Edit tour

Windows Analysis Report
igCCUqSW2T.exe

Overview

General Information

Sample name:	igCCUqSW2T.exe renamed because original name is a hash value
Original sample name:	573e1b39187ee549d4b5dfb671b722da.exe
Analysis ID:	1540298
MD5:	573e1b39187ee549d4b5dfb671b722da
SHA1:	af940d85965fe3e67041c8fba396e19041b90cc2
SHA256:	a2f2e7d96a5682340a33439d2de8d83037b0959fb8a9d34b06f3a6459c2c6905
Tags:	exeuser-abuse_ch
Infos:

Detection

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

AI detected suspicious sample

Allocates memory in foreign processes

Injects a PE file into a foreign processes

Machine Learning detection for sample

Sigma detected: New RUN Key Pointing to Suspicious Folder

Writes to foreign memory regions

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks if the current process is being debugged

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates a start menu entry (Start Menu\Programs\Startup)

Detected potential crypto function

Drops PE files

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found evasive API chain (date check)

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

One or more processes crash

PE / OLE file has an invalid certificate

PE file contains sections with non-standard names

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Startup Folder File Write

Stores files to the Windows start menu directory

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

igCCUqSW2T.exe (PID: 5168 cmdline: "C:\Users\user\Desktop\igCCUqSW2T.exe" MD5: 573E1B39187EE549D4B5DFB671B722DA)

MSBuild.exe (PID: 5588 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

Honda.exe (PID: 6968 cmdline: "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

conhost.exe (PID: 1876 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

WerFault.exe (PID: 1196 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 5168 -s 268 MD5: C31336C1EFC2CCB44B4326EA793040F2)

Honda.exe (PID: 5084 cmdline: "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

conhost.exe (PID: 748 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

Honda.exe (PID: 6152 cmdline: "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

conhost.exe (PID: 2684 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

Honda.exe (PID: 3524 cmdline: "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

conhost.exe (PID: 5512 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe", EventID: 13, EventType: SetValue, Image: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe, ProcessId: 5588, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\GoogleApp_ff5edefc50774d39a34aaeab10f989eb

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe", EventID: 13, EventType: SetValue, Image: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe, ProcessId: 5588, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\GoogleApp_ff5edefc50774d39a34aaeab10f989eb

Sigma detected: Startup Folder File Write

Source: File created

Author: Roberto Rodriguez (Cyb3rWard0g), OTR (Open Threat Research): Data: EventID: 11, Image: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe, ProcessId: 5588, TargetFilename: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleApp_b9e0c3d616814168aecb04d93958a20f.lnk

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: igCCUqSW2T.exe

ReversingLabs: Detection: 60%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Machine Learning detection for sample

Source: igCCUqSW2T.exe

Joe Sandbox ML: detected

Source: igCCUqSW2T.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.5:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.5:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.5:49902 version: TLS 1.2

Source: igCCUqSW2T.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source:

Binary string: f:\binaries\Intermediate\ndp_msbuild\xmakecommandline.csproj_1613737345\objr\x86\MSBuild.pdb source: Honda.exe, 00000006.00000000.2063085083.0000000000D12000.00000002.00000001.01000000.00000008.sdmp, Honda.exe.1.dr

Source: C:\Users\user\Desktop\igCCUqSW2T.exe

Code function: 0_2_00A2D2FE FindFirstFileExW,

0_2_00A2D2FE

Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData	Jump to behavior

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 104.18.38.233
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.149.23
Source: unknown	TCP traffic detected without corresponding DNS query: 104.18.38.233
Source: unknown	TCP traffic detected without corresponding DNS query: 104.18.38.233
Source: unknown	TCP traffic detected without corresponding DNS query: 104.18.38.233
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.149.23

Source: igCCUqSW2T.exe	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl04
Source: igCCUqSW2T.exe	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y
Source: igCCUqSW2T.exe	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0
Source: igCCUqSW2T.exe	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z
Source: igCCUqSW2T.exe	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0
Source: igCCUqSW2T.exe	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#
Source: igCCUqSW2T.exe	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#
Source: igCCUqSW2T.exe	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#
Source: igCCUqSW2T.exe	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#
Source: igCCUqSW2T.exe	String found in binary or memory: http://ocsp.comodoca.com0
Source: igCCUqSW2T.exe	String found in binary or memory: http://ocsp.sectigo.com0
Source: Amcache.hve.5.dr	String found in binary or memory: http://upx.sf.net
Source: igCCUqSW2T.exe	String found in binary or memory: https://sectigo.com/CPS0

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443

Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.5:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.5:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.72:443 -> 192.168.2.5:49902 version: TLS 1.2

Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: 0_2_00A310A3	0_2_00A310A3
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: 0_2_00A12805	0_2_00A12805
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: 0_2_00A2F840	0_2_00A2F840
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: 0_2_00A1F9EC	0_2_00A1F9EC
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: 0_2_00A12A0F	0_2_00A12A0F
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: 0_2_00A19B05	0_2_00A19B05
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: 0_2_00A27C32	0_2_00A27C32
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: 0_2_00A2943C	0_2_00A2943C
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: 0_2_00A22D90	0_2_00A22D90
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: 0_2_00A1FD34	0_2_00A1FD34
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 1_2_01303108	1_2_01303108
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 1_2_01307850	1_2_01307850
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 1_2_0130A440	1_2_0130A440
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 1_2_01300848	1_2_01300848
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 1_2_013042E8	1_2_013042E8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 1_2_013007B0	1_2_013007B0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 1_2_01307A9C	1_2_01307A9C
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 1_2_013042C8	1_2_013042C8
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 6_2_015A2788	6_2_015A2788
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 6_2_015A5A41	6_2_015A5A41
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 6_2_015A1E2F	6_2_015A1E2F
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 9_2_01022788	9_2_01022788
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 9_2_01025A41	9_2_01025A41
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 9_2_01021E2F	9_2_01021E2F
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 13_2_008B5A41	13_2_008B5A41
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 13_2_008B2788	13_2_008B2788
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 13_2_008B1E2F	13_2_008B1E2F
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 15_2_03022788	15_2_03022788
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 15_2_03025A41	15_2_03025A41
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 15_2_03021CC0	15_2_03021CC0

Source: C:\Users\user\Desktop\igCCUqSW2T.exe

Code function: String function: 00A1A280 appears 50 times

Source: C:\Users\user\Desktop\igCCUqSW2T.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 5168 -s 268

Source: igCCUqSW2T.exe

Static PE information: invalid certificate

Source: igCCUqSW2T.exe	Binary or memory string: OriginalFilename vs igCCUqSW2T.exe
Source: igCCUqSW2T.exe, 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameLKSM.exe< vs igCCUqSW2T.exe

Source: igCCUqSW2T.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: Honda.exe, 00000006.00000002.2078316767.00000000030E1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: C:\Users\user\Desktop\*.sln
Source: Honda.exe, 00000006.00000002.2077300524.0000000001247000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\C:\Users\user\Desktop\<.sln
Source: Honda.exe, 0000000F.00000002.2328167450.0000000003061000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $cqSC:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.sln
Source: Honda.exe, 00000006.00000000.2063085083.0000000000D12000.00000002.00000001.01000000.00000008.sdmp, Honda.exe.1.dr	Binary or memory string: .configAMSBUILDDIRECTORYDELETERETRYCOUNTCMSBUILDDIRECTORYDELETRETRYTIMEOUT.sln
Source: Honda.exe, 00000006.00000000.2063085083.0000000000D12000.00000002.00000001.01000000.00000008.sdmp, Honda.exe.1.dr	Binary or memory string: MSBuild MyApp.sln /t:Rebuild /p:Configuration=Release
Source: Honda.exe, 00000009.00000002.2165788917.0000000000D67000.00000004.00000020.00020000.00000000.sdmp, Honda.exe, 0000000D.00000002.2245379309.000000000063C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\C:\Users\user\AppData\Local\Temp\Honda\<.sln
Source: Honda.exe, 00000006.00000000.2063085083.0000000000D12000.00000002.00000001.01000000.00000008.sdmp, Honda.exe.1.dr	Binary or memory string: f:\binaries\Intermediate\ndp_msbuild\xmakecommandline.csproj_1613737345\objr\x86\MSBuild.pdb
Source: Honda.exe, 00000006.00000002.2078316767.00000000030E1000.00000004.00000800.00020000.00000000.sdmp, Honda.exe, 00000006.00000000.2063085083.0000000000D12000.00000002.00000001.01000000.00000008.sdmp, Honda.exe, 00000009.00000002.2166377232.0000000002B01000.00000004.00000800.00020000.00000000.sdmp, Honda.exe, 0000000D.00000002.2246876596.00000000022F1000.00000004.00000800.00020000.00000000.sdmp, Honda.exe, 0000000F.00000002.2328167450.0000000003061000.00000004.00000800.00020000.00000000.sdmp, Honda.exe.1.dr	Binary or memory string: *.sln
Source: Honda.exe, 00000009.00000002.2166377232.0000000002B01000.00000004.00000800.00020000.00000000.sdmp, Honda.exe, 0000000D.00000002.2246876596.00000000022F1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $cq.C:\Users\user\AppData\Local\Temp\Honda\*.sln
Source: Honda.exe, 00000006.00000000.2063085083.0000000000D12000.00000002.00000001.01000000.00000008.sdmp, Honda.exe.1.dr	Binary or memory string: MSBuild MyApp.csproj /t:Clean
Source: Honda.exe, 00000006.00000000.2063085083.0000000000D12000.00000002.00000001.01000000.00000008.sdmp, Honda.exe.1.dr	Binary or memory string: /ignoreprojectextensions:.sln
Source: Honda.exe, 00000006.00000000.2063085083.0000000000D12000.00000002.00000001.01000000.00000008.sdmp, Honda.exe.1.dr	Binary or memory string: MSBUILD : error MSB1048: Solution files cannot be debugged directly. Run MSBuild first with an environment variable MSBUILDEMITSOLUTION=1 to create a corresponding ".sln.metaproj" file. Then debug that.

Source: classification engine

Classification label: mal72.evad.winEXE@13/13@0/0

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleApp_b9e0c3d616814168aecb04d93958a20f.lnk

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2684:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:748:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1876:120:WilError_03
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess5168

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

File created: C:\Users\user\AppData\Local\Temp\Honda

Jump to behavior

Source: igCCUqSW2T.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\igCCUqSW2T.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: igCCUqSW2T.exe

ReversingLabs: Detection: 60%

Source: unknown	Process created: C:\Users\user\Desktop\igCCUqSW2T.exe "C:\Users\user\Desktop\igCCUqSW2T.exe"
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 5168 -s 268
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process created: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process created: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"	Jump to behavior

Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: scrrun.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{72C24DD5-D70A-438B-8A42-98424B88AFB8}\InProcServer32

Jump to behavior

Source: GoogleApp_b9e0c3d616814168aecb04d93958a20f.lnk.1.dr

LNK file: ..\..\..\..\..\..\Local\Temp\Honda\Honda.exe

Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: igCCUqSW2T.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: igCCUqSW2T.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: igCCUqSW2T.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: igCCUqSW2T.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: igCCUqSW2T.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: igCCUqSW2T.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: igCCUqSW2T.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source: igCCUqSW2T.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:

Source: igCCUqSW2T.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: igCCUqSW2T.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: igCCUqSW2T.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: igCCUqSW2T.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: igCCUqSW2T.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Source: igCCUqSW2T.exe

Static PE information: section name: .bsp

Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: 0_2_00A1992C push ecx; ret		0_2_00A1993F
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: 0_2_00A12F17 push eax; ret		0_2_00A12F76

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

File created: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe

Jump to dropped file

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleApp_b9e0c3d616814168aecb04d93958a20f.lnk

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleApp_b9e0c3d616814168aecb04d93958a20f.lnk

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run GoogleApp_ff5edefc50774d39a34aaeab10f989eb			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run GoogleApp_ff5edefc50774d39a34aaeab10f989eb			Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 1300000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 2D80000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 2B00000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 1560000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 30E0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 15C0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: FE0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 2B00000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 2900000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 8B0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 22F0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 42F0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 2ED0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 3060000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 5060000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Window / User API: threadDelayed 618

Jump to behavior

Source: C:\Users\user\Desktop\igCCUqSW2T.exe

Evasive API call chain: GetSystemTimeAsFileTime,DecisionNodes

graph_0-19963

Source: C:\Users\user\Desktop\igCCUqSW2T.exe

API coverage: 3.8 %

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 6528	Thread sleep count: 618 > 30	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 6528	Thread sleep count: 155 > 30	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5148	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe TID: 6352	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe TID: 6564	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe TID: 1272	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe TID: 6408	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\igCCUqSW2T.exe

Code function: 0_2_00A2D2FE FindFirstFileExW,

0_2_00A2D2FE

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData	Jump to behavior

Source: Amcache.hve.5.dr	Binary or memory string: VMware
Source: Amcache.hve.5.dr	Binary or memory string: VMware Virtual USB Mouse
Source: Amcache.hve.5.dr	Binary or memory string: vmci.syshbin
Source: Amcache.hve.5.dr	Binary or memory string: VMware, Inc.
Source: Amcache.hve.5.dr	Binary or memory string: VMware20,1hbin@
Source: Amcache.hve.5.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: Amcache.hve.5.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.5.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.5.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.5.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: Amcache.hve.5.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.5.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.5.dr	Binary or memory string: vmci.sys
Source: Amcache.hve.5.dr	Binary or memory string: VMware-56 4d 43 71 48 15 3d ed-ae e6 c7 5a ec d9 3b f0
Source: Amcache.hve.5.dr	Binary or memory string: vmci.syshbin`
Source: Amcache.hve.5.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: Amcache.hve.5.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.5.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.5.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.5.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.5.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: Amcache.hve.5.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: Amcache.hve.5.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.5.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.5.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.5.dr	Binary or memory string: VMware VMCI Bus Device
Source: Amcache.hve.5.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.5.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: Amcache.hve.5.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563

Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Process queried: DebugPort			Jump to behavior
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Process queried: DebugPort			Jump to behavior

Source: C:\Users\user\Desktop\igCCUqSW2T.exe

Code function: 0_2_00A12F17 LdrInitializeThunk,

0_2_00A12F17

Source: C:\Users\user\Desktop\igCCUqSW2T.exe

Code function: 0_2_00A1A085 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

0_2_00A1A085

Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: 0_2_00A12F7C mov edi, dword ptr fs:[00000030h]	0_2_00A12F7C
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: 0_2_00A23BBE mov ecx, dword ptr fs:[00000030h]	0_2_00A23BBE
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: 0_2_00A2CC6F mov eax, dword ptr fs:[00000030h]	0_2_00A2CC6F

Source: C:\Users\user\Desktop\igCCUqSW2T.exe

Code function: 0_2_00A2E177 GetProcessHeap,

0_2_00A2E177

Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: 0_2_00A1A085 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_00A1A085
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: 0_2_00A1A212 SetUnhandledExceptionFilter,	0_2_00A1A212
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: 0_2_00A20B69 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_00A20B69
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: 0_2_00A19E74 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_00A19E74

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Allocates memory in foreign processes

Source: C:\Users\user\Desktop\igCCUqSW2T.exe

Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000 protect: page execute and read and write

Jump to behavior

Injects a PE file into a foreign processes

Source: C:\Users\user\Desktop\igCCUqSW2T.exe

Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000 value starts with: 4D5A

Jump to behavior

Writes to foreign memory regions

Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000	Jump to behavior
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 402000	Jump to behavior
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 410000	Jump to behavior
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 412000	Jump to behavior
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: AE7008	Jump to behavior

Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process created: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"			Jump to behavior

Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: EnumSystemLocalesW,	0_2_00A27026
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: EnumSystemLocalesW,	0_2_00A30031
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: EnumSystemLocalesW,	0_2_00A3007C
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,	0_2_00A301A2
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: EnumSystemLocalesW,	0_2_00A30117
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: GetLocaleInfoW,	0_2_00A303F5
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: GetLocaleInfoW,	0_2_00A274EF
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: GetACP,IsValidCodePage,GetLocaleInfoW,	0_2_00A2FD8F
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	0_2_00A3051E
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	0_2_00A306F3
Source: C:\Users\user\Desktop\igCCUqSW2T.exe	Code function: GetLocaleInfoW,	0_2_00A30624

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\igCCUqSW2T.exe

Code function: 0_2_00A1A2C5 GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

0_2_00A1A2C5

Source: Amcache.hve.5.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.5.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.5.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.5.dr	Binary or memory string: MsMpEng.exe

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Native API	21 Registry Run Keys / Startup Folder	311 Process Injection	1 Masquerading	OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	21 Registry Run Keys / Startup Folder	1 Disable or Modify Tools	LSASS Memory	41 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	1 Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	41 Virtualization/Sandbox Evasion	Security Account Manager	41 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	Steganography	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	311 Process Injection	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	3 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Obfuscated Files or Information	Cached Domain Credentials	22 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
igCCUqSW2T.exe	61%	ReversingLabs	Win32.Trojan.LummaC
igCCUqSW2T.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	0%	ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0	0%	URL Reputation	safe
http://upx.sf.net	0%	URL Reputation	safe
https://sectigo.com/CPS0	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0	0%	URL Reputation	safe
http://ocsp.sectigo.com0	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
s-part-0044.t-0009.fb-t-msedge.net	13.107.253.72	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#	igCCUqSW2T.exe	false	URL Reputation: safe	unknown
http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0	igCCUqSW2T.exe	false	URL Reputation: safe	unknown
http://upx.sf.net	Amcache.hve.5.dr	false	URL Reputation: safe	unknown
https://sectigo.com/CPS0	igCCUqSW2T.exe	false	URL Reputation: safe	unknown
http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#	igCCUqSW2T.exe	false	URL Reputation: safe	unknown
http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#	igCCUqSW2T.exe	false	URL Reputation: safe	unknown
http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y	igCCUqSW2T.exe	false	URL Reputation: safe	unknown
http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0	igCCUqSW2T.exe	false	URL Reputation: safe	unknown
http://ocsp.sectigo.com0	igCCUqSW2T.exe	false	URL Reputation: safe	unknown
http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z	igCCUqSW2T.exe	false	URL Reputation: safe	unknown
http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#	igCCUqSW2T.exe	false	URL Reputation: safe	unknown

World Map of Contacted IPs

⊘No contacted IP infos

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540298
Start date and time:	2024-10-23 17:02:12 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 43s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run name:	Run with higher sleep bypass
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	igCCUqSW2T.exe renamed because original name is a hash value
Original Sample Name:	573e1b39187ee549d4b5dfb671b722da.exe
Detection:	MAL
Classification:	mal72.evad.winEXE@13/13@0/0
EGA Information:	Successful, ratio: 16.7%
HCA Information:	Successful, ratio: 95% Number of executed functions: 141 Number of non-executed functions: 56
Cookbook Comments:	Found application associated with file extension: .exe Sleeps bigger than 100000000ms are automatically reduced to 1000ms

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 40.126.32.68, 20.190.160.20, 40.126.32.76, 40.126.32.140, 20.190.160.14, 40.126.32.74, 40.126.32.72, 20.190.160.17, 93.184.221.240, 192.229.221.95, 4.245.163.56, 20.242.39.171, 52.182.143.212, 52.165.164.15, 40.69.42.241, 199.232.210.172
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, slscr.update.microsoft.com, otelrules.afd.azureedge.net, wu.azureedge.net, ocsp.digicert.com, onedsblobprdcus15.centralus.cloudapp.azure.com, login.live.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, hlb.apr-52dd2-0.edgecastdns.net, sls.update.microsoft.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, prdv4a.aadg.msidentity.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, www.tm.v4.a.prd.aadg.akadns.net, wu.ec.azureedge.net, ctldl.windowsupdate.com, login.msa.msidentity.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, blobcollector.events.data.trafficmanager.net, azureedge-t-prod.trafficmanager.net, umwatson.events.data.microsoft.com, www.tm.lg.prod.aadmsa.trafficmanager.net
Execution Graph export aborted for target Honda.exe, PID 3524 because it is empty
Execution Graph export aborted for target Honda.exe, PID 5084 because it is empty
Execution Graph export aborted for target Honda.exe, PID 6152 because it is empty
Execution Graph export aborted for target Honda.exe, PID 6968 because it is empty
Execution Graph export aborted for target MSBuild.exe, PID 5588 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
VT rate limit hit for: igCCUqSW2T.exe

Simulations

Behavior and APIs

Time	Type	Description
17:03:06	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run GoogleApp_ff5edefc50774d39a34aaeab10f989eb "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
17:03:14	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run GoogleApp_ff5edefc50774d39a34aaeab10f989eb "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
17:03:22	Autostart	Run: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleApp_b9e0c3d616814168aecb04d93958a20f.lnk

Joe Sandbox View / Context

IPs

⊘No context

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
bg.microsoft.map.fastly.net	roquette October.pdf	Get hash	malicious	HTMLPhisher	Browse	199.232.214.172
	http://wxqlb.ecobusinessegypt.com/4Upeae17759oIun1207nsacmhsouq29959VLTMIPDLABHITRZ3224VGST20749x12	Get hash	malicious	Unknown	Browse	199.232.214.172
	https://hnamedmr.ukremediatlon.co.uk/LVGwXwqP	Get hash	malicious	Unknown	Browse	199.232.210.172
	https://clinicaotoface1.websiteseguro.com/no/ai/	Get hash	malicious	Unknown	Browse	199.232.210.172
	file.exe	Get hash	malicious	Unknown	Browse	199.232.214.172
	Jwhite Pay Increase EFile997843.pdf	Get hash	malicious	Unknown	Browse	199.232.210.172
	https://get.massive.io/01JAV1F4JHAVFK2T933H9X3447?secret=XXfezwrLxDLZFdqU	Get hash	malicious	Unknown	Browse	199.232.210.172
	SecuriteInfo.com.Win32.RATX-gen.24741.12192.exe	Get hash	malicious	Unknown	Browse	199.232.210.172
	SecuriteInfo.com.Trojan.PackedNET.3087.23336.17285.exe	Get hash	malicious	Unknown	Browse	199.232.210.172
	SecuriteInfo.com.Win32.MalwareX-gen.13871.31396.exe	Get hash	malicious	Unknown	Browse	199.232.210.172
fp2e7a.wpc.phicdn.net	qBtDOzhQnS.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	https://email.email.pandadoc.net/c/eJxUkMtu2zoQhp9G3NkQhxQlLbRIjo8QpKjRS5qi3QTD4TCmZYuyRNm1nr4w0PSyGwzmG3z_7xprlPWVcJHmI_fpJbjmguOnLn78cm0vTw-4fw8_dttdENzIEmoji9oYsWsAtST2VKmiVOSoJqdyVNYa9pUnKUIDOWiZA0hTgDZrUNoXnphIopaly3TORwyH9YC9Qxdp3XMSYXpJIxKjPXCTxpnFodmlNEyZusugzaDFYfiDUDxm0L7pZ9CeIVNtih33mdpIlF4hGzaGIM8ta2mV83UNlbFYlJCbQhsoM9WKPqbgA2EKsb_VACXX1jKtlM9hpQHcqiKvVsZXuvB16WTBIo6v2IflN7T_8Ly_7-p6G_bz4wbM8n1Sp6MYG7ePPU-Zzu186Pg0H4abuhj5HKZfrF4mPLvT5vndMpR0h183E0MpUvOW7q9xlXB85X820-3i3IC4xLGbBiS-Pf3v-o2eUuge_l-21bG_2vt-fvz8MwAA__9XraZ6	Get hash	malicious	Unknown	Browse	192.229.221.95
	ufp4rvU3SP.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	tfduJDS9iM.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	otq9AG1EIk.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	KO8mPIAMHh.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	otq9AG1EIk.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	KO8mPIAMHh.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	https://1drv.ms/o/c/6c73e1f3356d6c81/EvfBo1LISVpEg8JGFA7u8GsBL0LmooIAfd5Q39ROhQ0Lhw?e=ZTugWV	Get hash	malicious	HtmlDropper	Browse	192.229.221.95
s-part-0044.t-0009.fb-t-msedge.net	tfduJDS9iM.exe	Get hash	malicious	Unknown	Browse	13.107.253.72
	KO8mPIAMHh.exe	Get hash	malicious	Unknown	Browse	13.107.253.72
	https://api-restauration.basiic.net/fWmcv/	Get hash	malicious	Unknown	Browse	13.107.253.72
	https://re.e-sharedonedrivefile.com/skjashd	Get hash	malicious	Unknown	Browse	13.107.253.72
	https://app.creatopy.com/share/d/qvnqyxdo8o7m	Get hash	malicious	Unknown	Browse	13.107.253.72
	17296647828551b11aca9b151564721554cb3198cad41fe09df6ef699a89a6a1e471ca1e8b529.dat-decoded.exe	Get hash	malicious	LummaC	Browse	13.107.253.72
	Pedido urgente_pdf.exe	Get hash	malicious	Snake Keylogger	Browse	13.107.253.72
	General terms and conditions of sale - Valid from 10202024 to 12312024.exe	Get hash	malicious	FormBook	Browse	13.107.253.72
	17296647675a227633e026f1e0b73c1235d63ba2c9f78fec358d3847a30422d034356fce77674.dat-decoded.exe	Get hash	malicious	LummaC	Browse	13.107.253.72
	17296647684b29b3aea851448b3aac50b4cc238cd35980f77f6403fc4a06041c87b4e38ac1893.dat-decoded.exe	Get hash	malicious	LummaC	Browse	13.107.253.72

ASNs

⊘No context

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	qBtDOzhQnS.exe	Get hash	malicious	Unknown	Browse	13.107.253.72
	sample.pdf	Get hash	malicious	HtmlDropper	Browse	13.107.253.72
	https://email.email.pandadoc.net/c/eJxUkMtu2zoQhp9G3NkQhxQlLbRIjo8QpKjRS5qi3QTD4TCmZYuyRNm1nr4w0PSyGwzmG3z_7xprlPWVcJHmI_fpJbjmguOnLn78cm0vTw-4fw8_dttdENzIEmoji9oYsWsAtST2VKmiVOSoJqdyVNYa9pUnKUIDOWiZA0hTgDZrUNoXnphIopaly3TORwyH9YC9Qxdp3XMSYXpJIxKjPXCTxpnFodmlNEyZusugzaDFYfiDUDxm0L7pZ9CeIVNtih33mdpIlF4hGzaGIM8ta2mV83UNlbFYlJCbQhsoM9WKPqbgA2EKsb_VACXX1jKtlM9hpQHcqiKvVsZXuvB16WTBIo6v2IflN7T_8Ly_7-p6G_bz4wbM8n1Sp6MYG7ePPU-Zzu186Pg0H4abuhj5HKZfrF4mPLvT5vndMpR0h183E0MpUvOW7q9xlXB85X820-3i3IC4xLGbBiS-Pf3v-o2eUuge_l-21bG_2vt-fvz8MwAA__9XraZ6	Get hash	malicious	Unknown	Browse	13.107.253.72
	ufp4rvU3SP.exe	Get hash	malicious	Unknown	Browse	13.107.253.72
	otq9AG1EIk.exe	Get hash	malicious	Unknown	Browse	13.107.253.72
	http://docusign.net	Get hash	malicious	Unknown	Browse	13.107.253.72
	KO8mPIAMHh.exe	Get hash	malicious	Unknown	Browse	13.107.253.72
	tfduJDS9iM.exe	Get hash	malicious	Unknown	Browse	13.107.253.72
	otq9AG1EIk.exe	Get hash	malicious	Unknown	Browse	13.107.253.72

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	qBtDOzhQnS.exe	Get hash	malicious	Unknown	Browse
	ufp4rvU3SP.exe	Get hash	malicious	Unknown	Browse
	tfduJDS9iM.exe	Get hash	malicious	Unknown	Browse
	otq9AG1EIk.exe	Get hash	malicious	Unknown	Browse
	KO8mPIAMHh.exe	Get hash	malicious	Unknown	Browse
	tfduJDS9iM.exe	Get hash	malicious	Unknown	Browse
	otq9AG1EIk.exe	Get hash	malicious	Unknown	Browse
	KO8mPIAMHh.exe	Get hash	malicious	Unknown	Browse
	76Kobq8opu.exe	Get hash	malicious	Unknown	Browse

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_igCCUqSW2T.exe_a39d8d5153bf3a93af1ad9cca3e2ad945ec4eb5_87ca88db_5cf8cd2d-92f3-48e3-be8f-c72e9d52b2ab\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.6551201652754162
Encrypted:	false
SSDEEP:	96:xbFnJXe44RoesF3hvzxTMjh6tQXIDcQvc6QcEVcw3cE/H+HbHg/5hZAX/d5FMT2K:Njn4RoeK80BU/AjhzuiFKZ24IO8e
MD5:	A5062F37BA30A1E65A97B5BE9C92227F
SHA1:	1AD5FA2EB22FC66F69DD8F44FE1A4A111DA01AEA
SHA-256:	4235DD5CB2B4618F848FD58290FF747B81C30128EAD6D85D630B0A8482CED4A4
SHA-512:	F48B4D53873B4BEE2C9D0786EF97366CA8CBE59694A1484EC5422C916851FDD7A8AED2C7D9A47C1329389763B004455273FD392DB7716838CF304EB8A4BBB8AA
Malicious:	true
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.B.E.X.....E.v.e.n.t.T.i.m.e.=.1.3.3.7.4.1.6.9.3.8.4.3.8.4.3.1.2.3.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.7.4.1.6.9.3.8.5.6.0.3.0.5.6.5.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.5.c.f.8.c.d.2.d.-.9.2.f.3.-.4.8.e.3.-.b.e.8.f.-.c.7.2.e.9.d.5.2.b.2.a.b.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.5.b.c.c.e.1.d.f.-.c.c.6.e.-.4.1.a.6.-.9.a.a.8.-.c.3.2.3.c.6.8.6.e.8.4.7.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.i.g.C.C.U.q.S.W.2.T...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.4.3.0.-.0.0.0.1.-.0.0.1.4.-.b.c.8.3.-.9.7.a.8.5.c.2.5.d.b.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.e.5.d.f.3.6.0.c.9.8.e.c.0.8.a.6.1.a.2.1.a.e.5.0.0.1.8.1.3.8.9.e.0.0.0.0.f.f.f.f.!.0.0.0.0.a.f.9.4.0.d.8.5.9.6.5.f.e.3.e.6.7.0.4.1.c.8.f.b.a.3.9.6.e.1.9.0.4.1.b.9.0.c.c.2.!.i.g.C.C.U.q.S.W.2.T...e.x.e.....T.a.r.g.e.t.A.p.p.V.e.r.=.2.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER8AE8.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 14 streams, Wed Oct 23 15:03:04 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	39320
Entropy (8bit):	1.716290191234182
Encrypted:	false
SSDEEP:	96:5r8JZvXUicz1jTg4EbwLd+Vi77bkqrJSG/dFTIuULyCIAfNf6kYdNQyWIkWI/nIZ:iH8gDOpKpfN+EWACLBjRmAH
MD5:	98DAEA546F75A8B5B03954BED7EAC8E1
SHA1:	66C7C0631F0C3FC9E0EEEAE649D9936153E627F6
SHA-256:	ACA74EE13BCC8A75D59F391DBB149D0A6EE546C77D79EC813A3BD50572902673
SHA-512:	F8F7635942F877533D6AE0EC4957A4551B02FD2721362F3C8C918DAED6AD037D8E31A51DE0B67F4344FA64E806DA48FA9576CAEB759DBB7479CDDFDA582813A6
Malicious:	false
Preview:	MDMP..a..... .......(..g........................d...........t...............T.......8...........T..........................0...........................................................................................eJ..............GenuineIntel............T.......0...'..g.............................0..............,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6...................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WER8B57.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	8378
Entropy (8bit):	3.6921457915543865
Encrypted:	false
SSDEEP:	192:R6l7wVeJT76oMzp6YEIJSU9bB9Pgmfr4QOpr+89bt0sfFPm:R6lXJv6oMzp6YEGSU9brgmfr4QMtnfQ
MD5:	A4AC1BF1194CA9BD0C630CEE5480BCA0
SHA1:	368D28F2280E477B5F153776462DC198B958EF7F
SHA-256:	7CFF1E2FF6A97362CA28BDED77634B0718AD35D44033026CFEEE75B862EF3DA1
SHA-512:	1E068C72EDBEE71014C8E4DCB4927D6B3701861A03A34C8D5BBEDD0032D7CD5FEAB31D20E5EE668FBD9175EE890B81C8919678D4A2881A52D195881CF7F0BE5B
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.5.1.6.8.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER8B87.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4696
Entropy (8bit):	4.470460212047958
Encrypted:	false
SSDEEP:	48:cvIwWl8zsnJg77aI99aWpW8VYV+Ym8M4JOUF5XY+q8vLYwzdWhQd:uIjfJI7Lb7VgJfXYKvzdWhQd
MD5:	6211C34F3060EF116313318A829A7B7E
SHA1:	A4F096421B13336EB50D7FD0016E78321624CC5F
SHA-256:	2B8032B3E585113C86658BFE96878239C192AD92485BD7077138E8D2EB7BBD9D
SHA-512:	86678F9F57F9C4FCFB3A8B6E16E9B059687A3DAD9FE43260515C8B982DE3AFFDF3097A838B2C0D76FA140503C59075B41827E88977710B9D5EE5B59B70E6DF40
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="556205" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Honda.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\Honda\Honda.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	841
Entropy (8bit):	5.351831766340675
Encrypted:	false
SSDEEP:	24:ML9E4KlKDE4KhKiKhPKIE4oKNzKoIvEE4xDqE4j:MxHKlYHKh3oPtHo6wvEHxDqHj
MD5:	98DCC730A3C77DCDCA7CD8717EB5D42A
SHA1:	639509210C17EB73F5DB581FA8CA46B1157D8806
SHA-256:	E3C80885BCC7FE4F349EFB0470D261E0DE273EE26D47AF09C79F1B4B2F891E49
SHA-512:	7D11C53167839D428DAE35BF759C73FC0C7C49F2DE35CC99E4F8B69CDD40DFBEEF6D355F15FAB1EED62A64AF94E7BA311C0F8E07C3DA6F3A63410CC3E9882B78
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\2192b0d5aa4aa14486ae08118d3b9fcc\System.Configuration.ni.dll",0..2,"Microsoft.Build.Framework, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..2,"Microsoft.Build, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\MSBuild.exe.log

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	636
Entropy (8bit):	5.363873409814957
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPTAOKbbDLI4MWuPJKAVKhadDLI4MNsf6cv:ML9E4KlKDE4KhKiKhwE4Tye
MD5:	43484EA7D5BD7DE47119BC063D65D7AF
SHA1:	FCE0A3922FB3E421F8EF74E9A94E60F8DE7F97F5
SHA-256:	C00C48279B0CCFF866BB59D1DD5B77C65594B86BD4D16DE0F2EFAD2778F57A23
SHA-512:	A56C0609179C003044AFEC26019EAEC0ECC772108327EB01F817B88780981289A61E795F6E8745FDEAE99D8543B57344F80A9542BDA2933787C5C8331C869820
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..3,"System.Net.Http, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Net.Http\bb5812ab3cec92427da8c5c696e5f731\System.Net.Http.ni.dll",0..

C:\Users\user\AppData\Local\Temp\Honda\Honda.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	262432
Entropy (8bit):	6.179415524830389
Encrypted:	false
SSDEEP:	3072:7a0t0yH5wCwie3NnQNLpj/Wnqvsw2XpFU4rwOeTubZSzf02RFihx2uzj:m0ny3nnKpqnZRXfw702birr/
MD5:	8FDF47E0FF70C40ED3A17014AEEA4232
SHA1:	E6256A0159688F0560B015DA4D967F41CBF8C9BD
SHA-256:	ED9884BAC608C06B7057037CC91D90E4AE5F74DD2DBCE2AF476699C6D4492D82
SHA-512:	BD69D092ED4F9C5E1F24EAF5EC79FB316469D53849DC798FAE0FCBA5E90869B77EE924C23CC6F692198FF25827AB60AD47BB46CADD6E0AADDE7731CBAFB013BE
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: qBtDOzhQnS.exe, Detection: malicious, Browse Filename: ufp4rvU3SP.exe, Detection: malicious, Browse Filename: tfduJDS9iM.exe, Detection: malicious, Browse Filename: otq9AG1EIk.exe, Detection: malicious, Browse Filename: KO8mPIAMHh.exe, Detection: malicious, Browse Filename: tfduJDS9iM.exe, Detection: malicious, Browse Filename: otq9AG1EIk.exe, Detection: malicious, Browse Filename: KO8mPIAMHh.exe, Detection: malicious, Browse Filename: 76Kobq8opu.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....?.].........."...0..\|...B......:.... ........@.. ...............................L....`....................................O........>.............. A........................................................... ............... ..H............text...Xz... ...\|.................. ..`.rsrc....>.......@...~..............@..@.reloc..............................@..B........................H........)...................\|...........................................{.......v.(=....r...p({...-..+..}........0..%........(....-......(z.....&..}..............................0..5........(....-...-.r+..ps>...z.....i(z.....&..}......................%......>....(?...(....N..(@....oA...(....:...(B...(....:...(C...(....*....(........0..G........(....,....(....-...}......r...p(x...&.(v.....}......&..}....................7.......0..f........-.r7..ps>...z .....

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleApp_b9e0c3d616814168aecb04d93958a20f.lnk

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Oct 23 14:03:03 2024, mtime=Wed Oct 23 14:03:03 2024, atime=Sat Dec 7 08:10:48 2019, length=262432, window=hide
Category:	dropped
Size (bytes):	1123
Entropy (8bit):	4.925403768852136
Encrypted:	false
SSDEEP:	24:87qfjD8II2FR3JgKX8WTuE5ryhEsQANMIK+E6E6rkhTqygm:87qMXIRyWKw+hVNMIK+/bkgyg
MD5:	49C36EBB41BB322A1085E9640A170AFD
SHA1:	34E629A8E9C9199E8DB782852CDFD714235A4324
SHA-256:	30630FAA16929331BD78006CA46E2586E29ED69C1615B4E1925875FED5E3AB9F
SHA-512:	DB56C88D38BC0FB6536DE35FC7C01E3F7D43C61F5CBB71CEA6CB6699F7AA838D539B5B9F649A21C76664B9A38CF31921610A89DA065226D69FD6A09322107A5E
Malicious:	false
Preview:	L..................F...."......\%.....\%..{.#7... .........................:..DG..Yr?.D..U..k0.&...&...... M......A.\%..K...\%......t...CFSF..1.....DWSl..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......DWSlWYax....B.....................Bdg.A.p.p.D.a.t.a...B.P.1.....WY]x..Local.<......DWSlWYax....V......................&.L.o.c.a.l.....N.1.....WYax..Temp..:......DWSlWYax....\.........................T.e.m.p.....P.1.....WYbx..Honda.<......WYbxWYbx....).....................}S..H.o.n.d.a.....\.2. ....OYI".Honda.exe.D......WYbxWYbx....*...........p.............H.o.n.d.a...e.x.e.......a...............-.......`...........3.......C:\Users\user\AppData\Local\Temp\Honda\Honda.exe..,.....\.....\.....\.....\.....\.....\.L.o.c.a.l.\.T.e.m.p.\.H.o.n.d.a.\.H.o.n.d.a...e.x.e.........\|....I.J.H..K..:...`.......X.......609290...........hT..CrF.f4... .=y2=.b...,...W..hT..CrF.f4... .=y2=.b...,...W..............1SPS.XF.L8C....&.m.q............/...S.-.1.-.5.-.2.1.-.2.2.4.6.1.2.2.6.5.8.-.3.

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.4215750451628
Encrypted:	false
SSDEEP:	6144:BSvfpi6ceLP/9skLmb0OTMWSPHaJG8nAgeMZMMhA2fX4WABlEnN70uhiTw:YvloTMW+EZMM6DFyx03w
MD5:	90ADA2FB167535C35B87C4BA0428C890
SHA1:	935DCB6C44D850272D086162B1AAF12A3CEAFBB8
SHA-256:	DCCB31BCD6A2DF1A85BC812B81134F95B1D0C224F95CA0AC3B816FB665815B50
SHA-512:	E0D9E371B8768A237C9C984DB8AF04966E5F414ABD1925DA8F36854F87DEA6118A76EC8665E7C794DA8D38678E7C7E3A882D8F4225B9CDEEAF6952544581A14F
Malicious:	false
Preview:	regf>...>....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm....\%..............................................................................................................................................................................................................................................................................................................................................p;9.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

\Device\ConDrv

Download File

Process:	C:\Users\user\AppData\Local\Temp\Honda\Honda.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	298
Entropy (8bit):	4.924206445966445
Encrypted:	false
SSDEEP:	6:zx3M1tFAbQtASR30qyMstwYVoRRZBXVN+J0fFdCsq2UTiMdH8stCal+n:zK13P30ZMt9BFN+QdCT2UftCM+
MD5:	932782CF70ED00D22C0B08B5027B4E31
SHA1:	78F460A2155D9E819B8452C281285D7E0A7AC14F
SHA-256:	F2C2477FB3FD0A30F3D3D8637EF9C774B43E940043635DF90CDD804799A2ECE7
SHA-512:	C83E72797C03CABCAB066B95BAEEBB13944143846794061CF9482EA3B283979E470930047FDAE72A6F06F51F3127FF39DAAEFAAD7557E3AD49F590B9E7B78D24
Malicious:	false
Preview:	Microsoft (R) Build Engine version 4.8.4084.0..[Microsoft .NET Framework, version 4.0.30319.42000]..Copyright (C) Microsoft Corporation. All rights reserved.....MSBUILD : error MSB1003: Specify a project or solution file. The current working directory does not contain a project or solution file...

