168.2.4	0xb56b	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2025 11:54:59.288100958 CET	1.1.1.1	192.168.2.4	0xb56b	No error (0)	home-office365-com.b-0004.b-msedge.net	b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2025 11:54:59.288100958 CET	1.1.1.1	192.168.2.4	0xb56b	No error (0)	b-0004.b-msedge.net		13.107.6.156	A (IP address)	IN (0x0001)	false
Mar 15, 2025 11:54:59.361805916 CET	1.1.1.1	192.168.2.4	0x3afc	No error (0)	6c6dd065b6a8458980aaedfd14cf1f78.clo.footprintdns.com	qro21prdapp01-canary.netmon.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2025 11:54:59.361805916 CET	1.1.1.1	192.168.2.4	0x3afc	No error (0)	qro21prdapp01-canary.netmon.azure.com	qro21prdapp01-canary.mexicocentral.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2025 11:54:59.361805916 CET	1.1.1.1	192.168.2.4	0x3afc	No error (0)	qro21prdapp01-canary.mexicocentral.cloudapp.azure.com		158.23.16.71	A (IP address)	IN (0x0001)	false
Mar 15, 2025 11:55:00.089822054 CET	1.1.1.1	192.168.2.4	0xfddf	No error (0)	res-stls-prod.edgesuite.net.globalredir.akadns88.net	a726.dscd.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2025 11:55:00.089822054 CET	1.1.1.1	192.168.2.4	0xfddf	No error (0)	a726.dscd.akamai.net		104.124.11.18	A (IP address)	IN (0x0001)	false
Mar 15, 2025 11:55:00.089822054 CET	1.1.1.1	192.168.2.4	0xfddf	No error (0)	a726.dscd.akamai.net		104.124.11.43	A (IP address)	IN (0x0001)	false
Mar 15, 2025 11:55:01.436578035 CET	1.1.1.1	192.168.2.4	0x5aa0	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2025 11:55:01.436578035 CET	1.1.1.1	192.168.2.4	0x5aa0	No error (0)	azurefd-t-fb-prod.trafficmanager.net	dual.s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2025 11:55:01.436578035 CET	1.1.1.1	192.168.2.4	0x5aa0	No error (0)	dual.s-part-0044.t-0009.fb-t-msedge.net	s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2025 11:55:01.436578035 CET	1.1.1.1	192.168.2.4	0x5aa0	No error (0)	s-part-0044.t-0009.fb-t-msedge.net		13.107.253.72	A (IP address)	IN (0x0001)	false
Mar 15, 2025 11:55:15.926980019 CET	1.1.1.1	192.168.2.4	0x4414	No error (0)	t-ring.s-part2-t-9999.fb-t-msedge.net	s-part2-t-9999.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2025 11:55:15.926980019 CET	1.1.1.1	192.168.2.4	0x4414	No error (0)	s-part2-t-9999.fb-t-msedge.net		13.107.226.254	A (IP address)	IN (0x0001)	false
Mar 15, 2025 11:55:17.768064022 CET	1.1.1.1	192.168.2.4	0xfa4d	No error (0)	8d4ffdf450db24a59c10ca2eef1e2974.azr.footprintdns.com	azperfmaptargets-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2025 11:55:17.768064022 CET	1.1.1.1	192.168.2.4	0xfa4d	No error (0)	azperfmaptargets-prod.trafficmanager.net	doh20prdapp01-canary-opaph.netmon.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2025 11:55:17.768064022 CET	1.1.1.1	192.168.2.4	0xfa4d	No error (0)	doh20prdapp01-canary-opaph.netmon.azure.com	doh20prdapp01-canary-opaph.qatarcentral.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2025 11:55:17.768064022 CET	1.1.1.1	192.168.2.4	0xfa4d	No error (0)	doh20prdapp01-canary-opaph.qatarcentral.cloudapp.azure.com		20.21.56.51	A (IP address)	IN (0x0001)	false
Mar 15, 2025 11:55:57.271466970 CET	1.1.1.1	192.168.2.4	0x7b65	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Mar 15, 2025 11:55:57.271466970 CET	1.1.1.1	192.168.2.4	0x7b65	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.office.com

