Edit tour

Windows Analysis Report
qBtDOzhQnS.exe

Overview

General Information

Sample name:	qBtDOzhQnS.exe renamed because original name is a hash value
Original sample name:	70fcbdde18d2955bde7dda2f561f66d4.exe
Analysis ID:	1540303
MD5:	70fcbdde18d2955bde7dda2f561f66d4
SHA1:	b85aa453d12edff3e22ca6ef8489be5a84f9493a
SHA256:	63322da9e2112712b4ef2c0b357a9ef93c38c6f9681938f19686ca055776a0ee
Tags:	exeuser-abuse_ch
Infos:

Detection

Score:	80
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

AI detected suspicious sample

Allocates memory in foreign processes

Injects a PE file into a foreign processes

Machine Learning detection for sample

Sigma detected: New RUN Key Pointing to Suspicious Folder

Writes to foreign memory regions

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks if the current process is being debugged

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates a start menu entry (Start Menu\Programs\Startup)

Detected potential crypto function

Drops PE files

Found evasive API chain (date check)

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

One or more processes crash

PE / OLE file has an invalid certificate

PE file contains sections with non-standard names

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Startup Folder File Write

Stores files to the Windows start menu directory

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

qBtDOzhQnS.exe (PID: 1440 cmdline: "C:\Users\user\Desktop\qBtDOzhQnS.exe" MD5: 70FCBDDE18D2955BDE7DDA2F561F66D4)

MSBuild.exe (PID: 1436 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

Honda.exe (PID: 3228 cmdline: "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

conhost.exe (PID: 7064 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

WerFault.exe (PID: 7120 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 1440 -s 272 MD5: C31336C1EFC2CCB44B4326EA793040F2)

Honda.exe (PID: 7360 cmdline: "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

conhost.exe (PID: 7368 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

Honda.exe (PID: 7592 cmdline: "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

conhost.exe (PID: 7600 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

Honda.exe (PID: 7688 cmdline: "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

conhost.exe (PID: 7696 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe", EventID: 13, EventType: SetValue, Image: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe, ProcessId: 1436, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\GoogleApp_c81225e9d72442b4a6e9628a9f4f4779

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe", EventID: 13, EventType: SetValue, Image: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe, ProcessId: 1436, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\GoogleApp_c81225e9d72442b4a6e9628a9f4f4779

Sigma detected: Startup Folder File Write

Source: File created

Author: Roberto Rodriguez (Cyb3rWard0g), OTR (Open Threat Research): Data: EventID: 11, Image: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe, ProcessId: 1436, TargetFilename: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleApp_55b285c7db754d2a97daaba8c7555d59.lnk

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: qBtDOzhQnS.exe

Avira: detected

Multi AV Scanner detection for submitted file

Source: qBtDOzhQnS.exe

ReversingLabs: Detection: 68%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Machine Learning detection for sample

Source: qBtDOzhQnS.exe

Joe Sandbox ML: detected

Source: qBtDOzhQnS.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49728 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.5:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.5:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.5:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.5:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.5:49834 version: TLS 1.2

Source: qBtDOzhQnS.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source:

Binary string: f:\binaries\Intermediate\ndp_msbuild\xmakecommandline.csproj_1613737345\objr\x86\MSBuild.pdb source: Honda.exe, 00000006.00000000.2092435582.0000000000FD2000.00000002.00000001.01000000.00000008.sdmp, Honda.exe.1.dr

Source: C:\Users\user\Desktop\qBtDOzhQnS.exe

Code function: 0_2_0025D2FE FindFirstFileExW,

0_2_0025D2FE

Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData	Jump to behavior

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49728 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 104.18.38.233
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.149.23
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.149.23
Source: unknown	TCP traffic detected without corresponding DNS query: 104.18.38.233
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.149.23
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.149.23

Source: qBtDOzhQnS.exe	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl04
Source: qBtDOzhQnS.exe	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y
Source: qBtDOzhQnS.exe	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0
Source: qBtDOzhQnS.exe	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z
Source: qBtDOzhQnS.exe	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0
Source: qBtDOzhQnS.exe	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#
Source: qBtDOzhQnS.exe	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#
Source: qBtDOzhQnS.exe	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#
Source: qBtDOzhQnS.exe	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#
Source: qBtDOzhQnS.exe	String found in binary or memory: http://ocsp.comodoca.com0
Source: qBtDOzhQnS.exe	String found in binary or memory: http://ocsp.sectigo.com0
Source: Amcache.hve.5.dr	String found in binary or memory: http://upx.sf.net
Source: qBtDOzhQnS.exe	String found in binary or memory: https://sectigo.com/CPS0

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443

Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.5:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.5:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.5:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.5:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.5:49834 version: TLS 1.2

Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: 0_2_00242805	0_2_00242805
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: 0_2_0025F840	0_2_0025F840
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: 0_2_002610A3	0_2_002610A3
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: 0_2_0024F9EC	0_2_0024F9EC
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: 0_2_00242A0F	0_2_00242A0F
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: 0_2_00249B05	0_2_00249B05
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: 0_2_00257C32	0_2_00257C32
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: 0_2_0025943C	0_2_0025943C
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: 0_2_0024FD34	0_2_0024FD34
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: 0_2_00252D90	0_2_00252D90
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 1_2_01013108	1_2_01013108
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 1_2_01019A30	1_2_01019A30
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 1_2_01010848	1_2_01010848
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 1_2_010142E8	1_2_010142E8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 1_2_01010DA8	1_2_01010DA8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 1_2_010107BA	1_2_010107BA
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 1_2_010107E0	1_2_010107E0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 1_2_01017850	1_2_01017850
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 1_2_01017A9C	1_2_01017A9C
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 1_2_010142C8	1_2_010142C8
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 6_2_01951CC0	6_2_01951CC0
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 6_2_01952788	6_2_01952788
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 6_2_01955A41	6_2_01955A41
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 9_2_00F95A41	9_2_00F95A41
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 9_2_00F92788	9_2_00F92788
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 9_2_00F91E2F	9_2_00F91E2F
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 12_2_01162788	12_2_01162788
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 12_2_01165A41	12_2_01165A41
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 12_2_01161E2F	12_2_01161E2F
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 14_2_00C15A41	14_2_00C15A41
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 14_2_00C12788	14_2_00C12788
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 14_2_00C11E2F	14_2_00C11E2F

Source: C:\Users\user\Desktop\qBtDOzhQnS.exe

Code function: String function: 0024A280 appears 50 times

Source: C:\Users\user\Desktop\qBtDOzhQnS.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 1440 -s 272

Source: qBtDOzhQnS.exe

Static PE information: invalid certificate

Source: qBtDOzhQnS.exe	Binary or memory string: OriginalFilename vs qBtDOzhQnS.exe
Source: qBtDOzhQnS.exe, 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameLKSM.exe< vs qBtDOzhQnS.exe

Source: qBtDOzhQnS.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: Honda.exe.1.dr, TaskParameter.cs	Task registration methods: 'CreateNewTaskItemFrom'
Source: Honda.exe.1.dr, OutOfProcTaskHostNode.cs	Task registration methods: 'RegisterTaskObject', 'UnregisterPacketHandler', 'RegisterPacketHandler', 'UnregisterTaskObject', 'GetRegisteredTaskObject'
Source: Honda.exe.1.dr, TaskLoader.cs	Task registration methods: 'CreateTask'
Source: Honda.exe.1.dr, RegisteredTaskObjectCacheBase.cs	Task registration methods: 'GetLazyCollectionForLifetime', 'RegisterTaskObject', 'DisposeObjects', 'IsCollectionEmptyOrUncreated', 'UnregisterTaskObject', 'DisposeCacheObjects', 'GetRegisteredTaskObject', 'GetCollectionForLifetime'

Source: Honda.exe.1.dr, CommunicationsUtilities.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: Honda.exe.1.dr, CommunicationsUtilities.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: Honda.exe.1.dr, NodeEndpointOutOfProcBase.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent(bool)
Source: Honda.exe.1.dr, NodeEndpointOutOfProcBase.cs	Security API names: System.IO.Pipes.PipeSecurity.AddAccessRule(System.IO.Pipes.PipeAccessRule)
Source: Honda.exe.1.dr, NodeEndpointOutOfProcBase.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()

Source: Honda.exe, 00000006.00000002.2101278485.00000000032A1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: C:\Users\user\Desktop\*.sln
Source: Honda.exe, 00000006.00000002.2097643653.00000000016BB000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\C:\Users\user\Desktop\<.sln
Source: Honda.exe, 00000006.00000000.2092435582.0000000000FD2000.00000002.00000001.01000000.00000008.sdmp, Honda.exe.1.dr	Binary or memory string: .configAMSBUILDDIRECTORYDELETERETRYCOUNTCMSBUILDDIRECTORYDELETRETRYTIMEOUT.sln
Source: Honda.exe, 00000006.00000000.2092435582.0000000000FD2000.00000002.00000001.01000000.00000008.sdmp, Honda.exe.1.dr	Binary or memory string: MSBuild MyApp.sln /t:Rebuild /p:Configuration=Release
Source: Honda.exe, 0000000E.00000002.2379773507.0000000002541000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $]qSC:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.sln
Source: Honda.exe, 00000009.00000002.2215305189.0000000000B9A000.00000004.00000020.00020000.00000000.sdmp, Honda.exe, 0000000C.00000002.2296212873.0000000000B96000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\C:\Users\user\AppData\Local\Temp\Honda\<.sln
Source: Honda.exe, 00000006.00000000.2092435582.0000000000FD2000.00000002.00000001.01000000.00000008.sdmp, Honda.exe.1.dr	Binary or memory string: f:\binaries\Intermediate\ndp_msbuild\xmakecommandline.csproj_1613737345\objr\x86\MSBuild.pdb
Source: Honda.exe, 0000000E.00000002.2379046280.000000000089D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\<.sln
Source: Honda.exe, 00000006.00000002.2101278485.00000000032A1000.00000004.00000800.00020000.00000000.sdmp, Honda.exe, 00000006.00000000.2092435582.0000000000FD2000.00000002.00000001.01000000.00000008.sdmp, Honda.exe, 00000009.00000002.2216003626.0000000002A51000.00000004.00000800.00020000.00000000.sdmp, Honda.exe, 0000000C.00000002.2297088183.0000000002991000.00000004.00000800.00020000.00000000.sdmp, Honda.exe, 0000000E.00000002.2379773507.0000000002541000.00000004.00000800.00020000.00000000.sdmp, Honda.exe.1.dr	Binary or memory string: *.sln
Source: Honda.exe, 00000009.00000002.2216003626.0000000002A51000.00000004.00000800.00020000.00000000.sdmp, Honda.exe, 0000000C.00000002.2297088183.0000000002991000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $]q.C:\Users\user\AppData\Local\Temp\Honda\*.sln
Source: Honda.exe, 00000006.00000000.2092435582.0000000000FD2000.00000002.00000001.01000000.00000008.sdmp, Honda.exe.1.dr	Binary or memory string: MSBuild MyApp.csproj /t:Clean
Source: Honda.exe, 00000006.00000000.2092435582.0000000000FD2000.00000002.00000001.01000000.00000008.sdmp, Honda.exe.1.dr	Binary or memory string: /ignoreprojectextensions:.sln
Source: Honda.exe, 00000006.00000000.2092435582.0000000000FD2000.00000002.00000001.01000000.00000008.sdmp, Honda.exe.1.dr	Binary or memory string: MSBUILD : error MSB1048: Solution files cannot be debugged directly. Run MSBuild first with an environment variable MSBUILDEMITSOLUTION=1 to create a corresponding ".sln.metaproj" file. Then debug that.