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.857761816554458
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	igCCUqSW2T.exe
File size:	294'016 bytes
MD5:	573e1b39187ee549d4b5dfb671b722da
SHA1:	af940d85965fe3e67041c8fba396e19041b90cc2
SHA256:	a2f2e7d96a5682340a33439d2de8d83037b0959fb8a9d34b06f3a6459c2c6905
SHA512:	7d355d4f88578f9c34c5c26b1746c9458f64ddd49719f18ccf760e9f7e3f0b4e5e39514f722d749711602ecf91b80a3a7052f05336842ebfb5c4b682c92684ac
SSDEEP:	6144:QuEDjIKQebn/EWGIezYFuJ1Te8AZj8liyCAJcxalr7v:NWIKQeb/E3J5e7j8lbJcolr7v
TLSH:	7B54AE2179C0C473D52325310AF4EBB96A7DFA700E655A8F67A41BAF0F702C19731A6B
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........L..v...v...v...u...v...s.a.v...r...v...w...v...w.M.v...r...v...u...v...s...v.......v.......v...t...v.Rich..v................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x409922
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x67168489 [Mon Oct 21 16:42:49 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	31770ac6e89309fe8c99522fb04f055c

Authenticode Signature

Signature Valid:	false
Signature Issuer:	CN=Sectigo Public Code Signing CA R36, O=Sectigo Limited, C=GB
Signature Validation Error:	The digital signature of the object did not verify
Error Number:	-2146869232
Not Before, Not After	31/08/2023 02:00:00 31/08/2026 01:59:59
Subject Chain	CN=Privacy Technologies OU, O=Privacy Technologies OU, S=Harjumaa, C=EE
Version:	3
Thumbprint MD5:	AD1BCBF19AE2F91BB114D33B85359E56
Thumbprint SHA-1:	141D90A1BA8F61863FBEDDF7DD1D66C1D1E0B128
Thumbprint SHA-256:	A08EA2A7A257AD690B988446951E9DEF2986A2F3F546B6F0902805330F3B6B48
Serial:	00D0461B529F67189D43744E9CEFE172AE

Entrypoint Preview

Instruction
call 00007FD8FCAB5150h
jmp 00007FD8FCAB45DFh
mov ecx, dword ptr [ebp-0Ch]
mov dword ptr fs:[00000000h], ecx
pop ecx
pop edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
push ecx
ret
mov ecx, dword ptr [ebp-10h]
xor ecx, ebp
call 00007FD8FCAB4182h
jmp 00007FD8FCAB4742h
push eax
push dword ptr fs:[00000000h]
lea eax, dword ptr [esp+0Ch]
sub esp, dword ptr [esp+0Ch]
push ebx
push esi
push edi
mov dword ptr [eax], ebp
mov ebp, eax
mov eax, dword ptr [00432180h]
xor eax, ebp
push eax
push dword ptr [ebp-04h]
mov dword ptr [ebp-04h], FFFFFFFFh
lea eax, dword ptr [ebp-0Ch]
mov dword ptr fs:[00000000h], eax
ret
push eax
push dword ptr fs:[00000000h]
lea eax, dword ptr [esp+0Ch]
sub esp, dword ptr [esp+0Ch]
push ebx
push esi
push edi
mov dword ptr [eax], ebp
mov ebp, eax
mov eax, dword ptr [00432180h]
xor eax, ebp
push eax
mov dword ptr [ebp-10h], eax
push dword ptr [ebp-04h]
mov dword ptr [ebp-04h], FFFFFFFFh
lea eax, dword ptr [ebp-0Ch]
mov dword ptr fs:[00000000h], eax
ret
push eax
push dword ptr fs:[00000000h]
lea eax, dword ptr [esp+0Ch]
sub esp, dword ptr [esp+0Ch]
push ebx
push esi
push edi
mov dword ptr [eax], ebp
mov ebp, eax
mov eax, dword ptr [00432180h]
xor eax, ebp
push eax
mov dword ptr [ebp-10h], esp
push dword ptr [ebp-04h]
mov dword ptr [ebp-04h], FFFFFFFFh
lea eax, dword ptr [ebp-0Ch]
mov dword ptr fs:[00000000h], eax

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x30bc0	0x28	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x43000	0x1e0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x44e00	0x2e80
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x44000	0x2104	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x2e088	0x1c	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x2e0c0	0x18	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x2dfc8	0x40	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x26000	0x158	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x247c5	0x24800	6dae0d479bc611c4ee23089dfeba7452	False	0.583623180650685	data	6.665208556636056	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x26000	0xb3c6	0xb400	5d1322b62688e6f15161997d12e31928	False	0.4263237847222222	data	4.9008947782705405	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x32000	0x106cc	0xf800	202eadcade7fc589d103fb0d255dc1df	False	0.9154170866935484	data	7.83784431296292	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x43000	0x1e0	0x200	9866eeb93e80b773405f3d7936b83641	False	0.52734375	data	4.7074344725994175	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x44000	0x2104	0x2200	1f7fd92f797137669f7137f1f00d6e76	False	0.7344898897058824	data	6.455013830478276	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
.bsp	0x47000	0x3000	0x3000	65a4aec90f44919a3f44912e2b0209b1	False	0.025634765625	data	0.25835455959386633	IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x43060	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL

Import

KERNEL32.dll

GlobalFindAtomA, RaiseException, GetCurrentThreadId, IsProcessorFeaturePresent, GetLastError, FreeLibraryWhenCallbackReturns, CreateThreadpoolWork, SubmitThreadpoolWork, CloseThreadpoolWork, GetModuleHandleExW, WakeAllConditionVariable, SleepConditionVariableSRW, InitOnceComplete, InitOnceBeginInitialize, ReleaseSRWLockExclusive, AcquireSRWLockExclusive, TryAcquireSRWLockExclusive, WideCharToMultiByte, CloseHandle, QueryPerformanceCounter, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSectionEx, DeleteCriticalSection, EncodePointer, DecodePointer, MultiByteToWideChar, LCMapStringEx, GetSystemTimeAsFileTime, GetModuleHandleW, GetProcAddress, GetStringTypeW, GetCPInfo, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, IsDebuggerPresent, GetStartupInfoW, GetCurrentProcessId, InitializeSListHead, CreateFileW, RtlUnwind, SetLastError, InitializeCriticalSectionAndSpinCount, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, FreeLibrary, LoadLibraryExW, ExitProcess, GetModuleFileNameW, GetStdHandle, WriteFile, HeapAlloc, HeapFree, LCMapStringW, GetLocaleInfoW, IsValidLocale, GetUserDefaultLCID, EnumSystemLocalesW, GetFileType, FlushFileBuffers, GetConsoleOutputCP, GetConsoleMode, ReadFile, GetFileSizeEx, SetFilePointerEx, ReadConsoleW, HeapReAlloc, FindClose, FindFirstFileExW, FindNextFileW, IsValidCodePage, GetACP, GetOEMCP, GetCommandLineA, GetCommandLineW, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetProcessHeap, SetStdHandle, HeapSize, WriteConsoleW