ip-api.com

c.pki.goog

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49712	208.95.112.1	80	7592	C:\Users\user\Desktop\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Mar 15, 2025 11:54:07.416426897 CET	89	OUT	GET /xml/?fields=countryCode,query HTTP/1.1 Host: ip-api.com Connection: Keep-Alive
Mar 15, 2025 11:54:07.881222963 CET	293	IN	HTTP/1.1 200 OK Date: Sat, 15 Mar 2025 10:54:06 GMT Content-Type: application/xml; charset=utf-8 Content-Length: 117 Access-Control-Allow-Origin: * X-Ttl: 60 X-Rl: 44 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 71 75 65 72 79 3e 0a 20 20 3c 63 6f 75 6e 74 72 79 43 6f 64 65 3e 55 53 3c 2f 63 6f 75 6e 74 72 79 43 6f 64 65 3e 0a 20 20 3c 71 75 65 72 79 3e 38 2e 34 36 2e 31 32 33 2e 31 38 39 3c 2f 71 75 65 72 79 3e 0a 3c 2f 71 75 65 72 79 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><query> <countryCode>US</countryCode> <query>8.46.123.189</query></query>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.4	49721	142.250.185.67	80

Timestamp	Bytes transferred	Direction	Data
Mar 15, 2025 11:54:19.662275076 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 15, 2025 11:54:20.286817074 CET	220	IN	HTTP/1.1 304 Not Modified Date: Sat, 15 Mar 2025 10:54:19 GMT Expires: Sat, 15 Mar 2025 11:44:19 GMT Age: 1 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 15, 2025 11:54:20.337660074 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 15, 2025 11:54:20.521595001 CET	223	IN	HTTP/1.1 304 Not Modified Date: Sat, 15 Mar 2025 10:28:11 GMT Expires: Sat, 15 Mar 2025 11:18:11 GMT Age: 1569 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49725	13.107.6.156	443	8084	C:\Windows\System32\WWAHost.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-15 10:54:59 UTC	388	OUT	GET /pwa HTTP/1.1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-CH Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; MSAppHost/3.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Accept-Encoding: gzip, deflate, br Host: www.office.com Connection: Keep-Alive
2025-03-15 10:55:00 UTC	936	IN	HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Set-Cookie: OHPWA.SID=6a5be168-0bd6-4c39-b696-08584f5268ce; path=/; secure; samesite=none Set-Cookie: OH.FLID=5bb7768e-a858-4925-a839-e598e20219a3; expires=Sun, 15 Mar 2026 10:54:59 GMT; path=/; secure; samesite=none; httponly Set-Cookie: OH.DCAffinity=OH-eus; expires=Sat, 15 Mar 2025 18:54:59 GMT; path=/; secure; samesite=none; httponly Request-Context: appId= Strict-Transport-Security: max-age=31536000; includeSubDomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-UA-Compatible: IE=edge,chrome=1 Request-Id: d0ae55d4-6b61-4d3f-ab70-d8156ab56e6a X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 4191F9B1C3254D22BEEA58F255C7D34B Ref B: EWR311000103035 Ref C: 2025-03-15T10:54:59Z Date: Sat, 15 Mar 2025 10:54:59 GMT Connection: close
2025-03-15 10:55:00 UTC	2854	IN	Data Raw: 62 31 66 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 69 64 3d 22 76 69 65 77 70 6f 72 74 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4f 66 66 69 63 65 20 41 70 70 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 2c Data Ascii: b1f<!DOCTYPE html><html dir="ltr"><head> <meta id="viewport" name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0"> <meta charset="utf-8" /> <title>Office App</title> <link rel="icon" href="data:,
2025-03-15 10:55:00 UTC	464	IN	Data Raw: 31 63 39 0d 0a 4f 77 3d 3d 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 72 65 73 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 6f 66 66 69 63 65 68 75 62 2f 62 75 6e 64 6c 65 73 2f 73 68 61 72 65 64 73 63 72 69 70 74 73 2d 39 33 39 35 32 30 65 61 64 61 2e 6a 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 32 35 36 2d 56 32 42 4d 79 59 66 69 58 2b 56 4c 64 37 51 4a 35 49 65 72 36 31 4c 4d 32 50 66 37 2b 4c 73 49 30 78 32 59 37 5a 64 2f 31 75 77 3d 22 20 6e 6f 6e 63 65 3d 22 36 51 4e 42 4d 52 6c 37 33 35 6a 30 4a 4c 57 34 66 37 48 41 4f 77 3d 3d 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 Data Ascii: 1c9Ow=="></script> <script src="https://res.cdn.office.net/officehub/bundles/sharedscripts-939520eada.js" crossorigin="anonymous" defer integrity="sha256-V2BMyYfiX+VLd7QJ5Ier61LM2Pf7+LsI0x2Y7Zd/1uw=" nonce="6QNBMRl735j0JLW4f7HAOw=="></script>