Source: classification engine

Classification label: mal80.evad.winEXE@13/13@0/0

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleApp_55b285c7db754d2a97daaba8c7555d59.lnk

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7600:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7368:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7064:120:WilError_03
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess1440

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

File created: C:\Users\user\AppData\Local\Temp\Honda

Jump to behavior

Source: qBtDOzhQnS.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\qBtDOzhQnS.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: qBtDOzhQnS.exe

ReversingLabs: Detection: 68%

Source: unknown	Process created: C:\Users\user\Desktop\qBtDOzhQnS.exe "C:\Users\user\Desktop\qBtDOzhQnS.exe"
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 1440 -s 272
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process created: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process created: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"	Jump to behavior

Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: scrrun.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{72C24DD5-D70A-438B-8A42-98424B88AFB8}\InProcServer32

Jump to behavior

Source: GoogleApp_55b285c7db754d2a97daaba8c7555d59.lnk.1.dr

LNK file: ..\..\..\..\..\..\Local\Temp\Honda\Honda.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: qBtDOzhQnS.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: qBtDOzhQnS.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: qBtDOzhQnS.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: qBtDOzhQnS.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: qBtDOzhQnS.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: qBtDOzhQnS.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: qBtDOzhQnS.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source: qBtDOzhQnS.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:

Source: qBtDOzhQnS.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: qBtDOzhQnS.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: qBtDOzhQnS.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: qBtDOzhQnS.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: qBtDOzhQnS.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Source: qBtDOzhQnS.exe

Static PE information: section name: .bsp

Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: 0_2_0024992C push ecx; ret		0_2_0024993F
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: 0_2_00242F17 push eax; ret		0_2_00242F76

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

File created: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe

Jump to dropped file

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleApp_55b285c7db754d2a97daaba8c7555d59.lnk

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleApp_55b285c7db754d2a97daaba8c7555d59.lnk

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run GoogleApp_c81225e9d72442b4a6e9628a9f4f4779			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run GoogleApp_c81225e9d72442b4a6e9628a9f4f4779			Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 1010000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 2AA0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 29B0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 1950000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 32A0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 52A0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: F90000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 2A50000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 28E0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 1160000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 2990000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 4990000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: C10000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 2540000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 4540000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Users\user\Desktop\qBtDOzhQnS.exe

Evasive API call chain: GetSystemTimeAsFileTime,DecisionNodes

graph_0-19957

Source: C:\Users\user\Desktop\qBtDOzhQnS.exe

API coverage: 3.8 %

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep count: 153 > 30	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5512	Thread sleep count: 339 > 30	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 2516	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe TID: 6196	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe TID: 7416	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe TID: 7652	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe TID: 7756	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Users\user\Desktop\qBtDOzhQnS.exe

Code function: 0_2_0025D2FE FindFirstFileExW,

0_2_0025D2FE

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData	Jump to behavior

Source: Amcache.hve.5.dr	Binary or memory string: VMware
Source: Amcache.hve.5.dr	Binary or memory string: VMware Virtual USB Mouse
Source: Amcache.hve.5.dr	Binary or memory string: vmci.syshbin
Source: Amcache.hve.5.dr	Binary or memory string: VMware, Inc.
Source: Amcache.hve.5.dr	Binary or memory string: VMware20,1hbin@
Source: Amcache.hve.5.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: Amcache.hve.5.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.5.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.5.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.5.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: Amcache.hve.5.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.5.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.5.dr	Binary or memory string: vmci.sys
Source: Amcache.hve.5.dr	Binary or memory string: VMware-56 4d 43 71 48 15 3d ed-ae e6 c7 5a ec d9 3b f0
Source: Amcache.hve.5.dr	Binary or memory string: vmci.syshbin`
Source: Amcache.hve.5.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: Amcache.hve.5.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.5.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.5.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.5.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.5.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: Amcache.hve.5.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: Amcache.hve.5.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.5.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.5.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.5.dr	Binary or memory string: VMware VMCI Bus Device
Source: Amcache.hve.5.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.5.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: Amcache.hve.5.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563

Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Process queried: DebugPort			Jump to behavior
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Process queried: DebugPort			Jump to behavior

Source: C:\Users\user\Desktop\qBtDOzhQnS.exe

Code function: 0_2_00242F17 LdrInitializeThunk,

0_2_00242F17

Source: C:\Users\user\Desktop\qBtDOzhQnS.exe

Code function: 0_2_0024A085 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

0_2_0024A085

Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: 0_2_00242F7C mov edi, dword ptr fs:[00000030h]	0_2_00242F7C
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: 0_2_00253BBE mov ecx, dword ptr fs:[00000030h]	0_2_00253BBE
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: 0_2_0025CC6F mov eax, dword ptr fs:[00000030h]	0_2_0025CC6F