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 23, 2024 17:02:58.875144005 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 23, 2024 17:02:58.890728951 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 23, 2024 17:02:58.984486103 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 23, 2024 17:03:08.484550953 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 23, 2024 17:03:08.500173092 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 23, 2024 17:03:08.594230890 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 23, 2024 17:03:10.387871981 CEST	443	49706	23.1.237.91	192.168.2.5
Oct 23, 2024 17:03:10.387996912 CEST	49706	443	192.168.2.5	23.1.237.91
Oct 23, 2024 17:03:20.247123003 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:20.247169018 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:20.247287989 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:20.247658014 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:20.247673988 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:21.017640114 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:21.017719984 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:21.020255089 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:21.020282984 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:21.020601988 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:21.029911041 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:21.075329065 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:21.282919884 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:21.282947063 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:21.283019066 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:21.283052921 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:21.283080101 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:21.283096075 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:21.283132076 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:21.399641991 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:21.399667978 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:21.399730921 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:21.399755955 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:21.399779081 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:21.399794102 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:21.516855001 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:21.516877890 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:21.516963959 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:21.516992092 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:21.517149925 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:21.634587049 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:21.634614944 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:21.634789944 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:21.634824991 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:21.637155056 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:21.753205061 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:21.753236055 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:21.753392935 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:21.753422022 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:21.753900051 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:21.870534897 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:21.870560884 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:21.870625019 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:21.870652914 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:21.870673895 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:21.870692015 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:21.987401009 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:21.987427950 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:21.987562895 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:21.987591982 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:21.990031004 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.104532003 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.104561090 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.104621887 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.104649067 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.104665995 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.104768038 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.149244070 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.149266958 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.149477959 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.149504900 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.149564981 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.273406982 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.273436069 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.273514986 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.273540020 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.273576021 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.273601055 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.339406013 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.339427948 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.339519978 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.339546919 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.339591980 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.456505060 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.456532001 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.456592083 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.456619024 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.456638098 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.456656933 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.508497953 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.508522987 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.508590937 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.508619070 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.508636951 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.508778095 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.592015028 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.592099905 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.592124939 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.592231035 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.592288971 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.592324972 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.592324972 CEST	49715	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.592346907 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.592370033 CEST	443	49715	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.638580084 CEST	49717	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.638664961 CEST	443	49717	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.638742924 CEST	49717	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.640218973 CEST	49718	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.640273094 CEST	443	49718	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.640331984 CEST	49718	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.640409946 CEST	49717	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.640449047 CEST	443	49717	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.651108027 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.651123047 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.651226044 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.651386976 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.651396990 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.652180910 CEST	49718	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.652220011 CEST	443	49718	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.653484106 CEST	49720	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.653512001 CEST	443	49720	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.653577089 CEST	49720	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.653701067 CEST	49720	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.653709888 CEST	443	49720	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.655663013 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.655698061 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:22.655868053 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.656110048 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:22.656126976 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.401851892 CEST	443	49718	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.403009892 CEST	49718	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.403034925 CEST	443	49718	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.403673887 CEST	49718	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.403678894 CEST	443	49718	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.408823013 CEST	443	49717	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.409261942 CEST	49717	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.409303904 CEST	443	49717	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.409733057 CEST	49717	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.409748077 CEST	443	49717	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.410821915 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.411237955 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.411253929 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.411691904 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.411703110 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.416285992 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.416702032 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.416718960 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.417293072 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.417299032 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.418872118 CEST	443	49720	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.419262886 CEST	49720	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.419289112 CEST	443	49720	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.419682026 CEST	49720	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.419688940 CEST	443	49720	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.537081957 CEST	443	49718	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.537106991 CEST	443	49718	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.537173986 CEST	49718	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.537199974 CEST	443	49718	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.537247896 CEST	49718	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.537409067 CEST	443	49718	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.537470102 CEST	443	49718	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.537525892 CEST	49718	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.537792921 CEST	49718	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.537808895 CEST	443	49718	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.537818909 CEST	49718	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.537823915 CEST	443	49718	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.543967962 CEST	443	49717	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.544121027 CEST	443	49717	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.544431925 CEST	49717	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.548110962 CEST	49722	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.548144102 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.548213959 CEST	49722	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.548505068 CEST	49717	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.548505068 CEST	49717	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.548527956 CEST	443	49717	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.548542976 CEST	443	49717	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.551698923 CEST	49723	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.551740885 CEST	443	49723	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.551858902 CEST	49723	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.551894903 CEST	49722	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.551904917 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.552134991 CEST	49723	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.552148104 CEST	443	49723	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.554199934 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.554256916 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.554321051 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.554331064 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.554367065 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.554383039 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.554439068 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.554589033 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.554598093 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.554608107 CEST	49721	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.554611921 CEST	443	49721	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.554656982 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.554687977 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.554744959 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.554761887 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.554826975 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.554965019 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.554965019 CEST	49719	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.554985046 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.555006981 CEST	443	49719	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.556871891 CEST	443	49720	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.557113886 CEST	443	49720	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.557172060 CEST	49720	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.557548046 CEST	49720	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.557564020 CEST	443	49720	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.557576895 CEST	49720	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.557584047 CEST	443	49720	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.558845043 CEST	49724	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.558871984 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.559073925 CEST	49724	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.559283972 CEST	49724	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.559293985 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.564975977 CEST	49725	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.565023899 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.565154076 CEST	49725	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.566570997 CEST	49725	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.566606045 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.567610025 CEST	49726	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.567617893 CEST	443	49726	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:23.567737103 CEST	49726	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.567925930 CEST	49726	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:23.567933083 CEST	443	49726	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.310673952 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.311074018 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.311800957 CEST	49724	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.311829090 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.312297106 CEST	49724	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.312303066 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.317409992 CEST	49725	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.317437887 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.317912102 CEST	49725	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.317920923 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.319787025 CEST	443	49726	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.320112944 CEST	443	49723	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.320724010 CEST	49726	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.320751905 CEST	443	49726	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.321151972 CEST	49726	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.321161032 CEST	443	49726	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.321219921 CEST	49723	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.321254015 CEST	443	49723	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.321578979 CEST	49723	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.321587086 CEST	443	49723	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.348113060 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.350917101 CEST	49722	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.350941896 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.351423025 CEST	49722	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.351429939 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.449021101 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.449074984 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.449091911 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.449157953 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.449170113 CEST	49725	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.449212074 CEST	49724	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.457079887 CEST	443	49726	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.457387924 CEST	443	49726	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.457468987 CEST	49726	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.468307972 CEST	443	49723	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.468439102 CEST	443	49723	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.468535900 CEST	49723	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.486054897 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.486116886 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.486247063 CEST	49722	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.524930000 CEST	49725	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.524951935 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.525089025 CEST	49725	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.525095940 CEST	443	49725	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.532538891 CEST	49723	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.532567978 CEST	443	49723	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.532581091 CEST	49723	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.532593966 CEST	443	49723	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.544095039 CEST	49722	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.544122934 CEST	443	49722	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.574218035 CEST	49724	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.574218035 CEST	49724	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.574268103 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.574280977 CEST	443	49724	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.590135098 CEST	49726	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.590150118 CEST	443	49726	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.590161085 CEST	49726	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.590167999 CEST	443	49726	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.615329981 CEST	49729	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.615351915 CEST	49728	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.615367889 CEST	443	49729	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.615397930 CEST	443	49728	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.615452051 CEST	49729	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.615485907 CEST	49728	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.616364956 CEST	49729	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.616391897 CEST	443	49729	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.616494894 CEST	49728	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.616513014 CEST	443	49728	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.616942883 CEST	49730	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.616961002 CEST	443	49730	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.617376089 CEST	49731	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.617388964 CEST	443	49731	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.617436886 CEST	49730	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.617526054 CEST	49731	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.617628098 CEST	49730	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.617643118 CEST	443	49730	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.617650986 CEST	49731	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.617655039 CEST	443	49731	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.617892981 CEST	49732	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.617922068 CEST	443	49732	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:24.617974043 CEST	49732	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.618096113 CEST	49732	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:24.618105888 CEST	443	49732	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.372627020 CEST	443	49729	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.373410940 CEST	49729	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.373431921 CEST	443	49729	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.373933077 CEST	49729	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.373936892 CEST	443	49729	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.396337986 CEST	443	49732	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.397001028 CEST	49732	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.397018909 CEST	443	49732	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.397648096 CEST	49732	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.397659063 CEST	443	49732	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.405266047 CEST	443	49731	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.405735016 CEST	49731	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.405755043 CEST	443	49731	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.406256914 CEST	49731	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.406260967 CEST	443	49731	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.407722950 CEST	443	49728	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.408253908 CEST	49728	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.408273935 CEST	443	49728	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.408691883 CEST	49728	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.408699989 CEST	443	49728	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.518434048 CEST	443	49729	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.518497944 CEST	443	49729	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.518585920 CEST	49729	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.530802965 CEST	49729	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.530827045 CEST	443	49729	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.530841112 CEST	49729	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.530847073 CEST	443	49729	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.533045053 CEST	443	49732	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.533241987 CEST	443	49732	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.533292055 CEST	49732	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.539482117 CEST	49732	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.539499044 CEST	443	49732	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.539513111 CEST	49732	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.539519072 CEST	443	49732	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.544740915 CEST	49734	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.544766903 CEST	443	49734	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.544821024 CEST	49734	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.545386076 CEST	443	49731	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.545449018 CEST	443	49731	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.545502901 CEST	49731	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.546858072 CEST	49735	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.546895027 CEST	443	49735	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.546972036 CEST	49735	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.549067974 CEST	49734	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.549086094 CEST	443	49734	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.549299002 CEST	49731	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.549314022 CEST	443	49731	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.549325943 CEST	49731	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.549330950 CEST	443	49731	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.551071882 CEST	49735	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.551084042 CEST	443	49735	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.553152084 CEST	49736	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.553200006 CEST	443	49736	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.553260088 CEST	49736	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.553636074 CEST	49736	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.553656101 CEST	443	49736	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.555005074 CEST	443	49728	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.555072069 CEST	443	49728	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.555113077 CEST	49728	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.555248022 CEST	49728	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.555268049 CEST	443	49728	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.555279016 CEST	49728	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.555284023 CEST	443	49728	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.558566093 CEST	49737	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.558657885 CEST	443	49737	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:25.558727026 CEST	49737	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.559240103 CEST	49737	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:25.559273958 CEST	443	49737	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.303785086 CEST	443	49736	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.304356098 CEST	49736	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.304441929 CEST	443	49736	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.304877996 CEST	49736	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.304893970 CEST	443	49736	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.307202101 CEST	443	49734	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.310070038 CEST	49734	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.310084105 CEST	443	49734	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.310494900 CEST	49734	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.310499907 CEST	443	49734	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.314558029 CEST	443	49735	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.314912081 CEST	49735	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.314924002 CEST	443	49735	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.315366983 CEST	49735	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.315371990 CEST	443	49735	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.325875044 CEST	443	49737	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.326257944 CEST	49737	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.326297045 CEST	443	49737	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.326654911 CEST	49737	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.326663017 CEST	443	49737	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.438469887 CEST	443	49736	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.440004110 CEST	443	49736	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.440079927 CEST	49736	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.442194939 CEST	49736	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.442240953 CEST	443	49736	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.442259073 CEST	49736	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.442275047 CEST	443	49736	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.444235086 CEST	443	49734	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.444399118 CEST	443	49734	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.444473028 CEST	49734	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.445043087 CEST	49734	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.445065022 CEST	443	49734	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.445076942 CEST	49734	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.445085049 CEST	443	49734	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.449091911 CEST	49738	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.449142933 CEST	443	49738	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.449455976 CEST	49738	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.451751947 CEST	49739	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.451803923 CEST	443	49739	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.452002048 CEST	49738	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.452008009 CEST	49739	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.452035904 CEST	443	49738	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.453407049 CEST	49739	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.453433037 CEST	443	49739	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.454720974 CEST	443	49735	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.455431938 CEST	443	49735	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.455760002 CEST	49735	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.455837011 CEST	49735	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.455857038 CEST	443	49735	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.455862999 CEST	49735	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.455869913 CEST	443	49735	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.458317041 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.458364964 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.459578037 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.466057062 CEST	443	49737	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.466238976 CEST	443	49737	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.466301918 CEST	49737	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.466625929 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.466653109 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.466799974 CEST	49737	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.466799974 CEST	49737	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.466823101 CEST	443	49737	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.466836929 CEST	443	49737	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.470900059 CEST	49741	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.470927000 CEST	443	49741	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:26.471035004 CEST	49741	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.471270084 CEST	49741	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:26.471280098 CEST	443	49741	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:27.219266891 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:27.231455088 CEST	443	49741	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:27.265723944 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:27.281423092 CEST	49741	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:27.300626040 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:27.300685883 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:27.307971954 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:27.307986021 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:27.315241098 CEST	49741	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:27.315258026 CEST	443	49741	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:27.319127083 CEST	49741	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:27.319134951 CEST	443	49741	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:27.439971924 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:27.440064907 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:27.440139055 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:27.444176912 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:27.444176912 CEST	49740	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:27.444225073 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:27.444252968 CEST	443	49740	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:27.452306032 CEST	443	49741	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:27.452373028 CEST	443	49741	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:27.452425957 CEST	49741	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:27.457740068 CEST	49741	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:27.457770109 CEST	443	49741	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:27.457782984 CEST	49741	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:27.457789898 CEST	443	49741	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:27.509893894 CEST	49744	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:27.509948969 CEST	443	49744	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:27.510015011 CEST	49744	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:27.537439108 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:27.537532091 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:27.537626982 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:27.540539980 CEST	49744	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:27.540576935 CEST	443	49744	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:27.541017056 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:27.541053057 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:28.295938015 CEST	443	49744	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:28.296665907 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:28.296768904 CEST	49744	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:28.296788931 CEST	443	49744	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:28.297343016 CEST	49744	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:28.297348976 CEST	443	49744	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:28.297959089 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:28.298019886 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:28.298365116 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:28.298379898 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:28.433927059 CEST	443	49744	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:28.433973074 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:28.433999062 CEST	443	49744	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:28.434055090 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:28.434070110 CEST	49744	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:28.434111118 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:28.434376001 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:28.434376955 CEST	49745	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:28.434425116 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:28.434431076 CEST	49744	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:28.434442997 CEST	443	49744	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:28.434453011 CEST	443	49745	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:28.434458017 CEST	49744	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:28.434464931 CEST	443	49744	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:28.438467979 CEST	49746	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:28.438497066 CEST	443	49746	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:28.438549042 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:28.438579082 CEST	49746	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:28.438601017 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:28.438783884 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:28.438807011 CEST	49746	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:28.438821077 CEST	443	49746	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:28.438957930 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:28.438992977 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:29.195804119 CEST	443	49746	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:29.200927019 CEST	49746	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:29.200961113 CEST	443	49746	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:29.211592913 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:29.217902899 CEST	49746	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:29.217910051 CEST	443	49746	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:29.218324900 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:29.218360901 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:29.218743086 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:29.218750954 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:29.351754904 CEST	443	49746	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:29.351934910 CEST	443	49746	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:29.352014065 CEST	49746	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:29.352222919 CEST	49746	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:29.352245092 CEST	443	49746	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:29.352255106 CEST	49746	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:29.352261066 CEST	443	49746	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:29.354641914 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:29.354707003 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:29.354782104 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:29.354875088 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:29.354924917 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:29.354955912 CEST	49747	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:29.354973078 CEST	443	49747	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:29.355859995 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:29.355906010 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:29.355977058 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:29.356137037 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:29.356154919 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:29.357002974 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:29.357043028 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:29.357136011 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:29.357244968 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:29.357259035 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:30.115721941 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:30.124176979 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:30.153789043 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:30.153860092 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:30.154689074 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:30.154707909 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:30.156404972 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:30.156404972 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:30.156436920 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:30.156449080 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:30.291265965 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:30.291336060 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:30.291403055 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:30.296246052 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:30.296246052 CEST	49750	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:30.296273947 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:30.296286106 CEST	443	49750	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:30.302536011 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:30.302583933 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:30.302711010 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:30.302850962 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:30.302870035 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:30.449676991 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:30.449954033 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:30.450068951 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:30.450181007 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:30.450181007 CEST	49749	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:30.450231075 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:30.450258017 CEST	443	49749	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:30.453741074 CEST	49752	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:30.453797102 CEST	443	49752	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:30.453870058 CEST	49752	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:30.454075098 CEST	49752	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:30.454092026 CEST	443	49752	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:31.055545092 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:31.056224108 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:31.056265116 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:31.056725025 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:31.056740046 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:31.192790031 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:31.193448067 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:31.193531036 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:31.193582058 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:31.193600893 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:31.193613052 CEST	49751	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:31.193619013 CEST	443	49751	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:31.196949005 CEST	49755	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:31.196985006 CEST	443	49755	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:31.197221994 CEST	49755	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:31.197221994 CEST	49755	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:31.197252035 CEST	443	49755	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:31.215481997 CEST	443	49752	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:31.216084003 CEST	49752	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:31.216104031 CEST	443	49752	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:31.216615915 CEST	49752	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:31.216622114 CEST	443	49752	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:31.353059053 CEST	443	49752	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:31.353230000 CEST	443	49752	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:31.353317022 CEST	49752	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:31.353493929 CEST	49752	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:31.353517056 CEST	443	49752	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:31.353528023 CEST	49752	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:31.353533983 CEST	443	49752	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:31.357250929 CEST	49756	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:31.357290983 CEST	443	49756	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:31.357389927 CEST	49756	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:31.357583046 CEST	49756	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:31.357597113 CEST	443	49756	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:31.956670046 CEST	443	49755	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:31.959975958 CEST	49755	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:31.959990025 CEST	443	49755	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:31.960206032 CEST	49755	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:31.960211039 CEST	443	49755	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:32.099539995 CEST	443	49755	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:32.100378036 CEST	443	49755	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:32.100584984 CEST	49755	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:32.100650072 CEST	49755	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:32.100650072 CEST	49755	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:32.100668907 CEST	443	49755	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:32.100678921 CEST	443	49755	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:32.104789972 CEST	49757	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:32.104832888 CEST	443	49757	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:32.105469942 CEST	49757	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:32.105469942 CEST	49757	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:32.105506897 CEST	443	49757	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:32.123625040 CEST	443	49756	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:32.124574900 CEST	49756	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:32.124603033 CEST	443	49756	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:32.124943972 CEST	49756	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:32.124948978 CEST	443	49756	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:32.265923977 CEST	443	49756	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:32.266107082 CEST	443	49756	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:32.266401052 CEST	49756	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:32.266716957 CEST	49756	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:32.266716957 CEST	49756	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:32.266736984 CEST	443	49756	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:32.266746998 CEST	443	49756	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:32.270751953 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:32.270772934 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:32.270845890 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:32.272048950 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:32.272061110 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:33.029314041 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:33.030062914 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:33.030078888 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:33.031188011 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:33.031197071 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:33.164144993 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:33.164450884 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:33.164576054 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:33.164612055 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:33.164612055 CEST	49758	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:33.164647102 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:33.164674044 CEST	443	49758	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:33.168929100 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:33.168973923 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:33.169189930 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:33.169328928 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:33.169347048 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:33.922660112 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:33.923743963 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:33.923768997 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:33.924252987 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:33.924261093 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:34.061528921 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:34.061613083 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:34.061721087 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:34.062020063 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:34.062042952 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:34.062053919 CEST	49759	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:34.062060118 CEST	443	49759	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:34.065615892 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:34.065665960 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:34.065860033 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:34.065948009 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:34.065968990 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:35.186850071 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:35.187616110 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:35.187658072 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:35.188132048 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:35.188139915 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:35.324513912 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:35.324584007 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:35.324667931 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:35.324973106 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:35.324994087 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:35.325009108 CEST	49760	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:35.325015068 CEST	443	49760	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:35.328170061 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:35.328210115 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:35.328288078 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:35.328479052 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:35.328489065 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:36.098225117 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:36.098965883 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:36.098989010 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:36.099479914 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:36.099484921 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:36.236733913 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:36.236979961 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:36.237067938 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:36.237176895 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:36.237195015 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:36.237205982 CEST	49761	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:36.237212896 CEST	443	49761	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:36.240603924 CEST	49762	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:36.240649939 CEST	443	49762	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:36.240751982 CEST	49762	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:36.240928888 CEST	49762	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:36.240947962 CEST	443	49762	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:37.021028996 CEST	443	49762	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:37.021665096 CEST	49762	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:37.021693945 CEST	443	49762	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:37.022162914 CEST	49762	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:37.022169113 CEST	443	49762	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:37.161998987 CEST	443	49762	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:37.162214041 CEST	443	49762	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:37.162300110 CEST	49762	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:37.162422895 CEST	49762	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:37.162447929 CEST	443	49762	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:37.162460089 CEST	49762	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:37.162467003 CEST	443	49762	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:37.165714979 CEST	49763	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:37.165766001 CEST	443	49763	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:37.165860891 CEST	49763	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:37.166018009 CEST	49763	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:37.166034937 CEST	443	49763	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:37.936295033 CEST	443	49763	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:37.937338114 CEST	49763	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:37.937382936 CEST	443	49763	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:37.937808037 CEST	49763	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:37.937817097 CEST	443	49763	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:38.078532934 CEST	443	49763	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:38.078620911 CEST	443	49763	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:38.078712940 CEST	49763	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:38.078984976 CEST	49763	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:38.079015970 CEST	443	49763	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:38.079032898 CEST	49763	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:38.079037905 CEST	443	49763	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:38.082449913 CEST	49764	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:38.082520008 CEST	443	49764	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:38.082593918 CEST	49764	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:38.082746983 CEST	49764	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:38.082767010 CEST	443	49764	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:46.187675953 CEST	49730	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:46.187733889 CEST	49738	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:46.190363884 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:46.190417051 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:46.190476894 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:46.190659046 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:46.190674067 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:46.190805912 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:46.190850973 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:46.190944910 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:46.191051960 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:46.191062927 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:46.594142914 CEST	49704	80	192.168.2.5	104.18.38.233
Oct 23, 2024 17:03:46.594208002 CEST	49705	80	192.168.2.5	172.64.149.23
Oct 23, 2024 17:03:46.594219923 CEST	49703	80	192.168.2.5	104.18.38.233
Oct 23, 2024 17:03:46.601643085 CEST	80	49704	104.18.38.233	192.168.2.5
Oct 23, 2024 17:03:46.601767063 CEST	49704	80	192.168.2.5	104.18.38.233
Oct 23, 2024 17:03:46.601874113 CEST	80	49703	104.18.38.233	192.168.2.5
Oct 23, 2024 17:03:46.601886034 CEST	80	49705	172.64.149.23	192.168.2.5
Oct 23, 2024 17:03:46.601927042 CEST	49703	80	192.168.2.5	104.18.38.233
Oct 23, 2024 17:03:46.601970911 CEST	49705	80	192.168.2.5	172.64.149.23
Oct 23, 2024 17:03:47.228565931 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:47.228570938 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:47.228724957 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:47.230355978 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:47.230359077 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:47.230386972 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:47.230755091 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:47.231399059 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:47.231416941 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:47.231718063 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:47.232131958 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:47.232661963 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:47.275338888 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:47.275357008 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:47.366061926 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:47.366142035 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:47.366179943 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:47.366226912 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:47.366558075 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:47.366585970 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:47.366600990 CEST	49765	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:47.366611004 CEST	443	49765	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:47.367114067 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:47.367182016 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:47.368165016 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:47.368186951 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:47.368199110 CEST	49766	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:47.368205070 CEST	443	49766	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:47.372462034 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:47.372513056 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:47.372580051 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:47.372703075 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:47.372740030 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:47.372786999 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:47.372920036 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:47.372945070 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:47.373023987 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:47.373038054 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:48.130027056 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:48.132842064 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:48.132872105 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:48.133399963 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:48.133404970 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:48.145813942 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:48.146573067 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:48.146611929 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:48.147085905 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:48.147094965 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:48.271853924 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:48.271929026 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:48.271979094 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:48.272188902 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:48.272208929 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:48.272222996 CEST	49767	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:48.272229910 CEST	443	49767	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:48.275724888 CEST	49769	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:48.275757074 CEST	443	49769	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:48.275825977 CEST	49769	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:48.276046991 CEST	49769	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:48.276058912 CEST	443	49769	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:48.286462069 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:48.286853075 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:48.286906004 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:48.286983967 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:48.286983967 CEST	49768	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:48.287007093 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:48.287019014 CEST	443	49768	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:48.290348053 CEST	49770	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:48.290384054 CEST	443	49770	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:48.290450096 CEST	49770	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:48.290648937 CEST	49770	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:48.290659904 CEST	443	49770	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:49.034562111 CEST	443	49769	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:49.035126925 CEST	49769	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:49.035137892 CEST	443	49769	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:49.035687923 CEST	49769	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:49.035691977 CEST	443	49769	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:49.061598063 CEST	443	49770	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:49.062293053 CEST	49770	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:49.062321901 CEST	443	49770	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:49.062901974 CEST	49770	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:49.062910080 CEST	443	49770	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:49.177774906 CEST	443	49769	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:49.178119898 CEST	443	49769	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:49.178215981 CEST	49769	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:49.178271055 CEST	49769	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:49.178271055 CEST	49769	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:49.178289890 CEST	443	49769	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:49.178303957 CEST	443	49769	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:49.182012081 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:49.182055950 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:49.182152987 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:49.182288885 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:49.182312965 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:49.200530052 CEST	443	49770	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:49.200613976 CEST	443	49770	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:49.200833082 CEST	49770	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:49.201093912 CEST	49770	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:49.201119900 CEST	443	49770	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:49.201136112 CEST	49770	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:49.201143026 CEST	443	49770	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:49.204997063 CEST	49772	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:49.205034971 CEST	443	49772	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:49.205111027 CEST	49772	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:49.205308914 CEST	49772	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:49.205327034 CEST	443	49772	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:49.934391975 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:49.935023069 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:49.935050011 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:49.935688019 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:49.935695887 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:49.964649916 CEST	443	49772	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:49.965992928 CEST	49772	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:49.966012001 CEST	443	49772	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:49.966033936 CEST	49772	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:49.966042042 CEST	443	49772	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.071048021 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.071166039 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.071283102 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:50.071475029 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:50.071475029 CEST	49771	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:50.071496964 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.071510077 CEST	443	49771	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.075125933 CEST	49773	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:50.075172901 CEST	443	49773	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.075267076 CEST	49773	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:50.075728893 CEST	49773	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:50.075742960 CEST	443	49773	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.114394903 CEST	443	49772	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.119235039 CEST	443	49772	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.119373083 CEST	49772	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:50.119508982 CEST	49772	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:50.119539022 CEST	443	49772	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.119560003 CEST	49772	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:50.119566917 CEST	443	49772	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.122997999 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:50.123025894 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.123102903 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:50.123249054 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:50.123262882 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.188251972 CEST	49739	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:50.190633059 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:50.190694094 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.190920115 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:50.191028118 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:50.191040039 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.843569040 CEST	443	49773	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.844271898 CEST	49773	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:50.844296932 CEST	443	49773	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.844831944 CEST	49773	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:50.844841003 CEST	443	49773	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.925867081 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.926522017 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:50.926542997 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.927046061 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:50.927052021 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.952742100 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.953596115 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:50.953627110 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.954118013 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:50.954123974 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.984275103 CEST	443	49773	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.984378099 CEST	443	49773	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.984507084 CEST	49773	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:50.984966040 CEST	49773	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:50.984991074 CEST	443	49773	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.985004902 CEST	49773	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:50.985011101 CEST	443	49773	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.988471031 CEST	49776	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:50.988514900 CEST	443	49776	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:50.988605976 CEST	49776	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:50.988771915 CEST	49776	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:50.988785982 CEST	443	49776	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:51.101782084 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:51.102174997 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:51.102246046 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:51.102287054 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:51.102287054 CEST	49775	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:51.102308035 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:51.102317095 CEST	443	49775	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:51.106275082 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:51.106327057 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:51.106391907 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:51.106610060 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:51.106621027 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:51.165801048 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:51.166013956 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:51.166111946 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:51.166332960 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:51.166367054 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:51.166420937 CEST	49774	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:51.166428089 CEST	443	49774	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:51.169507027 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:51.169557095 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:51.169650078 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:51.169833899 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:51.169847012 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:51.741266012 CEST	443	49776	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:51.742064953 CEST	49776	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:51.742089033 CEST	443	49776	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:51.742610931 CEST	49776	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:51.742619991 CEST	443	49776	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:51.874253035 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:51.874859095 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:51.874881983 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:51.875497103 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:51.875509024 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:51.893937111 CEST	443	49776	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:51.894012928 CEST	443	49776	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:51.894140005 CEST	49776	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:51.894354105 CEST	49776	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:51.894354105 CEST	49776	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:51.894376993 CEST	443	49776	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:51.894387007 CEST	443	49776	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:51.923393965 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:51.923427105 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:51.923495054 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:51.923661947 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:51.923666954 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:51.932493925 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:51.933784962 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:51.933784962 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:51.933798075 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:51.933811903 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.013984919 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.014147997 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.014300108 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.014585018 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.014606953 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.014617920 CEST	49777	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.014626026 CEST	443	49777	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.019290924 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.019366026 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.019440889 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.019642115 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.019661903 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.072524071 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.072603941 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.072757959 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.072999001 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.072999001 CEST	49778	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.073018074 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.073026896 CEST	443	49778	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.076889038 CEST	49781	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.076941967 CEST	443	49781	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.077359915 CEST	49781	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.077359915 CEST	49781	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.077397108 CEST	443	49781	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.671015024 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.671926022 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.671947002 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.672426939 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.672432899 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.782058954 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.782741070 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.782773018 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.783181906 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.783189058 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.806010962 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.806096077 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.806162119 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.806427002 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.806437016 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.806446075 CEST	49779	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.806457043 CEST	443	49779	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.809616089 CEST	49782	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.809634924 CEST	443	49782	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.809720993 CEST	49782	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.809925079 CEST	49782	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.809937000 CEST	443	49782	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.838449955 CEST	443	49781	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.839270115 CEST	49781	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.839291096 CEST	443	49781	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.840087891 CEST	49781	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.840096951 CEST	443	49781	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.921358109 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.921976089 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.922049046 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.934494972 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.934540033 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.934567928 CEST	49780	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.934576988 CEST	443	49780	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.957654953 CEST	49783	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.957709074 CEST	443	49783	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.957806110 CEST	49783	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.958271980 CEST	49783	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.958282948 CEST	443	49783	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.975752115 CEST	443	49781	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.976640940 CEST	443	49781	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.976929903 CEST	49781	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.976929903 CEST	49781	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.976929903 CEST	49781	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.979705095 CEST	49784	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.979747057 CEST	443	49784	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:52.979836941 CEST	49784	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.979964018 CEST	49784	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:52.979979992 CEST	443	49784	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:53.283160925 CEST	49781	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:53.283184052 CEST	443	49781	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:53.572803974 CEST	443	49782	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:53.583776951 CEST	49782	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:53.583807945 CEST	443	49782	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:53.584686995 CEST	49782	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:53.584695101 CEST	443	49782	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:53.712413073 CEST	443	49783	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:53.718391895 CEST	443	49782	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:53.718493938 CEST	443	49782	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:53.718563080 CEST	49782	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:53.729309082 CEST	49782	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:53.729334116 CEST	443	49782	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:53.729347944 CEST	49782	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:53.729355097 CEST	443	49782	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:53.729904890 CEST	49783	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:53.729904890 CEST	49783	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:53.729927063 CEST	443	49783	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:53.729938030 CEST	443	49783	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:53.732861996 CEST	49785	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:53.732886076 CEST	443	49785	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:53.732943058 CEST	49785	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:53.733100891 CEST	49785	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:53.733112097 CEST	443	49785	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:53.873199940 CEST	443	49783	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:53.873275042 CEST	443	49783	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:53.873972893 CEST	49783	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:53.873972893 CEST	49783	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:53.873972893 CEST	49783	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:53.876854897 CEST	49786	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:53.876889944 CEST	443	49786	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:53.876960993 CEST	49786	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:53.877181053 CEST	49786	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:53.877192020 CEST	443	49786	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:53.962076902 CEST	443	49784	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:53.962707043 CEST	49784	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:53.962726116 CEST	443	49784	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:53.963218927 CEST	49784	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:53.963224888 CEST	443	49784	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:54.100825071 CEST	443	49784	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:54.101078987 CEST	443	49784	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:54.101191044 CEST	49784	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:54.101317883 CEST	49784	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:54.101341963 CEST	443	49784	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:54.101353884 CEST	49784	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:54.101361990 CEST	443	49784	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:54.105026960 CEST	49787	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:54.105062008 CEST	443	49787	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:54.105175018 CEST	49787	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:54.105372906 CEST	49787	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:54.105382919 CEST	443	49787	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:54.187784910 CEST	49757	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:54.188395023 CEST	49783	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:54.188431025 CEST	443	49783	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:54.190521002 CEST	49788	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:54.190568924 CEST	443	49788	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:54.190670967 CEST	49788	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:54.190872908 CEST	49788	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:54.190885067 CEST	443	49788	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:54.476119995 CEST	443	49785	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:54.476766109 CEST	49785	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:54.476850986 CEST	443	49785	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:54.477267027 CEST	49785	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:54.477288008 CEST	443	49785	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:54.611422062 CEST	443	49785	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:54.611583948 CEST	443	49785	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:54.611685038 CEST	49785	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:54.611838102 CEST	49785	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:54.611860991 CEST	443	49785	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:54.611874104 CEST	49785	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:54.611881018 CEST	443	49785	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:54.615058899 CEST	49789	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:54.615108967 CEST	443	49789	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:54.615200043 CEST	49789	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:54.615345955 CEST	49789	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:54.615361929 CEST	443	49789	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:54.630299091 CEST	443	49786	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:54.630858898 CEST	49786	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:54.630892992 CEST	443	49786	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:54.631345987 CEST	49786	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:54.631364107 CEST	443	49786	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:54.975169897 CEST	443	49786	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:54.975239038 CEST	443	49786	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:54.975294113 CEST	49786	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:54.975486994 CEST	49786	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:54.975518942 CEST	443	49786	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:54.975534916 CEST	49786	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:54.975542068 CEST	443	49786	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:54.978216887 CEST	49790	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:54.978262901 CEST	443	49790	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:54.978348970 CEST	49790	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:54.978490114 CEST	49790	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:54.978506088 CEST	443	49790	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.103373051 CEST	443	49787	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.103980064 CEST	49787	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.104010105 CEST	443	49787	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.104496956 CEST	49787	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.104504108 CEST	443	49787	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.113982916 CEST	443	49788	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.114386082 CEST	49788	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.114404917 CEST	443	49788	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.114789963 CEST	49788	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.114795923 CEST	443	49788	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.239603043 CEST	443	49787	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.239684105 CEST	443	49787	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.239768028 CEST	49787	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.240000963 CEST	49787	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.240022898 CEST	443	49787	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.240036011 CEST	49787	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.240041971 CEST	443	49787	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.243485928 CEST	49791	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.243535995 CEST	443	49791	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.243623972 CEST	49791	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.243813038 CEST	49791	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.243824959 CEST	443	49791	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.264952898 CEST	443	49788	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.265027046 CEST	443	49788	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.265198946 CEST	49788	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.265515089 CEST	49788	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.265528917 CEST	443	49788	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.265538931 CEST	49788	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.265546083 CEST	443	49788	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.268678904 CEST	49792	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.268718004 CEST	443	49792	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.268814087 CEST	49792	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.268995047 CEST	49792	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.269006968 CEST	443	49792	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.372661114 CEST	443	49789	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.373358965 CEST	49789	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.373399019 CEST	443	49789	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.374448061 CEST	49789	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.374454021 CEST	443	49789	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.513828993 CEST	443	49789	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.514110088 CEST	443	49789	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.514182091 CEST	49789	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.514360905 CEST	49789	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.514367104 CEST	443	49789	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.514380932 CEST	49789	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.514385939 CEST	443	49789	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.517781973 CEST	49793	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.517822027 CEST	443	49793	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.517911911 CEST	49793	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.518126965 CEST	49793	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.518140078 CEST	443	49793	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.728069067 CEST	443	49790	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.728936911 CEST	49790	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.728965044 CEST	443	49790	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.729368925 CEST	49790	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.729377031 CEST	443	49790	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.865077972 CEST	443	49790	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.865139961 CEST	443	49790	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.865202904 CEST	49790	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.865747929 CEST	49790	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.865770102 CEST	443	49790	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.865776062 CEST	49790	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.865782976 CEST	443	49790	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.870579004 CEST	49794	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.870630026 CEST	443	49794	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:55.870693922 CEST	49794	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.871059895 CEST	49794	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:55.871073008 CEST	443	49794	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.008649111 CEST	443	49791	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.012145042 CEST	49791	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.012171984 CEST	443	49791	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.012780905 CEST	49791	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.012785912 CEST	443	49791	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.039771080 CEST	443	49792	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.093889952 CEST	49792	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.111648083 CEST	49792	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.111666918 CEST	443	49792	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.112200022 CEST	49792	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.112207890 CEST	443	49792	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.145384073 CEST	443	49791	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.145467997 CEST	443	49791	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.145518064 CEST	49791	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.148175955 CEST	49791	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.148200035 CEST	443	49791	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.148211956 CEST	49791	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.148217916 CEST	443	49791	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.270930052 CEST	443	49792	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.271011114 CEST	443	49792	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.271059990 CEST	49792	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.276886940 CEST	443	49793	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.284796000 CEST	49795	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.284835100 CEST	443	49795	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.284898043 CEST	49795	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.284995079 CEST	49792	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.284995079 CEST	49792	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.285027027 CEST	443	49792	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.285039902 CEST	443	49792	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.286016941 CEST	49795	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.286026001 CEST	443	49795	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.286581039 CEST	49793	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.286588907 CEST	443	49793	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.287045002 CEST	49793	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.287048101 CEST	443	49793	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.340935946 CEST	49796	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.340986013 CEST	443	49796	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.341101885 CEST	49796	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.341922998 CEST	49796	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.341938972 CEST	443	49796	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.421792984 CEST	443	49793	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.421875000 CEST	443	49793	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.421945095 CEST	49793	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.422142982 CEST	49793	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.422154903 CEST	443	49793	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.422163963 CEST	49793	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.422168970 CEST	443	49793	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.430233955 CEST	49797	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.430274963 CEST	443	49797	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.430341005 CEST	49797	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.430604935 CEST	49797	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.430614948 CEST	443	49797	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.641925097 CEST	443	49794	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.642714024 CEST	49794	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.642752886 CEST	443	49794	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.643234015 CEST	49794	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.643241882 CEST	443	49794	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.785079002 CEST	443	49794	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.786572933 CEST	443	49794	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.786668062 CEST	49794	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.786712885 CEST	49794	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.786735058 CEST	443	49794	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.786748886 CEST	49794	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.786756039 CEST	443	49794	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.790328979 CEST	49798	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.790380001 CEST	443	49798	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:56.790472031 CEST	49798	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.790657043 CEST	49798	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:56.790668964 CEST	443	49798	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.057681084 CEST	443	49795	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.058275938 CEST	49795	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.058296919 CEST	443	49795	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.058763027 CEST	49795	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.058768988 CEST	443	49795	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.089894056 CEST	443	49796	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.090564013 CEST	49796	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.090595007 CEST	443	49796	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.091058016 CEST	49796	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.091064930 CEST	443	49796	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.196676970 CEST	443	49795	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.196942091 CEST	443	49795	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.197002888 CEST	49795	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.197076082 CEST	49795	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.197091103 CEST	443	49795	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.197103977 CEST	49795	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.197109938 CEST	443	49795	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.200126886 CEST	49800	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.200165987 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.200254917 CEST	49800	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.200408936 CEST	49800	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.200421095 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.203138113 CEST	443	49797	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.203577995 CEST	49797	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.203600883 CEST	443	49797	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.204058886 CEST	49797	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.204065084 CEST	443	49797	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.227468014 CEST	443	49796	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.227690935 CEST	443	49796	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.227777958 CEST	49796	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.227859974 CEST	49796	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.227859974 CEST	49796	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.227906942 CEST	443	49796	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.227935076 CEST	443	49796	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.230525970 CEST	49801	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.230575085 CEST	443	49801	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.230649948 CEST	49801	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.230806112 CEST	49801	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.230818033 CEST	443	49801	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.342154026 CEST	443	49797	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.342284918 CEST	443	49797	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.342349052 CEST	49797	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.342569113 CEST	49797	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.342592001 CEST	443	49797	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.342603922 CEST	49797	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.342609882 CEST	443	49797	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.345757008 CEST	49802	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.345788956 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.345870972 CEST	49802	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.346044064 CEST	49802	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.346055984 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.879007101 CEST	443	49798	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.879632950 CEST	49798	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.879652023 CEST	443	49798	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.880230904 CEST	49798	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.880237103 CEST	443	49798	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.970573902 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.971158981 CEST	49800	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.971170902 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.971638918 CEST	49800	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.971643925 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.980983973 CEST	443	49801	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.981522083 CEST	49801	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.981540918 CEST	443	49801	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:57.982018948 CEST	49801	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:57.982026100 CEST	443	49801	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.016987085 CEST	443	49798	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.017061949 CEST	443	49798	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.017118931 CEST	49798	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.017594099 CEST	49798	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.017612934 CEST	443	49798	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.017637014 CEST	49798	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.017643929 CEST	443	49798	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.020606041 CEST	49803	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.020653963 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.020766020 CEST	49803	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.020970106 CEST	49803	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.020986080 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.110044956 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.110989094 CEST	49802	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.111006021 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.111819029 CEST	49802	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.111826897 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.130796909 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.130815029 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.130878925 CEST	49800	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.130893946 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.131145954 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.131225109 CEST	49800	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.131309032 CEST	443	49801	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.131310940 CEST	49800	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.131335974 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.131350040 CEST	49800	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.131355047 CEST	443	49800	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.131388903 CEST	443	49801	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.131438017 CEST	49801	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.131661892 CEST	49801	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.131676912 CEST	443	49801	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.131686926 CEST	49801	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.131692886 CEST	443	49801	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.134859085 CEST	49804	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.134892941 CEST	443	49804	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.134975910 CEST	49804	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.135046959 CEST	49805	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.135094881 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.135137081 CEST	49804	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.135154009 CEST	443	49804	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.135190010 CEST	49805	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.135544062 CEST	49805	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.135555983 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.187834978 CEST	49764	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.190387964 CEST	49806	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.190433025 CEST	443	49806	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.190505028 CEST	49806	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.190666914 CEST	49806	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.190680027 CEST	443	49806	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.269606113 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.269665003 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.269773960 CEST	49802	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.270059109 CEST	49802	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.270073891 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.270092964 CEST	49802	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.270100117 CEST	443	49802	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.275142908 CEST	49807	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.275191069 CEST	443	49807	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.275924921 CEST	49807	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.275924921 CEST	49807	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.275953054 CEST	443	49807	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.794982910 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.799323082 CEST	49803	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.799350977 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.800821066 CEST	49803	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.800833941 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.887708902 CEST	443	49804	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.888415098 CEST	49804	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.888430119 CEST	443	49804	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.889153957 CEST	49804	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.889161110 CEST	443	49804	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.894819975 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.895421028 CEST	49805	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.895445108 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.895957947 CEST	49805	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.895965099 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.936606884 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.936635017 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.936696053 CEST	49803	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.936719894 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.936741114 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.936791897 CEST	49803	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.937154055 CEST	49803	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.937170029 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.937186003 CEST	49803	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.937191010 CEST	443	49803	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.940443039 CEST	49808	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.940469027 CEST	443	49808	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.940536022 CEST	49808	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.940694094 CEST	49808	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.940710068 CEST	443	49808	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.967701912 CEST	443	49806	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.968471050 CEST	49806	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.968486071 CEST	443	49806	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:58.969440937 CEST	49806	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:58.969448090 CEST	443	49806	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.024714947 CEST	443	49804	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.024744034 CEST	443	49804	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.024807930 CEST	443	49804	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.024934053 CEST	49804	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.024934053 CEST	49804	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.025188923 CEST	49804	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.025188923 CEST	49804	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.025221109 CEST	443	49804	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.025230885 CEST	443	49804	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.029061079 CEST	49809	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.029114962 CEST	443	49809	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.029211044 CEST	49809	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.030122042 CEST	49809	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.030137062 CEST	443	49809	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.031090021 CEST	443	49807	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.031902075 CEST	49807	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.031929970 CEST	443	49807	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.032358885 CEST	49807	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.032365084 CEST	443	49807	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.032931089 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.032954931 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.033040047 CEST	49805	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.033049107 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.033256054 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.033262014 CEST	49805	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.033262968 CEST	49805	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.033286095 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.033318043 CEST	49805	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.033324003 CEST	443	49805	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.036089897 CEST	49810	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.036128998 CEST	443	49810	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.036398888 CEST	49810	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.036545038 CEST	49810	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.036562920 CEST	443	49810	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.108661890 CEST	443	49806	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.108731985 CEST	443	49806	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.109576941 CEST	49806	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.109576941 CEST	49806	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.109577894 CEST	49806	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.112394094 CEST	49811	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.112437010 CEST	443	49811	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.112656116 CEST	49811	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.112736940 CEST	49811	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.112747908 CEST	443	49811	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.168808937 CEST	443	49807	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.169176102 CEST	443	49807	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.169334888 CEST	49807	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.170176983 CEST	49807	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.170176983 CEST	49807	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.170197964 CEST	443	49807	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.170208931 CEST	443	49807	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.175144911 CEST	49812	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.175173044 CEST	443	49812	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.178656101 CEST	49812	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.178656101 CEST	49812	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.178682089 CEST	443	49812	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.423336029 CEST	49806	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.423357964 CEST	443	49806	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.695029020 CEST	443	49808	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.695744991 CEST	49808	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.695764065 CEST	443	49808	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.696288109 CEST	49808	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.696294069 CEST	443	49808	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.776184082 CEST	443	49809	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.778599977 CEST	49809	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.778634071 CEST	443	49809	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.778781891 CEST	49809	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.778799057 CEST	443	49809	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.789037943 CEST	443	49810	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.789789915 CEST	49810	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.789824963 CEST	443	49810	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.790417910 CEST	49810	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.790425062 CEST	443	49810	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.832916975 CEST	443	49808	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.833033085 CEST	443	49808	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.833120108 CEST	49808	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.833396912 CEST	49808	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.833412886 CEST	443	49808	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.847280025 CEST	49813	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.847340107 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.847451925 CEST	49813	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.847692013 CEST	49813	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.847707987 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.855938911 CEST	443	49811	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.856760025 CEST	49811	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.856802940 CEST	443	49811	13.107.253.72	192.168.2.5
Oct 23, 2024 17:03:59.857373953 CEST	49811	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:03:59.857394934 CEST	443	49811	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.101037979 CEST	443	49809	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.101110935 CEST	443	49809	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.101346016 CEST	49809	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.101476908 CEST	49809	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.101505041 CEST	443	49809	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.101532936 CEST	49809	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.101542950 CEST	443	49809	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.101783991 CEST	443	49810	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.101850986 CEST	443	49810	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.101897955 CEST	49810	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.101989985 CEST	49810	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.102003098 CEST	443	49810	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.102015972 CEST	49810	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.102020979 CEST	443	49810	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.104991913 CEST	49814	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.105026007 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.105074883 CEST	49815	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.105106115 CEST	443	49815	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.105123043 CEST	49814	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.105303049 CEST	49815	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.105309010 CEST	49814	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.105326891 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.105331898 CEST	49815	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.105336905 CEST	443	49815	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.105824947 CEST	443	49812	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.106161118 CEST	49812	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.106190920 CEST	443	49812	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.106610060 CEST	49812	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.106627941 CEST	443	49812	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.223938942 CEST	443	49811	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.224015951 CEST	443	49811	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.224121094 CEST	49811	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.224421024 CEST	49811	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.224451065 CEST	443	49811	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.224632978 CEST	49811	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.224647045 CEST	443	49811	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.227667093 CEST	49816	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.227751017 CEST	443	49816	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.227847099 CEST	49816	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.227996111 CEST	49816	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.228018999 CEST	443	49816	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.244821072 CEST	443	49812	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.244899988 CEST	443	49812	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.245013952 CEST	49812	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.245201111 CEST	49812	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.245201111 CEST	49812	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.245229959 CEST	443	49812	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.245242119 CEST	443	49812	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.247792959 CEST	49817	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.247837067 CEST	443	49817	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.247914076 CEST	49817	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.248049974 CEST	49817	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.248066902 CEST	443	49817	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.602938890 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.603820086 CEST	49813	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.603832006 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.604166985 CEST	49813	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.604176998 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.909745932 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.909822941 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.910010099 CEST	49813	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.929101944 CEST	49813	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.929125071 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:00.929178953 CEST	49813	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:00.929187059 CEST	443	49813	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.036459923 CEST	49818	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.036495924 CEST	443	49818	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.036608934 CEST	49818	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.040108919 CEST	49818	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.040123940 CEST	443	49818	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.046415091 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.048191071 CEST	443	49816	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.049928904 CEST	443	49815	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.050662041 CEST	49814	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.050678015 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.050725937 CEST	443	49817	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.051171064 CEST	49814	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.051177979 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.051651001 CEST	49817	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.051668882 CEST	443	49817	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.052323103 CEST	49817	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.052331924 CEST	443	49817	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.053055048 CEST	49816	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.053062916 CEST	443	49816	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.053507090 CEST	49816	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.053510904 CEST	443	49816	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.060311079 CEST	49815	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.060332060 CEST	443	49815	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.072515011 CEST	49815	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.072525978 CEST	443	49815	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.186094999 CEST	443	49816	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.186155081 CEST	443	49816	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.186203003 CEST	443	49816	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.186228037 CEST	49816	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.186278105 CEST	49816	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.189505100 CEST	443	49817	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.189610958 CEST	443	49817	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.189686060 CEST	49817	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.206971884 CEST	49816	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.206981897 CEST	443	49816	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.206994057 CEST	49816	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.206999063 CEST	443	49816	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.211491108 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.211561918 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.211813927 CEST	49814	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.212337017 CEST	443	49815	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.212407112 CEST	443	49815	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.212668896 CEST	49815	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.225351095 CEST	49817	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.225375891 CEST	443	49817	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.225389957 CEST	49817	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.225397110 CEST	443	49817	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.226463079 CEST	49815	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.226480961 CEST	443	49815	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.229075909 CEST	49814	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.229075909 CEST	49814	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.229105949 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.229115963 CEST	443	49814	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.240797997 CEST	49819	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.240824938 CEST	443	49819	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.240901947 CEST	49819	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.242789030 CEST	49820	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.242822886 CEST	443	49820	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.242965937 CEST	49819	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.242976904 CEST	443	49819	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.242995977 CEST	49820	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.243065119 CEST	49820	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.243074894 CEST	443	49820	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.243894100 CEST	49821	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.243947029 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.244005919 CEST	49821	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.244863033 CEST	49822	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.244873047 CEST	443	49822	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.244921923 CEST	49822	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.245035887 CEST	49821	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.245054007 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.256140947 CEST	49822	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.256154060 CEST	443	49822	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.799031973 CEST	443	49818	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.799802065 CEST	49818	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.799825907 CEST	443	49818	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.800323009 CEST	49818	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.800327063 CEST	443	49818	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.944061995 CEST	443	49818	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.944096088 CEST	443	49818	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.944144964 CEST	49818	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.944154024 CEST	443	49818	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.944375038 CEST	49818	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.944633961 CEST	49818	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.944649935 CEST	443	49818	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.944662094 CEST	49818	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.944668055 CEST	443	49818	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.950540066 CEST	49823	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.950582981 CEST	443	49823	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:01.950645924 CEST	49823	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.950896025 CEST	49823	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:01.950912952 CEST	443	49823	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.009649038 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.010545015 CEST	49821	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.010575056 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.010912895 CEST	49821	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.010919094 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.022183895 CEST	443	49822	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.022723913 CEST	49822	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.022753954 CEST	443	49822	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.023235083 CEST	49822	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.023257017 CEST	443	49822	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.027646065 CEST	443	49819	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.027739048 CEST	443	49820	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.028120995 CEST	49819	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.028146982 CEST	443	49819	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.028148890 CEST	49820	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.028162003 CEST	443	49820	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.028537989 CEST	49820	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.028544903 CEST	443	49820	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.028631926 CEST	49819	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.028637886 CEST	443	49819	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.147654057 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.147686005 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.147739887 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.147891998 CEST	49821	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.147891998 CEST	49821	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.148142099 CEST	49821	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.148161888 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.148174047 CEST	49821	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.148180962 CEST	443	49821	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.153012037 CEST	49824	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.153126001 CEST	443	49824	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.153239965 CEST	49824	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.153469086 CEST	49824	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.153505087 CEST	443	49824	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.160563946 CEST	443	49822	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.160634995 CEST	443	49822	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.160855055 CEST	49822	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.160945892 CEST	49822	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.160985947 CEST	443	49822	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.161041021 CEST	49822	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.161058903 CEST	443	49822	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.163661957 CEST	49825	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.163701057 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.163780928 CEST	49825	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.163932085 CEST	49825	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.163950920 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.167296886 CEST	443	49819	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.167615891 CEST	443	49819	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.167680979 CEST	49819	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.167747021 CEST	49819	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.167747021 CEST	49819	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.167804956 CEST	443	49819	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.167831898 CEST	443	49819	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.168925047 CEST	443	49820	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.169045925 CEST	443	49820	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.169104099 CEST	49820	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.169136047 CEST	49820	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.169142962 CEST	443	49820	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.169157028 CEST	49820	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.169162035 CEST	443	49820	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.170175076 CEST	49826	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.170214891 CEST	443	49826	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.170289040 CEST	49826	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.170442104 CEST	49826	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.170463085 CEST	443	49826	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.171046972 CEST	49827	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.171083927 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.171142101 CEST	49827	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.171240091 CEST	49827	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.171255112 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.940294981 CEST	443	49823	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.940871000 CEST	49823	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.940888882 CEST	443	49823	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:02.941417933 CEST	49823	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:02.941425085 CEST	443	49823	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.068433046 CEST	443	49826	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.068767071 CEST	443	49824	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.069019079 CEST	49826	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.069076061 CEST	443	49826	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.069113016 CEST	49824	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.069129944 CEST	443	49824	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.069533110 CEST	49826	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.069545031 CEST	443	49826	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.069839954 CEST	49824	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.069850922 CEST	443	49824	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.072025061 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.072510004 CEST	49825	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.072521925 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.073000908 CEST	49825	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.073009014 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.074091911 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.074496031 CEST	49827	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.074508905 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.074970961 CEST	49827	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.074975014 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.079754114 CEST	443	49823	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.079905033 CEST	443	49823	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.079977036 CEST	49823	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.080132008 CEST	49823	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.080171108 CEST	443	49823	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.080183983 CEST	49823	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.080193043 CEST	443	49823	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.083380938 CEST	49828	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.083420992 CEST	443	49828	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.084033966 CEST	49828	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.084034920 CEST	49828	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.084076881 CEST	443	49828	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.206357002 CEST	443	49824	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.206522942 CEST	443	49824	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.206593990 CEST	49824	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.206844091 CEST	49824	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.206865072 CEST	443	49824	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.206876993 CEST	49824	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.206882954 CEST	443	49824	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.210448980 CEST	49829	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.210495949 CEST	443	49829	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.210622072 CEST	49829	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.210922003 CEST	49829	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.210942030 CEST	443	49829	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.212348938 CEST	443	49826	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.212385893 CEST	443	49826	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.212426901 CEST	443	49826	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.212438107 CEST	49826	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.212474108 CEST	49826	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.212702036 CEST	49826	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.212717056 CEST	443	49826	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.212728977 CEST	49826	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.212733984 CEST	443	49826	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.213742971 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.213819981 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.213875055 CEST	49825	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.213983059 CEST	49825	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.213983059 CEST	49825	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.213996887 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.214005947 CEST	443	49825	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.215464115 CEST	49830	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.215492010 CEST	443	49830	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.215586901 CEST	49830	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.215698004 CEST	49830	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.215708971 CEST	443	49830	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.216104031 CEST	49831	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.216142893 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.216204882 CEST	49831	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.216368914 CEST	49831	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.216386080 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.219157934 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.219216108 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.219294071 CEST	49827	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.221057892 CEST	49827	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.221066952 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.221076012 CEST	49827	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.221081018 CEST	443	49827	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.223540068 CEST	49832	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.223582029 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.223655939 CEST	49832	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.223824024 CEST	49832	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.223839998 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.856116056 CEST	443	49828	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.862664938 CEST	49828	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.862678051 CEST	443	49828	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.863465071 CEST	49828	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.863470078 CEST	443	49828	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.963685989 CEST	443	49829	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.965171099 CEST	49829	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.965189934 CEST	443	49829	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.969650984 CEST	443	49830	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.973959923 CEST	49829	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.973975897 CEST	443	49829	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.975272894 CEST	49830	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.975286007 CEST	443	49830	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.976188898 CEST	49830	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.976195097 CEST	443	49830	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.977981091 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.978420973 CEST	49831	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.978457928 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.978976011 CEST	49831	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.978987932 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.981358051 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.981693029 CEST	49832	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.981709003 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.982215881 CEST	49832	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.982222080 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.997579098 CEST	443	49828	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.997693062 CEST	443	49828	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.997739077 CEST	443	49828	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.997776985 CEST	49828	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.997848034 CEST	49828	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.998311043 CEST	49828	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.998311043 CEST	49828	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:03.998326063 CEST	443	49828	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:03.998336077 CEST	443	49828	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.002301931 CEST	49833	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.002338886 CEST	443	49833	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.002449036 CEST	49833	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.002573013 CEST	49833	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.002587080 CEST	443	49833	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.106054068 CEST	443	49829	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.106648922 CEST	443	49829	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.106717110 CEST	49829	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.106754065 CEST	49829	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.106770992 CEST	443	49829	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.106784105 CEST	49829	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.106789112 CEST	443	49829	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.109302998 CEST	443	49830	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.109374046 CEST	443	49830	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.109437943 CEST	49830	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.109826088 CEST	49830	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.109826088 CEST	49830	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.109848022 CEST	443	49830	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.109857082 CEST	443	49830	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.110047102 CEST	49834	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.110083103 CEST	443	49834	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.110146046 CEST	49834	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.110342979 CEST	49834	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.110352993 CEST	443	49834	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.111890078 CEST	49835	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.111912966 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.111978054 CEST	49835	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.112092018 CEST	49835	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.112107038 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.116583109 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.116636038 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.116688967 CEST	49831	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.116786003 CEST	49831	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.116791010 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.116801023 CEST	49831	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.116805077 CEST	443	49831	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.118935108 CEST	49836	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.118963003 CEST	443	49836	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.119029999 CEST	49836	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.119174004 CEST	49836	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.119188070 CEST	443	49836	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.119299889 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.119333029 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.119379044 CEST	49832	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.119390011 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.119402885 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.119457960 CEST	49832	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.119551897 CEST	49832	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.119551897 CEST	49832	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.119560957 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.119569063 CEST	443	49832	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.121511936 CEST	49837	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.121531963 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.121602058 CEST	49837	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.121736050 CEST	49837	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.121751070 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.768573999 CEST	443	49833	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.769413948 CEST	49833	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.769454002 CEST	443	49833	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.769798040 CEST	49833	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.769808054 CEST	443	49833	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.881252050 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.881407022 CEST	443	49834	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.881874084 CEST	49834	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.881907940 CEST	443	49834	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.881983042 CEST	49835	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.882018089 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.882368088 CEST	49835	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.882378101 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.882392883 CEST	49834	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.882399082 CEST	443	49834	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.888910055 CEST	443	49836	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.889317036 CEST	49836	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.889336109 CEST	443	49836	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.889733076 CEST	49836	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.889738083 CEST	443	49836	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.893311977 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.893646955 CEST	49837	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.893663883 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.894062042 CEST	49837	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.894067049 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.904938936 CEST	443	49833	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.905271053 CEST	443	49833	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.905339956 CEST	49833	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.905363083 CEST	49833	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.905378103 CEST	443	49833	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.905390024 CEST	49833	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.905395031 CEST	443	49833	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.908339024 CEST	49838	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.908368111 CEST	443	49838	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:04.908438921 CEST	49838	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.908570051 CEST	49838	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:04.908581972 CEST	443	49838	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.021311045 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.021378994 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.021441936 CEST	49835	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.021743059 CEST	443	49834	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.021972895 CEST	443	49834	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.022048950 CEST	49834	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.026098013 CEST	443	49836	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.026124954 CEST	443	49836	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.026170969 CEST	443	49836	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.026192904 CEST	49836	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.026230097 CEST	49836	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.030384064 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.030774117 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.030837059 CEST	49837	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.032787085 CEST	49835	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.032813072 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.032828093 CEST	49835	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.032835007 CEST	443	49835	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.033726931 CEST	49836	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.033740997 CEST	443	49836	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.033741951 CEST	49837	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.033761024 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.033761978 CEST	49836	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.033767939 CEST	443	49836	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.033772945 CEST	49837	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.033778906 CEST	443	49837	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.036603928 CEST	49834	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.036623001 CEST	443	49834	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.036640882 CEST	49834	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.036647081 CEST	443	49834	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.043632030 CEST	49839	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.043661118 CEST	443	49839	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.043725014 CEST	49839	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.044842005 CEST	49840	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.044866085 CEST	443	49840	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.044930935 CEST	49840	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.045583010 CEST	49841	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.045610905 CEST	443	49841	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.045612097 CEST	49839	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.045624018 CEST	443	49839	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.045677900 CEST	49841	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.045789003 CEST	49840	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.045805931 CEST	443	49840	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.045871019 CEST	49841	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.045887947 CEST	443	49841	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.046468973 CEST	49842	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.046480894 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.046531916 CEST	49842	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.046652079 CEST	49842	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.046662092 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.669224024 CEST	443	49838	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.669740915 CEST	49838	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.669759035 CEST	443	49838	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.670228958 CEST	49838	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.670233011 CEST	443	49838	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.790559053 CEST	443	49839	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.791310072 CEST	49839	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.791393995 CEST	443	49839	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.791826963 CEST	49839	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.791841984 CEST	443	49839	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.794359922 CEST	443	49840	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.794718027 CEST	49840	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.794783115 CEST	443	49840	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.795023918 CEST	49840	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.795039892 CEST	443	49840	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.798619986 CEST	443	49841	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.799021006 CEST	49841	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.799038887 CEST	443	49841	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.799390078 CEST	49841	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.799396992 CEST	443	49841	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.802748919 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.803083897 CEST	49842	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.803117990 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.803417921 CEST	49842	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.803428888 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.806984901 CEST	443	49838	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.807348013 CEST	443	49838	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.807414055 CEST	49838	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.807498932 CEST	49838	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.807512045 CEST	443	49838	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.807524920 CEST	49838	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.807531118 CEST	443	49838	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.810772896 CEST	49843	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.810802937 CEST	443	49843	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.810894966 CEST	49843	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.811064959 CEST	49843	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.811078072 CEST	443	49843	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.925688028 CEST	443	49839	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.925863028 CEST	443	49839	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.925928116 CEST	49839	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.926043034 CEST	49839	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.926064968 CEST	443	49839	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.926079035 CEST	49839	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.926084995 CEST	443	49839	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.929217100 CEST	49844	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.929241896 CEST	443	49844	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.929322958 CEST	49844	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.929491997 CEST	49844	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.929503918 CEST	443	49844	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.935429096 CEST	443	49841	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.936135054 CEST	443	49841	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.936201096 CEST	49841	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.936259985 CEST	49841	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.936280012 CEST	443	49841	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.936290979 CEST	49841	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.936296940 CEST	443	49841	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.938889027 CEST	49845	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.938930035 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.938987017 CEST	49845	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.939167023 CEST	49845	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.939181089 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.942178965 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.942213058 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.942272902 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.942269087 CEST	49842	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.942334890 CEST	49842	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.942390919 CEST	49842	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.942390919 CEST	49842	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.942433119 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.942461967 CEST	443	49842	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.944669962 CEST	49846	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.944686890 CEST	443	49846	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.944741964 CEST	49846	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.944861889 CEST	49846	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.944875002 CEST	443	49846	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.953979015 CEST	443	49840	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.954040051 CEST	443	49840	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.954091072 CEST	49840	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.954197884 CEST	49840	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.954197884 CEST	49840	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.954214096 CEST	443	49840	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.954236031 CEST	443	49840	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.956389904 CEST	49847	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.956398964 CEST	443	49847	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:05.956459045 CEST	49847	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.956578970 CEST	49847	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:05.956588030 CEST	443	49847	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.579428911 CEST	443	49843	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.580229044 CEST	49843	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.580255032 CEST	443	49843	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.580748081 CEST	49843	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.580754995 CEST	443	49843	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.676791906 CEST	443	49844	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.677460909 CEST	49844	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.677490950 CEST	443	49844	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.677968979 CEST	49844	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.677975893 CEST	443	49844	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.703262091 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.703953028 CEST	49845	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.703973055 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.704231977 CEST	443	49846	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.704428911 CEST	49845	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.704433918 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.704655886 CEST	49846	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.704684019 CEST	443	49846	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.705014944 CEST	49846	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.705024004 CEST	443	49846	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.709749937 CEST	443	49847	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.710233927 CEST	49847	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.710259914 CEST	443	49847	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.710666895 CEST	49847	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.710675955 CEST	443	49847	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.719522953 CEST	443	49843	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.719597101 CEST	443	49843	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.719672918 CEST	49843	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.719880104 CEST	49843	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.719901085 CEST	443	49843	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.719913960 CEST	49843	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.719919920 CEST	443	49843	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.722882986 CEST	49848	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.722927094 CEST	443	49848	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.723011971 CEST	49848	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.723150015 CEST	49848	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.723165989 CEST	443	49848	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.820182085 CEST	443	49844	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.820431948 CEST	443	49844	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.820487976 CEST	443	49844	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.820497036 CEST	49844	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.820532084 CEST	49844	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.820593119 CEST	49844	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.820611954 CEST	443	49844	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.820622921 CEST	49844	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.820628881 CEST	443	49844	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.823568106 CEST	49849	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.823605061 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.823682070 CEST	49849	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.823846102 CEST	49849	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.823859930 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.842744112 CEST	443	49846	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.842816114 CEST	443	49846	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.842863083 CEST	49846	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.842871904 CEST	443	49846	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.842919111 CEST	49846	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.843075991 CEST	49846	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.843082905 CEST	443	49846	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.843092918 CEST	49846	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.843096972 CEST	443	49846	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.843589067 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.843666077 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.843714952 CEST	49845	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.843750954 CEST	49845	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.843750954 CEST	49845	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.843770981 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.843779087 CEST	443	49845	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.847341061 CEST	443	49847	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.847614050 CEST	443	49847	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.847675085 CEST	49847	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.848200083 CEST	49847	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.848201036 CEST	49847	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.848211050 CEST	443	49847	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.848220110 CEST	443	49847	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.848380089 CEST	49850	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.848413944 CEST	443	49850	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.848526955 CEST	49850	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.848638058 CEST	49850	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.848654032 CEST	443	49850	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.849642992 CEST	49851	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.849654913 CEST	443	49851	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.849750042 CEST	49851	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.849843025 CEST	49851	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.849854946 CEST	443	49851	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.850851059 CEST	49852	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.850888014 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:06.850955009 CEST	49852	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.851161003 CEST	49852	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:06.851178885 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.486291885 CEST	443	49848	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.487001896 CEST	49848	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.487024069 CEST	443	49848	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.487545013 CEST	49848	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.487551928 CEST	443	49848	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.574810982 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.575687885 CEST	49849	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.575721979 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.576199055 CEST	49849	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.576206923 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.610299110 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.611006021 CEST	49852	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.611021042 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.611610889 CEST	49852	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.611620903 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.616887093 CEST	443	49851	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.617276907 CEST	49851	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.617309093 CEST	443	49851	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.617856979 CEST	49851	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.617863894 CEST	443	49851	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.618760109 CEST	443	49850	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.619115114 CEST	49850	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.619141102 CEST	443	49850	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.619738102 CEST	49850	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.619744062 CEST	443	49850	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.638362885 CEST	443	49848	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.638387918 CEST	443	49848	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.638433933 CEST	443	49848	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.638472080 CEST	49848	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.638504982 CEST	49848	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.638984919 CEST	49848	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.639003992 CEST	443	49848	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.639167070 CEST	49848	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.639173031 CEST	443	49848	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.642249107 CEST	49853	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.642292976 CEST	443	49853	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.642442942 CEST	49853	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.642554998 CEST	49853	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.642565966 CEST	443	49853	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.710761070 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.710964918 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.711029053 CEST	49849	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.711144924 CEST	49849	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.711164951 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.711199999 CEST	49849	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.711205006 CEST	443	49849	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.714293003 CEST	49854	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.714328051 CEST	443	49854	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.714405060 CEST	49854	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.714566946 CEST	49854	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.714579105 CEST	443	49854	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.749124050 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.749155998 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.749197960 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.749219894 CEST	49852	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.749254942 CEST	49852	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.749456882 CEST	49852	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.749466896 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.749476910 CEST	49852	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.749481916 CEST	443	49852	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.752904892 CEST	49855	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.752966881 CEST	443	49855	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.753093958 CEST	49855	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.753619909 CEST	49855	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.753635883 CEST	443	49855	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.756820917 CEST	443	49851	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.756889105 CEST	443	49851	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.756943941 CEST	49851	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.757129908 CEST	49851	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.757145882 CEST	443	49851	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.757158995 CEST	49851	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.757164955 CEST	443	49851	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.758797884 CEST	443	49850	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.758846045 CEST	443	49850	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.758902073 CEST	443	49850	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.758910894 CEST	49850	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.758943081 CEST	49850	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.759572029 CEST	49856	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.759599924 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.759721041 CEST	49856	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.759803057 CEST	49856	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.759824038 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.759826899 CEST	49850	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.759826899 CEST	49850	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.759840965 CEST	443	49850	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.759854078 CEST	443	49850	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.761713028 CEST	49857	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.761742115 CEST	443	49857	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:07.761802912 CEST	49857	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.761913061 CEST	49857	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:07.761930943 CEST	443	49857	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.480979919 CEST	443	49854	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.481658936 CEST	49854	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.481687069 CEST	443	49854	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.482146025 CEST	49854	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.482151985 CEST	443	49854	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.499774933 CEST	443	49855	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.500469923 CEST	49855	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.500494003 CEST	443	49855	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.501283884 CEST	49855	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.501302958 CEST	443	49855	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.516803026 CEST	443	49853	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.517477989 CEST	49853	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.517505884 CEST	443	49853	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.517985106 CEST	49853	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.517990112 CEST	443	49853	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.530756950 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.531202078 CEST	49856	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.531215906 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.533612013 CEST	49856	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.533629894 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.542167902 CEST	443	49857	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.542535067 CEST	49857	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.542552948 CEST	443	49857	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.542924881 CEST	49857	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.542929888 CEST	443	49857	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.620717049 CEST	443	49854	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.621139050 CEST	443	49854	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.621218920 CEST	49854	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.621269941 CEST	49854	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.621285915 CEST	443	49854	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.621299028 CEST	49854	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.621304989 CEST	443	49854	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.624228954 CEST	49858	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.624265909 CEST	443	49858	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.624454021 CEST	49858	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.624560118 CEST	49858	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.624572039 CEST	443	49858	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.635859013 CEST	443	49855	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.636048079 CEST	443	49855	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.636198044 CEST	49855	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.636198997 CEST	49855	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.636198997 CEST	49855	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.638668060 