2025-03-15 10:55:00 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 22 36 51 4e 42 4d 52 6c 37 33 35 6a 30 4a 4c 57 34 66 37 48 41 4f 77 3d 3d 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 72 65 73 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 6f 66 66 69 63 65 68 75 62 2f 6f 66 66 69 63 65 73 74 61 72 74 62 75 6e 64 6c 65 73 2f 76 65 6e 64 6f 72 73 2e 36 38 32 34 31 32 35 37 61 36 63 65 30 32 65 61 64 66 37 31 2e 6a 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 20 69 6e 74 65 67 72 69 74 79 3d 22 22 20 6e 6f 6e 63 65 3d 22 36 51 4e 42 4d 52 6c 37 33 35 6a 30 4a 4c 57 34 66 37 48 41 4f 77 3d 3d 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 Data Ascii: 1000"6QNBMRl735j0JLW4f7HAOw=="></script> <script src="https://res.cdn.office.net/officehub/officestartbundles/vendors.68241257a6ce02eadf71.js" crossorigin="anonymous" defer integrity="" nonce="6QNBMRl735j0JLW4f7HAOw=="></script> <script
2025-03-15 10:55:00 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 75 72 20 61 70 70 73 20 69 6e 20 6f 6e 65 20 70 6c 61 63 65 20 6e 6f 77 20 69 6e 63 6c 75 64 69 6e 67 20 43 6f 70 69 6c 6f 74 2e 2a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 77 61 2d 75 6e 61 75 74 68 2d 63 6f 70 69 6c 6f 74 2d 63 65 6e 74 72 69 63 2d 62 75 6c 6c 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 72 65 73 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 6f 66 66 69 63 65 68 75 62 2f 69 6d 61 67 65 73 2f 63 6f 6e 74 65 6e 74 2f 69 6d 61 67 65 73 2f 75 6e 61 75 74 68 2d 63 68 65 63 6b 6d Data Ascii: 1000ur apps in one place now including Copilot.* </div> <div class="pwa-unauth-copilot-centric-bullet"> <img src="https://res.cdn.office.net/officehub/images/content/images/unauth-checkm
2025-03-15 10:55:00 UTC	1603	IN	Data Raw: 36 33 63 0d 0a 53 70 61 63 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 4f 66 66 69 63 65 2e 54 61 6f 73 2e 48 75 62 2e 44 69 61 67 6e 6f 73 74 69 63 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 6f 54 65 6c 45 6e 61 62 6c 65 64 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 6f 54 65 6c 45 72 72 6f 72 45 6e 61 62 6c 65 64 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 6f 54 65 6c 45 75 64 62 45 6e 64 70 6f 69 6e 74 45 6e 61 62 6c 65 64 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 6f 54 65 6c 46 65 61 74 75 72 65 45 6e 61 62 6c 65 64 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 6f 54 65 6c 49 6d 70 72 65 73 73 69 6f 6e 45 6e 61 62 6c 65 64 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 6f 54 65 6c 4e 61 6d 65 53 70 61 63 65 Data Ascii: 63cSpace":"Office.Taos.Hub.Diagnostic","oTelEnabled":true,"oTelErrorEnabled":true,"oTelEudbEndpointEnabled":false,"oTelFeatureEnabled":true,"oTelImpressionEnabled":true,"oTelNameSpace
2025-03-15 10:55:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	06:54:03
Start date:	15/03/2025
Path:	C:\Users\user\Desktop\MSBuild.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\MSBuild.exe"
Imagebase:	0x2f2c7260000
File size:	1'274'880 bytes
MD5 hash:	0787D35EB5C46F4203CF0555B34EEE6B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	06:54:56
Start date:	15/03/2025
Path:	C:\Windows\System32\WWAHost.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\system32\wwahost.exe" -ServerName:Microsoft.MicrosoftOfficeHub.wwa
Imagebase:	0x7ff7c2b70000
File size:	995'672 bytes
MD5 hash:	69318AE264A1E45ED570CEDCDC4B7B69
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	17
Start time:	06:58:03
Start date:	15/03/2025
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\cmd.exe" /c timeout 3 & del C:\Users\user\AppData\Local\Temp\\SharpDX.dll & del C:\Users\user\AppData\Local\Temp\\SharpDX.Direct3D11.dll & del C:\Users\user\AppData\Local\Temp\\SharpDX.DXGI.dll
Imagebase:	0x7ff77c080000
File size:	289'792 bytes
MD5 hash:	8A2122E8162DBEF04694B9C3E0B6CDEE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	06:58:03
Start date:	15/03/2025
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff62fc20000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	06:58:03
Start date:	15/03/2025
Path:	C:\Windows\System32\timeout.exe
Wow64 process (32bit):	false
Commandline:	timeout 3
Imagebase:	0x7ff7520e0000
File size:	32'768 bytes
MD5 hash:	100065E21CFBBDE57CBA2838921F84D6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	18.2%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	100%
Total number of Nodes:	3
Total number of Limit Nodes:	0