Source: C:\Users\user\Desktop\qBtDOzhQnS.exe

Code function: 0_2_0025E177 GetProcessHeap,

0_2_0025E177

Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: 0_2_0024A085 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_0024A085
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: 0_2_0024A212 SetUnhandledExceptionFilter,	0_2_0024A212
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: 0_2_00250B69 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_00250B69
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: 0_2_00249E74 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_00249E74

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Allocates memory in foreign processes

Source: C:\Users\user\Desktop\qBtDOzhQnS.exe

Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000 protect: page execute and read and write

Jump to behavior

Injects a PE file into a foreign processes

Source: C:\Users\user\Desktop\qBtDOzhQnS.exe

Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000 value starts with: 4D5A

Jump to behavior

Writes to foreign memory regions

Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000	Jump to behavior
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 402000	Jump to behavior
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 410000	Jump to behavior
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 412000	Jump to behavior
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 830008	Jump to behavior

Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process created: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"			Jump to behavior

Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: EnumSystemLocalesW,	0_2_00257026
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: EnumSystemLocalesW,	0_2_00260031
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: EnumSystemLocalesW,	0_2_0026007C
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: EnumSystemLocalesW,	0_2_00260117
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,	0_2_002601A2
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: GetLocaleInfoW,	0_2_002603F5
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: GetLocaleInfoW,	0_2_002574EF
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	0_2_0026051E
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: GetACP,IsValidCodePage,GetLocaleInfoW,	0_2_0025FD8F
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: GetLocaleInfoW,	0_2_00260624
Source: C:\Users\user\Desktop\qBtDOzhQnS.exe	Code function: GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	0_2_002606F3

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\qBtDOzhQnS.exe

Code function: 0_2_0024A2C5 GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

0_2_0024A2C5

Source: Amcache.hve.5.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.5.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.5.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.5.dr	Binary or memory string: MsMpEng.exe

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	311 Process Injection	1 Masquerading	OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	21 Registry Run Keys / Startup Folder	1 Scheduled Task/Job	1 Disable or Modify Tools	LSASS Memory	41 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	1 Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 DLL Side-Loading	21 Registry Run Keys / Startup Folder	41 Virtualization/Sandbox Evasion	Security Account Manager	41 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	Steganography	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 DLL Side-Loading	311 Process Injection	NTDS	3 File and Directory Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	22 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Obfuscated Files or Information	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label
qBtDOzhQnS.exe	68%	ReversingLabs	Win32.Trojan.LummaC
qBtDOzhQnS.exe	100%	Avira	TR/Kryptik.kkdec
qBtDOzhQnS.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	0%	ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0	0%	URL Reputation	safe
http://upx.sf.net	0%	URL Reputation	safe
https://sectigo.com/CPS0	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0	0%	URL Reputation	safe
http://ocsp.sectigo.com0	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false		unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#	qBtDOzhQnS.exe	false	URL Reputation: safe	unknown
http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0	qBtDOzhQnS.exe	false	URL Reputation: safe	unknown
http://upx.sf.net	Amcache.hve.5.dr	false	URL Reputation: safe	unknown
https://sectigo.com/CPS0	qBtDOzhQnS.exe	false	URL Reputation: safe	unknown
http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#	qBtDOzhQnS.exe	false	URL Reputation: safe	unknown
http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#	qBtDOzhQnS.exe	false	URL Reputation: safe	unknown
http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y	qBtDOzhQnS.exe	false	URL Reputation: safe	unknown
http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0	qBtDOzhQnS.exe	false	URL Reputation: safe	unknown
http://ocsp.sectigo.com0	qBtDOzhQnS.exe	false	URL Reputation: safe	unknown
http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z	qBtDOzhQnS.exe	false	URL Reputation: safe	unknown
http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#	qBtDOzhQnS.exe	false	URL Reputation: safe	unknown

World Map of Contacted IPs

⊘No contacted IP infos

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540303
Start date and time:	2024-10-23 17:06:40 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 42s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run name:	Run with higher sleep bypass
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	qBtDOzhQnS.exe renamed because original name is a hash value
Original Sample Name:	70fcbdde18d2955bde7dda2f561f66d4.exe
Detection:	MAL
Classification:	mal80.evad.winEXE@13/13@0/0
EGA Information:	Successful, ratio: 16.7%
HCA Information:	Successful, ratio: 95% Number of executed functions: 147 Number of non-executed functions: 59
Cookbook Comments:	Found application associated with file extension: .exe Sleeps bigger than 100000000ms are automatically reduced to 1000ms

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 20.190.160.14, 40.126.32.134, 40.126.32.133, 40.126.32.74, 20.190.160.20, 40.126.32.76, 20.190.160.22, 40.126.32.68, 93.184.221.240, 192.229.221.95, 20.109.210.53, 13.85.23.206, 52.182.143.212
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, slscr.update.microsoft.com, otelrules.afd.azureedge.net, wu.azureedge.net, ocsp.digicert.com, onedsblobprdcus15.centralus.cloudapp.azure.com, login.live.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, hlb.apr-52dd2-0.edgecastdns.net, sls.update.microsoft.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, prdv4a.aadg.msidentity.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, wu.ec.azureedge.net, www.tm.v4.a.prd.aadg.trafficmanager.net, ctldl.windowsupdate.com, login.msa.msidentity.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, blobcollector.events.data.trafficmanager.net, azureedge-t-prod.trafficmanager.net, umwatson.events.data.microsoft.com, www.tm.lg.prod.aadmsa.trafficmanager.net
Execution Graph export aborted for target Honda.exe, PID 3228 because it is empty
Execution Graph export aborted for target Honda.exe, PID 7360 because it is empty
Execution Graph export aborted for target Honda.exe, PID 7592 because it is empty
Execution Graph export aborted for target Honda.exe, PID 7688 because it is empty
Execution Graph export aborted for target MSBuild.exe, PID 1436 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
VT rate limit hit for: qBtDOzhQnS.exe