CEST	49859	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.638705015 CEST	443	49859	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.638780117 CEST	49859	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.639036894 CEST	49859	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.639053106 CEST	443	49859	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.653605938 CEST	443	49853	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.653697968 CEST	443	49853	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.653764009 CEST	49853	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.653884888 CEST	49853	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.653907061 CEST	443	49853	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.654217958 CEST	49853	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.654227018 CEST	443	49853	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.656713963 CEST	49860	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.656755924 CEST	443	49860	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.656812906 CEST	49860	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.656965971 CEST	49860	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.656980991 CEST	443	49860	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.669600010 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.669631958 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.669684887 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.669706106 CEST	49856	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.669754982 CEST	49856	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.669939995 CEST	49856	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.669939995 CEST	49856	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.669950008 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.669958115 CEST	443	49856	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.672620058 CEST	49861	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.672667027 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.672744036 CEST	49861	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.672898054 CEST	49861	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.672914982 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.683697939 CEST	443	49857	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.683754921 CEST	443	49857	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.683815956 CEST	49857	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.683940887 CEST	49857	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.683949947 CEST	443	49857	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.683960915 CEST	49857	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.683964968 CEST	443	49857	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.686156988 CEST	49862	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.686181068 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.686248064 CEST	49862	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.686367989 CEST	49862	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.686381102 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:08.937731028 CEST	49855	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:08.937760115 CEST	443	49855	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.398989916 CEST	443	49858	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.399868011 CEST	49858	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.399883032 CEST	443	49858	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.400361061 CEST	49858	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.400366068 CEST	443	49858	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.407912970 CEST	443	49859	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.408324957 CEST	49859	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.408343077 CEST	443	49859	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.408699989 CEST	49859	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.408706903 CEST	443	49859	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.438935041 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.441243887 CEST	49862	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.441272020 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.441751957 CEST	49862	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.441759109 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.460666895 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.461329937 CEST	49861	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.461358070 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.461849928 CEST	49861	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.461854935 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.544850111 CEST	443	49858	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.544893026 CEST	443	49858	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.544950962 CEST	443	49858	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.545006990 CEST	49858	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.545028925 CEST	49858	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.545414925 CEST	49858	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.545414925 CEST	49858	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.545443058 CEST	443	49858	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.545452118 CEST	443	49858	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.548144102 CEST	443	49859	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.548206091 CEST	443	49859	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.548302889 CEST	49859	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.548474073 CEST	49859	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.548492908 CEST	443	49859	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.548501968 CEST	49859	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.548506975 CEST	443	49859	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.548681974 CEST	49863	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.548732996 CEST	443	49863	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.548883915 CEST	49863	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.548954964 CEST	49863	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.548966885 CEST	443	49863	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.550801992 CEST	49864	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.550854921 CEST	443	49864	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.550937891 CEST	49864	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.551079035 CEST	49864	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.551095009 CEST	443	49864	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.577065945 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.577096939 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.577141047 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.577200890 CEST	49862	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.577238083 CEST	49862	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.577522039 CEST	49862	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.577548981 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.577562094 CEST	49862	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.577568054 CEST	443	49862	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.580828905 CEST	49865	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.580883026 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.580992937 CEST	49865	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.581177950 CEST	49865	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.581201077 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.604935884 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.605021000 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.605298996 CEST	49861	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.605330944 CEST	49861	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.605355024 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.605370998 CEST	49861	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.605379105 CEST	443	49861	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.608424902 CEST	49866	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.608463049 CEST	443	49866	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.608556032 CEST	49866	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.608716965 CEST	49866	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.608731031 CEST	443	49866	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.631917000 CEST	443	49860	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.632630110 CEST	49860	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.632663012 CEST	443	49860	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.633121967 CEST	49860	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.633131981 CEST	443	49860	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.770350933 CEST	443	49860	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.770421028 CEST	443	49860	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.770495892 CEST	49860	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.770847082 CEST	49860	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.770869970 CEST	443	49860	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.770880938 CEST	49860	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.770886898 CEST	443	49860	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.773777962 CEST	49867	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.773830891 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:09.773909092 CEST	49867	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.774065018 CEST	49867	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:09.774077892 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.482129097 CEST	443	49863	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.482836008 CEST	49863	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.482852936 CEST	443	49863	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.483397961 CEST	49863	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.483405113 CEST	443	49863	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.483505011 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.483814955 CEST	49865	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.483840942 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.484149933 CEST	49865	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.484157085 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.485073090 CEST	443	49866	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.485390902 CEST	49866	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.485413074 CEST	443	49866	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.485712051 CEST	49866	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.485718966 CEST	443	49866	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.511573076 CEST	443	49864	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.512049913 CEST	49864	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.512075901 CEST	443	49864	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.512492895 CEST	49864	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.512499094 CEST	443	49864	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.621408939 CEST	443	49863	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.621469021 CEST	443	49866	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.621536970 CEST	443	49863	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.621562958 CEST	443	49866	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.621834040 CEST	49866	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.621834040 CEST	49866	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.621835947 CEST	49863	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.621835947 CEST	49863	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.621862888 CEST	49866	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.621874094 CEST	49863	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.621876955 CEST	443	49866	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.621891022 CEST	443	49863	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.623110056 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.623178959 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.623250961 CEST	49865	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.623538971 CEST	49865	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.623538971 CEST	49865	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.623603106 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.623632908 CEST	443	49865	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.625742912 CEST	49868	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.625793934 CEST	443	49868	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.625857115 CEST	49868	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.626039028 CEST	49868	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.626049995 CEST	49869	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.626053095 CEST	443	49868	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.626080036 CEST	443	49869	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.626132965 CEST	49869	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.626204967 CEST	49869	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.626216888 CEST	443	49869	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.626446009 CEST	49870	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.626457930 CEST	443	49870	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.626512051 CEST	49870	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.626705885 CEST	49870	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.626719952 CEST	443	49870	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.626920938 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.627257109 CEST	49867	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.627268076 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.627716064 CEST	49867	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.627722025 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.772850990 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.772923946 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.773051977 CEST	49867	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.773293972 CEST	49867	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.773313999 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.773344040 CEST	49867	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.773349047 CEST	443	49867	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.776551008 CEST	49871	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.776588917 CEST	443	49871	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.776673079 CEST	49871	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.776822090 CEST	49871	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.776835918 CEST	443	49871	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.862390041 CEST	443	49864	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.862416029 CEST	443	49864	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.862476110 CEST	443	49864	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.862510920 CEST	49864	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.862544060 CEST	49864	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.862762928 CEST	49864	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.862785101 CEST	443	49864	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.862795115 CEST	49864	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.862799883 CEST	443	49864	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.865741968 CEST	49872	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.865792036 CEST	443	49872	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:10.865879059 CEST	49872	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.866034031 CEST	49872	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:10.866049051 CEST	443	49872	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.408274889 CEST	443	49868	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.408977032 CEST	49868	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.408992052 CEST	443	49868	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.409423113 CEST	443	49870	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.409487009 CEST	49868	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.409493923 CEST	443	49868	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.409720898 CEST	49870	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.409729958 CEST	443	49870	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.410070896 CEST	49870	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.410078049 CEST	443	49870	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.411051989 CEST	443	49869	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.411345005 CEST	49869	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.411355019 CEST	443	49869	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.411669970 CEST	49869	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.411674976 CEST	443	49869	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.535257101 CEST	443	49871	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.545135975 CEST	49871	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.545165062 CEST	443	49871	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.545629978 CEST	49871	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.545634985 CEST	443	49871	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.546241045 CEST	443	49868	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.546582937 CEST	443	49868	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.546655893 CEST	49868	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.546921015 CEST	49868	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.546935081 CEST	443	49868	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.546948910 CEST	49868	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.546953917 CEST	443	49868	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.550554991 CEST	443	49869	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.550700903 CEST	443	49869	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.550746918 CEST	49869	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.550808907 CEST	49869	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.550822973 CEST	443	49869	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.550832987 CEST	49869	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.550839901 CEST	443	49869	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.551935911 CEST	49873	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.551970959 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.552033901 CEST	49873	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.552181005 CEST	49873	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.552197933 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.553458929 CEST	49874	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.553498983 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.553559065 CEST	49874	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.553771019 CEST	49874	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.553785086 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.566426039 CEST	443	49870	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.566493988 CEST	443	49870	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.566557884 CEST	49870	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.566756964 CEST	49870	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.566764116 CEST	443	49870	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.566776037 CEST	49870	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.566780090 CEST	443	49870	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.569523096 CEST	49875	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.569562912 CEST	443	49875	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.569633007 CEST	49875	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.569768906 CEST	49875	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.569782019 CEST	443	49875	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.627392054 CEST	443	49872	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.628052950 CEST	49872	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.628096104 CEST	443	49872	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.628599882 CEST	49872	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.628609896 CEST	443	49872	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.679415941 CEST	443	49871	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.679491043 CEST	443	49871	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.679559946 CEST	49871	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.679783106 CEST	49871	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.679806948 CEST	443	49871	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.679819107 CEST	49871	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.679824114 CEST	443	49871	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.682845116 CEST	49876	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.682869911 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.682971954 CEST	49876	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.683123112 CEST	49876	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.683134079 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.765796900 CEST	443	49872	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.765820980 CEST	443	49872	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.765866995 CEST	443	49872	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.765999079 CEST	49872	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.765999079 CEST	49872	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.766304016 CEST	49872	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.766355038 CEST	443	49872	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.766386032 CEST	49872	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.766402960 CEST	443	49872	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.769280910 CEST	49878	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.769303083 CEST	443	49878	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:11.769377947 CEST	49878	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.769532919 CEST	49878	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:11.769540071 CEST	443	49878	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.611578941 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.612277031 CEST	49874	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:12.612297058 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.612297058 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.612584114 CEST	49873	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:12.612605095 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.612692118 CEST	443	49875	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.613121986 CEST	49873	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:12.613131046 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.613162041 CEST	49874	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:12.613173962 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.613478899 CEST	49875	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:12.613490105 CEST	443	49875	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.614159107 CEST	49875	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:12.614171028 CEST	443	49875	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.746392012 CEST	443	49878	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.747232914 CEST	49878	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:12.747304916 CEST	443	49878	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.747601986 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.748038054 CEST	49876	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:12.748048067 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.749169111 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.749239922 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.749311924 CEST	49874	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:12.749727964 CEST	49876	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:12.749735117 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.749810934 CEST	49878	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:12.749816895 CEST	443	49878	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.749823093 CEST	49874	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:12.749829054 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.749851942 CEST	49874	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:12.749864101 CEST	443	49874	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.749949932 CEST	443	49875	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.750086069 CEST	443	49875	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.750138998 CEST	49875	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:12.750260115 CEST	49875	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:12.750267029 CEST	443	49875	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.750292063 CEST	49875	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:12.750298023 CEST	443	49875	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.753516912 CEST	49879	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:12.753559113 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.753638029 CEST	49879	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:12.753684044 CEST	49880	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:12.753714085 CEST	443	49880	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.753814936 CEST	49879	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:12.753822088 CEST	49880	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:12.753827095 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.753954887 CEST	49880	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:12.753969908 CEST	443	49880	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.768317938 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.768642902 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.768728971 CEST	49873	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:12.769130945 CEST	49873	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:12.769130945 CEST	49873	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:12.769149065 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.769160986 CEST	443	49873	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.773287058 CEST	49881	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:12.773322105 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:12.773410082 CEST	49881	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:12.773602009 CEST	49881	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:12.773612976 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.193783045 CEST	443	49878	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.193785906 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.193806887 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.193825006 CEST	443	49878	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.193869114 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.193886995 CEST	443	49878	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.193960905 CEST	49878	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.193960905 CEST	49876	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.194006920 CEST	49876	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.194006920 CEST	49878	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.194252968 CEST	49878	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.194252968 CEST	49876	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.194274902 CEST	443	49878	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.194286108 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.194294930 CEST	49878	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.194294930 CEST	49876	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.194303036 CEST	443	49878	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.194314003 CEST	443	49876	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.197777987 CEST	49882	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.197815895 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.197838068 CEST	49883	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.197881937 CEST	443	49883	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.197900057 CEST	49882	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.197983027 CEST	49883	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.198144913 CEST	49883	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.198148012 CEST	49882	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.198158979 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.198159933 CEST	443	49883	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.516499043 CEST	443	49880	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.517272949 CEST	49880	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.517292023 CEST	443	49880	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.517889023 CEST	49880	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.517896891 CEST	443	49880	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.532710075 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.533385992 CEST	49881	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.533401966 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.533859968 CEST	49881	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.533878088 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.535192013 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.535696983 CEST	49879	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.535727978 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.536155939 CEST	49879	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.536161900 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.654587030 CEST	443	49880	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.654659986 CEST	443	49880	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.654768944 CEST	49880	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.655062914 CEST	49880	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.655062914 CEST	49880	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.655077934 CEST	443	49880	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.655088902 CEST	443	49880	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.658756018 CEST	49884	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.658782959 CEST	443	49884	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.658890009 CEST	49884	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.659101009 CEST	49884	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.659121037 CEST	443	49884	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.670267105 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.670310020 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.670351982 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.670466900 CEST	49881	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.670466900 CEST	49881	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.670790911 CEST	49881	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.670790911 CEST	49881	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.670806885 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.670816898 CEST	443	49881	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.673651934 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.673722982 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.673774004 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.673780918 CEST	49879	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.673818111 CEST	49879	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.673991919 CEST	49879	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.674009085 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.674029112 CEST	49879	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.674035072 CEST	443	49879	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.674333096 CEST	49885	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.674375057 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.674452066 CEST	49885	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.674597979 CEST	49885	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.674609900 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.676886082 CEST	49886	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.676908016 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:13.676989079 CEST	49886	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.677158117 CEST	49886	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:13.677172899 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.082281113 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.082884073 CEST	49882	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.082897902 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.083518982 CEST	49882	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.083524942 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.085751057 CEST	443	49883	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.086307049 CEST	49883	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.086347103 CEST	443	49883	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.086925030 CEST	49883	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.086931944 CEST	443	49883	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.219691038 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.219711065 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.219764948 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.219822884 CEST	49882	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.219876051 CEST	49882	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.220184088 CEST	49882	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.220206976 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.220218897 CEST	49882	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.220231056 CEST	443	49882	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.223845005 CEST	49887	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.223880053 CEST	443	49887	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.223964930 CEST	49887	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.224150896 CEST	49887	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.224162102 CEST	443	49887	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.226186037 CEST	443	49883	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.226255894 CEST	443	49883	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.226330996 CEST	49883	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.226536036 CEST	49883	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.226536036 CEST	49883	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.226542950 CEST	443	49883	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.226551056 CEST	443	49883	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.229109049 CEST	49888	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.229160070 CEST	443	49888	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.229233027 CEST	49888	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.229403019 CEST	49888	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.229417086 CEST	443	49888	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.422749996 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.423075914 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.423479080 CEST	49885	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.423507929 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.423986912 CEST	49885	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.423998117 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.424246073 CEST	49886	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.424263000 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.424684048 CEST	49886	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.424691916 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.430450916 CEST	443	49884	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.430752993 CEST	49884	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.430774927 CEST	443	49884	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.431123018 CEST	49884	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.431128979 CEST	443	49884	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.558430910 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.558664083 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.558737993 CEST	49886	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.558855057 CEST	49886	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.558870077 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.558880091 CEST	49886	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.558886051 CEST	443	49886	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.561326981 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.561501980 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.561552048 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.561553955 CEST	49885	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.561595917 CEST	49885	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.561636925 CEST	49885	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.561656952 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.561674118 CEST	49885	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.561681032 CEST	443	49885	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.562170982 CEST	49889	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.562212944 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.562282085 CEST	49889	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.562458038 CEST	49889	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.562472105 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.564008951 CEST	49890	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.564106941 CEST	443	49890	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.564193964 CEST	49890	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.564316034 CEST	49890	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.564347982 CEST	443	49890	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.571854115 CEST	443	49884	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.571885109 CEST	443	49884	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.571929932 CEST	443	49884	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.571938038 CEST	49884	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.571983099 CEST	49884	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.572128057 CEST	49884	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.572135925 CEST	443	49884	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.572144032 CEST	49884	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.572148085 CEST	443	49884	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.574345112 CEST	49891	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.574373007 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.574450970 CEST	49891	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.574583054 CEST	49891	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.574594975 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.994956017 CEST	443	49888	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.995512962 CEST	49888	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.995554924 CEST	443	49888	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:14.996032953 CEST	49888	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:14.996047974 CEST	443	49888	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.009871960 CEST	443	49887	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.010415077 CEST	49887	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.010440111 CEST	443	49887	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.010899067 CEST	49887	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.010904074 CEST	443	49887	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.134651899 CEST	443	49888	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.134790897 CEST	443	49888	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.134857893 CEST	49888	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.135061026 CEST	49888	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.135082006 CEST	443	49888	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.135092020 CEST	49888	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.135098934 CEST	443	49888	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.138467073 CEST	49892	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.138510942 CEST	443	49892	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.138607025 CEST	49892	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.138765097 CEST	49892	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.138780117 CEST	443	49892	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.539093971 CEST	443	49887	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.539191008 CEST	443	49887	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.539268970 CEST	49887	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.539577007 CEST	49887	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.539598942 CEST	443	49887	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.539613008 CEST	49887	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.539618969 CEST	443	49887	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.543258905 CEST	49893	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.543292999 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.543394089 CEST	49893	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.543611050 CEST	49893	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.543622017 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.676289082 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.676765919 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.677056074 CEST	49889	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.677076101 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.677561045 CEST	49889	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.677566051 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.677858114 CEST	443	49890	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.678155899 CEST	49891	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.678164005 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.678536892 CEST	49891	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.678544044 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.678627014 CEST	49890	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.678651094 CEST	443	49890	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.679128885 CEST	49890	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.679141045 CEST	443	49890	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.813972950 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.814007044 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.814054012 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.814095020 CEST	49889	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.814141035 CEST	49889	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.814429045 CEST	49889	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.814450026 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.814460993 CEST	49889	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.814467907 CEST	443	49889	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.815985918 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.816016912 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.816056967 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.816102028 CEST	49891	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.816129923 CEST	49891	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.816279888 CEST	49891	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.816284895 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.816309929 CEST	49891	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.816313982 CEST	443	49891	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.818109989 CEST	49894	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.818154097 CEST	443	49894	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.818243980 CEST	49894	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.818404913 CEST	49894	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.818417072 CEST	443	49894	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.818603992 CEST	49895	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.818639994 CEST	443	49895	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.818713903 CEST	49895	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.818737984 CEST	443	49890	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.818775892 CEST	443	49890	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.818834066 CEST	49890	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.818893909 CEST	49895	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.818908930 CEST	443	49895	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.818933964 CEST	49890	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.818934917 CEST	49890	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.818983078 CEST	443	49890	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.819014072 CEST	443	49890	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.821140051 CEST	49896	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.821161985 CEST	443	49896	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:15.821244955 CEST	49896	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.821389914 CEST	49896	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:15.821405888 CEST	443	49896	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.295106888 CEST	443	49892	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.295799971 CEST	49892	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.295829058 CEST	443	49892	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.296447039 CEST	49892	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.296456099 CEST	443	49892	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.300585032 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.301021099 CEST	49893	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.301047087 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.301450968 CEST	49893	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.301460028 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.435780048 CEST	443	49892	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.435867071 CEST	443	49892	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.436009884 CEST	49892	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.436331034 CEST	49892	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.436346054 CEST	443	49892	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.436357975 CEST	49892	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.436362982 CEST	443	49892	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.438304901 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.438548088 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.438597918 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.438611031 CEST	49893	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.438661098 CEST	49893	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.438755035 CEST	49893	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.438770056 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.438786030 CEST	49893	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.438791990 CEST	443	49893	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.440504074 CEST	49897	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.440542936 CEST	443	49897	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.440625906 CEST	49897	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.440814972 CEST	49897	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.440824986 CEST	443	49897	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.441859961 CEST	49898	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.441905975 CEST	443	49898	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.441991091 CEST	49898	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.442082882 CEST	49898	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.442100048 CEST	443	49898	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.557509899 CEST	443	49894	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.558186054 CEST	49894	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.558214903 CEST	443	49894	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.558706999 CEST	49894	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.558712959 CEST	443	49894	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.567188025 CEST	443	49896	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.567662954 CEST	49896	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.567678928 CEST	443	49896	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.568099976 CEST	49896	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.568105936 CEST	443	49896	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.586752892 CEST	443	49895	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.587271929 CEST	49895	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.587333918 CEST	443	49895	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.587773085 CEST	49895	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.587789059 CEST	443	49895	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.694473982 CEST	443	49894	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.694577932 CEST	443	49894	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.694694996 CEST	49894	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.700742960 CEST	49894	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.700788975 CEST	443	49894	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.700808048 CEST	49894	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.700814962 CEST	443	49894	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.704741001 CEST	49899	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.704799891 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.704895973 CEST	49899	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.705065966 CEST	49899	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.705076933 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.708574057 CEST	443	49896	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.708647013 CEST	443	49896	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.708708048 CEST	49896	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.708863974 CEST	49896	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.708889008 CEST	443	49896	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.708903074 CEST	49896	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.708909988 CEST	443	49896	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.711775064 CEST	49900	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.711819887 CEST	443	49900	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.711879969 CEST	49900	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.712074041 CEST	49900	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.712088108 CEST	443	49900	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.731818914 CEST	443	49895	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.731889963 CEST	443	49895	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.731967926 CEST	49895	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.732145071 CEST	49895	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.732150078 CEST	443	49895	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.732161999 CEST	49895	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.732166052 CEST	443	49895	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.735064983 CEST	49901	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.735095978 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:16.735158920 CEST	49901	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.735310078 CEST	49901	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:16.735332966 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.212505102 CEST	443	49897	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.213407040 CEST	49897	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.213423967 CEST	443	49897	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.213913918 CEST	49897	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.213920116 CEST	443	49897	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.216329098 CEST	443	49898	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.216772079 CEST	49898	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.216790915 CEST	443	49898	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.217128038 CEST	49898	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.217135906 CEST	443	49898	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.350953102 CEST	443	49897	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.351285934 CEST	443	49897	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.351349115 CEST	49897	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.351453066 CEST	49897	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.351466894 CEST	443	49897	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.351481915 CEST	49897	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.351488113 CEST	443	49897	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.354722023 CEST	49902	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.354759932 CEST	443	49902	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.354829073 CEST	49902	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.354948997 CEST	49902	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.354963064 CEST	443	49902	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.355978966 CEST	443	49898	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.356055975 CEST	443	49898	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.356148958 CEST	49898	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.356148958 CEST	49898	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.356185913 CEST	49898	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.356209040 CEST	443	49898	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.358866930 CEST	49903	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.358897924 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.358962059 CEST	49903	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.359136105 CEST	49903	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.359148979 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.480664968 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.481345892 CEST	49899	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.481364012 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.481852055 CEST	49899	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.481858015 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.482822895 CEST	443	49900	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.483222008 CEST	49900	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.483251095 CEST	443	49900	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.483633995 CEST	49900	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.483642101 CEST	443	49900	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.502831936 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.503489017 CEST	49901	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.503529072 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.504013062 CEST	49901	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.504018068 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.619218111 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.619251013 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.619297028 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.619385958 CEST	49899	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.619426012 CEST	49899	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.619664907 CEST	49899	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.619688034 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.619702101 CEST	49899	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.619708061 CEST	443	49899	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.622863054 CEST	49904	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.622865915 CEST	443	49900	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.622889042 CEST	443	49904	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.622942924 CEST	443	49900	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.622973919 CEST	49904	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.622998953 CEST	49900	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.623111010 CEST	49900	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.623131037 CEST	443	49900	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.623143911 CEST	49900	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.623151064 CEST	443	49900	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.623152018 CEST	49904	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.623167992 CEST	443	49904	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.625372887 CEST	49905	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.625406981 CEST	443	49905	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.625539064 CEST	49905	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.625663996 CEST	49905	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.625677109 CEST	443	49905	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.642504930 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.642577887 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.642678976 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.642685890 CEST	49901	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.642731905 CEST	49901	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.642997026 CEST	49901	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.643022060 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.643038034 CEST	49901	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.643044949 CEST	443	49901	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.646090984 CEST	49906	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.646119118 CEST	443	49906	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:17.646198988 CEST	49906	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.646343946 CEST	49906	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:17.646354914 CEST	443	49906	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:18.111990929 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:18.112579107 CEST	49903	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:18.112601042 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:18.113127947 CEST	49903	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:18.113135099 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:18.121095896 CEST	443	49902	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:18.121639013 CEST	49902	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:18.121655941 CEST	443	49902	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:18.122201920 CEST	49902	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:18.122210979 CEST	443	49902	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.298300982 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.298671961 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.298728943 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.298758030 CEST	49903	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.298831940 CEST	49903	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.298863888 CEST	49903	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.298875093 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.298892021 CEST	49903	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.298897982 CEST	443	49903	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.302419901 CEST	49907	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.302457094 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.302551031 CEST	49907	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.302731991 CEST	49907	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.302745104 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.306930065 CEST	443	49902	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.309571028 CEST	443	49902	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.309662104 CEST	49902	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.309701920 CEST	49902	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.309710026 CEST	443	49902	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.309731960 CEST	49902	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.309740067 CEST	443	49902	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.311692953 CEST	443	49906	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.311892033 CEST	443	49904	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.312114954 CEST	443	49905	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.312230110 CEST	49906	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.312254906 CEST	443	49906	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.312942028 CEST	49906	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.312951088 CEST	443	49906	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.313242912 CEST	49908	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.313286066 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.313316107 CEST	49904	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.313325882 CEST	443	49904	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.313345909 CEST	49908	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.313657045 CEST	49905	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.313672066 CEST	443	49905	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.313798904 CEST	49904	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.313807011 CEST	443	49904	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.313837051 CEST	49908	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.313848972 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.314100981 CEST	49905	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.314109087 CEST	443	49905	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.445394993 CEST	443	49904	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.445787907 CEST	443	49904	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.446012020 CEST	49904	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.446350098 CEST	49904	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.446350098 CEST	49904	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.446372032 CEST	443	49904	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.446384907 CEST	443	49904	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.448206902 CEST	443	49906	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.448523998 CEST	443	49906	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.448628902 CEST	49906	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.448745012 CEST	443	49905	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.448772907 CEST	443	49905	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.448817015 CEST	443	49905	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.448832989 CEST	49905	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.448862076 CEST	49905	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.449625015 CEST	49909	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.449665070 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.449738026 CEST	49909	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.449814081 CEST	49906	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.449835062 CEST	443	49906	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.449908018 CEST	49906	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.449913025 CEST	443	49906	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.450927973 CEST	49905	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.450927973 CEST	49905	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.450937986 CEST	443	49905	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.450947046 CEST	443	49905	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.451808929 CEST	49909	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.451838970 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.453615904 CEST	49910	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.453656912 CEST	443	49910	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.453753948 CEST	49910	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.453898907 CEST	49910	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.453916073 CEST	443	49910	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.455235958 CEST	49911	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.455291986 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:19.457381964 CEST	49911	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.457556963 CEST	49911	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:19.457571983 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.053793907 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.054666996 CEST	49907	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.054682016 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.055349112 CEST	49907	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.055354118 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.065052032 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.065555096 CEST	49908	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.065592051 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.065972090 CEST	49908	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.065982103 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.192792892 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.192821026 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.192882061 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.192959070 CEST	49907	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.193020105 CEST	49907	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.193360090 CEST	49907	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.193360090 CEST	49907	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.193372965 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.193382025 CEST	443	49907	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.196815968 CEST	49912	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.196856976 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.196957111 CEST	49912	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.197118044 CEST	49912	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.197132111 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.203310013 CEST	443	49910	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.203768015 CEST	49910	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.203800917 CEST	443	49910	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.204256058 CEST	49910	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.204262018 CEST	443	49910	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.204677105 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.204699039 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.204750061 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.204756021 CEST	49908	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.204797029 CEST	49908	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.204946995 CEST	49908	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.204962015 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.204972982 CEST	49908	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.204977989 CEST	443	49908	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.207477093 CEST	49913	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.207520008 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.207684040 CEST	49913	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.207720995 CEST	49913	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.207731009 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.210089922 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.210427046 CEST	49909	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.210453033 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.210933924 CEST	49909	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.210943937 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.222009897 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.222428083 CEST	49911	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.222440004 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.222845078 CEST	49911	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.222851992 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.344245911 CEST	443	49910	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.344315052 CEST	443	49910	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.344377041 CEST	49910	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.345380068 CEST	49910	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.345396042 CEST	443	49910	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.345413923 CEST	49910	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.345419884 CEST	443	49910	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.348947048 CEST	49914	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.348979950 CEST	443	49914	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.349075079 CEST	49914	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.349232912 CEST	49914	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.349245071 CEST	443	49914	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.352267981 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.352296114 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.352341890 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.352354050 CEST	49909	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.352389097 CEST	49909	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.352526903 CEST	49909	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.352540016 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.352550983 CEST	49909	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.352556944 CEST	443	49909	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.355581999 CEST	49915	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.355604887 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.355659008 CEST	49915	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.355799913 CEST	49915	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.355814934 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.360872030 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.361366987 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.361402035 CEST	49911	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.361416101 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.361429930 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.361485004 CEST	49911	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.361505032 CEST	49911	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.361515045 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.361526012 CEST	49911	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.361531019 CEST	443	49911	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.364541054 CEST	49916	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.364581108 CEST	443	49916	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.364641905 CEST	49916	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.364789963 CEST	49916	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.364800930 CEST	443	49916	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.962807894 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.963368893 CEST	49912	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.963398933 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.963932991 CEST	49912	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.963937044 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.971220970 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.971771955 CEST	49913	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.971801043 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:20.972245932 CEST	49913	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:20.972258091 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.102571011 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.102653980 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.102719069 CEST	49912	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.102999926 CEST	49912	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.103020906 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.103034973 CEST	49912	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.103041887 CEST	443	49912	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.105180025 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.105621099 CEST	49915	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.105643988 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.106189966 CEST	49915	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.106194973 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.107086897 CEST	49917	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.107137918 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.107203007 CEST	49917	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.107340097 CEST	49917	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.107351065 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.109234095 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.109281063 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.109323978 CEST	49913	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.109329939 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.109373093 CEST	49913	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.109427929 CEST	49913	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.109441996 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.109451056 CEST	49913	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.109456062 CEST	443	49913	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.112013102 CEST	49918	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.112040043 CEST	443	49918	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.112101078 CEST	49918	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.112304926 CEST	49918	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.112313032 CEST	443	49918	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.112795115 CEST	443	49914	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.113179922 CEST	49914	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.113188028 CEST	443	49914	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.113740921 CEST	49914	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.113744974 CEST	443	49914	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.120311022 CEST	443	49916	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.120717049 CEST	49916	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.120728016 CEST	443	49916	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.121157885 CEST	49916	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.121161938 CEST	443	49916	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.241470098 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.241507053 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.241570950 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.241661072 CEST	49915	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.241731882 CEST	49915	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.241997957 CEST	49915	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.242043972 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.242073059 CEST	49915	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.242090940 CEST	443	49915	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.245574951 CEST	49919	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.245640993 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.245764971 CEST	49919	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.245960951 CEST	49919	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.245982885 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.265242100 CEST	443	49914	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.265321970 CEST	443	49914	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.265414953 CEST	49914	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.265465021 CEST	443	49916	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.265531063 CEST	443	49916	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.265585899 CEST	49916	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.265650988 CEST	49914	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.265672922 CEST	443	49914	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.265696049 CEST	49914	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.265702963 CEST	443	49914	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.265721083 CEST	49916	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.265738010 CEST	443	49916	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.268924952 CEST	49920	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.268960953 CEST	443	49920	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.269016027 CEST	49921	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.269052982 CEST	49920	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.269059896 CEST	443	49921	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.269100904 CEST	49921	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.269202948 CEST	49920	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.269213915 CEST	443	49920	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.269274950 CEST	49921	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.269292116 CEST	443	49921	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.858233929 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.862642050 CEST	49917	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.862703085 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.863152981 CEST	49917	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.863162041 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.866272926 CEST	443	49918	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.874720097 CEST	49918	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.874758005 CEST	443	49918	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:21.875827074 CEST	49918	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:21.875835896 CEST	443	49918	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.158819914 CEST	443	49918	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.158900023 CEST	443	49918	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.158955097 CEST	49918	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.161346912 CEST	49918	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.161354065 CEST	443	49918	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.161484957 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.161919117 CEST	49919	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.161928892 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.162164927 CEST	443	49921	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.162189007 CEST	443	49920	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.162477970 CEST	49919	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.162486076 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.163170099 CEST	49920	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.163178921 CEST	443	49920	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.163350105 CEST	49921	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.163360119 CEST	443	49921	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.163661957 CEST	49920	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.163666964 CEST	443	49920	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.163968086 CEST	49921	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.163975000 CEST	443	49921	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.167012930 CEST	49922	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.167025089 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.167094946 CEST	49922	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.167246103 CEST	49922	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.167256117 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.299485922 CEST	443	49921	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.299551964 CEST	443	49921	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.299655914 CEST	49921	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.299884081 CEST	49921	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.299901009 CEST	443	49921	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.299913883 CEST	49921	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.299920082 CEST	443	49921	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.302972078 CEST	49923	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.302995920 CEST	443	49923	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.303076982 CEST	49923	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.303417921 CEST	49923	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.303431988 CEST	443	49923	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.316193104 CEST	443	49920	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.316523075 CEST	443	49920	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.316572905 CEST	443	49920	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.316593885 CEST	49920	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.316639900 CEST	49920	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.316696882 CEST	49920	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.316714048 CEST	443	49920	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.316726923 CEST	49920	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.316732883 CEST	443	49920	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.319560051 CEST	49924	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.319595098 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.319681883 CEST	49924	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.319833040 CEST	49924	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.319844961 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.404958963 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.405047894 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.405172110 CEST	49919	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.405384064 CEST	49919	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.405425072 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.405445099 CEST	49919	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.405451059 CEST	443	49919	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.408685923 CEST	49925	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.408726931 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.408809900 CEST	49925	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.408971071 CEST	49925	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.408982038 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.458261013 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.458298922 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.458350897 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.458458900 CEST	49917	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.458674908 CEST	49917	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.458699942 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.458717108 CEST	49917	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.458724022 CEST	443	49917	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.461811066 CEST	49926	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.461854935 CEST	443	49926	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.461975098 CEST	49926	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.462141037 CEST	49926	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.462155104 CEST	443	49926	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.921870947 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.922658920 CEST	49922	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.922676086 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:22.923203945 CEST	49922	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:22.923209906 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.067007065 CEST	443	49923	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.067656994 CEST	49923	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.067673922 CEST	443	49923	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.068187952 CEST	49923	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.068192959 CEST	443	49923	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.071680069 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.071751118 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.071831942 CEST	49922	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.072139978 CEST	49922	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.072139978 CEST	49922	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.072160959 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.072170973 CEST	443	49922	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.075225115 CEST	49927	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.075274944 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.075354099 CEST	49927	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.075490952 CEST	49927	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.075508118 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.081263065 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.081691980 CEST	49924	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.081726074 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.082163095 CEST	49924	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.082171917 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.159569979 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.160183907 CEST	49925	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.160197020 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.160774946 CEST	49925	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.160779953 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.207245111 CEST	443	49923	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.207304001 CEST	443	49923	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.207370996 CEST	443	49923	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.207397938 CEST	49923	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.207446098 CEST	49923	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.207663059 CEST	49923	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.207674980 CEST	443	49923	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.207686901 CEST	49923	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.207693100 CEST	443	49923	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.211067915 CEST	49928	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.211119890 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.211196899 CEST	49928	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.211384058 CEST	49928	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.211396933 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.220149994 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.220223904 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.220294952 CEST	49924	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.220549107 CEST	49924	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.220568895 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.220581055 CEST	49924	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.220587015 CEST	443	49924	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.223742008 CEST	49929	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.223798037 CEST	443	49929	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.223876953 CEST	49929	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.224009991 CEST	49929	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.224021912 CEST	443	49929	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.224287987 CEST	443	49926	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.224627972 CEST	49926	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.224642992 CEST	443	49926	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.225107908 CEST	49926	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.225115061 CEST	443	49926	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.316406012 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.316613913 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.316654921 CEST	49925	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.316667080 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.316704035 CEST	49925	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.316795111 CEST	49925	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.316811085 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.316823959 CEST	49925	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.316829920 CEST	443	49925	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.319818974 CEST	49930	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.319869041 CEST	443	49930	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.319952965 CEST	49930	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.320130110 CEST	49930	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.320146084 CEST	443	49930	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.362456083 CEST	443	49926	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.362572908 CEST	443	49926	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.362637997 CEST	49926	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.362839937 CEST	49926	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.362867117 CEST	443	49926	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.362878084 CEST	49926	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.362884045 CEST	443	49926	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.366034985 CEST	49931	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.366113901 CEST	443	49931	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.366208076 CEST	49931	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.366359949 CEST	49931	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.366370916 CEST	443	49931	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.820087910 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.820696115 CEST	49927	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.820709944 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.821228981 CEST	49927	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.821235895 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.956242085 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.956311941 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.956361055 CEST	49927	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.956602097 CEST	49927	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.956614017 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.956626892 CEST	49927	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.956631899 CEST	443	49927	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.959563971 CEST	49932	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.959613085 CEST	443	49932	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.959683895 CEST	49932	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.959857941 CEST	49932	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.959872007 CEST	443	49932	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.984206915 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.985205889 CEST	49928	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.985232115 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.985362053 CEST	443	49929	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.986310005 CEST	49928	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.986324072 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.987240076 CEST	49929	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.987263918 CEST	443	49929	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:23.987622976 CEST	49929	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:23.987627983 CEST	443	49929	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.089536905 CEST	443	49930	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.090111971 CEST	49930	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.090136051 CEST	443	49930	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.090620041 CEST	49930	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.090625048 CEST	443	49930	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.122742891 CEST	443	49931	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.123001099 CEST	443	49929	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.123068094 CEST	443	49929	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.123116970 CEST	49929	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.123357058 CEST	49929	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.123369932 CEST	443	49929	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.123380899 CEST	49929	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.123385906 CEST	443	49929	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.123442888 CEST	49931	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.123450041 CEST	443	49931	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.123903036 CEST	49931	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.123907089 CEST	443	49931	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.125495911 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.125529051 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.125564098 CEST	49928	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.125572920 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.125585079 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.125628948 CEST	49928	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.125914097 CEST	49928	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.125927925 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.125937939 CEST	49928	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.125942945 CEST	443	49928	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.127741098 CEST	49933	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.127784014 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.127860069 CEST	49933	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.128001928 CEST	49933	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.128012896 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.128843069 CEST	49934	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.128866911 CEST	443	49934	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.128925085 CEST	49934	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.129084110 CEST	49934	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.129091024 CEST	443	49934	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.231379986 CEST	443	49930	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.231443882 CEST	443	49930	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.231537104 CEST	49930	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.231817007 CEST	49930	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.231837034 CEST	443	49930	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.231852055 CEST	49930	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.231858015 CEST	443	49930	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.235296965 CEST	49935	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.235347986 CEST	443	49935	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.235431910 CEST	49935	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.235637903 CEST	49935	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.235651016 CEST	443	49935	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.271047115 CEST	443	49931	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.271081924 CEST	443	49931	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.271130085 CEST	443	49931	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.271157026 CEST	49931	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.271204948 CEST	49931	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.274772882 CEST	49931	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.274774075 CEST	49931	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.274774075 CEST	49936	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.274801970 CEST	443	49931	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.274812937 CEST	443	49931	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.274828911 CEST	443	49936	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.274914980 CEST	49936	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.275082111 CEST	49936	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.275090933 CEST	443	49936	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.722239017 CEST	443	49932	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.723021984 CEST	49932	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.723052979 CEST	443	49932	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.723515034 CEST	49932	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.723525047 CEST	443	49932	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.861465931 CEST	443	49932	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.861537933 CEST	443	49932	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.861605883 CEST	49932	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.861864090 CEST	49932	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.861888885 CEST	443	49932	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.861902952 CEST	49932	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.861908913 CEST	443	49932	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.865313053 CEST	49937	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.865355968 CEST	443	49937	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.865467072 CEST	49937	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.865658998 CEST	49937	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.865669012 CEST	443	49937	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.892754078 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.893445969 CEST	49933	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.893477917 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.894004107 CEST	49933	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.894010067 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.900597095 CEST	443	49934	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.901005983 CEST	49934	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.901031971 CEST	443	49934	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:24.901377916 CEST	49934	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:24.901385069 CEST	443	49934	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.010579109 CEST	443	49935	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.011326075 CEST	49935	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.011363029 CEST	443	49935	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.011801958 CEST	49935	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.011807919 CEST	443	49935	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.034938097 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.034970999 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.035017967 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.035036087 CEST	49933	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.035072088 CEST	49933	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.035258055 CEST	49933	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.035278082 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.035289049 CEST	49933	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.035294056 CEST	443	49933	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.038835049 CEST	49938	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.038883924 CEST	443	49938	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.038985014 CEST	49938	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.039201021 CEST	49938	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.039217949 CEST	443	49938	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.043005943 CEST	443	49934	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.043204069 CEST	443	49934	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.043266058 CEST	49934	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.043334007 CEST	49934	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.043354988 CEST	443	49934	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.046309948 CEST	49939	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.046346903 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.046415091 CEST	49939	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.046538115 CEST	49939	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.046550035 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.047322989 CEST	443	49936	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.047667980 CEST	49936	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.047715902 CEST	443	49936	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.048154116 CEST	49936	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.048180103 CEST	443	49936	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.147475004 CEST	443	49935	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.147938967 CEST	443	49935	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.148008108 CEST	49935	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.148132086 CEST	49935	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.148132086 CEST	49935	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.148152113 CEST	443	49935	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.148164034 CEST	443	49935	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.151884079 CEST	49940	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.151907921 CEST	443	49940	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.152010918 CEST	49940	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.152199030 CEST	49940	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.152210951 CEST	443	49940	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.186711073 CEST	443	49936	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.187499046 CEST	443	49936	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.187592030 CEST	49936	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.187741995 CEST	49936	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.187760115 CEST	443	49936	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.187786102 CEST	49936	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.187792063 CEST	443	49936	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.191154003 CEST	49941	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.191217899 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.191395998 CEST	49941	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.191557884 CEST	49941	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.191570044 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.614161015 CEST	443	49937	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.615231991 CEST	49937	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.615259886 CEST	443	49937	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.616375923 CEST	49937	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.616384983 CEST	443	49937	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.751020908 CEST	443	49937	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.751725912 CEST	443	49937	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.751774073 CEST	443	49937	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.751823902 CEST	49937	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.751856089 CEST	49937	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.751930952 CEST	49937	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.751956940 CEST	443	49937	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.751969099 CEST	49937	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.751975060 CEST	443	49937	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.755323887 CEST	49942	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.755372047 CEST	443	49942	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.755477905 CEST	49942	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.755664110 CEST	49942	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.755673885 CEST	443	49942	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.788719893 CEST	443	49938	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.789431095 CEST	49938	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.789467096 CEST	443	49938	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.789962053 CEST	49938	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.789969921 CEST	443	49938	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.805598021 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.806160927 CEST	49939	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.806190014 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.806651115 CEST	49939	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.806655884 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.912749052 CEST	443	49940	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.913527966 CEST	49940	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.913569927 CEST	443	49940	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.913950920 CEST	49940	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.913959026 CEST	443	49940	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.925560951 CEST	443	49938	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.925636053 CEST	443	49938	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.925812960 CEST	49938	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.925936937 CEST	49938	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.925955057 CEST	443	49938	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.925967932 CEST	49938	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.925972939 CEST	443	49938	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.929157019 CEST	49943	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.929203033 CEST	443	49943	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.929286957 CEST	49943	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.929481983 CEST	49943	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.929495096 CEST	443	49943	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.945014000 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.945538998 CEST	49941	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.945550919 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.945909023 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.946085930 CEST	49941	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.946089983 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.946721077 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.946768045 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.946768999 CEST	49939	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.946830034 CEST	49939	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.946974993 CEST	49939	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.946995020 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.947009087 CEST	49939	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.947015047 CEST	443	49939	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.950397015 CEST	49944	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.950444937 CEST	443	49944	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:25.950551033 CEST	49944	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.950752020 CEST	49944	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:25.950764894 CEST	443	49944	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.049801111 CEST	443	49940	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.050045013 CEST	443	49940	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.050107956 CEST	49940	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.050153017 CEST	49940	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.050170898 CEST	443	49940	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.050180912 CEST	49940	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.050187111 CEST	443	49940	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.053433895 CEST	49945	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.053473949 CEST	443	49945	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.053551912 CEST	49945	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.053816080 CEST	49945	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.053831100 CEST	443	49945	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.081973076 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.082003117 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.082053900 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.082112074 CEST	49941	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.082221031 CEST	49941	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.082392931 CEST	49941	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.082408905 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.082423925 CEST	49941	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.082428932 CEST	443	49941	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.085606098 CEST	49946	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.085649967 CEST	443	49946	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.085761070 CEST	49946	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.085918903 CEST	49946	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.085935116 CEST	443	49946	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.538547993 CEST	443	49942	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.539206028 CEST	49942	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.539235115 CEST	443	49942	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.539736032 CEST	49942	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.539742947 CEST	443	49942	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.676049948 CEST	443	49942	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.676131010 CEST	443	49942	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.676204920 CEST	49942	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.676481009 CEST	49942	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.676501989 CEST	443	49942	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.676516056 CEST	49942	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.676522017 CEST	443	49942	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.678423882 CEST	443	49943	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.678878069 CEST	49943	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.678899050 CEST	443	49943	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.679379940 CEST	49943	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.679384947 CEST	443	49943	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.679960966 CEST	49947	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.679999113 CEST	443	49947	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.680130959 CEST	49947	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.680273056 CEST	49947	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.680284023 CEST	443	49947	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.773041010 CEST	443	49944	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.773617029 CEST	49944	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.773633957 CEST	443	49944	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.774128914 CEST	49944	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.774133921 CEST	443	49944	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.805757999 CEST	443	49945	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.806292057 CEST	49945	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.806308031 CEST	443	49945	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.807065010 CEST	49945	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.807070971 CEST	443	49945	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.816473007 CEST	443	49943	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.816628933 CEST	443	49943	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.816688061 CEST	49943	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.816756010 CEST	49943	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.816773891 CEST	443	49943	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.816783905 CEST	49943	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.816790104 CEST	443	49943	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.820204020 CEST	49948	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.820245028 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.820312977 CEST	49948	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.820451975 CEST	49948	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.820470095 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.845587015 CEST	443	49946	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.846225023 CEST	49946	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.846251965 CEST	443	49946	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.847079039 CEST	49946	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.847093105 CEST	443	49946	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.918479919 CEST	443	49944	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.918559074 CEST	443	49944	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.918711901 CEST	49944	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.918962002 CEST	49944	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.918982029 CEST	443	49944	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.919143915 CEST	49944	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.919151068 CEST	443	49944	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.922720909 CEST	49949	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.922782898 CEST	443	49949	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.922880888 CEST	49949	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.923038960 CEST	49949	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.923074007 CEST	443	49949	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.942939997 CEST	443	49945	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.943130970 CEST	443	49945	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.943178892 CEST	443	49945	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.943221092 CEST	49945	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.943263054 CEST	49945	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.943329096 CEST	49945	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.943347931 CEST	443	49945	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.943362951 CEST	49945	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.943367958 CEST	443	49945	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.946466923 CEST	49950	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.946501970 CEST	443	49950	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.946567059 CEST	49950	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.946706057 CEST	49950	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.946721077 CEST	443	49950	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.984471083 CEST	443	49946	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.985486984 CEST	443	49946	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.985558987 CEST	49946	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.985591888 CEST	49946	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.985610962 CEST	443	49946	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.985620975 CEST	49946	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.985626936 CEST	443	49946	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.988807917 CEST	49951	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.988924026 CEST	443	49951	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:26.989041090 CEST	49951	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.989207029 CEST	49951	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:26.989243031 CEST	443	49951	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.442045927 CEST	443	49947	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.442778111 CEST	49947	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.442804098 CEST	443	49947	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.443289042 CEST	49947	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.443295002 CEST	443	49947	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.576890945 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.577610970 CEST	49948	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.577632904 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.578125000 CEST	49948	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.578155994 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.580801964 CEST	443	49947	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.580868006 CEST	443	49947	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.580924034 CEST	49947	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.581209898 CEST	49947	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.581234932 CEST	443	49947	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.581245899 CEST	49947	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.581252098 CEST	443	49947	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.584513903 CEST	49952	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.584568024 CEST	443	49952	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.584685087 CEST	49952	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.584897995 CEST	49952	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.584913969 CEST	443	49952	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.681345940 CEST	443	49949	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.681977987 CEST	49949	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.681993008 CEST	443	49949	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.682506084 CEST	49949	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.682509899 CEST	443	49949	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.706784964 CEST	443	49950	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.707393885 CEST	49950	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.707407951 CEST	443	49950	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.707892895 CEST	49950	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.707899094 CEST	443	49950	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.714442968 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.715682983 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.715764046 CEST	49948	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.716204882 CEST	49948	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.716223955 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.716233015 CEST	49948	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.716238976 CEST	443	49948	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.720262051 CEST	49953	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.720300913 CEST	443	49953	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.720381975 CEST	49953	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.720565081 CEST	49953	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.720577002 CEST	443	49953	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.818969011 CEST	443	49949	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.819051027 CEST	443	49949	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.819139004 CEST	49949	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.819454908 CEST	49949	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.819463968 CEST	443	49949	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.819475889 CEST	49949	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.819479942 CEST	443	49949	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.822617054 CEST	49954	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.822678089 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.822767019 CEST	49954	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.822926044 CEST	49954	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.822942972 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.843694925 CEST	443	49950	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.843751907 CEST	443	49950	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.843867064 CEST	49950	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.844145060 CEST	49950	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.844160080 CEST	443	49950	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.844176054 CEST	49950	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.844181061 CEST	443	49950	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.847726107 CEST	49955	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.847769976 CEST	443	49955	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:27.847841978 CEST	49955	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.848000050 CEST	49955	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:27.848014116 CEST	443	49955	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.352149010 CEST	443	49952	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.352824926 CEST	49952	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.352853060 CEST	443	49952	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.353338957 CEST	49952	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.353347063 CEST	443	49952	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.482193947 CEST	443	49953	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.483016014 CEST	49953	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.483057976 CEST	443	49953	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.483504057 CEST	49953	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.483510971 CEST	443	49953	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.491885900 CEST	443	49952	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.491978884 CEST	443	49952	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.492052078 CEST	49952	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.492254972 CEST	49952	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.492285013 CEST	443	49952	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.492297888 CEST	49952	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.492304087 CEST	443	49952	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.495434999 CEST	49956	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.495476961 CEST	443	49956	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.495565891 CEST	49956	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.495754004 CEST	49956	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.495768070 CEST	443	49956	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.589238882 CEST	443	49955	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.590020895 CEST	49955	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.590055943 CEST	443	49955	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.590514898 CEST	49955	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.590523005 CEST	443	49955	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.596597910 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.597006083 CEST	49954	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.597037077 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.597361088 CEST	49954	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.597368956 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.621864080 CEST	443	49953	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.621896982 CEST	443	49953	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.621953964 CEST	443	49953	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.622109890 CEST	49953	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.622692108 CEST	49953	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.622692108 CEST	49953	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.622721910 CEST	443	49953	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.622736931 CEST	443	49953	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.626121044 CEST	49957	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.626171112 CEST	443	49957	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.626271963 CEST	49957	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.626403093 CEST	49957	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.626413107 CEST	443	49957	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.726267099 CEST	443	49955	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.726296902 CEST	443	49955	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.726339102 CEST	443	49955	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.726406097 CEST	49955	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.726460934 CEST	49955	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.733844042 CEST	49955	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.733872890 CEST	443	49955	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.733890057 CEST	49955	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.733896971 CEST	443	49955	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.738018990 CEST	49958	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.738060951 CEST	443	49958	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.738152981 CEST	49958	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.738363028 CEST	49958	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.738374949 CEST	443	49958	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.776768923 CEST	443	49951	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.777476072 CEST	49951	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.777496099 CEST	443	49951	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.778001070 CEST	49951	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.778006077 CEST	443	49951	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.860852003 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.861546040 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.861613035 CEST	49954	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.861675024 CEST	49954	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.861696959 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.861707926 CEST	49954	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.861716032 CEST	443	49954	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.865092039 CEST	49959	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.865115881 CEST	443	49959	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.865314007 CEST	49959	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.865499020 CEST	49959	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.865509033 CEST	443	49959	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.917292118 CEST	443	49951	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.917366028 CEST	443	49951	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.917417049 CEST	49951	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.917646885 CEST	49951	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.917665005 CEST	443	49951	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.917676926 CEST	49951	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.917682886 CEST	443	49951	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.921432972 CEST	49960	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.921483994 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:28.921600103 CEST	49960	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.921853065 CEST	49960	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:28.921864033 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.270329952 CEST	443	49956	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.270890951 CEST	49956	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.270910025 CEST	443	49956	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.271465063 CEST	49956	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.271469116 CEST	443	49956	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.397408009 CEST	443	49957	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.402179003 CEST	49957	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.402194977 CEST	443	49957	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.402663946 CEST	49957	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.402667999 CEST	443	49957	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.411854982 CEST	443	49956	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.411925077 CEST	443	49956	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.412033081 CEST	49956	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.412363052 CEST	49956	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.412380934 CEST	443	49956	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.412393093 CEST	49956	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.412399054 CEST	443	49956	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.423278093 CEST	49961	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.423319101 CEST	443	49961	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.423428059 CEST	49961	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.423605919 CEST	49961	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.423615932 CEST	443	49961	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.495114088 CEST	443	49958	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.498320103 CEST	49958	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.498336077 CEST	443	49958	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.498807907 CEST	49958	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.498812914 CEST	443	49958	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.535674095 CEST	443	49957	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.535772085 CEST	443	49957	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.535819054 CEST	443	49957	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.535914898 CEST	49957	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.535959959 CEST	49957	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.536242962 CEST	49957	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.536268950 CEST	443	49957	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.536283970 CEST	49957	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.536289930 CEST	443	49957	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.539458036 CEST	49962	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.539500952 CEST	443	49962	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.539580107 CEST	49962	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.539741039 CEST	49962	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.539757967 CEST	443	49962	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.630666971 CEST	443	49959	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.633876085 CEST	49959	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.633893967 CEST	443	49959	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.634037018 CEST	443	49958	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.634110928 CEST	443	49958	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.634186029 CEST	49958	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.634365082 CEST	49959	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.634371042 CEST	443	49959	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.634478092 CEST	49958	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.634497881 CEST	443	49958	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.634509087 CEST	49958	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.634515047 CEST	443	49958	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.637511969 CEST	49963	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.637541056 CEST	443	49963	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.637629986 CEST	49963	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.637881041 CEST	49963	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.637892962 CEST	443	49963	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.693543911 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.698489904 CEST	49960	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.698518038 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.699016094 CEST	49960	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.699022055 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.771116018 CEST	443	49959	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.771193027 CEST	443	49959	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.771274090 CEST	49959	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.802967072 CEST	49959	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.802985907 CEST	443	49959	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.802999020 CEST	49959	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.803004026 CEST	443	49959	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.806773901 CEST	49964	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.806817055 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.806936026 CEST	49964	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.807038069 CEST	49964	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.807060957 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.835279942 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.835345984 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.835421085 CEST	49960	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.835637093 CEST	49960	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.835653067 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.835663080 CEST	49960	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.835680008 CEST	443	49960	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.838493109 CEST	49965	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.838532925 CEST	443	49965	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:29.838627100 CEST	49965	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.838891983 CEST	49965	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:29.838905096 CEST	443	49965	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.186264992 CEST	443	49961	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.186918020 CEST	49961	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.186929941 CEST	443	49961	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.187479973 CEST	49961	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.187484026 CEST	443	49961	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.295488119 CEST	443	49962	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.296199083 CEST	49962	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.296216965 CEST	443	49962	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.296715021 CEST	49962	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.296722889 CEST	443	49962	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.324984074 CEST	443	49961	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.325027943 CEST	443	49961	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.325073957 CEST	443	49961	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.325161934 CEST	49961	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.325257063 CEST	49961	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.325603008 CEST	49961	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.325619936 CEST	443	49961	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.325635910 CEST	49961	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.325642109 CEST	443	49961	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.329427958 CEST	49966	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.329472065 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.329668045 CEST	49966	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.329807997 CEST	49966	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.329828024 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.392277002 CEST	443	49963	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.392965078 CEST	49963	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.392980099 CEST	443	49963	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.393466949 CEST	49963	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.393471956 CEST	443	49963	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.432960987 CEST	443	49962	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.433046103 CEST	443	49962	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.433104992 CEST	49962	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.433293104 CEST	49962	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.433315039 CEST	443	49962	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.433330059 CEST	49962	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.433336973 CEST	443	49962	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.436412096 CEST	49967	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.436458111 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.436527014 CEST	49967	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.436680079 CEST	49967	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.436695099 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.527488947 CEST	443	49963	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.527559996 CEST	443	49963	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.527654886 CEST	49963	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.527937889 CEST	49963	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.527961016 CEST	443	49963	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.527973890 CEST	49963	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.527980089 CEST	443	49963	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.531375885 CEST	49968	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.531404972 CEST	443	49968	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.531500101 CEST	49968	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.531675100 CEST	49968	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.531686068 CEST	443	49968	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.565237999 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.565829992 CEST	49964	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.565855980 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.566366911 CEST	49964	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.566376925 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.596637964 CEST	443	49965	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.597244024 CEST	49965	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.597273111 CEST	443	49965	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.597640038 CEST	49965	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.597656965 CEST	443	49965	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.704551935 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.704582930 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.704684973 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.704695940 CEST	49964	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.704742908 CEST	49964	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.704967976 CEST	49964	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.704988956 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.704999924 CEST	49964	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.705005884 CEST	443	49964	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.707990885 CEST	49969	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.708041906 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.708131075 CEST	49969	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.708266020 CEST	49969	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.708281040 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.736042023 CEST	443	49965	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.736534119 CEST	443	49965	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.736613989 CEST	49965	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.736685038 CEST	49965	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.736704111 CEST	443	49965	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.736736059 CEST	49965	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.736742973 CEST	443	49965	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.739753962 CEST	49970	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.739804029 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:30.739883900 CEST	49970	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.740017891 CEST	49970	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:30.740030050 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.092304945 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.093159914 CEST	49966	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.093178988 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.093688011 CEST	49966	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.093694925 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.203639984 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.204325914 CEST	49967	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.204349041 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.204936981 CEST	49967	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.204942942 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.233762980 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.233787060 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.233849049 CEST	49966	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.233863115 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.234106064 CEST	49966	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.234119892 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.234131098 CEST	49966	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.234277964 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.234309912 CEST	443	49966	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.234344959 CEST	49966	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.237457991 CEST	49971	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.237498045 CEST	443	49971	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.237560987 CEST	49971	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.237762928 CEST	49971	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.237778902 CEST	443	49971	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.288980961 CEST	443	49968	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.289714098 CEST	49968	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.289752007 CEST	443	49968	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.290205956 CEST	49968	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.290215015 CEST	443	49968	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.345010996 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.345043898 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.345150948 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.345187902 CEST	49967	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.345282078 CEST	49967	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.345732927 CEST	49967	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.345763922 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.345799923 CEST	49967	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.345808983 CEST	443	49967	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.350048065 CEST	49972	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.350081921 CEST	443	49972	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.350178003 CEST	49972	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.350363016 CEST	49972	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.350373983 CEST	443	49972	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.428025961 CEST	443	49968	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.428052902 CEST	443	49968	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.428111076 CEST	443	49968	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.428175926 CEST	49968	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.428205967 CEST	49968	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.428481102 CEST	49968	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.428503036 CEST	443	49968	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.428539038 CEST	49968	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.428544998 CEST	443	49968	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.431694984 CEST	49973	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.431719065 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.431812048 CEST	49973	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.431974888 CEST	49973	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.431989908 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.473120928 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.478116035 CEST	49969	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.478135109 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.478660107 CEST	49969	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.478666067 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.487034082 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.487509012 CEST	49970	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.487519026 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.487883091 CEST	49970	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.487886906 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.613923073 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.613948107 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.613991976 CEST	49969	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.614012003 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.614082098 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.614134073 CEST	49969	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.614350080 CEST	49969	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.614367008 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.614377022 CEST	49969	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.614382982 CEST	443	49969	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.617643118 CEST	49974	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.617687941 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.617760897 CEST	49974	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.617888927 CEST	49974	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.617901087 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.623548985 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.623615980 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.623684883 CEST	49970	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.623750925 CEST	49970	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.623750925 CEST	49970	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.623769999 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.623779058 CEST	443	49970	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.625910997 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.625952959 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:31.626015902 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.626158953 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:31.626174927 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.012566090 CEST	443	49971	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.013326883 CEST	49971	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.013348103 CEST	443	49971	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.013824940 CEST	49971	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.013829947 CEST	443	49971	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.105880976 CEST	443	49972	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.106493950 CEST	49972	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.106522083 CEST	443	49972	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.106961012 CEST	49972	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.106966972 CEST	443	49972	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.151011944 CEST	443	49971	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.151087046 CEST	443	49971	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.151133060 CEST	49971	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.154921055 CEST	49971	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.154948950 CEST	443	49971	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.154967070 CEST	49971	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.154973984 CEST	443	49971	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.169538021 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.169588089 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.169667006 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.169840097 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.169852972 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.191507101 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.192356110 CEST	49973	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.192368031 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.193382025 CEST	49973	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.193387032 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.243602037 CEST	443	49972	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.243688107 CEST	443	49972	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.243746042 CEST	49972	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.243962049 CEST	49972	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.243985891 CEST	443	49972	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.244002104 CEST	49972	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.244008064 CEST	443	49972	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.247286081 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.247391939 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.247483969 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.247625113 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.247662067 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.340677023 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.340761900 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.340948105 CEST	49973	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.341265917 CEST	49973	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.341284990 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.341295004 CEST	49973	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.341300011 CEST	443	49973	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.344799995 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.344850063 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.344923019 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.345072031 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.345086098 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.400546074 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.401477098 CEST	49974	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.401509047 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.401978970 CEST	49974	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.401985884 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.539719105 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.539747953 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.539812088 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.539848089 CEST	49974	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.539890051 CEST	49974	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.540195942 CEST	49974	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.540218115 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.540231943 CEST	49974	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.540237904 CEST	443	49974	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.543781996 CEST	49979	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.543900013 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.544219017 CEST	49979	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.544219017 CEST	49979	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.544320107 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.948935986 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.949667931 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.949685097 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.950206041 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.950211048 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.982443094 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.983155012 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.983171940 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:32.983582973 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:32.983587980 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.005963087 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.006596088 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.006637096 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.007127047 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.007143021 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.092338085 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.093111992 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.093143940 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.093616962 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.093626022 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.119388103 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.119415998 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.119529009 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.119550943 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.119565010 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.119568110 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.119616032 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.119890928 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.119908094 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.119916916 CEST	49975	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.119921923 CEST	443	49975	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.123359919 CEST	49980	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.123402119 CEST	443	49980	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.123507977 CEST	49980	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.123688936 CEST	49980	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.123703003 CEST	443	49980	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.142388105 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.142411947 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.142472029 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.142504930 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.142560005 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.142824888 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.142853975 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.142869949 CEST	49977	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.142879963 CEST	443	49977	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.146205902 CEST	49981	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.146250010 CEST	443	49981	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.146357059 CEST	49981	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.146548033 CEST	49981	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.146559000 CEST	443	49981	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.207459927 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.207549095 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.207575083 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.207647085 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.207691908 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.207742929 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.210906982 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.211003065 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.211020947 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.211092949 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.211141109 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.214725018 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.214754105 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.214768887 CEST	49976	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.214776039 CEST	443	49976	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.218976021 CEST	49982	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.219021082 CEST	443	49982	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.219080925 CEST	49982	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.219245911 CEST	49982	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.219257116 CEST	443	49982	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.312772036 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.313288927 CEST	49979	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.313316107 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.313798904 CEST	49979	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.313805103 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.346817970 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.346847057 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.346862078 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.346972942 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.347002983 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.347021103 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.347047091 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.348562956 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.348603010 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.348629951 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.348640919 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.348650932 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.348660946 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.348674059 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.348707914 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.348793030 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.348814011 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.348826885 CEST	49978	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.348834038 CEST	443	49978	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.352233887 CEST	49983	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.352276087 CEST	443	49983	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.352365971 CEST	49983	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.352550030 CEST	49983	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.352561951 CEST	443	49983	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.453413010 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.453439951 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.453507900 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.453558922 CEST	49979	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.453591108 CEST	49979	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.453860044 CEST	49979	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.453881979 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.453891993 CEST	49979	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.453898907 CEST	443	49979	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.456963062 CEST	49984	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.457010031 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.457091093 CEST	49984	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.457251072 CEST	49984	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.457264900 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.899800062 CEST	443	49980	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.900321007 CEST	49980	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.900365114 CEST	443	49980	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.900816917 CEST	49980	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.900824070 CEST	443	49980	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.909337997 CEST	443	49981	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.909756899 CEST	49981	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.909769058 CEST	443	49981	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.910260916 CEST	49981	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.910265923 CEST	443	49981	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.975465059 CEST	443	49982	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.976114035 CEST	49982	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.976183891 CEST	443	49982	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:33.976639986 CEST	49982	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:33.976646900 CEST	443	49982	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.038691998 CEST	443	49980	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.038757086 CEST	443	49980	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.038841963 CEST	443	49980	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.038899899 CEST	49980	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.039057016 CEST	49980	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.039238930 CEST	49980	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.039267063 CEST	443	49980	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.039288044 CEST	49980	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.039299011 CEST	443	49980	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.042752028 CEST	49985	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.042777061 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.042872906 CEST	49985	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.043049097 CEST	49985	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.043061972 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.050319910 CEST	443	49981	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.050388098 CEST	443	49981	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.050457001 CEST	49981	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.050573111 CEST	49981	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.050573111 CEST	49981	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.050581932 CEST	443	49981	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.050590038 CEST	443	49981	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.053149939 CEST	49986	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.053169966 CEST	443	49986	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.053251028 CEST	49986	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.053411007 CEST	49986	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.053422928 CEST	443	49986	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.110373020 CEST	443	49983	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.111145973 CEST	49983	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.111174107 CEST	443	49983	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.111659050 CEST	49983	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.111666918 CEST	443	49983	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.224026918 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.224932909 CEST	49984	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.224958897 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.226006985 CEST	49984	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.226011992 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.281003952 CEST	443	49983	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.281199932 CEST	443	49983	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.281514883 CEST	49983	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.281514883 CEST	49983	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.281565905 CEST	49983	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.281584024 CEST	443	49983	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.284871101 CEST	49987	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.284977913 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.285100937 CEST	49987	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.285252094 CEST	49987	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.285284996 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.363120079 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.363224983 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.363321066 CEST	49984	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.363563061 CEST	49984	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.363584042 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.363595963 CEST	49984	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.363601923 CEST	443	49984	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.367063046 CEST	49988	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.367151976 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.367358923 CEST	49988	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.367532015 CEST	49988	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.367564917 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.581341982 CEST	443	49982	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.581510067 CEST	443	49982	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.581574917 CEST	49982	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.581728935 CEST	49982	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.581753016 CEST	443	49982	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.581764936 CEST	49982	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.581773043 CEST	443	49982	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.584888935 CEST	49989	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.584940910 CEST	443	49989	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.585074902 CEST	49989	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.585406065 CEST	49989	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.585422039 CEST	443	49989	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.801978111 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.802563906 CEST	443	49986	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.802586079 CEST	49985	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.802613020 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.802869081 CEST	49986	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.802894115 CEST	443	49986	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.803141117 CEST	49985	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.803147078 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.803340912 CEST	49986	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.803345919 CEST	443	49986	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.938972950 CEST	443	49986	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.939291000 CEST	443	49986	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.939366102 CEST	49986	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.939418077 CEST	49986	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.939435959 CEST	443	49986	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.939469099 CEST	49986	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.939474106 CEST	443	49986	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.940617085 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.940644979 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.940694094 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.940721989 CEST	49985	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.940745115 CEST	49985	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.940871954 CEST	49985	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.940886974 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:34.940900087 CEST	49985	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:34.940905094 CEST	443	49985	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:35.043287039 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:35.043910980 CEST	49987	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:35.043981075 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:35.044519901 CEST	49987	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:35.044536114 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:35.121229887 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:35.122001886 CEST	49988	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:35.122036934 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:35.122529984 CEST	49988	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:35.122534990 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:35.179573059 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:35.180531979 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:35.180602074 CEST	49987	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:35.180671930 CEST	49987	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:35.180690050 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:35.180701971 CEST	49987	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:35.180707932 CEST	443	49987	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:35.267335892 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:35.267412901 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:35.267460108 CEST	49988	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:35.267676115 CEST	49988	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:35.267694950 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:35.267707109 CEST	49988	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:35.267712116 CEST	443	49988	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:35.353195906 CEST	443	49989	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:35.353889942 CEST	49989	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:35.353909969 CEST	443	49989	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:35.354428053 CEST	49989	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:35.354434013 CEST	443	49989	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:35.493916035 CEST	443	49989	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:35.494002104 CEST	443	49989	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:35.494071007 CEST	49989	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:35.494313002 CEST	49989	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:35.494313002 CEST	49989	443	192.168.2.5	13.107.253.72
Oct 23, 2024 17:04:35.494335890 CEST	443	49989	13.107.253.72	192.168.2.5
Oct 23, 2024 17:04:35.494347095 CEST	443	49989	13.107.253.72	192.168.2.5