Executed Functions

Function 00007FFC3DDA5835 Relevance: 1.6, APIs: 1, Instructions: 136COMMON

Download Yara Rule

APIs

mouse_event.USER32 ref: 00007FFC3DDA5904

Memory Dump Source

Source File: 00000000.00000002.3531937847.00007FFC3DD90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC3DD90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc3dd90000_MSBuild.jbxd

Similarity

API ID: mouse_event
String ID:
API String ID: 2434400541-0
Opcode ID: f6684cc6fe5e7448df176d573272fe026c57120b1783b45f9d22f123096dea1b
Instruction ID: 95ebb22afeb4d4058db8c5df610ac6c5cb4afeaf19add4649ec33bcf976608fb
Opcode Fuzzy Hash: f6684cc6fe5e7448df176d573272fe026c57120b1783b45f9d22f123096dea1b
Instruction Fuzzy Hash: F241383181CA9C9FDB19AB6898066F57BF0FF56321F0442BFE049D3552DA296842C7A1

Function 00007FFC3DD9C756 Relevance: .5, Instructions: 473COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3531937847.00007FFC3DD90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC3DD90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc3dd90000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 70fe34e1a132c8dae5a4c6c511ba8fd4a4d2831e4a7774f083fe7287d1af17fa
Instruction ID: 2dbb569f235757f73deb95335f203080a197491e17aebf743862b3e6745ee2dd
Opcode Fuzzy Hash: 70fe34e1a132c8dae5a4c6c511ba8fd4a4d2831e4a7774f083fe7287d1af17fa
Instruction Fuzzy Hash: 3AF1C530908A8E8FEBA8DF28C8557E97BE1FF55340F04426EE84DC7295DB35A941CB91

Function 00007FFC3DD9D502 Relevance: .5, Instructions: 457COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3531937847.00007FFC3DD90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC3DD90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc3dd90000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d4c3e9e7e620ecc11cfe9abe27ec2e68653036a100021328d8cc0c8405a6ac5
Instruction ID: 0731484a285aea1245629efeb29199e673d165b6791853537bd440e01bb17630
Opcode Fuzzy Hash: 6d4c3e9e7e620ecc11cfe9abe27ec2e68653036a100021328d8cc0c8405a6ac5
Instruction Fuzzy Hash: 15E1D430508A4E8FEBA8DF28C8557E97BE1FF54350F04426EE84DC7295EE79A841CB91

Function 00007FFC3DD9E628 Relevance: .3, Instructions: 315COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3531937847.00007FFC3DD90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC3DD90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc3dd90000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 68496c0693bf7b99d74add678cb905cd8e1c505bd4fc85cc95b4bc1f7f9748bc
Instruction ID: 0c8ca21dcf427a754e47542e86bb1e4934af9e06ebc8dae194c893d5f453668a
Opcode Fuzzy Hash: 68496c0693bf7b99d74add678cb905cd8e1c505bd4fc85cc95b4bc1f7f9748bc
Instruction Fuzzy Hash: A8A1F671A08A5D8FEB5CDB58C8455B4B7E1FF55B44B1482FDC08A87282EE21B847C7A1