Simulations

Behavior and APIs

Time	Type	Description
17:07:43	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run GoogleApp_c81225e9d72442b4a6e9628a9f4f4779 "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
17:07:52	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run GoogleApp_c81225e9d72442b4a6e9628a9f4f4779 "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
17:08:00	Autostart	Run: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleApp_55b285c7db754d2a97daaba8c7555d59.lnk

Joe Sandbox View / Context

IPs

⊘No context

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0017.t-0009.fb-t-msedge.net	044SqLy1H3.exe	Get hash	malicious	LummaC	Browse	13.107.253.45
	ufp4rvU3SP.exe	Get hash	malicious	Unknown	Browse	13.107.253.45
	igCCUqSW2T.exe	Get hash	malicious	Unknown	Browse	13.107.253.45
	otq9AG1EIk.exe	Get hash	malicious	Unknown	Browse	13.107.253.45
	SecuriteInfo.com.Win32.Trojan.PSE.1S437JY.21210.19567.exe	Get hash	malicious	Unknown	Browse	13.107.253.45
	tfduJDS9iM.exe	Get hash	malicious	Unknown	Browse	13.107.253.45
	https://1drv.ms/o/c/6c73e1f3356d6c81/EvfBo1LISVpEg8JGFA7u8GsBL0LmooIAfd5Q39ROhQ0Lhw?e=ZTugWV	Get hash	malicious	HtmlDropper	Browse	13.107.253.45
	roquette October.pdf	Get hash	malicious	HTMLPhisher	Browse	13.107.253.45
	https://mydomaincloud.page.link/FR	Get hash	malicious	Unknown	Browse	13.107.253.45
	https://wetransfer.com/downloads/21820466a51be0cc0de4ef5fd28415d320241023112541/61ecbec42424c68f99ca983cd530758a20241023112545/5d3030?t_exp=1729941941&t_lsid=761fb8c4-59e5-4423-a2fe-24d132de0406&t_network=email&t_rid=YXV0aDB8NjcxMjZmN2QzOGFjMDNkYThkOGJmMDM3&t_s=download_link&t_ts=1729682745&utm_campaign=TRN_TDL_01&utm_source=sendgrid&utm_medium=email&trk=TRN_TDL_01	Get hash	malicious	Unknown	Browse	13.107.253.45
fp2e7a.wpc.phicdn.net	ufp4rvU3SP.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	igCCUqSW2T.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	juwXcVX5AK.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	https://email.email.pandadoc.net/c/eJxUkMtu2zoQhp9G3NkQhxQlLbRIjo8QpKjRS5qi3QTD4TCmZYuyRNm1nr4w0PSyGwzmG3z_7xprlPWVcJHmI_fpJbjmguOnLn78cm0vTw-4fw8_dttdENzIEmoji9oYsWsAtST2VKmiVOSoJqdyVNYa9pUnKUIDOWiZA0hTgDZrUNoXnphIopaly3TORwyH9YC9Qxdp3XMSYXpJIxKjPXCTxpnFodmlNEyZusugzaDFYfiDUDxm0L7pZ9CeIVNtih33mdpIlF4hGzaGIM8ta2mV83UNlbFYlJCbQhsoM9WKPqbgA2EKsb_VACXX1jKtlM9hpQHcqiKvVsZXuvB16WTBIo6v2IflN7T_8Ly_7-p6G_bz4wbM8n1Sp6MYG7ePPU-Zzu186Pg0H4abuhj5HKZfrF4mPLvT5vndMpR0h183E0MpUvOW7q9xlXB85X820-3i3IC4xLGbBiS-Pf3v-o2eUuge_l-21bG_2vt-fvz8MwAA__9XraZ6	Get hash	malicious	Unknown	Browse	192.229.221.95
	ufp4rvU3SP.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	igCCUqSW2T.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	tfduJDS9iM.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	otq9AG1EIk.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	KO8mPIAMHh.exe	Get hash	malicious	Unknown	Browse	192.229.221.95