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 23, 2024 17:03:09.564176083 CEST	1.1.1.1	192.168.2.5	0x74fe	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 17:03:09.564176083 CEST	1.1.1.1	192.168.2.5	0x74fe	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 23, 2024 17:03:20.246272087 CEST	1.1.1.1	192.168.2.5	0x681d	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 17:03:20.246272087 CEST	1.1.1.1	192.168.2.5	0x681d	No error (0)	dual.s-part-0044.t-0009.fb-t-msedge.net	s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 17:03:20.246272087 CEST	1.1.1.1	192.168.2.5	0x681d	No error (0)	s-part-0044.t-0009.fb-t-msedge.net		13.107.253.72	A (IP address)	IN (0x0001)	false
Oct 23, 2024 17:04:11.715173006 CEST	1.1.1.1	192.168.2.5	0x184b	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 23, 2024 17:04:11.715173006 CEST	1.1.1.1	192.168.2.5	0x184b	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false

Target ID:	0
Start time:	11:03:03
Start date:	23/10/2024
Path:	C:\Users\user\Desktop\igCCUqSW2T.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\igCCUqSW2T.exe"
Imagebase:	0xa10000
File size:	294'016 bytes
MD5 hash:	573E1B39187EE549D4B5DFB671B722DA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	11:03:03
Start date:	23/10/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Imagebase:	0x970000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	11:03:04
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 5168 -s 268
Imagebase:	0x810000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	11:03:04
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\Honda\Honda.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Imagebase:	0xd10000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, ReversingLabs
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	11:03:04
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	11:03:14
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\Honda\Honda.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Imagebase:	0x740000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	11:03:14
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	11:03:22
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\Honda\Honda.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Imagebase:	0x10000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	11:03:22
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	11:03:30
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\Honda\Honda.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Imagebase:	0xd60000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	11:03:30
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	1.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	2.9%
Total number of Nodes:	1392
Total number of Limit Nodes:	7

Executed Functions

Function 00A12F7C Relevance: 1.6, APIs: 1, Instructions: 55
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualProtect.KERNELBASE(00A50260,000004E4,00000040,?), ref: 00A12FD1

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: ab26470054ceba81a6e243329e3ae4a8fd57a825cb280de937bc6c7c01a5921d
Instruction ID: c00f5312a10978bcf618166e1d3429852545fee60230a099d221355cf3f666aa
Opcode Fuzzy Hash: ab26470054ceba81a6e243329e3ae4a8fd57a825cb280de937bc6c7c01a5921d
Instruction Fuzzy Hash: 9F11E0322043059FE318EF28C805B9AB390EB88720F004819F954872C2DB71E991CB96

Function 00A2C9D4 Relevance: 7.7, APIs: 5, Instructions: 202
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__alloca_probe_16.LIBCMT ref: 00A2CA5B
__alloca_probe_16.LIBCMT ref: 00A2CB1C
__freea.LIBCMT ref: 00A2CB83

Part of subcall function 00A27A23: HeapAlloc.KERNEL32(00000000,00A2DBAE,?,?,00A2DBAE,00000220,?,?,?), ref: 00A27A55

__freea.LIBCMT ref: 00A2CB98
__freea.LIBCMT ref: 00A2CBA8

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: __freea$__alloca_probe_16$AllocHeap
String ID:
API String ID: 1096550386-0
Opcode ID: 0da8d903096755faa7fd4d2fa41a3667d589fe83b72c0457e5f5dd2a71f22b8d
Instruction ID: cdb65fb8011fe3193cb42146470709dee3a650735c01a7a6314f7508f43ccd5b
Opcode Fuzzy Hash: 0da8d903096755faa7fd4d2fa41a3667d589fe83b72c0457e5f5dd2a71f22b8d
Instruction Fuzzy Hash: D051A37260022AAFEF259F68ED82EBF7AA9EF44760F150138FD04E6151E675CD50C760

Function 00A2DDAA Relevance: 3.2, APIs: 2, Instructions: 177
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00A2D8DA: GetOEMCP.KERNEL32(00000000,?,?,?,?), ref: 00A2D905

IsValidCodePage.KERNEL32(-00000030,00000000,?,?,?,?,?,?,?,?,00A2DBF1,?,00000000,?,?,?), ref: 00A2DE0B
GetCPInfo.KERNEL32(00000000,?,?,?,?,?,?,?,?,00A2DBF1,?,00000000,?,?,?), ref: 00A2DE4D

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: CodeInfoPageValid
String ID:
API String ID: 546120528-0
Opcode ID: fe84757ce6837b1477677e1fa6a52756c7705d9e98abcab2a089097ae57de30b
Instruction ID: db248406c002b7f56dc64ced41a0bd2b7be2325e93724194231b571aaffb2fb7
Opcode Fuzzy Hash: fe84757ce6837b1477677e1fa6a52756c7705d9e98abcab2a089097ae57de30b
Instruction Fuzzy Hash: 17512370A003659EDB25CF79D9816BABBF5EF95310F18807EE083CB253E6749946CB50

Function 00A2762C Relevance: 3.0, APIs: 2, Instructions: 34
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LCMapStringEx.KERNELBASE(?,00A2CAC2,?,?,00000000,?,00000000,00000000,00000000,00000000,00000000), ref: 00A27660
LCMapStringW.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,?,00000000,?,?,00A2CAC2,?,?,00000000,?,00000000), ref: 00A2767E

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: String
String ID:
API String ID: 2568140703-0
Opcode ID: 20f4dd28bbd80d3b9920006cc2a21a554671a03f202e93e7c53ccaee6d1abb61
Instruction ID: 5cdc3f81a34cc42499743df212c18eab336a272ca73ed20959c34a0f070301a4
Opcode Fuzzy Hash: 20f4dd28bbd80d3b9920006cc2a21a554671a03f202e93e7c53ccaee6d1abb61
Instruction Fuzzy Hash: 4CF07A3200462ABBCF125F98ED05DDE3F26EF48360F058120FA1965120C736CA72AB94

Function 00A2D9AE Relevance: 1.6, APIs: 1, Instructions: 147
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCPInfo.KERNEL32(E8458D00,?,00A2DBFD,00A2DBF1,00000000), ref: 00A2D9E0

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: Info
String ID:
API String ID: 1807457897-0
Opcode ID: 835521254aaf189b404ede2dd951d369f354a9caeea913354c2aed77eae067b5
Instruction ID: 889bfd5d68049358fceb662a7229b04f9771c3c2f2ae4d88377e8708f7f52547
Opcode Fuzzy Hash: 835521254aaf189b404ede2dd951d369f354a9caeea913354c2aed77eae067b5
Instruction Fuzzy Hash: 4D5149719082689EDB218F2CDD84EEA7BB8EB55344F2405FDE49AD7143C2349E46DF20

Function 00A157E2 Relevance: 1.5, APIs: 1, Instructions: 17
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

KiUserExceptionDispatcher.NTDLL ref: 00A157EF

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: DispatcherExceptionUser
String ID:
API String ID: 6842923-0
Opcode ID: e443d955dae9559bf475ba3de9bf9232b17c4d9f97d460deab382f4beb050374
Instruction ID: 75f83bc6c13ab7e10ea54aec0b922ecf9a50b27af64c52921d42970c314027ef
Opcode Fuzzy Hash: e443d955dae9559bf475ba3de9bf9232b17c4d9f97d460deab382f4beb050374
Instruction Fuzzy Hash: A0D0A7749042087BCF04FBB4D949DDE73BCAF04301B5095A8B5158B466EB30E94AC741

Non-executed Functions

Function 00A310A3 Relevance: 10.2, APIs: 1, Strings: 4, Instructions: 1436COMMONLIBRARYCODE

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 00A31287

Strings

1#QNAN, xrefs: 00A311B6
1#INF, xrefs: 00A311D9
1#SNAN, xrefs: 00A311AF
1#IND, xrefs: 00A311A8

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: cd2e2b5cefce67272edb756fe33a596e5b47ec561259165f02bc93c3e6b0b40a
Instruction ID: fc8024c96d2c5efbaaf469dac98569fca8667ccf3c84230750ffef37edbd1d94
Opcode Fuzzy Hash: cd2e2b5cefce67272edb756fe33a596e5b47ec561259165f02bc93c3e6b0b40a
Instruction Fuzzy Hash: E9D23971E082298FDB65CF28DD407EAB7B5EB45345F1445EAE80DE7240EB78AE818F40

Function 00A3051E Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 85COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(?,2000000B,00A3083C,00000002,00000000,?,?,?,00A3083C,?,00000000), ref: 00A305B7
GetLocaleInfoW.KERNEL32(?,20001004,00A3083C,00000002,00000000,?,?,?,00A3083C,?,00000000), ref: 00A305E0
GetACP.KERNEL32(?,?,00A3083C,?,00000000), ref: 00A305F5

Strings

OCP, xrefs: 00A30572
ACP, xrefs: 00A3053C

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: InfoLocale
String ID: ACP$OCP
API String ID: 2299586839-711371036
Opcode ID: 7062ef4065d06eb28402ec9f128152339a54fe62dd1feabf885e47b458a8ce6f
Instruction ID: 3da6b965b560dc84b51f99171238bb91f0a76ab361390b681a34ffa2cd1dffc2
Opcode Fuzzy Hash: 7062ef4065d06eb28402ec9f128152339a54fe62dd1feabf885e47b458a8ce6f
Instruction Fuzzy Hash: D921CF32A41105EAEB34CF68C921F97B3A6AB54B60F56C464F94AD7110E732DE41CB90

Function 00A306F3 Relevance: 7.7, APIs: 5, Instructions: 183COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00A28DB3: GetLastError.KERNEL32(?,00000008,00A269CC), ref: 00A28DB7
Part of subcall function 00A28DB3: SetLastError.KERNEL32(00000000,00A40710,00000024,00A1DDA3), ref: 00A28E59

GetUserDefaultLCID.KERNEL32(?,?,?,00000055,?), ref: 00A307FF
IsValidCodePage.KERNEL32(00000000), ref: 00A30848
IsValidLocale.KERNEL32(?,00000001), ref: 00A30857
GetLocaleInfoW.KERNEL32(?,00001001,-00000050,00000040,?,000000D0,00000055,00000000,?,?,00000055,00000000), ref: 00A3089F
GetLocaleInfoW.KERNEL32(?,00001002,00000030,00000040), ref: 00A308BE

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: Locale$ErrorInfoLastValid$CodeDefaultPageUser
String ID:
API String ID: 415426439-0
Opcode ID: a7e19ccee9ab89e080835f8658db3b724d4804429fade55f26cfe493b36f580c
Instruction ID: 59e37867ea7abf7f84e9b1d7f086c7e16c572669842cb1c0383768daa2022729
Opcode Fuzzy Hash: a7e19ccee9ab89e080835f8658db3b724d4804429fade55f26cfe493b36f580c
Instruction Fuzzy Hash: B1518F71A00619AFDB14DFA5DC51FBEB7B8BF18700F148429F911EB190EB70AA44CBA1

Function 00A2FD8F Relevance: 7.3, APIs: 3, Strings: 1, Instructions: 251COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00A28DB3: GetLastError.KERNEL32(?,00000008,00A269CC), ref: 00A28DB7
Part of subcall function 00A28DB3: SetLastError.KERNEL32(00000000,00A40710,00000024,00A1DDA3), ref: 00A28E59

GetACP.KERNEL32(?,?,?,?,?,?,00A24F88,?,?,?,00000055,?,-00000050,?,?,00000004), ref: 00A2FE50
IsValidCodePage.KERNEL32(00000000,?,?,?,?,?,?,00A24F88,?,?,?,00000055,?,-00000050,?,?), ref: 00A2FE7B
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078,-00000050,00000000,000000D0), ref: 00A2FFDE

Strings

utf8, xrefs: 00A2FF4D

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: ErrorLast$CodeInfoLocalePageValid
String ID: utf8
API String ID: 607553120-905460609
Opcode ID: 3789eb7a73d79a8129331c3fbf1cbc5c21310de7791c9370255164989d4d6027
Instruction ID: 51f0225c7cbe14d33c0fff6917a4ae1c464080f4ac2d17c538a8c62cfc029ec3
Opcode Fuzzy Hash: 3789eb7a73d79a8129331c3fbf1cbc5c21310de7791c9370255164989d4d6027
Instruction Fuzzy Hash: 5971D531600226AFEB25AB7CEE46FAAB3B8EF45710F144439F505D7191FB75E9408760

Function 00A27C32 Relevance: 6.3, APIs: 4, Instructions: 337COMMONLIBRARYCODE

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00A27CBF

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: 345b19b73ae581e04342a76ae529d1a1f04ad07f21d6b651d60a02739456ec14
Instruction ID: 4c2aadc6a62c78c1cc9f7eeef4faae25c0279f191d48288fcc2264d81f266634
Opcode Fuzzy Hash: 345b19b73ae581e04342a76ae529d1a1f04ad07f21d6b651d60a02739456ec14
Instruction Fuzzy Hash: 38B16A3290C2659FDB158F6CD981BFEBBB5EF59300F1581BAE805AB341D2349E01CBA0

Function 00A1A085 Relevance: 6.1, APIs: 4, Instructions: 70COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017,?), ref: 00A1A091
IsDebuggerPresent.KERNEL32 ref: 00A1A15D
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 00A1A176
UnhandledExceptionFilter.KERNEL32(?), ref: 00A1A180

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: ExceptionFilterPresentUnhandled$DebuggerFeatureProcessor
String ID:
API String ID: 254469556-0
Opcode ID: 59ae9208a6144d0506cb80b871e971fde31be03c9b0a0826c7ab5b3b07bc3545
Instruction ID: 34564fea407f9ac06ed83f6b9cb83619fe9b1b9e1a8ec0467fd591fc2a00f3f0
Opcode Fuzzy Hash: 59ae9208a6144d0506cb80b871e971fde31be03c9b0a0826c7ab5b3b07bc3545
Instruction Fuzzy Hash: 1831F7B5D01218ABDF21DFA4DD497CDBBB8AF18300F1081AAE40DAB250EB719B85CF45

Function 00A301A2 Relevance: 4.7, APIs: 3, Instructions: 205COMMON

Download Yara Rule

APIs

Part of subcall function 00A28DB3: GetLastError.KERNEL32(?,00000008,00A269CC), ref: 00A28DB7
Part of subcall function 00A28DB3: SetLastError.KERNEL32(00000000,00A40710,00000024,00A1DDA3), ref: 00A28E59

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00A301F6
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00A30240
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00A30306

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: InfoLocale$ErrorLast
String ID:
API String ID: 661929714-0
Opcode ID: b2b9ec00a66b3cfbaa66eb23137bd27898ebd979d930af760eadccee9856edd4
Instruction ID: a59a682eb1438503e422acd8353ca835fcad4d46c8777caeaf6d05f50cb98159
Opcode Fuzzy Hash: b2b9ec00a66b3cfbaa66eb23137bd27898ebd979d930af760eadccee9856edd4
Instruction Fuzzy Hash: D9619C719003179FDB289F28DDA6FAA77A9EF04300F108079F905DA585EB74DD84DB50

Function 00A20B69 Relevance: 4.6, APIs: 3, Instructions: 77COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32(?,?,?,?,?,?), ref: 00A20C61
SetUnhandledExceptionFilter.KERNEL32(00000000,?,?,?,?,?,?), ref: 00A20C6B
UnhandledExceptionFilter.KERNEL32(?,?,?,?,?,?,?), ref: 00A20C78

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: 7f49335c0272f232892b62459c63c3aa32859e0471b82535a7b5a50e830b837c
Instruction ID: 43a82a266773a4aeac415f9bdea7bf4ca93831627a4c7661b9a782784f1ed1ce
Opcode Fuzzy Hash: 7f49335c0272f232892b62459c63c3aa32859e0471b82535a7b5a50e830b837c
Instruction Fuzzy Hash: 8C31C87490122CABCB21DF68DD89BDDB7B4BF18310F5042EAE41DA6261E7709F858F45

Function 00A12805 Relevance: 4.0, APIs: 1, Strings: 1, Instructions: 477COMMON

Download Yara Rule

Strings

ios base: %i, xrefs: 00A1297D

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: H_prolog3_catch
String ID: ios base: %i
API String ID: 3886170330-1055636949
Opcode ID: c19467d3608562a2578c325151e85a9ba85b4bbfa404f30c0a02a1c8752769b7
Instruction ID: 66016ef4337609e639c85b4c0d763073369e0c849fd538373a7e8356375a910d
Opcode Fuzzy Hash: c19467d3608562a2578c325151e85a9ba85b4bbfa404f30c0a02a1c8752769b7
Instruction Fuzzy Hash: F6E177329087168FD718DF38D9813EABBE1EF89320F14463EE955972D1E335C9818B81

Function 00A22D90 Relevance: 3.4, APIs: 2, Instructions: 449COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5d6c2b0c2b7731d556a830f47680bcf32448849bf7266fb62c648a6abdd5fe24
Instruction ID: 2eb2e6b7209023b7a004b189143908206b9c5c8919d0307b140ea9d5e21db6ef
Opcode Fuzzy Hash: 5d6c2b0c2b7731d556a830f47680bcf32448849bf7266fb62c648a6abdd5fe24
Instruction Fuzzy Hash: 9AF14E72E002299FDF14CFADD9806ADBBB1FF89314F158269E815A7380D735AE45CB90

Function 00A12A0F Relevance: 1.9, APIs: 1, Instructions: 384COMMON

Download Yara Rule

APIs

Part of subcall function 00A1301A: __EH_prolog3_catch.LIBCMT ref: 00A13021

_Deallocate.LIBCONCRT ref: 00A12E06

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: DeallocateH_prolog3_catch
String ID:
API String ID: 20358830-0
Opcode ID: b205591d52042a80474cd02ee0ade2311398e6ed513a44da6cb67509e3884182
Instruction ID: d5b23d594a75a10e9a223a7e9e2b17a55fcab419de245e29b652553992786a3a
Opcode Fuzzy Hash: b205591d52042a80474cd02ee0ade2311398e6ed513a44da6cb67509e3884182
Instruction Fuzzy Hash: 1AB1C233D14A1A4BD708DA79D9412DEFAA5EF9A320F54433BE925EB3D0D335C9428784

Function 00A2943C Relevance: 1.8, APIs: 1, Instructions: 274COMMONLIBRARYCODE

Download Yara Rule

APIs

RaiseException.KERNEL32(C000000D,00000000,00000001,?,?,00000008,?,?,00A29437,?,?,00000008,?,?,00A34915,00000000), ref: 00A29669

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: ExceptionRaise
String ID:
API String ID: 3997070919-0
Opcode ID: 37c855d16d953c4be6dd313c1afb4fea2066ab13838513c1e58bc5283268f3d4
Instruction ID: 146b5e0159cc5946c97c821862343fb8ccbf2b9abb05938b9b407037ab5a6917
Opcode Fuzzy Hash: 37c855d16d953c4be6dd313c1afb4fea2066ab13838513c1e58bc5283268f3d4
Instruction Fuzzy Hash: F5B15E31610618CFD715CF2CD58ABA67BE0FF45764F258668E89ACF2A1C335E992CB40

Function 00A19B05 Relevance: 1.7, APIs: 1, Instructions: 242COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(0000000A), ref: 00A19B1B

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: FeaturePresentProcessor
String ID:
API String ID: 2325560087-0
Opcode ID: 665f09da3593114b51efafbec03141ca7b4c1e337de92081ca911d246780b3a8
Instruction ID: 6b622d779c1140beb4306612093c92a36c90e231ebfa9628a90e5ca079f75810
Opcode Fuzzy Hash: 665f09da3593114b51efafbec03141ca7b4c1e337de92081ca911d246780b3a8
Instruction Fuzzy Hash: 8DA17079914605CFDB18CF98D8917AABBF0FB89310F15862AE901EB390D335A982CF50

Function 00A2D2FE Relevance: 1.6, APIs: 1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 93bc0df2c1b9dbac59dfbf9ab596f23279eff0759ea66f8b7db4551f9613feaa
Instruction ID: 5e7ed57f8ba3c29ad1740f9bbe2ec4615c5da9365a4463fe7ccf02aef07984c9
Opcode Fuzzy Hash: 93bc0df2c1b9dbac59dfbf9ab596f23279eff0759ea66f8b7db4551f9613feaa
Instruction Fuzzy Hash: 5D41C575C0422DAFCF20DF6DDC89AAABBB9EF45304F1442E9E409D3202DA319E858F50

Function 00A1FD34 Relevance: 1.6, Strings: 1, Instructions: 344COMMONLIBRARYCODE

Download Yara Rule

Strings

0, xrefs: 00A1FEC2

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: a7fca27ded66c6b057327a3f1f89fae23b34417cb52f7393f9f61f7a38eeec01
Instruction ID: cc4251fe78ab7cbc6108b8b4ef83f25d1df83b3e21f92809d73364ed62f35578
Opcode Fuzzy Hash: a7fca27ded66c6b057327a3f1f89fae23b34417cb52f7393f9f61f7a38eeec01
Instruction Fuzzy Hash: 53C1E1346006968FDB24CF6CD590AFEBBB2BF05304F24463DD4969B2A2C771AD86CB51

Function 00A303F5 Relevance: 1.6, APIs: 1, Instructions: 83COMMON

Download Yara Rule

APIs

Part of subcall function 00A28DB3: GetLastError.KERNEL32(?,00000008,00A269CC), ref: 00A28DB7
Part of subcall function 00A28DB3: SetLastError.KERNEL32(00000000,00A40710,00000024,00A1DDA3), ref: 00A28E59

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00A30449

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: aa9a2cb9fff5089936256edbc9467418094c9701d335941ef41d9db0e2166e8e
Instruction ID: 832dcf1e46acb945e8f92306d7231b693aade3d0bdd3be57e0bc2e8bfd5a4f1b
Opcode Fuzzy Hash: aa9a2cb9fff5089936256edbc9467418094c9701d335941ef41d9db0e2166e8e
Instruction Fuzzy Hash: 1721A172605216AFEB289B68DD52EBA73ACEF44310F10407EFE05D6181EB74EE44DB50

Function 00A3007C Relevance: 1.6, APIs: 1, Instructions: 63COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00A28DB3: GetLastError.KERNEL32(?,00000008,00A269CC), ref: 00A28DB7
Part of subcall function 00A28DB3: SetLastError.KERNEL32(00000000,00A40710,00000024,00A1DDA3), ref: 00A28E59

EnumSystemLocalesW.KERNEL32(00A301A2,00000001,00000000,?,-00000050,?,00A307D3,00000000,?,?,?,00000055,?), ref: 00A300EE

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: 0fa5fda7bfc41cca41b5ea3daae5f01a1da701812461bcd9d1b9d734b816e0d6
Instruction ID: 61c182ce9f3000084ce49e454746c0ae6467b72b6905d0a0fdf6da21790a9134
Opcode Fuzzy Hash: 0fa5fda7bfc41cca41b5ea3daae5f01a1da701812461bcd9d1b9d734b816e0d6
Instruction Fuzzy Hash: 7C1125362007059FDB1C9F39D8A1ABABB92FF80318F18852DF98687B40D371A802CB40

Function 00A30624 Relevance: 1.5, APIs: 1, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 00A28DB3: GetLastError.KERNEL32(?,00000008,00A269CC), ref: 00A28DB7
Part of subcall function 00A28DB3: SetLastError.KERNEL32(00000000,00A40710,00000024,00A1DDA3), ref: 00A28E59

GetLocaleInfoW.KERNEL32(?,20000001,?,00000002,?,00000000,?,?,00A303BE,00000000,00000000,?), ref: 00A30650

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: 2c7fcead3b50e13869f75b370ccdeaa222636a39d19b97129c52011979f3d316
Instruction ID: 8acd2c48d090731478b9871ed7be770975a69a08bf8c1d269073f8bdfe82134f
Opcode Fuzzy Hash: 2c7fcead3b50e13869f75b370ccdeaa222636a39d19b97129c52011979f3d316
Instruction Fuzzy Hash: 19F0A932610125BBDB2857648D57FBB77A4DB80754F154429FC06A3184DBB4FE51C5D0

Function 00A30117 Relevance: 1.5, APIs: 1, Instructions: 41COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00A28DB3: GetLastError.KERNEL32(?,00000008,00A269CC), ref: 00A28DB7
Part of subcall function 00A28DB3: SetLastError.KERNEL32(00000000,00A40710,00000024,00A1DDA3), ref: 00A28E59

EnumSystemLocalesW.KERNEL32(00A303F5,00000001,?,?,-00000050,?,00A30797,-00000050,?,?,?,00000055,?,-00000050,?,?), ref: 00A30161

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: b077f511570b4be7acfc2b94f3890dafa427d4c500b2596df115e296b2a1095e
Instruction ID: c82bcce36ec87a1cb8b223d0902fc8b69ea3d9c43e574823306c69001fe5e9d4
Opcode Fuzzy Hash: b077f511570b4be7acfc2b94f3890dafa427d4c500b2596df115e296b2a1095e
Instruction Fuzzy Hash: 13F0F0363043046FDB289F399C92E7A7B91EF81768F09852DFA458B690D6B1AC02CA50

Function 00A27026 Relevance: 1.5, APIs: 1, Instructions: 33COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00A20E12: EnterCriticalSection.KERNEL32(?,?,00A28A8B,?,00A407B0,00000008,00A28C4F,?,00A1EE66,?), ref: 00A20E21

EnumSystemLocalesW.KERNEL32(00A27019,00000001,00A40750,0000000C,00A273EB,00000000), ref: 00A2705E

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: CriticalEnterEnumLocalesSectionSystem
String ID:
API String ID: 1272433827-0
Opcode ID: 9f49773aa1f1d1522ee22929f7cb2e95ececbdae1154ffcdfdb6f5e323fa67ee
Instruction ID: 78bdd264119d7deeab18fff8f7150489a9bf4b5bd9ed92d38b1b8b3b38d604ad
Opcode Fuzzy Hash: 9f49773aa1f1d1522ee22929f7cb2e95ececbdae1154ffcdfdb6f5e323fa67ee
Instruction Fuzzy Hash: 59F08736A04314EFDB00DF98EA42B8C77F0FB49721F10852AF4009B2A1D6B949408F80

Function 00A30031 Relevance: 1.5, APIs: 1, Instructions: 31COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00A28DB3: GetLastError.KERNEL32(?,00000008,00A269CC), ref: 00A28DB7
Part of subcall function 00A28DB3: SetLastError.KERNEL32(00000000,00A40710,00000024,00A1DDA3), ref: 00A28E59

EnumSystemLocalesW.KERNEL32(00A2FF8A,00000001,?,?,?,00A307F5,-00000050,?,?,?,00000055,?,-00000050,?,?,00000004), ref: 00A30068

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: 6a271eda656712dcb98dc81f701f1fc4bd2692a97932a1f18ce58e5eb77fbc91
Instruction ID: 3b45a3763b36c3884fc6178da119c25139f615a38125c79574b7b5686fe4a9bc
Opcode Fuzzy Hash: 6a271eda656712dcb98dc81f701f1fc4bd2692a97932a1f18ce58e5eb77fbc91
Instruction Fuzzy Hash: FCF0E53A30020567CB08DF39D956B6A7F94EFC3750F0A806DFA098B291C6759843CB90

Function 00A274EF Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(00000000,?,00000000,?,-00000050,?,?,?,00A25AEE,?,20001004,00000000,00000002,?,?,00A250F0), ref: 00A27523

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: InfoLocale
String ID:
API String ID: 2299586839-0
Opcode ID: a8b45df028fd9d7db1cadf14a04f76403b97aee15e3b77e0a7cd1c5a47185fb3
Instruction ID: d9211779e725ce73b370a301b3f8ff6f4ad6ab9724bb781db689c491c33c3500
Opcode Fuzzy Hash: a8b45df028fd9d7db1cadf14a04f76403b97aee15e3b77e0a7cd1c5a47185fb3
Instruction Fuzzy Hash: 00E04F35504639BBCF126F64EC09A9EBF25EF44761F008120FD0566221CB718E21AAD5

Function 00A1A212 Relevance: 1.5, APIs: 1, Instructions: 3COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32(Function_0000A21E,00A19799), ref: 00A1A217

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: b24bdafdf401da0a5fb24fd1ec0f8bf628a5079106c8bf7b6f784e147f85dc11
Instruction ID: 8ea5a941ba7b00dcb4aa2ba35feb4a77db509a48a88fe31f03d57607e62be10d
Opcode Fuzzy Hash: b24bdafdf401da0a5fb24fd1ec0f8bf628a5079106c8bf7b6f784e147f85dc11
Instruction Fuzzy Hash:

Function 00A2E177 Relevance: 1.3, APIs: 1, Instructions: 5memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32 ref: 00A2E177

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: HeapProcess
String ID:
API String ID: 54951025-0
Opcode ID: 0bae8f6a07dbf7ad1d1bece2f1b6eee88586f4d36daedaa579a35f6b4ef0e507
Instruction ID: e99df36dc80e86dab93ae8ce3246020bb6b8e6f53f0c413f9ef7c017fff63989
Opcode Fuzzy Hash: 0bae8f6a07dbf7ad1d1bece2f1b6eee88586f4d36daedaa579a35f6b4ef0e507
Instruction Fuzzy Hash: E8A001706012059B9751CFB5AE0A7093AA9FA4A692B058269E409C6561EB249452AB11

Function 00A2F840 Relevance: .3, Instructions: 327COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: ErrorLastProcess$CurrentFeatureInfoLocalePresentProcessorTerminate
String ID:
API String ID: 3471368781-0
Opcode ID: 8a047d9fb5291cf725595816f6c8a8e0f798148d82abe44f5fad09056c34bac1
Instruction ID: 33ec704e2031ab7357c429a88c6f8582642328af4b1fc0e6650cda8a070b5184
Opcode Fuzzy Hash: 8a047d9fb5291cf725595816f6c8a8e0f798148d82abe44f5fad09056c34bac1
Instruction Fuzzy Hash: 1BB113355007159FDB38AF2CED92BBBB3B9EB44308F14453DE94786680EA75E985CB00

Function 00A1F9EC Relevance: .3, Instructions: 314COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 903e6258913c2326f678897e5863b4ee9827eeeebae0f4fd5e4abd12da92e84a
Instruction ID: 54c345d1f22d3c1b9066dadfe81488f125265387b13b36d7d22bd079ba029958
Opcode Fuzzy Hash: 903e6258913c2326f678897e5863b4ee9827eeeebae0f4fd5e4abd12da92e84a
Instruction Fuzzy Hash: CAB1E47090868A8FCF24CF68C6A1AFEB7B5AF44354F14063ED856DB291C735A9C1CB91

Function 00A12F17 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb95e78cf48f6cef25981292106dd85dcc1e756e9ea7093097b0e757684cc6ae
Instruction ID: 43525567f29feef61b237b0b64717dc95ec7e0053bec018e2c778e0cdec9615f
Opcode Fuzzy Hash: bb95e78cf48f6cef25981292106dd85dcc1e756e9ea7093097b0e757684cc6ae
Instruction Fuzzy Hash: 8DE09B7460930097E3089A54D555B9B7AE5F7C5300F50C03DF149D73D0DFB4984587D2

Function 00A2CC6F Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c9be6b6f35371869e062396f73cb3a676a20dd67872fdeac340a7b63f963c531
Instruction ID: fb37145037f4f7b7dcb1f5993b708e265dc3247283f734a9f386414d5fc59417
Opcode Fuzzy Hash: c9be6b6f35371869e062396f73cb3a676a20dd67872fdeac340a7b63f963c531
Instruction Fuzzy Hash: F2E08C72925238EBCB24DB8CDA0499EF3ECEB44B10F1104A6F505D3100C274DE00CBD0

Function 00A23BBE Relevance: .0, Instructions: 12COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5235bc6f45b747b251e4dee57095da2f280f55043986cdd14d68c6e044f9f23d
Instruction ID: 7360be48525271d91d30ca1fc2fad836879a95d0023d0af88d609bd0bf3ce181
Opcode Fuzzy Hash: 5235bc6f45b747b251e4dee57095da2f280f55043986cdd14d68c6e044f9f23d
Instruction Fuzzy Hash: 63C08C35200A6C4ACE298E18A3B13A83354ABD3B82F9004ADC4560F642C92EDD82D600

Function 00A192CD Relevance: 14.0, APIs: 4, Strings: 4, Instructions: 19
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleW.KERNEL32(kernel32.dll), ref: 00A192D3
GetProcAddress.KERNEL32(00000000,GetCurrentPackageId), ref: 00A192E1
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 00A192F2
GetProcAddress.KERNEL32(00000000,GetTempPath2W), ref: 00A19303

Strings

GetCurrentPackageId, xrefs: 00A192DB
kernel32.dll, xrefs: 00A192CE
GetSystemTimePreciseAsFileTime, xrefs: 00A192E7
GetTempPath2W, xrefs: 00A192F8

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: GetCurrentPackageId$GetSystemTimePreciseAsFileTime$GetTempPath2W$kernel32.dll
API String ID: 667068680-1247241052
Opcode ID: f38475f5b97f5addd0d9adb586310e591c6505e35dd09527021bf374da1a8a4a
Instruction ID: fad047512a597711fcdde7043cc314b6e5730f9c2280ee019a007c5e54db9e46
Opcode Fuzzy Hash: f38475f5b97f5addd0d9adb586310e591c6505e35dd09527021bf374da1a8a4a
Instruction Fuzzy Hash: 06E0ECB6596310BBA715DFF4BC0E8D93AB4BA06753701CB61B505D2270E6B00842DB90

Function 00A2B85E Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 298
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

, xrefs: 00A2BAD7

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID:
String ID:
API String ID: 0-3907804496
Opcode ID: 6e7d51076720f720661e893e831b889ca38b429cf7c774ccc453ff14824821e7
Instruction ID: 4df0c4d9484915a2041d0d179540474bc6ba7bca3f448fe699ad1dcda4de0dd7
Opcode Fuzzy Hash: 6e7d51076720f720661e893e831b889ca38b429cf7c774ccc453ff14824821e7
Instruction Fuzzy Hash: 49B12270A10269AFDF10CF9DE981BADBBB1BF59310F1841A8E414AB392C7759D42CB70

Function 00A190E3 Relevance: 12.2, APIs: 8, Instructions: 175
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

MultiByteToWideChar.KERNEL32(00000000,00000000,00000001,?,00000000,00000000,?,?,?,00000001), ref: 00A1912C
__alloca_probe_16.LIBCMT ref: 00A19158
MultiByteToWideChar.KERNEL32(00000001,00000001,00000000,?,00000000,00000000), ref: 00A19197
LCMapStringEx.KERNEL32(?,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00A191B4
LCMapStringEx.KERNEL32(?,?,00000000,00000000,00000000,?,00000000,00000000,00000000), ref: 00A191F3
__alloca_probe_16.LIBCMT ref: 00A19210
LCMapStringEx.KERNEL32(?,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00A19252
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,?,00000000,00000000), ref: 00A19275

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: ByteCharMultiStringWide$__alloca_probe_16
String ID:
API String ID: 2040435927-0
Opcode ID: 87fdc37cf9b846a1b8400373799a7fd80b9c1f6e5c780447b33841827ee05bfb
Instruction ID: 33765e626d2c8faca51613a9c8e2c49435a893579b28ae5690b891627f9a7a52
Opcode Fuzzy Hash: 87fdc37cf9b846a1b8400373799a7fd80b9c1f6e5c780447b33841827ee05bfb
Instruction Fuzzy Hash: 47519E72A0022ABBEF209FA4CC55FEB7BB9EF45740F158529F904A6150D7319D91CB60

Function 00A1CE02 Relevance: 10.8, APIs: 3, Strings: 3, Instructions: 303
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

type_info::operator==.LIBVCRUNTIME ref: 00A1CF21
___TypeMatch.LIBVCRUNTIME ref: 00A1D02F
CallUnexpected.LIBVCRUNTIME ref: 00A1D19C

Strings

csm, xrefs: 00A1CE3F
csm, xrefs: 00A1CF58
csm, xrefs: 00A1CEAC

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: CallMatchTypeUnexpectedtype_info::operator==
String ID: csm$csm$csm
API String ID: 1206542248-393685449
Opcode ID: 4478d29a742450f474818dde7d9a28c41ea8b1816516899fbd2b130d7ee9cd93
Instruction ID: f7285784cdacdacb57c475fa956255bc3e6288fb25c46b4cec76e3e69ed0b571
Opcode Fuzzy Hash: 4478d29a742450f474818dde7d9a28c41ea8b1816516899fbd2b130d7ee9cd93
Instruction Fuzzy Hash: 60B17C71800219EFDF15DFA4C9819EEBBB6FF14321F144259E8116B252D731EA92CF91

Function 00A1C8D0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00A1C907
___except_validate_context_record.LIBVCRUNTIME ref: 00A1C90F
_ValidateLocalCookies.LIBCMT ref: 00A1C998
__IsNonwritableInCurrentImage.LIBCMT ref: 00A1C9C3
_ValidateLocalCookies.LIBCMT ref: 00A1CA18

Strings

csm, xrefs: 00A1C9AD

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 3f98b95569f31af4ae15463552856bc1bcb8bc8dd7c3473930bc496a5cf019d9
Instruction ID: ce08ec0cda4c12f6a41dc6fefb2bcbd8a5e42c0d906b88987cec882c7028cffa
Opcode Fuzzy Hash: 3f98b95569f31af4ae15463552856bc1bcb8bc8dd7c3473930bc496a5cf019d9
Instruction Fuzzy Hash: C141C434E40219AFCF10DF68C885ADEBBB5BF45324F148195F815AB392D735EA81CB91

Function 00A271EF Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 74COMMONLIBRARYCODE

Download Yara Rule

APIs

FreeLibrary.KERNEL32(00000000,?,00000000,00000800,00000000,F8250000,?,D194BF41,?,00A272FC,00A1EE66,?,F8250000,00000000), ref: 00A272B0

Strings

api-ms-, xrefs: 00A27246
ext-ms-, xrefs: 00A2725A

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: FreeLibrary
String ID: api-ms-$ext-ms-
API String ID: 3664257935-537541572
Opcode ID: 64bcf8fe5b5efd9030631f10315ec7254db027ea8fbf31a9a46e13207f344951
Instruction ID: d6ad0043209d56aaf8cc2e4c119fea5ec7f920367f99aea7cd693e6d775c8cf1
Opcode Fuzzy Hash: 64bcf8fe5b5efd9030631f10315ec7254db027ea8fbf31a9a46e13207f344951
Instruction Fuzzy Hash: C8210572A05220E7DB22DBA9BD85ADE3768EB02360F244530F916A72D0D630EE05C7E0

Function 00A173C5 Relevance: 10.5, APIs: 7, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00A173CC
std::_Lockit::_Lockit.LIBCPMT ref: 00A173D6
int.LIBCPMT ref: 00A173ED

Part of subcall function 00A11830: std::_Lockit::_Lockit.LIBCPMT ref: 00A11841
Part of subcall function 00A11830: std::_Lockit::~_Lockit.LIBCPMT ref: 00A1185B

codecvt.LIBCPMT ref: 00A17410
std::_Facet_Register.LIBCPMT ref: 00A17427
std::_Lockit::~_Lockit.LIBCPMT ref: 00A17447
Concurrency::cancel_current_task.LIBCPMT ref: 00A17454

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_H_prolog3Registercodecvt
String ID:
API String ID: 2133458128-0
Opcode ID: e4e2d1d8622e31e2c4a03fa290c65838827a34ecf0a4f7f39d9bc081a49db7e9
Instruction ID: 88a39ae46ebf3f6ea807a6fd40d9531f54b7ef10b47a8e8bd6732a8c3b0a0057
Opcode Fuzzy Hash: e4e2d1d8622e31e2c4a03fa290c65838827a34ecf0a4f7f39d9bc081a49db7e9
Instruction Fuzzy Hash: FC01F535D102259BCF02EBA4DA567FEBB75AF80320F244409F9116B392DF709D86CB81

Function 00A1CA94 Relevance: 9.1, APIs: 6, Instructions: 60COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,00A1CA8B,00A1AD89,00A169F4,D194BF41,?,?,?,?,00A352D0,000000FF), ref: 00A1CAA2
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 00A1CAB0
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 00A1CAC9
SetLastError.KERNEL32(00000000,?,00A1CA8B,00A1AD89,00A169F4,D194BF41,?,?,?,?,00A352D0,000000FF), ref: 00A1CB1B

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: 79ccc1af051a40207f58da1a6e97a005b62a0b5891557c0c44dee4125c077aae
Instruction ID: f9768367587925406fb2800710f112c7f8e7db6f35de23df92372caf56ebe071
Opcode Fuzzy Hash: 79ccc1af051a40207f58da1a6e97a005b62a0b5891557c0c44dee4125c077aae
Instruction Fuzzy Hash: 6801FC3A24D7116EE625ABB47D47AE62755EF427B93300239F135950E1FF924D81D280

Function 00A23BE0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 42libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,D194BF41,?,?,00000000,00A354C3,000000FF,?,00A23B70,00A23CA0,?,00A23B44,00000000), ref: 00A23C15
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 00A23C27
FreeLibrary.KERNEL32(00000000,?,?,00000000,00A354C3,000000FF,?,00A23B70,00A23CA0,?,00A23B44,00000000), ref: 00A23C49

Strings

CorExitProcess, xrefs: 00A23C1F
mscoree.dll, xrefs: 00A23C0E

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: da500f2e85515d1743601c8f331f7fcb14b05be28f56d29c23609ed55c7ac7e7
Instruction ID: 329ba46d018985e05f427c88bdda01d5555b4c4a5c5363c08b78d709aea50dc8
Opcode Fuzzy Hash: da500f2e85515d1743601c8f331f7fcb14b05be28f56d29c23609ed55c7ac7e7
Instruction Fuzzy Hash: 2401D632A40629FFDB15CF94DC09FAEBBB8FB05B11F004629F911A22D0DBB49904CA90

Function 00A18BAA Relevance: 7.6, APIs: 5, Instructions: 116threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 00A18BBE
AcquireSRWLockExclusive.KERNEL32(00000003,?,00000002,?,00A134CC,?,?), ref: 00A18BDD
AcquireSRWLockExclusive.KERNEL32(00000003,00000000,00000000,?,00000002,?,00A134CC,?,?), ref: 00A18C0B
TryAcquireSRWLockExclusive.KERNEL32(00000003,00000000,00000000,?,00000002,?,00A134CC,?,?), ref: 00A18C66
TryAcquireSRWLockExclusive.KERNEL32(00000003,00000000,00000000,?,00000002,?,00A134CC,?,?), ref: 00A18C7D

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: AcquireExclusiveLock$CurrentThread
String ID:
API String ID: 66001078-0
Opcode ID: a7e737d7aa3387af66aa7ecd497615eab3bb09e057f20de2df3a0c2ed04b18ea
Instruction ID: a74654eeeb3eefcfc7f936fceeb743d8b934e82f4032d29ad3b05c8df7741e97
Opcode Fuzzy Hash: a7e737d7aa3387af66aa7ecd497615eab3bb09e057f20de2df3a0c2ed04b18ea
Instruction Fuzzy Hash: C1414A30902606DBCB24DF65C9819EAB3F5FF09351B548929E456D7640EB3CE9C5CBB0

Function 00A148F7 Relevance: 7.5, APIs: 5, Instructions: 48COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00A14903
int.LIBCPMT ref: 00A14916

Part of subcall function 00A11830: std::_Lockit::_Lockit.LIBCPMT ref: 00A11841
Part of subcall function 00A11830: std::_Lockit::~_Lockit.LIBCPMT ref: 00A1185B

std::_Facet_Register.LIBCPMT ref: 00A14949
std::_Lockit::~_Lockit.LIBCPMT ref: 00A1495F
Concurrency::cancel_current_task.LIBCPMT ref: 00A1496A

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_Register
String ID:
API String ID: 2081738530-0
Opcode ID: 974f658461dc1bbab0fe56563c8e7abad895b7cbc7447dea9e6611bfdb0b69ae
Instruction ID: 1048378cd763496ff59118cfa10bd9f69053fe9d73a8528c963b03d68da2927b
Opcode Fuzzy Hash: 974f658461dc1bbab0fe56563c8e7abad895b7cbc7447dea9e6611bfdb0b69ae
Instruction Fuzzy Hash: 4F014972900114AFCB15EBA8D915DEF7B78EF85760B240149FA15AB281EF34DEC2C780

Function 00A14A2F Relevance: 7.5, APIs: 5, Instructions: 48COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00A14A3B
int.LIBCPMT ref: 00A14A4E

Part of subcall function 00A11830: std::_Lockit::_Lockit.LIBCPMT ref: 00A11841
Part of subcall function 00A11830: std::_Lockit::~_Lockit.LIBCPMT ref: 00A1185B

std::_Facet_Register.LIBCPMT ref: 00A14A81
std::_Lockit::~_Lockit.LIBCPMT ref: 00A14A97
Concurrency::cancel_current_task.LIBCPMT ref: 00A14AA2

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_Register
String ID:
API String ID: 2081738530-0
Opcode ID: 48fe8925c023ceea9037fe97330cb3e7a8bfafbc4f583cbf2faa87816fd9f994
Instruction ID: cdb3284c892a89b1f35ecefcb6c393a985f57cdb2e6569485049759637bfe9f7
Opcode Fuzzy Hash: 48fe8925c023ceea9037fe97330cb3e7a8bfafbc4f583cbf2faa87816fd9f994
Instruction Fuzzy Hash: F9014932910214AFCB14EB68DA159DE77B9EFC43A0F250118F9059B280EF30DE82C7C0

Function 00A14F6E Relevance: 7.5, APIs: 5, Instructions: 48COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00A14F7A
int.LIBCPMT ref: 00A14F8D

Part of subcall function 00A11830: std::_Lockit::_Lockit.LIBCPMT ref: 00A11841
Part of subcall function 00A11830: std::_Lockit::~_Lockit.LIBCPMT ref: 00A1185B

std::_Facet_Register.LIBCPMT ref: 00A14FC0
std::_Lockit::~_Lockit.LIBCPMT ref: 00A14FD6
Concurrency::cancel_current_task.LIBCPMT ref: 00A14FE1

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_Register
String ID:
API String ID: 2081738530-0
Opcode ID: a557a495269903bda0a730a849d234482b4413b8f2b607091b9b36d7859bfd13
Instruction ID: a2f792673463430ea9e7bd8e1e620679328d81cc93917648729e75242345181a
Opcode Fuzzy Hash: a557a495269903bda0a730a849d234482b4413b8f2b607091b9b36d7859bfd13
Instruction Fuzzy Hash: 6601D672910614ABCB15EFA8E905DDE7B79EF85760B240559FA0597390EF30DE82C7C0

Function 00A187C2 Relevance: 7.5, APIs: 5, Instructions: 44COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00A187C9
std::_Lockit::_Lockit.LIBCPMT ref: 00A187D4
std::_Lockit::~_Lockit.LIBCPMT ref: 00A18842

Part of subcall function 00A18925: std::locale::_Locimp::_Locimp.LIBCPMT ref: 00A1893D

std::locale::_Setgloballocale.LIBCPMT ref: 00A187EF
_Yarn.LIBCPMT ref: 00A18805

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: Lockitstd::_std::locale::_$H_prolog3LocimpLocimp::_Lockit::_Lockit::~_SetgloballocaleYarn
String ID:
API String ID: 1088826258-0
Opcode ID: f44a786bc07293641b848e28af54e1a24d2ad6db3f805278f5d2f81c9dfbc2eb
Instruction ID: 6f58afb234aab6b4d97622e99b4d4d67ed43044cb66ca00098a108a37f69369f
Opcode Fuzzy Hash: f44a786bc07293641b848e28af54e1a24d2ad6db3f805278f5d2f81c9dfbc2eb
Instruction Fuzzy Hash: 7B01F235A012209BCB06EF60DA15ABC7BB5FF84390B544008F90157381CF78AE83CBC2

Function 00A1DB97 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 27libraryCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(?,00000000,00000800,?,00A1DB48,?,?,00000000,?,?,?,00A1DC72,00000002,FlsGetValue,00A37CF0,FlsGetValue), ref: 00A1DBA4
GetLastError.KERNEL32(?,00A1DB48,?,?,00000000,?,?,?,00A1DC72,00000002,FlsGetValue,00A37CF0,FlsGetValue,?,?,00A1CAB5), ref: 00A1DBAE
LoadLibraryExW.KERNEL32(?,00000000,00000000), ref: 00A1DBD6

Strings

api-ms-, xrefs: 00A1DBBB

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: LibraryLoad$ErrorLast
String ID: api-ms-
API String ID: 3177248105-2084034818
Opcode ID: 4beb883562f3f86e33c21bb156af0555b57dda7c83b02f56c87fa5205ed5807b
Instruction ID: 59a7b262943d9037324fff9306ed688c6273a3ef9e547eb2839ef2336bec9868
Opcode Fuzzy Hash: 4beb883562f3f86e33c21bb156af0555b57dda7c83b02f56c87fa5205ed5807b
Instruction Fuzzy Hash: 7BE04F30288208B7EF201FA1ED47F993F55AB01B54F108420F94EAD4E1EB61D8959584

Function 00A29DB0 Relevance: 6.3, APIs: 4, Instructions: 338fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32(D194BF41,00000000,00000000,7591F550), ref: 00A29E13

Part of subcall function 00A2CDFB: WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,00000000,?,0000FDE9,00000000,-00000008,00000000,?,00A2CB79,?,00000000,-00000008), ref: 00A2CEA7

WriteFile.KERNEL32(?,?,00000000,?,00000000), ref: 00A2A06E
WriteFile.KERNEL32(?,?,00000001,?,00000000), ref: 00A2A0B6
GetLastError.KERNEL32 ref: 00A2A159

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: FileWrite$ByteCharConsoleErrorLastMultiOutputWide
String ID:
API String ID: 2112829910-0
Opcode ID: ab1a43f97170e54ad6f9470cf9caf8f9d1627e6987a9db0e351d07d0c5760fe9
Instruction ID: 54241972cd834f8efd54f88d233906d3aa0b9e474dec892f6f16944eea51351e
Opcode Fuzzy Hash: ab1a43f97170e54ad6f9470cf9caf8f9d1627e6987a9db0e351d07d0c5760fe9
Instruction Fuzzy Hash: 8AD17A75E002689FCF15CFACE880AAEBBB5FF59310F18412AE855EB351D730A856CB50

Function 00A1CBAB Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 00A1CC72
___AdjustPointer.LIBCMT ref: 00A1CC95
___AdjustPointer.LIBCMT ref: 00A1CD31

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: df9fcc5a840a4a105ab3d7de71e3a00d0421c31658ac33a754073d997179b17a
Instruction ID: b0b8ee768b14605b0f61435a6ba275e67f8c8027c78e514b67dbaf2f4e3759bf
Opcode Fuzzy Hash: df9fcc5a840a4a105ab3d7de71e3a00d0421c31658ac33a754073d997179b17a
Instruction Fuzzy Hash: 8D51DF76685606AFDB298F54E941BFA77A4FF40720F184129E80987691E731ECC0C7D1

Function 00A2D0BB Relevance: 6.1, APIs: 4, Instructions: 82COMMON

Download Yara Rule

APIs

Part of subcall function 00A2CDFB: WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,00000000,?,0000FDE9,00000000,-00000008,00000000,?,00A2CB79,?,00000000,-00000008), ref: 00A2CEA7

GetLastError.KERNEL32 ref: 00A2D11F
__dosmaperr.LIBCMT ref: 00A2D126
GetLastError.KERNEL32(?,?,?,?), ref: 00A2D160
__dosmaperr.LIBCMT ref: 00A2D167

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: ErrorLast__dosmaperr$ByteCharMultiWide
String ID:
API String ID: 1913693674-0
Opcode ID: 15ad114399795dde28c1a8f974d37956ad74084c06086a57910dd4ae4b056294
Instruction ID: 3074966f8c880009a62c1b57eddc7d8cc4186412098dc0640715a07e3cceae49
Opcode Fuzzy Hash: 15ad114399795dde28c1a8f974d37956ad74084c06086a57910dd4ae4b056294
Instruction Fuzzy Hash: 9F21C571200225BFEB20AF6DED8192BB7A9FF053647008A38F825D7562DB30EC50CB50

Function 00A232F6 Relevance: 6.1, APIs: 4, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e864120d5985ee63b0bf459be75ff884f54c4df37fab5e4a64b1741e6ed839fa
Instruction ID: ad993ff7017d7047b15d22e909c9c9c871a8da961e684a70860bb5304b7c3767
Opcode Fuzzy Hash: e864120d5985ee63b0bf459be75ff884f54c4df37fab5e4a64b1741e6ed839fa
Instruction Fuzzy Hash: 48218E72600225BFDF20EF69EE4196A77AAAF023647108534F955DB140DF38EF0087A0

Function 00A2E06A Relevance: 6.1, APIs: 4, Instructions: 74COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32 ref: 00A2E072

Part of subcall function 00A2CDFB: WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,00000000,?,0000FDE9,00000000,-00000008,00000000,?,00A2CB79,?,00000000,-00000008), ref: 00A2CEA7

FreeEnvironmentStringsW.KERNEL32(00000000), ref: 00A2E0AA
FreeEnvironmentStringsW.KERNEL32(00000000), ref: 00A2E0CA

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: EnvironmentStrings$Free$ByteCharMultiWide
String ID:
API String ID: 158306478-0
Opcode ID: 04c9074a8dea9bbb32bbc0d21b53544d7fab736f4dc6450f676382b002754d81
Instruction ID: 06e04b01dcff6d142fd95e0e8614b3e7903c7a9c4d5e8e2be4b46a20da59abd9
Opcode Fuzzy Hash: 04c9074a8dea9bbb32bbc0d21b53544d7fab736f4dc6450f676382b002754d81
Instruction Fuzzy Hash: 211184B15065357FAA22A7BABD8ECAF696CEE853E47110134F901D2101FE74DE4286B1

Function 00A33966 Relevance: 6.0, APIs: 4, Instructions: 29COMMONLIBRARYCODE

Download Yara Rule

APIs

WriteConsoleW.KERNEL32(00000000,0000000C,00000000,00000000,00000000,?,00A32877,00000000,00000001,00000000,7591F550,?,00A2A1AD,7591F550,00000000,00000000), ref: 00A3397D
GetLastError.KERNEL32(?,00A32877,00000000,00000001,00000000,7591F550,?,00A2A1AD,7591F550,00000000,00000000,7591F550,7591F550,?,00A2A734,00000000), ref: 00A33989

Part of subcall function 00A3394F: CloseHandle.KERNEL32(FFFFFFFE,00A33999,?,00A32877,00000000,00000001,00000000,7591F550,?,00A2A1AD,7591F550,00000000,00000000,7591F550,7591F550), ref: 00A3395F

___initconout.LIBCMT ref: 00A33999

Part of subcall function 00A33911: CreateFileW.KERNEL32(CONOUT$,40000000,00000003,00000000,00000003,00000000,00000000,00A33940,00A32864,7591F550,?,00A2A1AD,7591F550,00000000,00000000,7591F550), ref: 00A33924

WriteConsoleW.KERNEL32(00000000,0000000C,00000000,00000000,?,00A32877,00000000,00000001,00000000,7591F550,?,00A2A1AD,7591F550,00000000,00000000,7591F550), ref: 00A339AE

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast___initconout
String ID:
API String ID: 2744216297-0
Opcode ID: 83f8f887fb9cb3c3e471adf239dbf76f1f110001a897dbae38f0b5a7f02e6323
Instruction ID: e259cedd11d80820a7881524f0a5f69fd454f303adfcd5c061313f7068637600
Opcode Fuzzy Hash: 83f8f887fb9cb3c3e471adf239dbf76f1f110001a897dbae38f0b5a7f02e6323
Instruction Fuzzy Hash: 3CF0303B404124FBCF229FD5DC49B9D3F26FB493B1F008910FA1996131CA728921DB90

Function 00A1D1A7 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 112COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32(00000000,?), ref: 00A1D1CC

Strings

RCC, xrefs: 00A1D1E6
MOC, xrefs: 00A1D1DE

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: EncodePointer
String ID: MOC$RCC
API String ID: 2118026453-2084237596
Opcode ID: 5972c79900ec6ef0fdb923910e3ff5995ba6f1052c9aef673eef8bdf4009951f
Instruction ID: 4b1aa45bfbd7b636bdd9d13e8ed8c76d579a3a0478645c53b78904eb21865930
Opcode Fuzzy Hash: 5972c79900ec6ef0fdb923910e3ff5995ba6f1052c9aef673eef8bdf4009951f
Instruction Fuzzy Hash: 84417932900209AFCF16DF98CD81AEEBBB5FF48304F148159F915A7261D335DA90DB51

Function 00A16AB5 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 73COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00A16B3D
RaiseException.KERNEL32(?,?,?,?,?), ref: 00A16B62

Part of subcall function 00A1AD9B: RaiseException.KERNEL32(E06D7363,00000001,00000003,00A11365,?,?,?,?,00A11365,?,00A40B30), ref: 00A1ADFB

Part of subcall function 00A1DD93: IsProcessorFeaturePresent.KERNEL32(00000017,00A1F12B,?,?,?,?,00000000,00A208D9,?,?,?), ref: 00A1DDAF

Strings

csm, xrefs: 00A16AF1

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: ExceptionRaise$FeaturePresentProcessor__alloca_probe_16
String ID: csm
API String ID: 1924019822-1018135373
Opcode ID: 9288d4c76571ceb12abe786e0878b27dc4d41d98229e263b3dec04c163cc07fc
Instruction ID: 772bc68433bc454058b0a3712d73f0ac34daebaf08ab2fac47049ab88c60f332
Opcode Fuzzy Hash: 9288d4c76571ceb12abe786e0878b27dc4d41d98229e263b3dec04c163cc07fc
Instruction Fuzzy Hash: C0217C31E04218ABCF24DFA5EA45AEEB7B9EF40710F54441DE445EB660D730AD85CB91

Function 00A1175B Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 33COMMONLIBRARYCODE

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00A11762
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 00A1179A

Part of subcall function 00A188C0: _Yarn.LIBCPMT ref: 00A188DF
Part of subcall function 00A188C0: _Yarn.LIBCPMT ref: 00A18903

Strings

bad locale name, xrefs: 00A117A8

Memory Dump Source

Source File: 00000000.00000002.2624140779.0000000000A11000.00000020.00000001.01000000.00000003.sdmp, Offset: 00A10000, based on PE: true

Associated: 00000000.00000002.2624121528.0000000000A10000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624168431.0000000000A36000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624193000.0000000000A42000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624213771.0000000000A50000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624239690.0000000000A51000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624259749.0000000000A53000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2624278955.0000000000A57000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_a10000_igCCUqSW2T.jbxd

Similarity

API ID: Yarnstd::_$Locinfo::_Locinfo_ctorLockitLockit::_
String ID: bad locale name
API String ID: 1908188788-1405518554
Opcode ID: 3e1c8e4b47fa4b77f12a7b566e4a8dd987d35dafcdf02907c5f0ff774ca47963
Instruction ID: 4d662b51066b5cea83e3e430752094014b5c64b4d769b772fe3582dc0876d7ea
Opcode Fuzzy Hash: 3e1c8e4b47fa4b77f12a7b566e4a8dd987d35dafcdf02907c5f0ff774ca47963
Instruction Fuzzy Hash: 9DF03A72509B409E8330DF7A9581487FBE4BE293513948E2FE1DEC3A11D730E444CB6A

Analysis Process: MSBuild.exePID: 5588, Parent PID: 5168COMMON

Executed Functions

Function 01300848 Relevance: 10.0, Strings: 6, Instructions: 2507COMMON

Download Yara Rule

Strings

>%kl, xrefs: 0130192D
b6K, xrefs: 013008C4
K$S , xrefs: 01300A78
;(:, xrefs: 01300959
K(:, xrefs: 0130099F
tmB, xrefs: 01302F70

Memory Dump Source

Source File: 00000001.00000002.2077608663.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1300000_MSBuild.jbxd

Similarity

API ID:
String ID: ;(:$>%kl$K$S $K(:$b6K$tmB
API String ID: 0-3814818819
Opcode ID: 7a126c6dd8d7dafa8da0ae048854f5ac71d6ec6adc2c2c691d762fb4ccbf9eda
Instruction ID: 4e62521c6611b78f7c86f747286e747c8117ada0f7c95cfc424079ff4e4c2bea
Opcode Fuzzy Hash: 7a126c6dd8d7dafa8da0ae048854f5ac71d6ec6adc2c2c691d762fb4ccbf9eda
Instruction Fuzzy Hash: 0D539175E012198FCB65CF68C994A9DBBF5BB48304F1481EAE819EB355E730AE85CF40

Function 013042E8 Relevance: 9.4, Strings: 5, Instructions: 3151COMMON

Download Yara Rule

Strings

7qs, xrefs: 01304D3C
6I(k, xrefs: 01304484
H, xrefs: 01305716
qul}, xrefs: 013044D1
uZD, xrefs: 013053E5

Memory Dump Source

Source File: 00000001.00000002.2077608663.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1300000_MSBuild.jbxd

Similarity

API ID:
String ID: 6I(k$7qs$qul}$uZD$H
API String ID: 0-2913260691
Opcode ID: c5d4e7ffb7d3f71d85326ad63692911d59a81b1241f1ffe496e1d2e5346dd5cb
Instruction ID: dd47c6076f08ba739c893f934b8befba8deb51f6aa2cc50257340254e39804ab
Opcode Fuzzy Hash: c5d4e7ffb7d3f71d85326ad63692911d59a81b1241f1ffe496e1d2e5346dd5cb
Instruction Fuzzy Hash: E77391B4E01219CFCB65CF68C994A99BBF5BB48304F1481EAE919E7355E730AE85CF40

Function 013042C8 Relevance: 5.7, Strings: 3, Instructions: 1914COMMON

Download Yara Rule

Strings

6I(k, xrefs: 013045A4
qul}, xrefs: 013044D1
uZD, xrefs: 013053E5

Memory Dump Source

Source File: 00000001.00000002.2077608663.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1300000_MSBuild.jbxd

Similarity

API ID:
String ID: 6I(k$qul}$uZD
API String ID: 0-2795441010
Opcode ID: bfed787be67089654d86ee5b1410e395f71e5777b7bfb908101424baf907d786
Instruction ID: 7f1a5c6064f6459bb517dbacb0945658fe2d4c6ae1241fb6ca43cb1a49f658f8
Opcode Fuzzy Hash: bfed787be67089654d86ee5b1410e395f71e5777b7bfb908101424baf907d786
Instruction Fuzzy Hash: B023AE78E002199FCB64CF69C994A99BBF5BB48304F1481EAD819EB355E730EE85CF40

Function 013007B0 Relevance: 5.4, Strings: 4, Instructions: 420COMMON

Download Yara Rule

Strings

b6K, xrefs: 013008C4
K$S , xrefs: 01300A78
;(:, xrefs: 01300959
K(:, xrefs: 0130099F

Memory Dump Source

Source File: 00000001.00000002.2077608663.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1300000_MSBuild.jbxd

Similarity

API ID:
String ID: ;(:$K$S $K(:$b6K
API String ID: 0-896138553
Opcode ID: 8e02589512b3327224b6ba3e40158f0fb83bfced15c4c58731162ee1d782bec8
Instruction ID: 36354edca0e31dae93e276a2e7b3b1ee905d38864f50a23d9c2b3aaacccfdb19
Opcode Fuzzy Hash: 8e02589512b3327224b6ba3e40158f0fb83bfced15c4c58731162ee1d782bec8
Instruction Fuzzy Hash: 46021575E042498FCB05DFA8C494A9DBBF1EF49304F2581AAD405EB3A6EB34ED46CB41

Function 01307850 Relevance: 2.2, Strings: 1, Instructions: 959COMMON

Download Yara Rule

Strings

Fx^., xrefs: 01307B3F

Memory Dump Source

Source File: 00000001.00000002.2077608663.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1300000_MSBuild.jbxd

Similarity

API ID:
String ID: Fx^.
API String ID: 0-1027054592
Opcode ID: ca50de172bf0ca945a164c1a013bdb77f871c51dbc6dd75984e48e68bfd758dd
Instruction ID: 37eaa336fe1a247613d79899763c25f2a692f388c0329fea53799d50353b5cab
Opcode Fuzzy Hash: ca50de172bf0ca945a164c1a013bdb77f871c51dbc6dd75984e48e68bfd758dd
Instruction Fuzzy Hash: 22923274E00219CFCB55CFA8C894A9DBBF5BF48314F1481AAE459EB395E730AA46CF41

Function 01303108 Relevance: 1.6, Strings: 1, Instructions: 307COMMON

Download Yara Rule

Strings

-x, xrefs: 013031A5

Memory Dump Source

Source File: 00000001.00000002.2077608663.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1300000_MSBuild.jbxd

Similarity

API ID:
String ID: -x
API String ID: 0-1059959070
Opcode ID: f514d45b2f9e6d10cfebf79d7d02106b8fa15266689cedcf3cd1227f30070403
Instruction ID: 4a87a1d7e95e4d4ec251e2c5abd7ae29523ce6b035badc6e48674f7165e4eb09
Opcode Fuzzy Hash: f514d45b2f9e6d10cfebf79d7d02106b8fa15266689cedcf3cd1227f30070403
Instruction Fuzzy Hash: 0CD10F78A10209CFCB05DFA8D994A9DBBF6FB48304F248566E809EB395D734E946CF40

Function 0130A440 Relevance: .2, Instructions: 240COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2077608663.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1300000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 60de59e9ece56a861a0aa089d5283998c6adb3407321cc23a7b4cc6a3df8b9b5
Instruction ID: c684c618efecda1f64140f3f8f0d670c41ddef69bfff473a6c018672c7de52c9
Opcode Fuzzy Hash: 60de59e9ece56a861a0aa089d5283998c6adb3407321cc23a7b4cc6a3df8b9b5
Instruction Fuzzy Hash: 3DA18171E00309CFCB15DFA9D994AAEBBF5FF84314F14C16AD415AB295EB349846CB80

Function 01303A49 Relevance: .6, Instructions: 566COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2077608663.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1300000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00cb824d09e67e44b07d78a25310f04e0b8f75d75eb42fc51930a3a2cc64ba86
Instruction ID: aeac34c7dca0cadef6335b7ccd03894cc57f4fa02683ed5b67b22a6688a286e8
Opcode Fuzzy Hash: 00cb824d09e67e44b07d78a25310f04e0b8f75d75eb42fc51930a3a2cc64ba86
Instruction Fuzzy Hash: 4942F634A106458FCB06DFACD89499DBBF1BF88314B198694E115EB3A6DB30ED86CF44

Function 01308A35 Relevance: .5, Instructions: 510COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2077608663.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1300000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d75b3f01e9483f992259aaf46a548f43fe209b9e42c9653edfa9a96732619d45
Instruction ID: 1669e636d9a7f85e4f8ecf34bb9e04f90d4b16af46e61f33ba5f9a3fc1b56655
Opcode Fuzzy Hash: d75b3f01e9483f992259aaf46a548f43fe209b9e42c9653edfa9a96732619d45
Instruction Fuzzy Hash: 19517B75A00215CFD715CB58C890BAABBF6BB84308F15C1AAD849DB396DB35ED45CF80

Function 01308488 Relevance: .5, Instructions: 455COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2077608663.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1300000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 270a117700c2ad3c2b7652ba8322415f0f75a8240acc2e7915dafe6eaf831a78
Instruction ID: ec6b04baa80ba0a4b9d10aff69018fc9ca6aea0c83314d7b1b051a2ae47b33fd
Opcode Fuzzy Hash: 270a117700c2ad3c2b7652ba8322415f0f75a8240acc2e7915dafe6eaf831a78
Instruction Fuzzy Hash: A3716D71A006068FCB16DF6CD88099ABBF1FF84314B1987A5E015DB396CB31ED85CB84

Function 01308D38 Relevance: .3, Instructions: 325COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2077608663.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1300000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a390b58ca1d59bd48fe11fef58c830c8b7c7d043b046e9623deaa1692f7acec0
Instruction ID: 6edb1791afed498f8c04ef55e9c9a6381712890efe2d6ee20189544413090e61
Opcode Fuzzy Hash: a390b58ca1d59bd48fe11fef58c830c8b7c7d043b046e9623deaa1692f7acec0
Instruction Fuzzy Hash: 61D16D75A002088FDB15CFA8D894B99BBF6BB89304F15C16AD409EB396CB34ED45CF41

Function 013095B9 Relevance: .2, Instructions: 249COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2077608663.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1300000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe9fa532b281f6ecea643f3d09b503c0440b2eb80e2d02517503d88974753944
Instruction ID: fa5ee185cb077d0a0d57ca7d27795fea24c23f24f550ce448d4b0ec3f0b42439
Opcode Fuzzy Hash: fe9fa532b281f6ecea643f3d09b503c0440b2eb80e2d02517503d88974753944
Instruction Fuzzy Hash: 1CA18F71A10606CFCB16DF6CE890A5DBBF2BF84318B298665E019DB396D730ED85CB44

Function 01303680 Relevance: .2, Instructions: 188COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2077608663.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1300000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4ec3619a1d455ce013141b985e01fe2c78155ef93bd4e050cb01ef5a105a5810
Instruction ID: e27dcfd028b2e196376259a210e06fe0c203fd208adb08b34c6bed5afc9f112e
Opcode Fuzzy Hash: 4ec3619a1d455ce013141b985e01fe2c78155ef93bd4e050cb01ef5a105a5810
Instruction Fuzzy Hash: B181BE75A106068FCB26DF68D89489EBBF2FF8830471486A9D016EB795D730FD85CB90

Function 013083F1 Relevance: .1, Instructions: 135COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2077608663.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1300000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9e7becfb7a02a681fb05d5763718a00eb0fdf2158163b3f6f0d0837f4f969966
Instruction ID: 16df35cbc021912a4f31aae88a664efe2d0089738d34b5c0a97e8701a5ee7c99
Opcode Fuzzy Hash: 9e7becfb7a02a681fb05d5763718a00eb0fdf2158163b3f6f0d0837f4f969966
Instruction Fuzzy Hash: C451AAB1D043498FDB16CFA9D8A47ADBFF4BF48304F14856AD445EB280E7789946CB81

Function 013083E0 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2077608663.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1300000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 79aef78e318e5e4f3d05b453a7a0192b4d46072023e07347bd7b74310d0f9a43
Instruction ID: dc203bf58e29637630e7b4355a3f7852e9afa4115c665b3ab219310a20d56b52
Opcode Fuzzy Hash: 79aef78e318e5e4f3d05b453a7a0192b4d46072023e07347bd7b74310d0f9a43
Instruction Fuzzy Hash: B84179B0E103099FDB15CFA9E9907AEBFF5AF48704F108029E415EB280E7749946CB81

Function 0130A764 Relevance: .1, Instructions: 111COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2077608663.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1300000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 413fe28312f1330a991a40d75f868c0680c3293094717eaa71fb6c5eaf612b86
Instruction ID: 7feabae5f9c37c127f89f6a0d01d95bc12ba684a701b234f1804e47704792575
Opcode Fuzzy Hash: 413fe28312f1330a991a40d75f868c0680c3293094717eaa71fb6c5eaf612b86
Instruction Fuzzy Hash: 4A4158B1E103099FDB15CFA9E9947EEBFF5AF48304F108129E419EB284E7749946CB81

Function 01309478 Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2077608663.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1300000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9afaba213603d680f1d88cf99d614d6d63118dd8c94faa74c0319cf6e004f289
Instruction ID: ca8ca824c92315e71b875a23cb7fbe7c3e8d39a338a5d43268b3fcd438c9761f
Opcode Fuzzy Hash: 9afaba213603d680f1d88cf99d614d6d63118dd8c94faa74c0319cf6e004f289
Instruction Fuzzy Hash: 95316872D102598FCB01DBA8D8949EFBBB5EF85314F15856AD415EB292DB31AC06CB80