Function 00007FFC3DE60060 Relevance: .1, Instructions: 123COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3532356497.00007FFC3DE60000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC3DE60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc3de60000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe30ac553f09b06f656b6276ce19ce5d9b20ffd2fec835cbb884f8def875b609
Instruction ID: 89d22a8eb017dca46ebbb2e62a824c9000fc60166f331a125655326a5edd0d97
Opcode Fuzzy Hash: fe30ac553f09b06f656b6276ce19ce5d9b20ffd2fec835cbb884f8def875b609
Instruction Fuzzy Hash: D631073170C98D0FD798D61C9859A753BD1EB9A321F1402BEE44EC3293EA68AC42C385

Non-executed Functions

Function 00007FFC3DDA0FF2 Relevance: 2.8, Strings: 2, Instructions: 306COMMON

Download Yara Rule

Strings

3N_^, xrefs: 00007FFC3DDA1101
4N_^, xrefs: 00007FFC3DDA1001

Memory Dump Source

Source File: 00000000.00000002.3531937847.00007FFC3DD90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC3DD90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc3dd90000_MSBuild.jbxd

Similarity

API ID:
String ID: 3N_^$4N_^
API String ID: 0-2923934511
Opcode ID: 673cee3aaf87ef5affec589bcfa586c41812d6421d5485c034b7701b5ef8c754
Instruction ID: b89ea7ad6de0bbdbfe137fed62ebaa75874535a63726421a47ec2d2bb3431048
Opcode Fuzzy Hash: 673cee3aaf87ef5affec589bcfa586c41812d6421d5485c034b7701b5ef8c754
Instruction Fuzzy Hash: 3581D117A0C97A07E62176BCB8511EA7F81DF81775B0885F7D2C89B093BD18298BC2F5

Function 00007FFC3DDA0F6D Relevance: 1.5, Strings: 1, Instructions: 280COMMON

Download Yara Rule

Strings

3N_^, xrefs: 00007FFC3DDA1101

Memory Dump Source

Source File: 00000000.00000002.3531937847.00007FFC3DD90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC3DD90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc3dd90000_MSBuild.jbxd

Similarity

API ID:
String ID: 3N_^
API String ID: 0-137238001
Opcode ID: 3dc1a5b897442e47cd959d3a27cb4d5da1a46142b3d5c5c7574190de7b635aad
Instruction ID: d46ed4c65871e4658d8935cba95d05f9a1f5133884ddec05cb5619c0dabb96de
Opcode Fuzzy Hash: 3dc1a5b897442e47cd959d3a27cb4d5da1a46142b3d5c5c7574190de7b635aad
Instruction Fuzzy Hash: 7171D517A0C97A47E62176FCB8551EABF85EF817B570445BBC2C99B083B914388BC2F4

Function 00007FFC3DD9917D Relevance: .3, Instructions: 311COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3531937847.00007FFC3DD90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC3DD90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc3dd90000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f846f1e1e90558259c0a7a93b35ba3cc9e2fea14e8a9689e85157e2837627a7a
Instruction ID: 28e2176861595b286f3c942c0015754a60e31e8e19adb455292b23847aaca19f
Opcode Fuzzy Hash: f846f1e1e90558259c0a7a93b35ba3cc9e2fea14e8a9689e85157e2837627a7a
Instruction Fuzzy Hash: 17B1D29484E3DE8EDB579BF408745A27FA49F03269B1C10FBD0C98A0D3E91E145ADB36

Function 00007FFC3DDAC18D Relevance: .2, Instructions: 232COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3531937847.00007FFC3DD90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFC3DD90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffc3dd90000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4eab760e3d10b491b1075e9d0b4e8d173ee31261d5c669d3c8f470e154d53419
Instruction ID: 3c4d1d34d30123aa0684988a2f3dc2944545c72fbca0642337eb54a40df0b6bc
Opcode Fuzzy Hash: 4eab760e3d10b491b1075e9d0b4e8d173ee31261d5c669d3c8f470e154d53419
Instruction Fuzzy Hash: D9818C5989E2DE4EDB5757FC08705A27FA44E036B9B1C84FBE0D88A0D3E90D145AE336