ASNs

⊘No context

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	https://email.email.pandadoc.net/c/eJxUkMtu2zoQhp9G3NkQhxQlLbRIjo8QpKjRS5qi3QTD4TCmZYuyRNm1nr4w0PSyGwzmG3z_7xprlPWVcJHmI_fpJbjmguOnLn78cm0vTw-4fw8_dttdENzIEmoji9oYsWsAtST2VKmiVOSoJqdyVNYa9pUnKUIDOWiZA0hTgDZrUNoXnphIopaly3TORwyH9YC9Qxdp3XMSYXpJIxKjPXCTxpnFodmlNEyZusugzaDFYfiDUDxm0L7pZ9CeIVNtih33mdpIlF4hGzaGIM8ta2mV83UNlbFYlJCbQhsoM9WKPqbgA2EKsb_VACXX1jKtlM9hpQHcqiKvVsZXuvB16WTBIo6v2IflN7T_8Ly_7-p6G_bz4wbM8n1Sp6MYG7ePPU-Zzu186Pg0H4abuhj5HKZfrF4mPLvT5vndMpR0h183E0MpUvOW7q9xlXB85X820-3i3IC4xLGbBiS-Pf3v-o2eUuge_l-21bG_2vt-fvz8MwAA__9XraZ6	Get hash	malicious	Unknown	Browse	23.1.237.91
	otq9AG1EIk.exe	Get hash	malicious	Unknown	Browse	23.1.237.91
	KO8mPIAMHh.exe	Get hash	malicious	Unknown	Browse	23.1.237.91
	https://app.oneflow.com/api/agreements/8821185/assets/b81e65c04f5acdc6369b89fe6d9aba378483abd6.pdf?at=490c38a4784c740c75de3531f3291888226b3acd	Get hash	malicious	Unknown	Browse	23.1.237.91
	https://app.creatopy.com/share/d/qvnqyxdo8o7m	Get hash	malicious	Unknown	Browse	23.1.237.91
	Safe & Sound shared new proposal with you...eml	Get hash	malicious	Unknown	Browse	23.1.237.91
	https://link.edgepilot.com/s/c12cb3f0/yNbpJS7pykGhMMzxNnzxvw?u=https://hinproperty.com/	Get hash	malicious	Unknown	Browse	23.1.237.91
	https://email.email.pandadoc.net/c/eJxUkMtu2zoQhp9G3NkQhxQlLbRIjo8QpKjRS5qi3QTD4TCmZYuyRNm1nr4w0PSyGwzmG3z_7xprlPWVcJHmI_fpJbjmguOnLn78cm0vTw-4fw8_dttdENzIEmoji9oYsWsAtST2VKmiVOSoJqdyVNYa9pUnKUIDOWiZA0hTgDZrUNoXnphIopaly3TORwyH9YC9Qxdp3XMSYXpJIxKjPXCTxpnFodmlNEyZusugzaDFYfiDUDxm0L7pZ9CeIVNtih33mdpIlF4hGzaGIM8ta2mV83UNlbFYlJCbQhsoM9WKPqbgA2EKsb_VACXX1jKtlM9hpQHcqiKvVsZXuvB16WTBIo6v2IflN7T_8Ly_7-p6G_bz4wbM8n1Sp6MYG7ePPU-Zzu186Pg0H4abuhj5HKZfrF4mPLvT5vndMpR0h183E0MpUvOW7q9xlXB85X820-3i3IC4xLGbBiS-Pf3v-o2eUuge_l-21bG_2vt-fvz8MwAA__9XraZ6	Get hash	malicious	Unknown	Browse	23.1.237.91
	https://email.email.pandadoc.net/c/eJxUkMtu2zoQhp9G3NkQhxQlLbRIjo8QpKjRS5qi3QTD4TCmZYuyRNm1nr4w0PSyGwzmG3z_7xprlPWVcJHmI_fpJbjmguOnLn78cm0vTw-4fw8_dttdENzIEmoji9oYsWsAtST2VKmiVOSoJqdyVNYa9pUnKUIDOWiZA0hTgDZrUNoXnphIopaly3TORwyH9YC9Qxdp3XMSYXpJIxKjPXCTxpnFodmlNEyZusugzaDFYfiDUDxm0L7pZ9CeIVNtih33mdpIlF4hGzaGIM8ta2mV83UNlbFYlJCbQhsoM9WKPqbgA2EKsb_VACXX1jKtlM9hpQHcqiKvVsZXuvB16WTBIo6v2IflN7T_8Ly_7-p6G_bz4wbM8n1Sp6MYG7ePPU-Zzu186Pg0H4abuhj5HKZfrF4mPLvT5vndMpR0h183E0MpUvOW7q9xlXB85X820-3i3IC4xLGbBiS-Pf3v-o2eUuge_l-21bG_2vt-fvz8MwAA__9XraZ6&c=E,1,2gHcyudOM92A_NmE_JJ2Jf4eSYKpBTwM7ropHz3Ql6_j5lFXsyou3Z5LdPEawxCEoxgxUpv-_yWBnzkgF9WshW_jxAqyOX5modTBn9If&typo=1	Get hash	malicious	Unknown	Browse	23.1.237.91
	https://www.instagram.com/reel/DBWVgoCoDqq/?igsh=aXdnZTl2NGIwdXN5	Get hash	malicious	Unknown	Browse	23.1.237.91
28a2c9bd18a11de089ef85a160da29e4	igCCUqSW2T.exe	Get hash	malicious	Unknown	Browse	13.107.253.45
	juwXcVX5AK.exe	Get hash	malicious	Unknown	Browse	13.107.253.45
	sample.pdf	Get hash	malicious	HtmlDropper	Browse	13.107.253.45
	https://email.email.pandadoc.net/c/eJxUkMtu2zoQhp9G3NkQhxQlLbRIjo8QpKjRS5qi3QTD4TCmZYuyRNm1nr4w0PSyGwzmG3z_7xprlPWVcJHmI_fpJbjmguOnLn78cm0vTw-4fw8_dttdENzIEmoji9oYsWsAtST2VKmiVOSoJqdyVNYa9pUnKUIDOWiZA0hTgDZrUNoXnphIopaly3TORwyH9YC9Qxdp3XMSYXpJIxKjPXCTxpnFodmlNEyZusugzaDFYfiDUDxm0L7pZ9CeIVNtih33mdpIlF4hGzaGIM8ta2mV83UNlbFYlJCbQhsoM9WKPqbgA2EKsb_VACXX1jKtlM9hpQHcqiKvVsZXuvB16WTBIo6v2IflN7T_8Ly_7-p6G_bz4wbM8n1Sp6MYG7ePPU-Zzu186Pg0H4abuhj5HKZfrF4mPLvT5vndMpR0h183E0MpUvOW7q9xlXB85X820-3i3IC4xLGbBiS-Pf3v-o2eUuge_l-21bG_2vt-fvz8MwAA__9XraZ6	Get hash	malicious	Unknown	Browse	13.107.253.45
	ufp4rvU3SP.exe	Get hash	malicious	Unknown	Browse	13.107.253.45
	igCCUqSW2T.exe	Get hash	malicious	Unknown	Browse	13.107.253.45
	otq9AG1EIk.exe	Get hash	malicious	Unknown	Browse	13.107.253.45
	http://docusign.net	Get hash	malicious	Unknown	Browse	13.107.253.45
	KO8mPIAMHh.exe	Get hash	malicious	Unknown	Browse	13.107.253.45