Function 013030F8 Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2077608663.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1300000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 33a88c645c9c4bd72821007dffd60cfd1570c3ead716487b32cea721fd6b957c
Instruction ID: 14e09243572cc723c3b321eae599e25ce3e456e7656c5b673abdcbf87b8d5591
Opcode Fuzzy Hash: 33a88c645c9c4bd72821007dffd60cfd1570c3ead716487b32cea721fd6b957c
Instruction Fuzzy Hash: A9317E74A10109CFDB05CBACD994AA9BBF6FB48304F14C06AE815E7385D734EA16CF50

Function 0130A438 Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2077608663.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1300000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b221858bbbc2e5b5e0e984fa0bb276ef13d02c1ac6ed46f96b42f26132e6f1d4
Instruction ID: 2095f733839838f4bab58819224c928ca35c16cfb77293a30e8f86a857f9ce58
Opcode Fuzzy Hash: b221858bbbc2e5b5e0e984fa0bb276ef13d02c1ac6ed46f96b42f26132e6f1d4
Instruction Fuzzy Hash: BF31AF35B106068FC716EB68E8E49AEB7F2FFC4304B15C665D41A87395EB30ED468B80

Function 01303938 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2077608663.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1300000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 67a85a63d9c923122e50a65d1339d47fbaeaa581689858c0c83e835b7e3fe087
Instruction ID: c09c9d577c6ec31d9862fc20ae7bdc61e6fdef71e029e8435397b6db6dfcea6b
Opcode Fuzzy Hash: 67a85a63d9c923122e50a65d1339d47fbaeaa581689858c0c83e835b7e3fe087
Instruction Fuzzy Hash: 98310632E10209CFDB15DFA8D8949EFFBB5AF88310F14C56AD511A7390DB70A909CB95

Function 0130A920 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2077608663.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1300000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b03341b7562b324d38ea6614775372dfbb375367326cf51d933b3146f2b4b410
Instruction ID: 02d90e33be29d36730513ae225213db6ac9829348cf0f61fef0bf37505dde018
Opcode Fuzzy Hash: b03341b7562b324d38ea6614775372dfbb375367326cf51d933b3146f2b4b410
Instruction Fuzzy Hash: B53126B5E1125D9FDB15CFAAD994ADEFFF9AF88314F14802AE405B7280C734A845CB90

Function 0130911A Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2077608663.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1300000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d911e66c6fbab8232152cfd4522011d9b461a91651fa5f8592f74ad290abe0d7
Instruction ID: d4399450732eba94bd154f08a50719637299653c81cee8ea485f322992d0d2e3
Opcode Fuzzy Hash: d911e66c6fbab8232152cfd4522011d9b461a91651fa5f8592f74ad290abe0d7
Instruction Fuzzy Hash: 4C21B671E052489FCB16DBB8D9945DEBFF6AF8A340F1480ABD401A7256DA306D05CB52

Function 01302FD3 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2077608663.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1300000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a73925fa91ce4b83759fc162e97ab243e4ce3fe37ffa4778fcf187ea09b80d44
Instruction ID: cb90c66c5d5f2a7dadf85094e3986d3b4f0ffe1e65e2e2fa893571b27d146e42
Opcode Fuzzy Hash: a73925fa91ce4b83759fc162e97ab243e4ce3fe37ffa4778fcf187ea09b80d44
Instruction Fuzzy Hash: A1113B36A012568FCB06DB6CC8544EDBBB1FF81324F0542EAC015AB1E2D7356D1BCB90

Function 0130A915 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2077608663.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1300000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ca89c32d3ef705abb6d0542a318874ec432264e68bcf06783191f46646b88951
Instruction ID: 8d15b83eb1dbcfd0d5e2d8d712d5efed2ca17ec2520ee98cc0d07b3d90484863
Opcode Fuzzy Hash: ca89c32d3ef705abb6d0542a318874ec432264e68bcf06783191f46646b88951
Instruction Fuzzy Hash: 6521F3B5D103499FDB15CFAAD994BEEBFF5AF88304F24802AE405B7290D7749845CB50

Function 01309138 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2077608663.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1300000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1b562d54a9a3c229006f303e0290bc93f7423ba92b91da4ba1b87260db2bbedc
Instruction ID: 0a82d41ba22f80a10c565b75aa9503818aeec501735a024183faed976d4ad15e
Opcode Fuzzy Hash: 1b562d54a9a3c229006f303e0290bc93f7423ba92b91da4ba1b87260db2bbedc
Instruction Fuzzy Hash: 5511A271E012089FCF16EBA8D9846DEBFF6AF89340F10806AD405B7241DA306D04CBA2

Function 0130392A Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2077608663.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1300000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9108aa327d636eb0d0bb17af7af44964e9bc1f6be60f089f714a4a5ab9bc780f
Instruction ID: 59b36d3045f96a616347c1711b02738b22514553ca037fcc505eac627d8c23c9
Opcode Fuzzy Hash: 9108aa327d636eb0d0bb17af7af44964e9bc1f6be60f089f714a4a5ab9bc780f
Instruction Fuzzy Hash: C6117C31D102098FCB05CFA8E8849DEB7B1FB88320F15C26AD525A7291DB34A909CF94

Function 0126D035 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2077339724.000000000126D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_126d000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8b9806dea0ef42cfad13bc696de8d548ed2fd58fdb742f8b3dda6a71daf53af1
Instruction ID: 5201e82b12bac71107ba56f00dac31be3b7385cec75967c4514cba46c96cddf4
Opcode Fuzzy Hash: 8b9806dea0ef42cfad13bc696de8d548ed2fd58fdb742f8b3dda6a71daf53af1
Instruction Fuzzy Hash: BB01F77161434D9AE7104EA9CDC4767FF9CDF453A0F18C41AEE490E2C2C3759886C671

Function 0126D034 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2077339724.000000000126D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0126D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_126d000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1ac93fef043fa7a9cf20f8c05b5ac2190062930477c48097ee31043fc04b3548
Instruction ID: 81346ca547d6aca758da904a6ba9b2f13c20477b6e2256d3b1c89aea9def7402
Opcode Fuzzy Hash: 1ac93fef043fa7a9cf20f8c05b5ac2190062930477c48097ee31043fc04b3548
Instruction Fuzzy Hash: 05F0C2715043489EE7108E1ACC84B63FF9CEF50364F18C45AEE480E287C3799885CAB0

Function 013090E8 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2077608663.0000000001300000.00000040.00000800.00020000.00000000.sdmp, Offset: 01300000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1300000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 226118dfb795017532e328b715c997516193d16125742fd23bb3df00b6fb8ddc
Instruction ID: f2a8c06e9807c0c0bf842000274dae67b7a2949e762261dd6fbda473bc3e99ea
Opcode Fuzzy Hash: 226118dfb795017532e328b715c997516193d16125742fd23bb3df00b6fb8ddc
Instruction Fuzzy Hash: 77C04C31501014CBE7356729E82CBAC7A71AB48309F50D896E185D62A0CF7029C4DF36

Analysis Process: Honda.exePID: 6968, Parent PID: 5588COMMON

Executed Functions

Function 015A2788 Relevance: 2.0, Instructions: 2015COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2077844563.00000000015A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_15a0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0030df30a0f5e3ddd4e66e82c4e105507ee3d0805a66cd92a596ef292451b338
Instruction ID: 268ca69950b7295f7076534991e94e1f52825eb8af7ea9bc4a1595c8d4697033
Opcode Fuzzy Hash: 0030df30a0f5e3ddd4e66e82c4e105507ee3d0805a66cd92a596ef292451b338
Instruction Fuzzy Hash: E803BF74A103199FD726DF64CC44B9DBBB6FF89700F5181A9E5086B291CBB46E81CF82

Function 015A5A41 Relevance: 1.7, Strings: 1, Instructions: 437COMMON

Download Yara Rule

Strings

$cq, xrefs: 015A5A71

Memory Dump Source

Source File: 00000006.00000002.2077844563.00000000015A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_15a0000_Honda.jbxd

Similarity

API ID:
String ID: $cq
API String ID: 0-2110363268
Opcode ID: cf0549b4be26d515e8786e15abc437eb61f1f266a37504714ed2edd3391e69bf
Instruction ID: 5c735dea71b0b5aa5cd656f6a8ef0e417376228c1b2f3aad4736ef35695558cd
Opcode Fuzzy Hash: cf0549b4be26d515e8786e15abc437eb61f1f266a37504714ed2edd3391e69bf
Instruction Fuzzy Hash: 47F1CB30A503069FDB24DF68D994B6EBBF2BF84705F548429D506AF296EB34AC41CF90

Function 015A17C8 Relevance: 2.7, Strings: 2, Instructions: 156COMMON

Download Yara Rule

Strings

(gq, xrefs: 015A18B1
Hgq, xrefs: 015A181D

Memory Dump Source

Source File: 00000006.00000002.2077844563.00000000015A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_15a0000_Honda.jbxd

Similarity

API ID:
String ID: (gq$Hgq
API String ID: 0-3303014377
Opcode ID: b11ea821c912302b52679a34f128d3b8e58a97b69d93f4225019470af225a568
Instruction ID: dee3b3ca59b5383469cb3dfcc3d6a3b3ca65ae044e88b509e554a519f6f17f45
Opcode Fuzzy Hash: b11ea821c912302b52679a34f128d3b8e58a97b69d93f4225019470af225a568
Instruction Fuzzy Hash: 3751BC71E042099FCB19DF6998146EEBFF2FFC9310F1480AAD159EB291EB344916CB91

Function 015A1CC0 Relevance: 2.6, Strings: 2, Instructions: 124COMMON

Download Yara Rule

Strings

$cq, xrefs: 015A1D0E
$cq, xrefs: 015A1D1A

Memory Dump Source

Source File: 00000006.00000002.2077844563.00000000015A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_15a0000_Honda.jbxd

Similarity

API ID:
String ID: $cq$$cq
API String ID: 0-2695052418
Opcode ID: eca73ccc2deec315c427a57e63d8532254b0116fe6fd06f75fced8f996148b12
Instruction ID: ecfd65c02a669eed646d6db20f6544b64d0e77737917e61f9657398509755273
Opcode Fuzzy Hash: eca73ccc2deec315c427a57e63d8532254b0116fe6fd06f75fced8f996148b12
Instruction Fuzzy Hash: 5A41C031A006058FC715EF29E88499EBBF6FF89300B508569E805DF366EB34AD05CF91

Function 015A4C69 Relevance: 1.7, Strings: 1, Instructions: 420COMMON

Download Yara Rule

Strings

`Qcq, xrefs: 015A4FBA

Memory Dump Source

Source File: 00000006.00000002.2077844563.00000000015A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_15a0000_Honda.jbxd

Similarity

API ID:
String ID: `Qcq
API String ID: 0-516822358
Opcode ID: 1eeda41b5957959870d845a95fa8c5108909b2d5e690f96ae971aef741b1e742
Instruction ID: 67cbedbf396ae59c4213e77a2f848759c9f9d6a3be18f72beb6737b2f7bc1dc5
Opcode Fuzzy Hash: 1eeda41b5957959870d845a95fa8c5108909b2d5e690f96ae971aef741b1e742
Instruction Fuzzy Hash: 2B21DC30A102458FEB15DBA9C848AAE7FF6BF89300F540429D501BB381DB789C40CBA1

Function 015A0848 Relevance: 1.4, Strings: 1, Instructions: 116COMMON

Download Yara Rule

Strings

4'cq, xrefs: 015A085B

Memory Dump Source

Source File: 00000006.00000002.2077844563.00000000015A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_15a0000_Honda.jbxd

Similarity

API ID:
String ID: 4'cq
API String ID: 0-182294849
Opcode ID: 1d5424130e7f04733f27490dd3084348f7b7b8585246e7bedb6d990acaf68eb3
Instruction ID: cf90668d42ec300bca64cf70ed1dab59caf109fb4006584a850fec94b97e4404
Opcode Fuzzy Hash: 1d5424130e7f04733f27490dd3084348f7b7b8585246e7bedb6d990acaf68eb3
Instruction Fuzzy Hash: 9F41C370A002099FDB04EFB8E854B9EBBB2FF84304F508529E505AF395DB749D55CB91

Function 015A1CB0 Relevance: 1.4, Strings: 1, Instructions: 106COMMON

Download Yara Rule

Strings

$cq, xrefs: 015A1D0E

Memory Dump Source

Source File: 00000006.00000002.2077844563.00000000015A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_15a0000_Honda.jbxd

Similarity

API ID:
String ID: $cq
API String ID: 0-2110363268
Opcode ID: d462d0ccf07eac620e9ee90b0a5fa05b78ba4e498ecd847c9c729f1f4fdeae4e
Instruction ID: 279b0fe53a6cef0f9c196f8e32c93bebd5b8b88888747c5ece351be482888737
Opcode Fuzzy Hash: d462d0ccf07eac620e9ee90b0a5fa05b78ba4e498ecd847c9c729f1f4fdeae4e
Instruction Fuzzy Hash: E541E335A006058FC715EF29E88489EBBF6FF85300B508669E801DF3A5EB34AD05CF91

Function 015A0838 Relevance: 1.3, Strings: 1, Instructions: 80COMMON

Download Yara Rule

Strings

4'cq, xrefs: 015A085B

Memory Dump Source

Source File: 00000006.00000002.2077844563.00000000015A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_15a0000_Honda.jbxd

Similarity

API ID:
String ID: 4'cq
API String ID: 0-182294849
Opcode ID: e9a4d0fef3e1383dd7add10eb941595393edb652cd57bdafabaa26f3172ae974
Instruction ID: 54baa996b5d0e1cef920aafbf7d42b7c628c48f0384fc6b55253feedcf403f77
Opcode Fuzzy Hash: e9a4d0fef3e1383dd7add10eb941595393edb652cd57bdafabaa26f3172ae974
Instruction Fuzzy Hash: 9E31C17090020A9FCB01EFB8E484A9DBFB2FF84304F108529E5046F396DB759895CB41

Function 015A1B68 Relevance: 1.3, Strings: 1, Instructions: 77COMMON

Download Yara Rule

Strings

tPcq, xrefs: 015A1C43

Memory Dump Source

Source File: 00000006.00000002.2077844563.00000000015A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_15a0000_Honda.jbxd

Similarity

API ID:
String ID: tPcq
API String ID: 0-3229073321
Opcode ID: 74d57112c9e5bceb4ea4ab4e936327af7b8c31e975f59f12589f89a804b3df3d
Instruction ID: 236d7835b86ce147a15ffde613442d7cb5d01e25bde3e753ce8d05b3cd40ef8e
Opcode Fuzzy Hash: 74d57112c9e5bceb4ea4ab4e936327af7b8c31e975f59f12589f89a804b3df3d
Instruction Fuzzy Hash: 5E316D71B41216CFCB08EFB8C49896DBBB2BF49614B6044A9D506DF3A5DB35DC02CB81

Function 015A1B78 Relevance: 1.3, Strings: 1, Instructions: 69COMMON

Download Yara Rule

Strings

tPcq, xrefs: 015A1C43

Memory Dump Source

Source File: 00000006.00000002.2077844563.00000000015A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_15a0000_Honda.jbxd

Similarity

API ID:
String ID: tPcq
API String ID: 0-3229073321
Opcode ID: 3bc716d716b3d7f0023e4ae0f66a923a9bfa8bf59bed3e2f862f2a253edc899b
Instruction ID: 10c619b08b1fc20a680b5ae5e8baa6b1b5b16b05a50324a2c3e475021d27f49c
Opcode Fuzzy Hash: 3bc716d716b3d7f0023e4ae0f66a923a9bfa8bf59bed3e2f862f2a253edc899b
Instruction Fuzzy Hash: 5D212871B00116CFCB48EFB8C59896DBBB2AF48610B6044A9D906DF3A5DB39DC02CB81

Function 015A4F48 Relevance: 1.3, Strings: 1, Instructions: 56COMMON

Download Yara Rule

Strings

`Qcq, xrefs: 015A4FBA

Memory Dump Source

Source File: 00000006.00000002.2077844563.00000000015A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_15a0000_Honda.jbxd

Similarity

API ID:
String ID: `Qcq
API String ID: 0-516822358
Opcode ID: 40688ea863b5bd609bec8d00ddd1654a4ae6552fe2dd4f9da84080e9829e78fb
Instruction ID: b2ab1d65162307dd60f0e211a2d2196e3f7ebb2967cfc61fafa8ce615396b071
Opcode Fuzzy Hash: 40688ea863b5bd609bec8d00ddd1654a4ae6552fe2dd4f9da84080e9829e78fb
Instruction Fuzzy Hash: E011B270A402058BEB14DFA9C9447AE7BF6BF88300F544429D501BB380EF789C40CBA1

Function 015A4868 Relevance: .2, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2077844563.00000000015A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_15a0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 44a1de1a37cd61c0d02ef36099d2288e4a780cbcbdc70295704d10618d9050eb
Instruction ID: 1a59147dc5f14638b698f1021c6d639d094eacf4dc0d221e2949011c8abb94ac
Opcode Fuzzy Hash: 44a1de1a37cd61c0d02ef36099d2288e4a780cbcbdc70295704d10618d9050eb
Instruction Fuzzy Hash: AEA125302006068FCB15DF58C894A6DBBE2FF45300F9AC9A9E4459F666D7B4FD94CB84

Function 015A1062 Relevance: .2, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2077844563.00000000015A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_15a0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d008eabdea462cb2b463d09af17d1286f33eb132ff193e0d93b837e7c4ff878d
Instruction ID: 637ea8e337d1c3e47d12dc32d9748cdf23d3631643953fa9ce2049c3c3482377
Opcode Fuzzy Hash: d008eabdea462cb2b463d09af17d1286f33eb132ff193e0d93b837e7c4ff878d
Instruction Fuzzy Hash: 25915E71A002089FCB15DFE5E8949EEBBBAFF88700F14812AE515EB254DB349906CF51

Function 015A5E28 Relevance: .2, Instructions: 182COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2077844563.00000000015A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_15a0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 282db24ca1c35eb483cceef21021f3420fe100a66ed089b9b5ca3f3ad3a0aa37
Instruction ID: 787e2ef26332fab00e6f1d7ce13df7742afef6b0c6fb7b9d38c5de9907c06515
Opcode Fuzzy Hash: 282db24ca1c35eb483cceef21021f3420fe100a66ed089b9b5ca3f3ad3a0aa37
Instruction Fuzzy Hash: 8F61BE31B50215AFCB05DF68D894FAEBBF2BF88710F588065EA05AB391DB349C41CB90

Function 015A2777 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2077844563.00000000015A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_15a0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9d161b82c4e27cc3f24a0a4a1e176894c04f31a2eb8ed04dfa4ed8833757d0d1
Instruction ID: 568403587ddce9db6be86f1f9ed8d34280739c95b9b63b383f518b97ee28b284
Opcode Fuzzy Hash: 9d161b82c4e27cc3f24a0a4a1e176894c04f31a2eb8ed04dfa4ed8833757d0d1
Instruction Fuzzy Hash: D831CE31A04305DFD7258FA9E859BAD7BF6BF45200F8884AAE405CF292D739D940CB61

Function 015A6060 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2077844563.00000000015A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_15a0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 920048e0a76d60573d9674c59f84c3794d3593985e3b0c7c01d104d5c7bb9b6d
Instruction ID: ddd7b15d3504255fba5a960794bcf43bd268d343692a847fe06f3a61eddd2b3b
Opcode Fuzzy Hash: 920048e0a76d60573d9674c59f84c3794d3593985e3b0c7c01d104d5c7bb9b6d
Instruction Fuzzy Hash: 3211E071D002499FCB26DB68E858BAE7FB6EFC5314F1445AEE0049B242CB715905C751

Function 015A5218 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2077844563.00000000015A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_15a0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4b826e3f0b6b05bf14ac42787de29014956de0e5015a077aebb72386931cfec6
Instruction ID: 1541aed60c30e65aefe5984925a81b95507280d9b1ab7019f973eeff5837d321
Opcode Fuzzy Hash: 4b826e3f0b6b05bf14ac42787de29014956de0e5015a077aebb72386931cfec6
Instruction Fuzzy Hash: DF01A772714231CFC7169B7DE85481ABBBAEF8AA1131544F6E905DF376CA35EC018BA0

Function 015A0A98 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2077844563.00000000015A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_15a0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7ff8df73832178dd3d29bc92af7152f441da2b35fe1fe020c735e531837f52dd
Instruction ID: d2c6368232ec10545e303acb716efc6868f2e2cd1cafe83d47e1f77bc5e7b953
Opcode Fuzzy Hash: 7ff8df73832178dd3d29bc92af7152f441da2b35fe1fe020c735e531837f52dd
Instruction Fuzzy Hash: C701F2307543444BE70A2B75E82D76D3BA9EB81A04F4401B8AA05CB2D1DEED8850CB91

Function 015A5228 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2077844563.00000000015A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_15a0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f8dbd8a0a46b6864049642be79eb74db5a7379c4e518db5c7811f95d1a6a0a01
Instruction ID: 05018fe88a700691ee93c367802c32ce234b1b3ff4a17808be02771afa8602fa
Opcode Fuzzy Hash: f8dbd8a0a46b6864049642be79eb74db5a7379c4e518db5c7811f95d1a6a0a01
Instruction Fuzzy Hash: 15F04F72710131CFC7159B7EE84881A7BEAEF89A6131541B9E805EB335CA35EC018BA0

Function 015A0AA8 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2077844563.00000000015A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_15a0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5ed186a1456c6853d699ca6d067463ffe06d26866ba031add1fa686d867b9638
Instruction ID: fccc9334d05e834ef71f543922947b56d8dc3815bf0661dc989a0a7c7f725cc5
Opcode Fuzzy Hash: 5ed186a1456c6853d699ca6d067463ffe06d26866ba031add1fa686d867b9638
Instruction Fuzzy Hash: E6F0963175021447E7196B79F52C32E379AB784A50F44427CAA06CB3D5DEADCC50CB91

Function 015A4B34 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2077844563.00000000015A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_15a0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 57260d1d581cde5f35bce5d73047738fb03a8cf43f9a4c58861981a17b4b86f5
Instruction ID: de56fd16e6754b070c06a78497f4081b7dd0243badcf202e132acfba849d688c
Opcode Fuzzy Hash: 57260d1d581cde5f35bce5d73047738fb03a8cf43f9a4c58861981a17b4b86f5
Instruction Fuzzy Hash: 2EF0F075909244EFCB02DBF5A85809CBFB1EF85204B5880DAD1569B52AE6B846058B51

Function 015A5148 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2077844563.00000000015A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_15a0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb0e555bd67b71e68643553d5faed5f5d7fd72f98596b648c5a2183ca8ec8f2c
Instruction ID: aac50a5ce92f726bb8051692940d39466a410afd7ee8fe3ab676eababfa27d45
Opcode Fuzzy Hash: bb0e555bd67b71e68643553d5faed5f5d7fd72f98596b648c5a2183ca8ec8f2c
Instruction Fuzzy Hash: 01E09B363012049BC714DE69F89C95EBBBAEBC83517508539E50EC3319DE355C05C760

Function 015A13B0 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2077844563.00000000015A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_15a0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 52c5efc1ee9d846c00bd568c94d6f8ff467bc54e4e7900700a9aba0ec619f5d0
Instruction ID: 96e3ce2631b91ea03fb104f357cae779dabbcb426bee2ce0abbf7c6b80526ff9
Opcode Fuzzy Hash: 52c5efc1ee9d846c00bd568c94d6f8ff467bc54e4e7900700a9aba0ec619f5d0
Instruction Fuzzy Hash: E1F0B775640606CFDB14EF65D198A6DBBB2FF88704F2044A9E8069F3A1CB799C45CF00

Function 015A0F28 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2077844563.00000000015A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_15a0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4bb6d5c63de67db732e6a957f63e5a57eab06feefb8f6c49d1408b4c9d58b85b
Instruction ID: 3c23ea038efbef2f489a15c7218b408046f400b783097a66e897d3ff9449523f
Opcode Fuzzy Hash: 4bb6d5c63de67db732e6a957f63e5a57eab06feefb8f6c49d1408b4c9d58b85b
Instruction Fuzzy Hash: 8CE09230915245DFCB01CF64E95096C7FB1EF4620472006EBD409DB256D7305E05DB21

Function 015A0F38 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2077844563.00000000015A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_15a0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6e3c31043f278c43730b8dbf383f47a17321e79faf14be342064b0e9c35b41da
Instruction ID: 7cd00ed33e1c7ab664e8cbc4dac142cea5d1c08f2c7d1326b268808526729fae
Opcode Fuzzy Hash: 6e3c31043f278c43730b8dbf383f47a17321e79faf14be342064b0e9c35b41da
Instruction Fuzzy Hash: 46D01270A00109EF8B00DFA4E90555D7BF5EB45204B2045AA980DD7251EA315E109B40

Non-executed Functions

Function 015A1E2F Relevance: 5.4, Strings: 4, Instructions: 383COMMON

Download Yara Rule

Strings

LRcq, xrefs: 015A213F
", xrefs: 015A1F97
LRcq, xrefs: 015A1E69
LRcq, xrefs: 015A1EDF

Memory Dump Source

Source File: 00000006.00000002.2077844563.00000000015A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 015A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_15a0000_Honda.jbxd

Similarity

API ID:
String ID: "$LRcq$LRcq$LRcq
API String ID: 0-3963444180
Opcode ID: a4ae0a2a592426b134e8b2841f318f248467e224fd2083184eb6b07036d23df2
Instruction ID: 247eb765382bfa07796b6c5d701a2854d8e0fe52428a7d896ba934d5aef3e825
Opcode Fuzzy Hash: a4ae0a2a592426b134e8b2841f318f248467e224fd2083184eb6b07036d23df2
Instruction Fuzzy Hash: B2D1DF31B406068FCB15CFA8C881AAEBBF2BF88300F548569D515DF295D774ED42CBA1

Analysis Process: Honda.exePID: 5084, Parent PID: 1028COMMON

Executed Functions

Function 01022788 Relevance: 2.0, Instructions: 2001COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2166125616.0000000001020000.00000040.00000800.00020000.00000000.sdmp, Offset: 01020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 69258d3571be0b5733cc5637d29a1c3473d34821ee030c604c13ce1ea4ac8496
Instruction ID: 1254bd68e5aeca13c6585657281e364356062de7d38f5d65bf2e8f4313c47ae8
Opcode Fuzzy Hash: 69258d3571be0b5733cc5637d29a1c3473d34821ee030c604c13ce1ea4ac8496
Instruction Fuzzy Hash: E3039E34A107199FDB22DF68CC44B9DBBB6FF89704F118595E5086B291CB70AE85CF82

Function 01025A41 Relevance: 1.7, Strings: 1, Instructions: 440COMMON

Download Yara Rule

Strings

$cq, xrefs: 01025A71

Memory Dump Source

Source File: 00000009.00000002.2166125616.0000000001020000.00000040.00000800.00020000.00000000.sdmp, Offset: 01020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1020000_Honda.jbxd

Similarity

API ID:
String ID: $cq
API String ID: 0-2110363268
Opcode ID: 33abc08c101e6de5c1e6c4382854912f55ba3b6d36536cd8c38307384e2b022f
Instruction ID: 3ef4465709b8bb9f085e315aff933c751cf1596dce361f19b22896edac8ee7ec
Opcode Fuzzy Hash: 33abc08c101e6de5c1e6c4382854912f55ba3b6d36536cd8c38307384e2b022f
Instruction Fuzzy Hash: 17F1AF34B002159FDB25DF68CE44BAEBBF2AF85304F148469D8859B6A5DB71EC42CF84

Function 01021CC0 Relevance: 2.6, Strings: 2, Instructions: 123COMMON

Download Yara Rule

Strings

$cq, xrefs: 01021D1A
$cq, xrefs: 01021D0E

Memory Dump Source

Source File: 00000009.00000002.2166125616.0000000001020000.00000040.00000800.00020000.00000000.sdmp, Offset: 01020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1020000_Honda.jbxd

Similarity

API ID:
String ID: $cq$$cq
API String ID: 0-2695052418
Opcode ID: e0e1a100b1427f2bf5a75db43f848e3d9973676b175c9cb44766cc79b2efcb74
Instruction ID: 728c9597ea55c02a3a500e8af66630d38fc54553af33bfb39c2cecc88f86587a
Opcode Fuzzy Hash: e0e1a100b1427f2bf5a75db43f848e3d9973676b175c9cb44766cc79b2efcb74
Instruction Fuzzy Hash: 99419374A00109DFCB19EF69D84899E7BF6FF89314B148169E805CB366DB34AD06CF51

Function 01020848 Relevance: 1.4, Strings: 1, Instructions: 116COMMON

Download Yara Rule

Strings

4'cq, xrefs: 0102085B

Memory Dump Source

Source File: 00000009.00000002.2166125616.0000000001020000.00000040.00000800.00020000.00000000.sdmp, Offset: 01020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1020000_Honda.jbxd

Similarity

API ID:
String ID: 4'cq
API String ID: 0-182294849
Opcode ID: b1d9132cb4eed6e3b70c6ddce89f2c7f0e962e78c15cf098a5e85c3f3354ecc9
Instruction ID: 9f18e580bd7ce424017fe061302d655e74a8b37962bb59a642acb438b19828eb
Opcode Fuzzy Hash: b1d9132cb4eed6e3b70c6ddce89f2c7f0e962e78c15cf098a5e85c3f3354ecc9
Instruction Fuzzy Hash: 0141D070A002099FCB00EBB8E854B9E7BF2FF84304F208569E505AB3A9DB749D45CB91

Function 01021CB0 Relevance: 1.4, Strings: 1, Instructions: 109COMMON

Download Yara Rule

Strings

$cq, xrefs: 01021D0E

Memory Dump Source

Source File: 00000009.00000002.2166125616.0000000001020000.00000040.00000800.00020000.00000000.sdmp, Offset: 01020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1020000_Honda.jbxd

Similarity

API ID:
String ID: $cq
API String ID: 0-2110363268
Opcode ID: 83f26ab80c9e2d4fb8af79528d819048def511c4a8e37c83e89e52364885e0c7
Instruction ID: bcc3e03705ba371a23c85b22d3073735af84e25116947689400c8a57090dc2a5
Opcode Fuzzy Hash: 83f26ab80c9e2d4fb8af79528d819048def511c4a8e37c83e89e52364885e0c7
Instruction Fuzzy Hash: 1E418039B00109DFCB15EF68D8489AE7BF6EF89315B108169E809CB276DB34AD05CF51

Function 01021B68 Relevance: 1.3, Strings: 1, Instructions: 95COMMON

Download Yara Rule

Strings

tPcq, xrefs: 01021C43

Memory Dump Source

Source File: 00000009.00000002.2166125616.0000000001020000.00000040.00000800.00020000.00000000.sdmp, Offset: 01020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1020000_Honda.jbxd

Similarity

API ID:
String ID: tPcq
API String ID: 0-3229073321
Opcode ID: e47f0844183af09a70a7cd28152873e55823e3449db6c30c842041cbb7a50300
Instruction ID: 819cfa174ffbf94bbf2273f1918fb3c61abcff3804a251b097b2c77c6ac43204
Opcode Fuzzy Hash: e47f0844183af09a70a7cd28152873e55823e3449db6c30c842041cbb7a50300
Instruction Fuzzy Hash: 32317E75B00111CFC748EF78D8989ADBBB2AF49714B2044A9E446DB366DB31DC02CB80

Function 01020838 Relevance: 1.3, Strings: 1, Instructions: 78COMMON

Download Yara Rule

Strings

4'cq, xrefs: 0102085B

Memory Dump Source

Source File: 00000009.00000002.2166125616.0000000001020000.00000040.00000800.00020000.00000000.sdmp, Offset: 01020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1020000_Honda.jbxd

Similarity

API ID:
String ID: 4'cq
API String ID: 0-182294849
Opcode ID: 951d66e99200c6d9e7730b5ed7a2305485f7f30974fb43c807d4d89276d0bab1
Instruction ID: 6da142473e6c4fb9968aa5579390c0dc340e5da9d3e51f7de10cb0132f6ce3a1
Opcode Fuzzy Hash: 951d66e99200c6d9e7730b5ed7a2305485f7f30974fb43c807d4d89276d0bab1
Instruction Fuzzy Hash: D031E474A002099FCB01EFB8E894B8D7BF2FF84308F248519F405AB269DB749885CB41

Function 01021B78 Relevance: 1.3, Strings: 1, Instructions: 69COMMON

Download Yara Rule

Strings

tPcq, xrefs: 01021C43

Memory Dump Source

Source File: 00000009.00000002.2166125616.0000000001020000.00000040.00000800.00020000.00000000.sdmp, Offset: 01020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1020000_Honda.jbxd

Similarity

API ID:
String ID: tPcq
API String ID: 0-3229073321
Opcode ID: e8e9be6d92d13556b5fa4270882e99be9d2fa63963dddfca5a766bb139284d09
Instruction ID: 015210c9f2f54a2ac6473b9542e1e1ba62dee9824e94b53450b2a3494cfb0c58
Opcode Fuzzy Hash: e8e9be6d92d13556b5fa4270882e99be9d2fa63963dddfca5a766bb139284d09
Instruction Fuzzy Hash: D4213C75B00126CFCB48EF78C55896DB7F2AF48715B2044A9D906DB365DB35DD02CB80

Function 01024F42 Relevance: 1.3, Strings: 1, Instructions: 56COMMON

Download Yara Rule

Strings

`Qcq, xrefs: 01024FBA

Memory Dump Source

Source File: 00000009.00000002.2166125616.0000000001020000.00000040.00000800.00020000.00000000.sdmp, Offset: 01020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1020000_Honda.jbxd

Similarity

API ID:
String ID: `Qcq
API String ID: 0-516822358
Opcode ID: 7d9d9441589a8e7de005846dd34300eb1d46e911e3adab569cc90cef5b66f495
Instruction ID: d0ac2e184311aa823d4c1ba5e6f967bc83ada71b0355751f15f84aaa8cd30007
Opcode Fuzzy Hash: 7d9d9441589a8e7de005846dd34300eb1d46e911e3adab569cc90cef5b66f495
Instruction Fuzzy Hash: 9911E270A042648FDB14EBB9C955BEE7FF2AF88304F104028D982E7785DB389904CBA1

Function 01024F48 Relevance: 1.3, Strings: 1, Instructions: 56COMMON

Download Yara Rule

Strings

`Qcq, xrefs: 01024FBA

Memory Dump Source

Source File: 00000009.00000002.2166125616.0000000001020000.00000040.00000800.00020000.00000000.sdmp, Offset: 01020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1020000_Honda.jbxd

Similarity

API ID:
String ID: `Qcq
API String ID: 0-516822358
Opcode ID: b7c6a407fce083720f98c748ae2536353887370a432fa0ca8b71ce199896169c
Instruction ID: 9a7270dc329854e774d8da4427c2365130285dafe01ff36fbb56491c81253a21
Opcode Fuzzy Hash: b7c6a407fce083720f98c748ae2536353887370a432fa0ca8b71ce199896169c
Instruction Fuzzy Hash: 1111B270A042298FDB54EBB9C945BAE7BF2AFC8304F104028D541E7384DF389900CBA1

Function 01024868 Relevance: .2, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2166125616.0000000001020000.00000040.00000800.00020000.00000000.sdmp, Offset: 01020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 209f33b1cadc30d833acb1b832b6e44c03cdac03342dbab2547cfc8236369624
Instruction ID: d8f0ecd20aff34be807dbb396d26dfeeaaaa5b6430f2c952043af3e4eed1424e
Opcode Fuzzy Hash: 209f33b1cadc30d833acb1b832b6e44c03cdac03342dbab2547cfc8236369624
Instruction Fuzzy Hash: C8A15930600616CFCB15DF18C484AA9BBF2EF45350F5AC5A9E48A9B666D730FD94CB84

Function 01021062 Relevance: .2, Instructions: 219COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2166125616.0000000001020000.00000040.00000800.00020000.00000000.sdmp, Offset: 01020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e040bf8cc2a85bfd38eefb491086e2fd93be3ed60e5270399f9e8b9dcaedc5c7
Instruction ID: d1418d049e76710508c69af80df39f1fcb3326857054d4300138f15ab38f1e46
Opcode Fuzzy Hash: e040bf8cc2a85bfd38eefb491086e2fd93be3ed60e5270399f9e8b9dcaedc5c7
Instruction Fuzzy Hash: B9916F75E002189FCB05DFE5D9549EEBBFAFF89304F14802AE905AB264DB35990ACF50

Function 01025E28 Relevance: .2, Instructions: 184COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2166125616.0000000001020000.00000040.00000800.00020000.00000000.sdmp, Offset: 01020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 39f01bf5cdd7238453b1a420e87496bee0283cda74bc89873b32a887aeb00163
Instruction ID: f337cf45c5d71c46291b876d8ae46098328a9e6d8fff97759109782bf6caaabf
Opcode Fuzzy Hash: 39f01bf5cdd7238453b1a420e87496bee0283cda74bc89873b32a887aeb00163
Instruction Fuzzy Hash: 37617B34B042259FDB14DFA8DD94BEEBBF2BF89714F148065E945AB2A1CB349C41CB90

Function 01022777 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2166125616.0000000001020000.00000040.00000800.00020000.00000000.sdmp, Offset: 01020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ea49f39aa25c260be782b9595b84184a4f404b0c44c5c4a9ddba410537756ccb
Instruction ID: cbd86a77a15727bcc24baa61784a697584e4b2d7aae56e45ffe89a350181e4a3
Opcode Fuzzy Hash: ea49f39aa25c260be782b9595b84184a4f404b0c44c5c4a9ddba410537756ccb
Instruction Fuzzy Hash: 3431F131A04218CFE715CFE8D844BA97BF5EF45310F1884A9E885CB1A2D738C944CB61

Function 01026060 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2166125616.0000000001020000.00000040.00000800.00020000.00000000.sdmp, Offset: 01020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d05a773ad89978a454f792ce88cc189f8a9f8e27874096231ef710e5fb32253f
Instruction ID: 55a2422871cf5d6792cbe65d206686fab8cc3ebece565dd8fc4a997aba9100b3
Opcode Fuzzy Hash: d05a773ad89978a454f792ce88cc189f8a9f8e27874096231ef710e5fb32253f
Instruction Fuzzy Hash: F11125B1E082885FC765DB7C9858B9F3FB1DFC6314F1440EEE8848B253DA7648068791

Function 01025218 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2166125616.0000000001020000.00000040.00000800.00020000.00000000.sdmp, Offset: 01020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ffb353904802815eca1e0ee9b3fafed71d6c61684ae5aa3255340fbbf4b0e010
Instruction ID: 220e217b0640c2a25e3d6ed4c55be6f50a880a4271cbe63d2ccc83e311f8566a
Opcode Fuzzy Hash: ffb353904802815eca1e0ee9b3fafed71d6c61684ae5aa3255340fbbf4b0e010
Instruction Fuzzy Hash: 1F01DF76B041318FC3159B7DE81485E7BF69F8E61531A40EAE805DB3B6CE20EC068B90

Function 010218F8 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2166125616.0000000001020000.00000040.00000800.00020000.00000000.sdmp, Offset: 01020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 48a65115b6b3aef5c820cccc5e456a41d2369154739d12dae8829c4be1113dac
Instruction ID: 27e9fbdb64662861c6416de7d1f1692a056658134c59f2575cbeee9df6202222
Opcode Fuzzy Hash: 48a65115b6b3aef5c820cccc5e456a41d2369154739d12dae8829c4be1113dac
Instruction Fuzzy Hash: 50015A76B002188FCB40EFA9E8006EEBBF5EB94321F00803AD599E7240E7306A55CB90

Function 01020A98 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2166125616.0000000001020000.00000040.00000800.00020000.00000000.sdmp, Offset: 01020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9f23a130e92a3b3424328972858afe60a840daac9175e1565532cc18cdbf8d22
Instruction ID: 1b8949993ac411bc632ae734447572242bfea8becc761449c196f8943bca7c1d
Opcode Fuzzy Hash: 9f23a130e92a3b3424328972858afe60a840daac9175e1565532cc18cdbf8d22
Instruction Fuzzy Hash: 6E0149397043504FEF15AB78ED6D7293BA2AB9264CF0405ECE906C77E5DA66D804C740

Function 01025228 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2166125616.0000000001020000.00000040.00000800.00020000.00000000.sdmp, Offset: 01020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 43e6cfdb13473c4f5229096e81245d06547dd0751a81eedd87637af63c11aec6
Instruction ID: f8f38c54279b14aee0701b079643790fdb6f2f17dc7f979ec0a883edb6f0d968
Opcode Fuzzy Hash: 43e6cfdb13473c4f5229096e81245d06547dd0751a81eedd87637af63c11aec6
Instruction Fuzzy Hash: F8F062767101318FC754AB7DE94891A77EAAF9DA6531501B9E805DB335CE31EC018BA0

Function 01020AA8 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2166125616.0000000001020000.00000040.00000800.00020000.00000000.sdmp, Offset: 01020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3cff38df9f67a326624b6d03f6aea174ffefee6fd0783818a6b55bad1e19d6ef
Instruction ID: fc4064df225d0ea6abe7777f4a18197d058ccd29f1e010c9ea0c9fbc67315430
Opcode Fuzzy Hash: 3cff38df9f67a326624b6d03f6aea174ffefee6fd0783818a6b55bad1e19d6ef
Instruction Fuzzy Hash: DCF024347003254BEB147B78E92C33A3BA6AB91A58F4005B8EE06C77E8DEA5D844C380

Function 01025139 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2166125616.0000000001020000.00000040.00000800.00020000.00000000.sdmp, Offset: 01020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3367c7f731aaffbc4e0c36a60104219f690e9f0b9e2bcfdb235b40cf39d575d0
Instruction ID: b5b3d771ca7adda845fc7453a0b88e16fad21b0d46e3e5e9d4f57ed4e1f7bf7f
Opcode Fuzzy Hash: 3367c7f731aaffbc4e0c36a60104219f690e9f0b9e2bcfdb235b40cf39d575d0
Instruction Fuzzy Hash: A1F0E2393852445FC3159BB4D8A885D7FB6EFCA26071880BAEC49C7276CE319C0BD7A1

Function 01020F07 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2166125616.0000000001020000.00000040.00000800.00020000.00000000.sdmp, Offset: 01020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: de247e4479aae6c62199ff95e785b44c7c5ed7edc5c524fa16c9af2326673a82
Instruction ID: 0a4bce8f2f1456a0d78ccb6993e4ed25af89ec254f7059551389adf11838035d
Opcode Fuzzy Hash: de247e4479aae6c62199ff95e785b44c7c5ed7edc5c524fa16c9af2326673a82
Instruction Fuzzy Hash: FCF0E562A4E7E44FDB63567558616A53FA4CA2301075608EBD8C6CB6A3E5448C0987E2

Function 01024B34 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2166125616.0000000001020000.00000040.00000800.00020000.00000000.sdmp, Offset: 01020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cd2e994ca52ec5c4e8ae81a98d89639493f9db03cce10a805dba269ed58d5cd2
Instruction ID: 9fefd0c6a95e42236a9dbf24327f4d4d166ded143703b57ff134ee2f92fab4d2
Opcode Fuzzy Hash: cd2e994ca52ec5c4e8ae81a98d89639493f9db03cce10a805dba269ed58d5cd2
Instruction Fuzzy Hash: 46F02475D09245EFDB01CBF59C540EC7FB0EF95304B1480EAD49597936E7758605CB50