Analysis Process: WWAHost.exePID: 8084, Parent PID: 760COMMON

Executed Functions

Function 000001F32100041F Relevance: .1, Instructions: 120COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3613967890.000001F321000000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F321000000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f321000000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ee44b048c84b4ac0ce7d5ffe4213775e5128259825b50c2dbf99827881fd27d
Instruction ID: b8a7d1bcef5aeb280d78938bb83e5cc1bd15053c9e409f6a54cc87d724e5efc9
Opcode Fuzzy Hash: 8ee44b048c84b4ac0ce7d5ffe4213775e5128259825b50c2dbf99827881fd27d
Instruction Fuzzy Hash: 98315C7061DF884FD758DF6C68197BD7BD0FB99324F0446AFE089D72A6CA298840874B

Function 000001F32100037A Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3613967890.000001F321000000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F321000000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f321000000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6cd13e5aa59c51090949243c5976c93d2b83a2229564ff6ac6061ec19b7713aa
Instruction ID: 75e5a29afc08ee49a827405a3c813dc31e227b437d479911273673ab60786ca5
Opcode Fuzzy Hash: 6cd13e5aa59c51090949243c5976c93d2b83a2229564ff6ac6061ec19b7713aa
Instruction Fuzzy Hash: D60184A122AE840BEB499B6C581E76A7BD1D746300F4544EED096CB2E3DD16AC86C346

Function 000001F31E770DF8 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3609024202.000001F31E770000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F31E770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f31e770000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction ID: f2f79414a219bae8d41c75f870c72fed22f7fac54dc547aadb4c65e28ba8456d
Opcode Fuzzy Hash: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction Fuzzy Hash: 5890021889940755E41511914C592AD50406388350FD444904426D0144D54E13EB6162

Function 000001F31E770E00 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3609024202.000001F31E770000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F31E770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f31e770000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction ID: f2f79414a219bae8d41c75f870c72fed22f7fac54dc547aadb4c65e28ba8456d
Opcode Fuzzy Hash: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction Fuzzy Hash: 5890021889940755E41511914C592AD50406388350FD444904426D0144D54E13EB6162

Function 000001F31E770DE8 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3609024202.000001F31E770000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F31E770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f31e770000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction ID: f2f79414a219bae8d41c75f870c72fed22f7fac54dc547aadb4c65e28ba8456d
Opcode Fuzzy Hash: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction Fuzzy Hash: 5890021889940755E41511914C592AD50406388350FD444904426D0144D54E13EB6162

Function 000001F31E770DF0 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3609024202.000001F31E770000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F31E770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f31e770000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction ID: f2f79414a219bae8d41c75f870c72fed22f7fac54dc547aadb4c65e28ba8456d
Opcode Fuzzy Hash: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction Fuzzy Hash: 5890021889940755E41511914C592AD50406388350FD444904426D0144D54E13EB6162

Function 000001F31E770DE0 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3609024202.000001F31E770000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F31E770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f31e770000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction ID: f2f79414a219bae8d41c75f870c72fed22f7fac54dc547aadb4c65e28ba8456d
Opcode Fuzzy Hash: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction Fuzzy Hash: 5890021889940755E41511914C592AD50406388350FD444904426D0144D54E13EB6162

Function 000001F31E770A40 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3609024202.000001F31E770000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F31E770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f31e770000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction ID: f2f79414a219bae8d41c75f870c72fed22f7fac54dc547aadb4c65e28ba8456d
Opcode Fuzzy Hash: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction Fuzzy Hash: 5890021889940755E41511914C592AD50406388350FD444904426D0144D54E13EB6162

Function 000001F31E770E28 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3609024202.000001F31E770000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F31E770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f31e770000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction ID: f2f79414a219bae8d41c75f870c72fed22f7fac54dc547aadb4c65e28ba8456d
Opcode Fuzzy Hash: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction Fuzzy Hash: 5890021889940755E41511914C592AD50406388350FD444904426D0144D54E13EB6162

Function 000001F31E770EF0 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3609024202.000001F31E770000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F31E770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f31e770000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction ID: f2f79414a219bae8d41c75f870c72fed22f7fac54dc547aadb4c65e28ba8456d
Opcode Fuzzy Hash: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction Fuzzy Hash: 5890021889940755E41511914C592AD50406388350FD444904426D0144D54E13EB6162