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	ufp4rvU3SP.exe	Get hash	malicious	Unknown	Browse
	igCCUqSW2T.exe	Get hash	malicious	Unknown	Browse
	juwXcVX5AK.exe	Get hash	malicious	Unknown	Browse
	ufp4rvU3SP.exe	Get hash	malicious	Unknown	Browse
	igCCUqSW2T.exe	Get hash	malicious	Unknown	Browse
	tfduJDS9iM.exe	Get hash	malicious	Unknown	Browse
	otq9AG1EIk.exe	Get hash	malicious	Unknown	Browse
	KO8mPIAMHh.exe	Get hash	malicious	Unknown	Browse
	tfduJDS9iM.exe	Get hash	malicious	Unknown	Browse

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_qBtDOzhQnS.exe_61834c8bbb89331017ec34ae3ed187d76665b41_0168f847_d47be348-6fc8-4099-aeaa-e67d31b84c5c\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.6550708347232672
Encrypted:	false
SSDEEP:	96:TMF900v9sXhXzxTMjh6tQXIDcQvc6QcEVcw3cE/3+HbHg/5hZAX/d5FMT2SlPkpG:wU0v9E80BU/QjhzuiF7Z24IO8eT
MD5:	38C6FC7B565773911A789A5B8717806B
SHA1:	F5F0075F624BEF4D43D86B559B828C99C949ED16
SHA-256:	6A18BC4F3C9E83B500CA9E5BB8C44573676C1B729BEF6797FAC5778C96490B72
SHA-512:	ABB037D46AFFED565CF753E75C23A3AB833A44BD4971D883AAE73D79BAB1B8F49AEEB2D02EBFC8053C4CD7BDDECFAEF17C869B37223252D64E9DB3AA6641EC86
Malicious:	true
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.B.E.X.....E.v.e.n.t.T.i.m.e.=.1.3.3.7.4.1.6.9.6.6.0.2.1.7.4.7.7.1.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.7.4.1.6.9.6.6.0.6.3.9.3.5.3.9.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.d.4.7.b.e.3.4.8.-.6.f.c.8.-.4.0.9.9.-.a.e.a.a.-.e.6.7.d.3.1.b.8.4.c.5.c.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.8.6.5.5.f.b.c.e.-.1.5.5.4.-.4.5.3.0.-.8.b.e.0.-.9.0.6.1.a.8.b.4.a.c.2.4.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.q.B.t.D.O.z.h.Q.n.S...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.0.5.a.0.-.0.0.0.1.-.0.0.1.4.-.a.e.7.8.-.1.4.4.d.5.d.2.5.d.b.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.6.4.1.a.1.f.d.6.2.8.9.5.4.3.3.3.f.a.d.4.a.f.a.f.9.6.2.f.1.9.2.3.0.0.0.0.f.f.f.f.!.0.0.0.0.b.8.5.a.a.4.5.3.d.1.2.e.d.f.f.3.e.2.2.c.a.6.e.f.8.4.8.9.b.e.5.a.8.4.f.9.4.9.3.a.!.q.B.t.D.O.z.h.Q.n.S...e.x.e.....T.a.r.g.e.t.A.p.p.V.e.r.=.2.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER9BF.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 14 streams, Wed Oct 23 15:07:40 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	39764
Entropy (8bit):	1.6773339561135312
Encrypted:	false
SSDEEP:	96:588MeYSUicz1jcdPfi77V3DLWtJ/oI6YJxZPIBijLva8wikWmHDlWaXWIkWI5sId:5EobOs8I6mE4vZmHDl3lEEwhKX
MD5:	228EA554C795ED5AB480EA65B51D0A0B
SHA1:	76E5C5B6A598DC59EEDCABB505FEF0BB37FBD78F
SHA-256:	B1EAC1E4439FF89FE5B9D2596178F24B3645E4A5433D05527AD1B1EF758E5611
SHA-512:	A5426DEC207AF0A98417EBB59D58D4B33AB80513EFC18B16F8E27066936863FA94E6189D04472BE2F38FBE8798F928911C2B2709246D3B445D2923A19F647CEE
Malicious:	false
Preview:	MDMP..a..... .......<..g........................d...........d...............T.......8...........T...........................0...........................................................................................eJ..............GenuineIntel............T...........;..g.............................0..............,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6...................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WERA1E.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	8378
Entropy (8bit):	3.6952557729136055
Encrypted:	false
SSDEEP:	192:R6l7wVeJ6jZ6kgMzp6YEI3SUpa9Ggmfx4Qjprx89brdQsftShFm:R6lXJ8Z6BMzp6YEYSUpZgmfx4Qwrdjfd
MD5:	20974586939C1D6E32140F90AE3CA72E
SHA1:	587626C22C24D60734EE2F6063597000DACEAFBC
SHA-256:	D087E604ECED2B43229F69694B349895BC966DDE4B63407CF41863198B257065
SHA-512:	448148D866EC3538259C680174E0451A916D9527DBA5C72EAE2EE6A6B824D32F0DB4BFD25A3E5B53460919E1E14E408116FFEC2BC3CA9E365CAC45001807ADB3
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.1.4.4.0.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WERA4E.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4696
Entropy (8bit):	4.481408891710193
Encrypted:	false
SSDEEP:	48:cvIwWl8zs1Jg77aI9QzWpW8VYh/Ym8M4JENUFmc1I+q8vjN5BHwrShd:uIjfPI7GC7VNJIcWKfBHwuhd
MD5:	EB05588C12E1F82D42DC662E880B73D5
SHA1:	B61BA11E9AE88DA477840F0BB8D720B011C37810
SHA-256:	6FF785D620E58BE042EEE1130C35D70AEAF6D590C9428F7F10B186400EC12B11
SHA-512:	DE110B1A356B640200686B6B8A48D7EDE671B3A8BC8DC708149CE4963AF35EDB4BAD0CC365AA4EF5AF6D7E22CEE12BF75E276876AE225B20CD80A09E1E0E5489
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="556210" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Honda.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\Honda\Honda.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	841
Entropy (8bit):	5.351831766340675
Encrypted:	false
SSDEEP:	24:ML9E4KlKDE4KhKiKhPKIE4oKNzKoIvEE4xDqE4j:MxHKlYHKh3oPtHo6wvEHxDqHj
MD5:	98DCC730A3C77DCDCA7CD8717EB5D42A
SHA1:	639509210C17EB73F5DB581FA8CA46B1157D8806
SHA-256:	E3C80885BCC7FE4F349EFB0470D261E0DE273EE26D47AF09C79F1B4B2F891E49
SHA-512:	7D11C53167839D428DAE35BF759C73FC0C7C49F2DE35CC99E4F8B69CDD40DFBEEF6D355F15FAB1EED62A64AF94E7BA311C0F8E07C3DA6F3A63410CC3E9882B78
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\2192b0d5aa4aa14486ae08118d3b9fcc\System.Configuration.ni.dll",0..2,"Microsoft.Build.Framework, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..2,"Microsoft.Build, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\MSBuild.exe.log