Function 01025148 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2166125616.0000000001020000.00000040.00000800.00020000.00000000.sdmp, Offset: 01020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7b2c6c6411cc064f8cdad7c74a52cef938f2a1294466ffb44361a3208488686e
Instruction ID: 9bbf009691cc8ced14ee77582d5540401cf44365f1c4c94dd66131cc918a8cbd
Opcode Fuzzy Hash: 7b2c6c6411cc064f8cdad7c74a52cef938f2a1294466ffb44361a3208488686e
Instruction Fuzzy Hash: 2AE02B393001045BC310DB69E88884ABBAAEBD93107108039E80DC3324CE315C01C760

Function 010213B0 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2166125616.0000000001020000.00000040.00000800.00020000.00000000.sdmp, Offset: 01020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4ffd29a7528e6df6f81197138c5430bf6724444ed7e785d5cb5b473e5e57e228
Instruction ID: a467a9dfb6dd38f4c73e5cf0679bc504dbc7c7989f797db38d2f7c9b4fd508d3
Opcode Fuzzy Hash: 4ffd29a7528e6df6f81197138c5430bf6724444ed7e785d5cb5b473e5e57e228
Instruction Fuzzy Hash: BFF0B774640215CFDB15EFA4E658A6D77B1FF89708F2044A9E80A9B7B5CB799805CF00

Function 01020F28 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2166125616.0000000001020000.00000040.00000800.00020000.00000000.sdmp, Offset: 01020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 29b20f3659a9f4faa581edbf3f3d53d5ad12c0e0a55358eb5b3e348df9c58e21
Instruction ID: 2b7cf6fcf813b44b33716a5c5b29d00b2100b0dd2621f16ab0a0f4d5beb0c70c
Opcode Fuzzy Hash: 29b20f3659a9f4faa581edbf3f3d53d5ad12c0e0a55358eb5b3e348df9c58e21
Instruction Fuzzy Hash: 29E0DF70A0C188AFCB02DBF4E9224AE7FF1DF06208B2044EADC48D7223E6705E05A740

Function 01020F38 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2166125616.0000000001020000.00000040.00000800.00020000.00000000.sdmp, Offset: 01020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: feecd5a82179ca6878cd8f7d4e53125f2356823aa8653c33ffbdb5fcf7eb62df
Instruction ID: 9a7393d275901e2a758a1fa4f76d849b7f7281967763bcb080508504c64b4c10
Opcode Fuzzy Hash: feecd5a82179ca6878cd8f7d4e53125f2356823aa8653c33ffbdb5fcf7eb62df
Instruction Fuzzy Hash: 01D01770A0410DEF8B00EFA8EA4555EBBF9EB45208B2085A9A808D7211EA716F00AB90

Non-executed Functions

Function 01021E2F Relevance: 5.4, Strings: 4, Instructions: 402COMMON

Download Yara Rule

Strings

LRcq, xrefs: 01021EDF
LRcq, xrefs: 0102213F
LRcq, xrefs: 01021E69
", xrefs: 01021F97

Memory Dump Source

Source File: 00000009.00000002.2166125616.0000000001020000.00000040.00000800.00020000.00000000.sdmp, Offset: 01020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_1020000_Honda.jbxd

Similarity

API ID:
String ID: "$LRcq$LRcq$LRcq
API String ID: 0-3963444180
Opcode ID: fb037e338979251343721e7512034bf3e916a55efae36fa9b7d5c1dea7744d25
Instruction ID: e575329ac6aeb46d82b584f369d020cd80122072ed2b980013fe7852f609b05f
Opcode Fuzzy Hash: fb037e338979251343721e7512034bf3e916a55efae36fa9b7d5c1dea7744d25
Instruction Fuzzy Hash: 93E1F370B002269FDB15CFA8C880ABEBBF2FF88310F1485A5E555DB296D734D946CB91

Analysis Process: Honda.exePID: 6152, Parent PID: 1028COMMON

Executed Functions

Function 008B2788 Relevance: 2.0, Instructions: 1993COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cd65474c3b68d07f26af523faa70a601307127654ab9fb60eb7ee18b5ac54744
Instruction ID: 05c61334d301cc70a5462b3438f064b2e6ca87adc91e5f419722235226bacf50
Opcode Fuzzy Hash: cd65474c3b68d07f26af523faa70a601307127654ab9fb60eb7ee18b5ac54744
Instruction Fuzzy Hash: 58038D34A107199FD722DF64DC44BE9BBB6FF89700F1185A5E5086B291DBB06E81CF82

Function 008B5A41 Relevance: 1.7, Strings: 1, Instructions: 424COMMON

Download Yara Rule

Strings

$cq, xrefs: 008B5A71

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID: $cq
API String ID: 0-2110363268
Opcode ID: a3431fbb2feea4d72672756ca79952d198b4223e0e799f4dad582a3e69796f85
Instruction ID: c427e06bdb66d4a7ca67d281baf6c6875fac1d5a513bfe8450e0cb5abb66667c
Opcode Fuzzy Hash: a3431fbb2feea4d72672756ca79952d198b4223e0e799f4dad582a3e69796f85
Instruction Fuzzy Hash: 65F19A70A00A059FDB24DF64D958BAEBBB2FF89711F148429D446EB3A5DB31EC41CB90

Function 008B4C68 Relevance: 2.9, Strings: 2, Instructions: 415COMMON

Download Yara Rule

Strings

`Qcq, xrefs: 008B4FBA
H+a, xrefs: 008B4F5C

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID: H+a$`Qcq
API String ID: 0-2592338982
Opcode ID: 3c524a8e828e9ea9c6590011ce4102e662b33c42df39f257467e094c4ed0605b
Instruction ID: ce3795e4e44d2e678679369be0b0c7cedbd93fe0f99fc9a83f97d0552ab02a3c
Opcode Fuzzy Hash: 3c524a8e828e9ea9c6590011ce4102e662b33c42df39f257467e094c4ed0605b
Instruction Fuzzy Hash: D621CD71A082498FDB11EBA8C9557EE7BB2FF89310F144429D442EB3D5DF3499018BA1

Function 008B17C8 Relevance: 2.6, Strings: 2, Instructions: 147COMMON

Download Yara Rule

Strings

Hgq, xrefs: 008B181D
(gq, xrefs: 008B18B1

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID: (gq$Hgq
API String ID: 0-3303014377
Opcode ID: 456ebca56521a49d45eab55e40e493238c85d98f708119d0fbb2fa6b39201907
Instruction ID: 0a42361024348eb7cae57ae334fc31baaec52e86af950affea795da0d56586bd
Opcode Fuzzy Hash: 456ebca56521a49d45eab55e40e493238c85d98f708119d0fbb2fa6b39201907
Instruction Fuzzy Hash: 2251C071E042499FCB05DFA998242EEBFB6FF85310F04C4BAD158E7291EB340A05CB92

Function 008B1CC0 Relevance: 2.6, Strings: 2, Instructions: 122COMMON

Download Yara Rule

Strings

$cq, xrefs: 008B1D0E
$cq, xrefs: 008B1D1A

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID: $cq$$cq
API String ID: 0-2695052418
Opcode ID: bd313e9789eb281520585455d8385b3f20f99aeb47433afb8111f7d3a4357234
Instruction ID: 06567abb885c6c162ceed13c2a69683049f91cc50b2c6d362b3a6ac3d3eec80d
Opcode Fuzzy Hash: bd313e9789eb281520585455d8385b3f20f99aeb47433afb8111f7d3a4357234
Instruction Fuzzy Hash: 4E41C274A001059FCB05EF68E8589EE7BB6FF89310754C169E405CB3A5DB349D06CB91

Function 008B4F48 Relevance: 2.6, Strings: 2, Instructions: 56COMMON

Download Yara Rule

Strings

`Qcq, xrefs: 008B4FBA
H+a, xrefs: 008B4F5C

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID: H+a$`Qcq
API String ID: 0-2592338982
Opcode ID: 6626c3fc6b8aa5cdc581fcc1b94ce6899441ff87cb5b4c203e1bee1ba9e28c5e
Instruction ID: 6851fda43a4604dbdeeafdfdf45447c79e714df73cd62bb695f2e68ec8d508d9
Opcode Fuzzy Hash: 6626c3fc6b8aa5cdc581fcc1b94ce6899441ff87cb5b4c203e1bee1ba9e28c5e
Instruction Fuzzy Hash: A3118B70A042088FDB14EBA9D9557EE7BF6FF88300F108028D402E7385DF75AD418BA1

Function 008B1B68 Relevance: 1.4, Strings: 1, Instructions: 120COMMON

Download Yara Rule

Strings

tPcq, xrefs: 008B1C43

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID: tPcq
API String ID: 0-3229073321
Opcode ID: e804e7a963dc65e2270b85fe0ec42f09e74afc74542526f46183641a50daf904
Instruction ID: a98f907ae2445867e671f2a72e2f15c9c9bb81e661711016224ae233ee06ebf7
Opcode Fuzzy Hash: e804e7a963dc65e2270b85fe0ec42f09e74afc74542526f46183641a50daf904
Instruction Fuzzy Hash: 4541B076A002628FCB45DB78D8686ADBFB1FF05720B6544ADD406DF362DA35AC02CB81

Function 008B0848 Relevance: 1.4, Strings: 1, Instructions: 113COMMON

Download Yara Rule

Strings

4'cq, xrefs: 008B085B

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID: 4'cq
API String ID: 0-182294849
Opcode ID: 9a38ac413c312e4b2da5bbc14198e1cafb7c0fec64614695215ef6c796d558ca
Instruction ID: 470ed6c0ddea251de7de08a91669aad85d8e41b9171e1ba40912178067048d42
Opcode Fuzzy Hash: 9a38ac413c312e4b2da5bbc14198e1cafb7c0fec64614695215ef6c796d558ca
Instruction Fuzzy Hash: 70418170A002099FDB05EBBCE855BDE7BB2FF84310F209429E505DB395DB749945CB91

Function 008B1CBB Relevance: 1.3, Strings: 1, Instructions: 94COMMON

Download Yara Rule

Strings

$cq, xrefs: 008B1D0E

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID: $cq
API String ID: 0-2110363268
Opcode ID: 0510493611c63aa828f09bf5deb0718369bcccbdbc79b6a7a4b6888aa6d8caf6
Instruction ID: 719bf3551496cb6c4451182a9dc5b1023b88fb036c74e91a08f223156598ef7d
Opcode Fuzzy Hash: 0510493611c63aa828f09bf5deb0718369bcccbdbc79b6a7a4b6888aa6d8caf6
Instruction Fuzzy Hash: 50315978A001059FCB48EF28E8589AE77BAFF88321714C169E906DB364DB34AD05CB91

Function 008B0838 Relevance: 1.3, Strings: 1, Instructions: 75COMMON

Download Yara Rule

Strings

4'cq, xrefs: 008B085B

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID: 4'cq
API String ID: 0-182294849
Opcode ID: b9b31a6b18f1e0192db6cc9fd05e6e7c898e36c7b1055c101c99ae349c162b12
Instruction ID: e490053ffe9d4841297fad93af43265040b0eacadaae6aebee5255bbd64c37bf
Opcode Fuzzy Hash: b9b31a6b18f1e0192db6cc9fd05e6e7c898e36c7b1055c101c99ae349c162b12
Instruction Fuzzy Hash: 673161B49001099FDB01EFA8E894ADDBFB2FF84314F20D525E105AB356DB715989CB51

Function 008B1C73 Relevance: 1.3, Strings: 1, Instructions: 69COMMON

Download Yara Rule

Strings

tPcq, xrefs: 008B1C43

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID: tPcq
API String ID: 0-3229073321
Opcode ID: 64894721f5e555f2469dc3471d53c348fdfff8ab027826c3de4d57a95c39c377
Instruction ID: f15f197699e26b52aa95fb55cdcf9c6e6f47b955f82db9a886a520ca145bf72b
Opcode Fuzzy Hash: 64894721f5e555f2469dc3471d53c348fdfff8ab027826c3de4d57a95c39c377
Instruction Fuzzy Hash: 6221CD757401118FCB49DBB4D8E88AD7BB2FF09720B554095E406CF3A6CB26AC02CB52

Function 008B1B78 Relevance: 1.3, Strings: 1, Instructions: 69COMMON

Download Yara Rule

Strings

tPcq, xrefs: 008B1C43

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID: tPcq
API String ID: 0-3229073321
Opcode ID: 200f897f317c83c9f907a5ad1e66f1c4970f84a6ac75a26e36112031635305e0
Instruction ID: 241d205bd54d702e9bb2e5c233315292b95ec517221ea1bbd8adba0fc16925d5
Opcode Fuzzy Hash: 200f897f317c83c9f907a5ad1e66f1c4970f84a6ac75a26e36112031635305e0
Instruction Fuzzy Hash: EB212871B00116CFCB48EFB8C56896DBBB2EF48710B6044A9D806DF3A5DA35DD02CB81

Function 008B1063 Relevance: .3, Instructions: 259COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ffd9f9d53e186fb0a5f0eaeceef44ccf741ec7f500bb58dcaf44fd86b6f3b828
Instruction ID: 4512d1ac66e266ec084d7bac2b337051dfdc1cd3ee2c4e79983ea8bcd144c57e
Opcode Fuzzy Hash: ffd9f9d53e186fb0a5f0eaeceef44ccf741ec7f500bb58dcaf44fd86b6f3b828
Instruction Fuzzy Hash: 29B14AB1D00208DFCB15DFA5E858AEEBBB9FF89310F14812AE515EB254DB349946CF90

Function 008B4868 Relevance: .2, Instructions: 217COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6790f109918c8db884d1ec6383eba027e0f2b455021ab1ad31f00a2326e609df
Instruction ID: 3b2da897dc0076db0abd8855f2cf97d852b4c5b87bccb697c963d9a14ae4ec8d
Opcode Fuzzy Hash: 6790f109918c8db884d1ec6383eba027e0f2b455021ab1ad31f00a2326e609df
Instruction Fuzzy Hash: 5EA15530600609CFCB25DF58C484AA9BBF2FF44310F56D5A9E4499B666E730FD98CB84

Function 008B5E28 Relevance: .2, Instructions: 178COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b1d4b29bf58c981aabfff1147279b478b412fa475bc5092214b4a4cf1112cab7
Instruction ID: 32047b0d50a29b05af0b8000bd94e59f99b43f72e822627f741d3ac4e563e856
Opcode Fuzzy Hash: b1d4b29bf58c981aabfff1147279b478b412fa475bc5092214b4a4cf1112cab7
Instruction Fuzzy Hash: 92615735A006189FCB04DF68D998BAEBBB2FF88710F148065E905EB3A5DB309C41CB90

Function 008B2777 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cf336df133971d150e51e0580688602311138d28175773c2bb26b886fb276e02
Instruction ID: aa9b3a64fbbd12ca146b8760d5d4887c6f0491ca4f9120c422c4718b7b398f87
Opcode Fuzzy Hash: cf336df133971d150e51e0580688602311138d28175773c2bb26b886fb276e02
Instruction Fuzzy Hash: 5F219C30A05208CFD7149F69D898BEE7BFAFF45311F0584AAE405CB2A2D7388D44CB61

Function 008B6060 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d8fb87024902b2e4ed7ebe0fe6ca5dae50e88423d38cfcebbe4ac33217974271
Instruction ID: 617fcfdcb880cd39bae6bf5fa00680f735398f260bb02ee72b9df3cab5a9754b
Opcode Fuzzy Hash: d8fb87024902b2e4ed7ebe0fe6ca5dae50e88423d38cfcebbe4ac33217974271
Instruction Fuzzy Hash: 6A1144B2D043095FCB51DB78A8187AE3BB6EF86320F1245BED054AB282EB3509068751

Function 008B5218 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c0e2c94dbaed3534055974121efd993e6d505ed73f3e9725e55106e259ba5d28
Instruction ID: c69dfd09f63830acaf57d0f58fc536ed64c8984731d72501e685783ebb6c41bf
Opcode Fuzzy Hash: c0e2c94dbaed3534055974121efd993e6d505ed73f3e9725e55106e259ba5d28
Instruction Fuzzy Hash: 5B0162B6B102318FC7159B78E9189597BBAEF8976131641BAE405DB37ACA31DC018BA0

Function 008B5228 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fe9bd7b4977936c792f67e9f50a071e7d7d143dda2b83874c8d5d39a02f5b860
Instruction ID: cbe8a8e280ae2de314daa9630e57984be0239a0467d8701c112dc9e305e53b66
Opcode Fuzzy Hash: fe9bd7b4977936c792f67e9f50a071e7d7d143dda2b83874c8d5d39a02f5b860
Instruction Fuzzy Hash: 27F04F767101318FC714AB7DF94885A77FAEF89B6131541B9E905DB338CA31EC018BA0

Function 008B0A98 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4ae6019db169075b135fda317287e0ecd66996a5447b9f05eac7502a92127b9f
Instruction ID: 1bbfff028857144559308554e185f14163ecc9d4b95ea6b92bb02bb3490e12f9
Opcode Fuzzy Hash: 4ae6019db169075b135fda317287e0ecd66996a5447b9f05eac7502a92127b9f
Instruction Fuzzy Hash: E401F4787003108FE7056770FA2D2EB7B65FB82764B0498B8D906C73E5DE688C01CB90

Function 008B0AA8 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7f0a7fecfe8f73d707675d8b11f3b36500e8d04c41379dea336a69b798619f10
Instruction ID: 6065b728790ae5de1b1f9c8b03fece4369b5ba75dd889c93af72bd61eafc9524
Opcode Fuzzy Hash: 7f0a7fecfe8f73d707675d8b11f3b36500e8d04c41379dea336a69b798619f10
Instruction Fuzzy Hash: F2F06D757003248BD7046775F91C7AB766AFB86B65F0488789906C33E4DEA5CC40CB80

Function 008B4B34 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 111b8b35f554eb435bcc527ca1ade3b8ea800cc390953973be0ac16bde410f92
Instruction ID: afbe8c30e1823507148c3de3e9b26f602ea3e2daaa6be20622ae3b24fcc7411b
Opcode Fuzzy Hash: 111b8b35f554eb435bcc527ca1ade3b8ea800cc390953973be0ac16bde410f92
Instruction Fuzzy Hash: FEF0F0B1905284EFCB01CBF5A8590E87F70EF85304B1480EAD1A5D7626E6748609CB51

Function 008B5139 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7e7d39d6ad2ae2cb26aed66fe6af8b651f95c3f3f5a2231faf1171bc65a3e334
Instruction ID: c9ba7757ea134b0e5b931ce4eb60a79dcd514c8015ce57e8e8f1b8d667acea50
Opcode Fuzzy Hash: 7e7d39d6ad2ae2cb26aed66fe6af8b651f95c3f3f5a2231faf1171bc65a3e334
Instruction Fuzzy Hash: 5AF0B4763052405FC3069B64EC689997BAAEF8A231B15857AD449C72A7DA388C068761

Function 008B5148 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bdf9d8bf6c114db9331c599e0dc7703a32d4ed949e5102999b73eb4addff31f9
Instruction ID: 2b8e1f17246d9842b3cf378776a00ae96fd33857918a1b68130d8771242afe9b
Opcode Fuzzy Hash: bdf9d8bf6c114db9331c599e0dc7703a32d4ed949e5102999b73eb4addff31f9
Instruction Fuzzy Hash: C0E06D363021049BC708AB69E89889ABBAEFFC9261750C439E50AC3365DE359C0687A1

Function 008B13B0 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 393807126f60483d5708599a994fcefa6ed5ea38e20a39f4458c22cf8f8a44db
Instruction ID: 106bb893bb5df5afeb1c841dd154f29ab93ea68e4b3803acb2dbab00bade3e10
Opcode Fuzzy Hash: 393807126f60483d5708599a994fcefa6ed5ea38e20a39f4458c22cf8f8a44db
Instruction Fuzzy Hash: B0F017B4600205CFCB15EF64E16CAAC77B1FF89714F2084A8E5069F3A5CB399805CF00

Function 008B0F28 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: df34ec4b13eb3f5952d66138cbe2db48b99d45cec7d0a4b63441e78d780c4e29
Instruction ID: 3175d91244e8bc5fdb8c54081fa82e122602fbf513939400f77b24c588de23d3
Opcode Fuzzy Hash: df34ec4b13eb3f5952d66138cbe2db48b99d45cec7d0a4b63441e78d780c4e29
Instruction Fuzzy Hash: EAE092B09056499FC741DFB4EE2166C7BB0EF47300B2286DAD844DB1A2E6701E018B01

Function 008B0F70 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1901409c6ebc8590a87c2c2ca83857e610a4dd2ce9bcd73ec13260564a492963
Instruction ID: 1b00397e6fb413565ae47c12c21d7c15fe1d50bc0f97fb531b4cec327a84e519
Opcode Fuzzy Hash: 1901409c6ebc8590a87c2c2ca83857e610a4dd2ce9bcd73ec13260564a492963
Instruction Fuzzy Hash: 65D05B7161A3404FD3615674AA012A237A0E712325F1588F7D849C7362E511CC048B91

Function 008B0F38 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: df42b07cc7e5de40c5c0241b1f222b55d14f12ccc5bed1510abd95a1c117995b
Instruction ID: c32dee503e36996693c73adb53489f2f8c308be1af1b5466d7fff9536f4bf389
Opcode Fuzzy Hash: df42b07cc7e5de40c5c0241b1f222b55d14f12ccc5bed1510abd95a1c117995b
Instruction Fuzzy Hash: 98D01770A0110DEFCB40EFA8E91559DBBF9EB88200B2085A9E908D3200EA716F009B81

Non-executed Functions

Function 008B1E2F Relevance: 5.4, Strings: 4, Instructions: 399COMMON

Download Yara Rule

Strings

LRcq, xrefs: 008B1EDF
LRcq, xrefs: 008B1E69
LRcq, xrefs: 008B213F
", xrefs: 008B1F97

Memory Dump Source

Source File: 0000000D.00000002.2246496210.00000000008B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 008B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_8b0000_Honda.jbxd

Similarity

API ID:
String ID: "$LRcq$LRcq$LRcq
API String ID: 0-3963444180
Opcode ID: 08695708f9cfe259cbf71c8e7e2b34e5365b5ed74cc4cca2fcaca218e74c5e45
Instruction ID: 341d5d6b00a00abc7a43c1c41ae2d666c6f298075412e7655b1d4a23b8b391a3
Opcode Fuzzy Hash: 08695708f9cfe259cbf71c8e7e2b34e5365b5ed74cc4cca2fcaca218e74c5e45
Instruction Fuzzy Hash: 02E1CC71A0060A8FCB15DF68C894AFEB7B2FB88310F148569D415DB3A5DB30ED42CB91

Analysis Process: Honda.exePID: 3524, Parent PID: 1028COMMON

Executed Functions

Function 03021CC0 Relevance: 5.4, Strings: 4, Instructions: 355COMMON

Download Yara Rule

Strings

", xrefs: 03021F97
LRcq, xrefs: 03021EDF
$cq, xrefs: 03021D1A
$cq, xrefs: 03021D0E

Memory Dump Source

Source File: 0000000F.00000002.2327954367.0000000003020000.00000040.00000800.00020000.00000000.sdmp, Offset: 03020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_3020000_Honda.jbxd

Similarity

API ID:
String ID: "$LRcq$$cq$$cq
API String ID: 0-4234483242
Opcode ID: 109e2dd1e4b6f05740eb3d3732c964acb130dc75bc8abc39c8cb59a8ae6909f0
Instruction ID: 9856bf697331291b41ea0cf9b39538c80597e65b56d09acfaff562de8c57210a
Opcode Fuzzy Hash: 109e2dd1e4b6f05740eb3d3732c964acb130dc75bc8abc39c8cb59a8ae6909f0
Instruction Fuzzy Hash: 40D1A131A01216CFCB58DF68D884AADBBF6FF88300F1485A9E415DB2A5DB34DD46CB91

Function 03022788 Relevance: 2.0, Instructions: 2014COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2327954367.0000000003020000.00000040.00000800.00020000.00000000.sdmp, Offset: 03020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_3020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b4781a849153c5352826729cb225672e863267090ea6e2d74d1ee9579637faa7
Instruction ID: a1487632f49a0dd0ed16395cbe7bb961918325db1e65b3b716edceb9fef85401
Opcode Fuzzy Hash: b4781a849153c5352826729cb225672e863267090ea6e2d74d1ee9579637faa7
Instruction Fuzzy Hash: 4203A030A10719DBD722DF68DC44BA9BBB6FF89700F1581A9E5097B290DB746E81CF81

Function 03025A41 Relevance: 1.7, Strings: 1, Instructions: 431COMMON

Download Yara Rule

Strings

$cq, xrefs: 03025A71

Memory Dump Source

Source File: 0000000F.00000002.2327954367.0000000003020000.00000040.00000800.00020000.00000000.sdmp, Offset: 03020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_3020000_Honda.jbxd

Similarity

API ID:
String ID: $cq
API String ID: 0-2110363268
Opcode ID: 6542baa94230ec13b0cdea09bd959a10bf97d50a7c4b6dfb99f222453e26c916
Instruction ID: 8033d87368c475f66ede45097c2f3027c829cab1da946c8e33b525c212cd546f
Opcode Fuzzy Hash: 6542baa94230ec13b0cdea09bd959a10bf97d50a7c4b6dfb99f222453e26c916
Instruction Fuzzy Hash: D6F19C30A02215DFDB24DF64DD58B6EFBF2BF89314F188429D406AB294DB35AC41CB84

Function 03021CB0 Relevance: 2.6, Strings: 2, Instructions: 102COMMON

Download Yara Rule

Strings

$cq, xrefs: 03021D1A
$cq, xrefs: 03021D0E

Memory Dump Source

Source File: 0000000F.00000002.2327954367.0000000003020000.00000040.00000800.00020000.00000000.sdmp, Offset: 03020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_3020000_Honda.jbxd

Similarity

API ID:
String ID: $cq$$cq
API String ID: 0-2695052418
Opcode ID: 3da20adcfa1ddb741d2bc2042037429a713c48af6fdc86ee9af29340276a917d
Instruction ID: 5c01e2f1f0a0f48a731dc566ddb34ee4a28451198e8aeaa6a786bb08a4159425
Opcode Fuzzy Hash: 3da20adcfa1ddb741d2bc2042037429a713c48af6fdc86ee9af29340276a917d
Instruction Fuzzy Hash: 51418F34B00115DFCB58EF28E85896EBBF7FF88311B148569E8069B364EB34AD05CB91

Function 03024C68 Relevance: 1.7, Strings: 1, Instructions: 418COMMON

Download Yara Rule

Strings

`Qcq, xrefs: 03024FBA

Memory Dump Source

Source File: 0000000F.00000002.2327954367.0000000003020000.00000040.00000800.00020000.00000000.sdmp, Offset: 03020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_3020000_Honda.jbxd

Similarity

API ID:
String ID: `Qcq
API String ID: 0-516822358
Opcode ID: 165e2c7acad37ae88a19427cdd64663a501e962c35de0afd0c34ffb4329e0bd3
Instruction ID: fca6a398adca542cc2800bc46c304799fe885874d93b01797ca6032017776b96
Opcode Fuzzy Hash: 165e2c7acad37ae88a19427cdd64663a501e962c35de0afd0c34ffb4329e0bd3
Instruction Fuzzy Hash: E5119A71A062659FDB54EFA9C8457AEBFF2AF89300F144029D406B7380DB389D008BA5

Function 03020848 Relevance: 1.4, Strings: 1, Instructions: 116COMMON

Download Yara Rule

Strings

4'cq, xrefs: 0302085B

Memory Dump Source

Source File: 0000000F.00000002.2327954367.0000000003020000.00000040.00000800.00020000.00000000.sdmp, Offset: 03020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_3020000_Honda.jbxd

Similarity

API ID:
String ID: 4'cq
API String ID: 0-182294849
Opcode ID: 32b1c65c2654bcc73a23aa1cc9da25a17dc4da60bc345c6c345c40a95e979da3
Instruction ID: 5dba49fe655b473ac333e5d0174ccac6ac3f5ba494bd72e7cac8fe94cfbeb37a
Opcode Fuzzy Hash: 32b1c65c2654bcc73a23aa1cc9da25a17dc4da60bc345c6c345c40a95e979da3
Instruction Fuzzy Hash: E8418070A01219DFDB00EFB8E854B9DBBF2FF84300F148569E506AB295DB789D45CB91

Function 03021B68 Relevance: 1.3, Strings: 1, Instructions: 84COMMON

Download Yara Rule

Strings

tPcq, xrefs: 03021C43

Memory Dump Source

Source File: 0000000F.00000002.2327954367.0000000003020000.00000040.00000800.00020000.00000000.sdmp, Offset: 03020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_3020000_Honda.jbxd

Similarity

API ID:
String ID: tPcq
API String ID: 0-3229073321
Opcode ID: 4112abe120c552d44f2a9ba0e04e1f09853c0d9f7b31ffa0032eb4c9ea7f3f4a
Instruction ID: 86149fec3ac8a66a3e981a68332bade4b21ea3ab9aaafefffb489a76992ffcab
Opcode Fuzzy Hash: 4112abe120c552d44f2a9ba0e04e1f09853c0d9f7b31ffa0032eb4c9ea7f3f4a
Instruction Fuzzy Hash: 43313C75B01126CFCB48EF78C45996DBBB6AF88715B2044A9E806DB3A1DB35DC02CB81

Function 03020838 Relevance: 1.3, Strings: 1, Instructions: 78COMMON

Download Yara Rule

Strings

4'cq, xrefs: 0302085B

Memory Dump Source

Source File: 0000000F.00000002.2327954367.0000000003020000.00000040.00000800.00020000.00000000.sdmp, Offset: 03020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_3020000_Honda.jbxd

Similarity

API ID:
String ID: 4'cq
API String ID: 0-182294849
Opcode ID: c7827a50981a0fbe5b993e4f4090ba988c06aa655a788e8f99557ec5aaf5cfe2
Instruction ID: 932bcb6c085bb555b6ab942bb6e2bd3c70942521eade4b0fcbabb53137b29ec7
Opcode Fuzzy Hash: c7827a50981a0fbe5b993e4f4090ba988c06aa655a788e8f99557ec5aaf5cfe2
Instruction Fuzzy Hash: 6B318170901209DFDB00EFB8E894A9DBBB3FF84304F149525E501AB255DB789885CB91

Function 03021B78 Relevance: 1.3, Strings: 1, Instructions: 69COMMON

Download Yara Rule

Strings

tPcq, xrefs: 03021C43

Memory Dump Source

Source File: 0000000F.00000002.2327954367.0000000003020000.00000040.00000800.00020000.00000000.sdmp, Offset: 03020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_3020000_Honda.jbxd

Similarity

API ID:
String ID: tPcq
API String ID: 0-3229073321
Opcode ID: 7bf94e1f1201223f3a4b84222440ee1850f45f62a674cf12cba529dbe2cd84a2
Instruction ID: 013eb5ff7b8edef84bf264efec1ec011f3a01d87b252527f007d52cb9e9ba076
Opcode Fuzzy Hash: 7bf94e1f1201223f3a4b84222440ee1850f45f62a674cf12cba529dbe2cd84a2
Instruction Fuzzy Hash: 75210975B01126CFCB48EFB8C55896DBBF2AF48711B6044A9E806DB3A5DB35DD02CB81

Function 03024F48 Relevance: 1.3, Strings: 1, Instructions: 56COMMON

Download Yara Rule

Strings

`Qcq, xrefs: 03024FBA

Memory Dump Source

Source File: 0000000F.00000002.2327954367.0000000003020000.00000040.00000800.00020000.00000000.sdmp, Offset: 03020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_3020000_Honda.jbxd

Similarity

API ID:
String ID: `Qcq
API String ID: 0-516822358
Opcode ID: c242964d36fcdfa8e946ec2af745263c384e4a470b4778612770b93d87d02080
Instruction ID: 6501a00390ab3b7407bda20313a0a5d221a1697f392b91fad9834006832d8970
Opcode Fuzzy Hash: c242964d36fcdfa8e946ec2af745263c384e4a470b4778612770b93d87d02080
Instruction Fuzzy Hash: 89115B70A052298BDB54EFA9C9547AEBFF6AF88300F544429D406B7384DF399D408BA5

Function 03024868 Relevance: .2, Instructions: 235COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2327954367.0000000003020000.00000040.00000800.00020000.00000000.sdmp, Offset: 03020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_3020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 35a9a75dc2d5d8cb292780d5d5feaa051f8df0361342246816aef3ed7a435196
Instruction ID: f0f7532dd54213687c6b28399c4bd55451b779ebbd6c45dcca564dd7df1458b6
Opcode Fuzzy Hash: 35a9a75dc2d5d8cb292780d5d5feaa051f8df0361342246816aef3ed7a435196
Instruction Fuzzy Hash: 04A18830601615CFCB14DF1AC484A69BBF6EF45300F56C5A9E44A9B662E730FD98CB84

Function 03021062 Relevance: .2, Instructions: 217COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2327954367.0000000003020000.00000040.00000800.00020000.00000000.sdmp, Offset: 03020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_3020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b56293b49579c1ffce577b7fa6e5aeb30daaa076b48f23fca23db7058b87e6ac
Instruction ID: b8e69a85a52e68452ce3345a609e961651c27acc9179e83c81887da1a7bdda82
Opcode Fuzzy Hash: b56293b49579c1ffce577b7fa6e5aeb30daaa076b48f23fca23db7058b87e6ac
Instruction Fuzzy Hash: 0C913D71A00218DFCB15DFE5E8549EEBBFAFF88300F14812AE506A7254DB399946CF91

Function 03025E28 Relevance: .2, Instructions: 180COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2327954367.0000000003020000.00000040.00000800.00020000.00000000.sdmp, Offset: 03020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_3020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bef2fb70e9782b2441780e4000c7376c40333f1440084ecde5b5a50c7109fe55
Instruction ID: 9d8d6b0e49074acea283a73c11927f60fed01b92724c92d3e02f659752ff73bc
Opcode Fuzzy Hash: bef2fb70e9782b2441780e4000c7376c40333f1440084ecde5b5a50c7109fe55
Instruction Fuzzy Hash: AA618F35B012149FCB14DF69DC98BAEBBF6BF89710F148069E905AB390DB349C41CB94

Function 03022777 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2327954367.0000000003020000.00000040.00000800.00020000.00000000.sdmp, Offset: 03020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_3020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91511da84c1f205e46bf25e26718a9541adbd4628510d252b9396396df0a0b36
Instruction ID: fa55b98f95a2dbf39b9c0ba31c52e2527a953d94db7fc7fa28dfd3517578e411
Opcode Fuzzy Hash: 91511da84c1f205e46bf25e26718a9541adbd4628510d252b9396396df0a0b36
Instruction Fuzzy Hash: 0B219431A02214DFD7A4CFA9D848BA97BFDFF44311F5988A9E805CB191D739D944CB50

Function 03026060 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2327954367.0000000003020000.00000040.00000800.00020000.00000000.sdmp, Offset: 03020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_3020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3888adddb223e3ba4b167d663f69c50fbcc6c8570078fc365a0881ea5de539eb
Instruction ID: 4281e40773269fb44393eab3f0c9b993721a2112f64ff0caf5a34d04b435acca
Opcode Fuzzy Hash: 3888adddb223e3ba4b167d663f69c50fbcc6c8570078fc365a0881ea5de539eb
Instruction Fuzzy Hash: D6012672D00208AFCB54DB7DE808B5F7BBAEBC4224F14407DE0149B240EF7658068790

Function 03025218 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2327954367.0000000003020000.00000040.00000800.00020000.00000000.sdmp, Offset: 03020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_3020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 07916a88013732fd7bacca8821d0d2e5ff3d9830cbc0bd12ee595229e44f4ccd
Instruction ID: 976001cfb513f2eec80aa57f0c9c7f7116acd7a36e83612d3e4356aa4edf9382
Opcode Fuzzy Hash: 07916a88013732fd7bacca8821d0d2e5ff3d9830cbc0bd12ee595229e44f4ccd
Instruction Fuzzy Hash: A3018672710131DFC7149F7DE84891AB7EAEF8976131541B9E806DB375CA35EC018B90

Function 030218F8 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2327954367.0000000003020000.00000040.00000800.00020000.00000000.sdmp, Offset: 03020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_3020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: acc74b9b8570229b0775758e61345b7d0152f8683c3b23e2aef3de5c13e959e8
Instruction ID: aea858da497c2ac6c74ef53ac4f58ecebac56506e9e900b328b66ad0b4ce8682
Opcode Fuzzy Hash: acc74b9b8570229b0775758e61345b7d0152f8683c3b23e2aef3de5c13e959e8
Instruction Fuzzy Hash: CC015E76A012188FDB54EFA9E8006EEBBF5EB84321F00803AD559E7240E7346A55CB91

Function 03020A98 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2327954367.0000000003020000.00000040.00000800.00020000.00000000.sdmp, Offset: 03020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_3020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: efd04c5107d5d76e34d1331e5d781c546d9c9832e076f998a767b45f9cc45028
Instruction ID: 219e6732aed8af31b698bb97478107f3db5cdd430abf6e0a082815dcbb8f8596
Opcode Fuzzy Hash: efd04c5107d5d76e34d1331e5d781c546d9c9832e076f998a767b45f9cc45028
Instruction Fuzzy Hash: D10121357013209BDB16AB38F86D7293BE5EB82248F0800BDE806C72D4EB69DC04C792

Function 03025228 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2327954367.0000000003020000.00000040.00000800.00020000.00000000.sdmp, Offset: 03020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_3020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e4e38a91781c24bd9b4f2874ba972173def536466a9b7c860ae92032192c1fba
Instruction ID: d9521fcf65006ce5a917a816532323321e444c38ae4b45c1160bb904030bcab4
Opcode Fuzzy Hash: e4e38a91781c24bd9b4f2874ba972173def536466a9b7c860ae92032192c1fba
Instruction Fuzzy Hash: 98F04F72710131CFC7149B7DF84881AB7EAEF89A6131541B9E806EB335CA75EC018BE0

Function 03020AA8 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2327954367.0000000003020000.00000040.00000800.00020000.00000000.sdmp, Offset: 03020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_3020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 63c00219c38486f6ce843f6f3776e555705530e0b924983b27524a1c7a986aa4
Instruction ID: 6fb55a6571d6858a6340b970bba9e441fef5aa096c5c95da901935a7c555a1e6
Opcode Fuzzy Hash: 63c00219c38486f6ce843f6f3776e555705530e0b924983b27524a1c7a986aa4
Instruction Fuzzy Hash: FFF06D3170132187D765BB7DF92D32A7BE6AB84654F4800B9A906C3294DFA9CC44C781

Function 03024B34 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2327954367.0000000003020000.00000040.00000800.00020000.00000000.sdmp, Offset: 03020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_3020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 71f3453935d2d3a00e2a7ce03f1d92df09c6efad3b9879bb1a69139c8d60b34d
Instruction ID: 07d84c4a9ac6e61f2d885421bc5371b90d0dd0bf1afd6ea1c941c716ae91088b
Opcode Fuzzy Hash: 71f3453935d2d3a00e2a7ce03f1d92df09c6efad3b9879bb1a69139c8d60b34d
Instruction Fuzzy Hash: 27F05971D06254EFCB01CBF9AC590DCBF71EF89304B1480DAD05697539E7794605CB50

Function 030213B0 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2327954367.0000000003020000.00000040.00000800.00020000.00000000.sdmp, Offset: 03020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_3020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e2bbee2ed1d55056c8f6bf66e1bf1cd4720eb37bb132d5005bee21c4df724ecf
Instruction ID: 5234a15ac1786dd6601f03aad054648f276a56ab53d7d0068f5a7cf0861551fb
Opcode Fuzzy Hash: e2bbee2ed1d55056c8f6bf66e1bf1cd4720eb37bb132d5005bee21c4df724ecf
Instruction Fuzzy Hash: 60F0B774641215CFDB18EF64E158A6DBBB2FF88714F2044A9E8069F3A1CB799C45CF40

Function 03025148 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2327954367.0000000003020000.00000040.00000800.00020000.00000000.sdmp, Offset: 03020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_3020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b994aaa4547e6e7104faebc07d5186c59b39f6d9f8edae2a9596e479f3bd2087
Instruction ID: 3dad81bf1f2ff1157ec2fb6e56d396566b5d076241863e144693edf83d5157e0
Opcode Fuzzy Hash: b994aaa4547e6e7104faebc07d5186c59b39f6d9f8edae2a9596e479f3bd2087
Instruction Fuzzy Hash: 8EE09B353012049BC714DE6DF89C89EBBAAFBC83517508439E50EC3319DE355C05C760

Function 03020F28 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2327954367.0000000003020000.00000040.00000800.00020000.00000000.sdmp, Offset: 03020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_3020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c488d66d04629e50a89269db3dd02d228070f06f4d662f4e0ebfa39c7f22dc8
Instruction ID: 7be06750997dbb24b26bca796b2812d0aaec3060c369ccfadab66d10d2f9d8a1
Opcode Fuzzy Hash: 6c488d66d04629e50a89269db3dd02d228070f06f4d662f4e0ebfa39c7f22dc8
Instruction Fuzzy Hash: 4BE0863191110DEBCF00EFB8ED0275CB7B5EB49614F2045A9D808D3200E634AE019780

Function 03020F70 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2327954367.0000000003020000.00000040.00000800.00020000.00000000.sdmp, Offset: 03020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_3020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dd61a42531069c5ba56fcf7d5ff00cd0021383cd92095e8068dfd2184481b335
Instruction ID: 0081586f494de6d70777deb5711aef7c7780498d84dd61174889933b6e0c568f
Opcode Fuzzy Hash: dd61a42531069c5ba56fcf7d5ff00cd0021383cd92095e8068dfd2184481b335
Instruction Fuzzy Hash: 0AE02B3110F3644FD342EA79E8002517FE8CF02114B4508FBEC45C7652F2058C40C7D2

Function 03020F38 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2327954367.0000000003020000.00000040.00000800.00020000.00000000.sdmp, Offset: 03020000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_3020000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5fb50687c31928b70b6f4abd1f9aaa48c44f88ecc93e5c9b410d31af5d0c6b28
Instruction ID: ccce688add9deb8835be74c20a26856785b3fb4785165979e14bdd64c0f36156
Opcode Fuzzy Hash: 5fb50687c31928b70b6f4abd1f9aaa48c44f88ecc93e5c9b410d31af5d0c6b28
Instruction Fuzzy Hash: 9ED01770A01109EF8F00EFA8E90555DBBFAEB49214B2045AAE809E3200EA35AE009B80

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report igCCUqSW2T.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_igCCUqSW2T.exe_a39d8d5153bf3a93af1ad9cca3e2ad945ec4eb5_87ca88db_5cf8cd2d-92f3-48e3-be8f-c72e9d52b2ab\Report.wer

C:\ProgramData\Microsoft\Windows\WER\Temp\WER8AE8.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WER8B57.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WER8B87.tmp.xml

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Honda.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\MSBuild.exe.log

C:\Users\user\AppData\Local\Temp\Honda\Honda.exe

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleApp_b9e0c3d616814168aecb04d93958a20f.lnk

C:\Windows\appcompat\Programs\Amcache.hve

\Device\ConDrv

Static File Info

General

File Icon

Static PE Info

General

Authenticode Signature

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Windows Analysis Report
igCCUqSW2T.exe

Function 00A12F7C Relevance: 1.6, APIs: 1, Instructions: 55
memoryCOMMON

Function 00A2C9D4 Relevance: 7.7, APIs: 5, Instructions: 202
COMMON

Function 00A2DDAA Relevance: 3.2, APIs: 2, Instructions: 177
COMMON

Function 00A2762C Relevance: 3.0, APIs: 2, Instructions: 34
COMMONLIBRARYCODE

Function 00A2D9AE Relevance: 1.6, APIs: 1, Instructions: 147
COMMON

Function 00A157E2 Relevance: 1.5, APIs: 1, Instructions: 17
COMMON