Function 000001F31E770EC8 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3609024202.000001F31E770000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F31E770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f31e770000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction ID: f2f79414a219bae8d41c75f870c72fed22f7fac54dc547aadb4c65e28ba8456d
Opcode Fuzzy Hash: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction Fuzzy Hash: 5890021889940755E41511914C592AD50406388350FD444904426D0144D54E13EB6162

Function 000001F31E770ED0 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3609024202.000001F31E770000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F31E770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f31e770000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction ID: f2f79414a219bae8d41c75f870c72fed22f7fac54dc547aadb4c65e28ba8456d
Opcode Fuzzy Hash: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction Fuzzy Hash: 5890021889940755E41511914C592AD50406388350FD444904426D0144D54E13EB6162

Function 000001F31E770EB8 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3609024202.000001F31E770000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F31E770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f31e770000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction ID: f2f79414a219bae8d41c75f870c72fed22f7fac54dc547aadb4c65e28ba8456d
Opcode Fuzzy Hash: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction Fuzzy Hash: 5890021889940755E41511914C592AD50406388350FD444904426D0144D54E13EB6162

Function 000001F31E770EC0 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3609024202.000001F31E770000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F31E770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f31e770000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction ID: f2f79414a219bae8d41c75f870c72fed22f7fac54dc547aadb4c65e28ba8456d
Opcode Fuzzy Hash: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction Fuzzy Hash: 5890021889940755E41511914C592AD50406388350FD444904426D0144D54E13EB6162

Function 000001F31E770F68 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3609024202.000001F31E770000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F31E770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f31e770000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction ID: f2f79414a219bae8d41c75f870c72fed22f7fac54dc547aadb4c65e28ba8456d
Opcode Fuzzy Hash: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction Fuzzy Hash: 5890021889940755E41511914C592AD50406388350FD444904426D0144D54E13EB6162

Function 000001F31E770F60 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3609024202.000001F31E770000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F31E770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f31e770000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction ID: f2f79414a219bae8d41c75f870c72fed22f7fac54dc547aadb4c65e28ba8456d
Opcode Fuzzy Hash: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction Fuzzy Hash: 5890021889940755E41511914C592AD50406388350FD444904426D0144D54E13EB6162

Function 000001F31E770F30 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3609024202.000001F31E770000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F31E770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f31e770000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction ID: f2f79414a219bae8d41c75f870c72fed22f7fac54dc547aadb4c65e28ba8456d
Opcode Fuzzy Hash: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction Fuzzy Hash: 5890021889940755E41511914C592AD50406388350FD444904426D0144D54E13EB6162

Function 000001F31E770FC0 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3609024202.000001F31E770000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F31E770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f31e770000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction ID: f2f79414a219bae8d41c75f870c72fed22f7fac54dc547aadb4c65e28ba8456d
Opcode Fuzzy Hash: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction Fuzzy Hash: 5890021889940755E41511914C592AD50406388350FD444904426D0144D54E13EB6162

Function 000001F31E770F98 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3609024202.000001F31E770000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F31E770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f31e770000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction ID: f2f79414a219bae8d41c75f870c72fed22f7fac54dc547aadb4c65e28ba8456d
Opcode Fuzzy Hash: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction Fuzzy Hash: 5890021889940755E41511914C592AD50406388350FD444904426D0144D54E13EB6162

Function 000001F31E770FA0 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3609024202.000001F31E770000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F31E770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f31e770000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction ID: f2f79414a219bae8d41c75f870c72fed22f7fac54dc547aadb4c65e28ba8456d
Opcode Fuzzy Hash: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction Fuzzy Hash: 5890021889940755E41511914C592AD50406388350FD444904426D0144D54E13EB6162

Function 000001F31E770C90 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3609024202.000001F31E770000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F31E770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f31e770000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction ID: f2f79414a219bae8d41c75f870c72fed22f7fac54dc547aadb4c65e28ba8456d
Opcode Fuzzy Hash: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction Fuzzy Hash: 5890021889940755E41511914C592AD50406388350FD444904426D0144D54E13EB6162

Function 000001F31E770C80 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3609024202.000001F31E770000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F31E770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f31e770000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction ID: f2f79414a219bae8d41c75f870c72fed22f7fac54dc547aadb4c65e28ba8456d
Opcode Fuzzy Hash: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction Fuzzy Hash: 5890021889940755E41511914C592AD50406388350FD444904426D0144D54E13EB6162

Function 000001F31E770CB8 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3609024202.000001F31E770000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F31E770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f31e770000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction ID: f2f79414a219bae8d41c75f870c72fed22f7fac54dc547aadb4c65e28ba8456d
Opcode Fuzzy Hash: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction Fuzzy Hash: 5890021889940755E41511914C592AD50406388350FD444904426D0144D54E13EB6162

Function 000001F31E770CA8 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3609024202.000001F31E770000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F31E770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f31e770000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction ID: f2f79414a219bae8d41c75f870c72fed22f7fac54dc547aadb4c65e28ba8456d
Opcode Fuzzy Hash: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction Fuzzy Hash: 5890021889940755E41511914C592AD50406388350FD444904426D0144D54E13EB6162

Function 000001F31E770C98 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3609024202.000001F31E770000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F31E770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f31e770000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction ID: f2f79414a219bae8d41c75f870c72fed22f7fac54dc547aadb4c65e28ba8456d
Opcode Fuzzy Hash: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction Fuzzy Hash: 5890021889940755E41511914C592AD50406388350FD444904426D0144D54E13EB6162

Function 000001F31E770CA0 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3609024202.000001F31E770000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F31E770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f31e770000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction ID: f2f79414a219bae8d41c75f870c72fed22f7fac54dc547aadb4c65e28ba8456d
Opcode Fuzzy Hash: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction Fuzzy Hash: 5890021889940755E41511914C592AD50406388350FD444904426D0144D54E13EB6162

Function 000001F31E770D28 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3609024202.000001F31E770000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F31E770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f31e770000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction ID: f2f79414a219bae8d41c75f870c72fed22f7fac54dc547aadb4c65e28ba8456d
Opcode Fuzzy Hash: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction Fuzzy Hash: 5890021889940755E41511914C592AD50406388350FD444904426D0144D54E13EB6162

Function 000001F31E770D18 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3609024202.000001F31E770000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F31E770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f31e770000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction ID: f2f79414a219bae8d41c75f870c72fed22f7fac54dc547aadb4c65e28ba8456d
Opcode Fuzzy Hash: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction Fuzzy Hash: 5890021889940755E41511914C592AD50406388350FD444904426D0144D54E13EB6162

Function 000001F31E770D20 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.3609024202.000001F31E770000.00000020.00000800.00020000.00000000.sdmp, Offset: 000001F31E770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1f31e770000_WWAHost.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction ID: f2f79414a219bae8d41c75f870c72fed22f7fac54dc547aadb4c65e28ba8456d
Opcode Fuzzy Hash: 6461975d0af69f5e3b98cd7c26a11f2ed51d1ac71bbb7db52786ad9640d450db
Instruction Fuzzy Hash: 5890021889940755E41511914C592AD50406388350FD444904426D0144D54E13EB6162

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata, File: File Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report MSBuild.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\MSBuild.exe.log

C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\IINQQITY\lockup-mslogo-color-78c06e8898[1].png

C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\KAT9HXAG\main.45541edc0a8783f8d033[1].css

C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\KAT9HXAG\main.71e052d7cb81dcea4f7e[1].js

C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\KAT9HXAG\otel-logger-a79fa4a4c2580f67e6a9[1].js

C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\KAT9HXAG\pwa-bootstrap.ea485cd64b20cbd3ef7a[1].js

C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\KAT9HXAG\sharedscripts-939520eada[1].js

C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\KAT9HXAG\vendors.68241257a6ce02eadf71[1].js

C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\LCNHN4MU\pwa-unauth-hero-image-aa1ee34a38[1].png

C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\AC\INetCache\LCNHN4MU\unauth-checkmark-image-1999f0bf81[1].png

C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\Settings\settings.dat

C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe\Settings\settings.dat.LOG1

C:\Users\user\AppData\Local\Temp\SharpDX.DXGI.dll

C:\Users\user\AppData\Local\Temp\SharpDX.Direct3D11.dll

C:\Users\user\AppData\Local\Temp\SharpDX.dll

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Windows Analysis Report
MSBuild.exe