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	636
Entropy (8bit):	5.363873409814957
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPTAOKbbDLI4MWuPJKAVKhadDLI4MNsf6cv:ML9E4KlKDE4KhKiKhwE4Tye
MD5:	43484EA7D5BD7DE47119BC063D65D7AF
SHA1:	FCE0A3922FB3E421F8EF74E9A94E60F8DE7F97F5
SHA-256:	C00C48279B0CCFF866BB59D1DD5B77C65594B86BD4D16DE0F2EFAD2778F57A23
SHA-512:	A56C0609179C003044AFEC26019EAEC0ECC772108327EB01F817B88780981289A61E795F6E8745FDEAE99D8543B57344F80A9542BDA2933787C5C8331C869820
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..3,"System.Net.Http, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Net.Http\bb5812ab3cec92427da8c5c696e5f731\System.Net.Http.ni.dll",0..

C:\Users\user\AppData\Local\Temp\Honda\Honda.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	262432
Entropy (8bit):	6.179415524830389
Encrypted:	false
SSDEEP:	3072:7a0t0yH5wCwie3NnQNLpj/Wnqvsw2XpFU4rwOeTubZSzf02RFihx2uzj:m0ny3nnKpqnZRXfw702birr/
MD5:	8FDF47E0FF70C40ED3A17014AEEA4232
SHA1:	E6256A0159688F0560B015DA4D967F41CBF8C9BD
SHA-256:	ED9884BAC608C06B7057037CC91D90E4AE5F74DD2DBCE2AF476699C6D4492D82
SHA-512:	BD69D092ED4F9C5E1F24EAF5EC79FB316469D53849DC798FAE0FCBA5E90869B77EE924C23CC6F692198FF25827AB60AD47BB46CADD6E0AADDE7731CBAFB013BE
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: ufp4rvU3SP.exe, Detection: malicious, Browse Filename: igCCUqSW2T.exe, Detection: malicious, Browse Filename: juwXcVX5AK.exe, Detection: malicious, Browse Filename: ufp4rvU3SP.exe, Detection: malicious, Browse Filename: igCCUqSW2T.exe, Detection: malicious, Browse Filename: tfduJDS9iM.exe, Detection: malicious, Browse Filename: otq9AG1EIk.exe, Detection: malicious, Browse Filename: KO8mPIAMHh.exe, Detection: malicious, Browse Filename: tfduJDS9iM.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....?.].........."...0..\|...B......:.... ........@.. ...............................L....`....................................O........>.............. A........................................................... ............... ..H............text...Xz... ...\|.................. ..`.rsrc....>.......@...~..............@..@.reloc..............................@..B........................H........)...................\|...........................................{.......v.(=....r...p({...-..+..}........0..%........(....-......(z.....&..}..............................0..5........(....-...-.r+..ps>...z.....i(z.....&..}......................%......>....(?...(....N..(@....oA...(....:...(B...(....:...(C...(....*....(........0..G........(....,....(....-...}......r...p(x...&.(v.....}......&..}....................7.......0..f........-.r7..ps>...z .....

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleApp_55b285c7db754d2a97daaba8c7555d59.lnk

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Oct 23 14:07:39 2024, mtime=Wed Oct 23 14:07:39 2024, atime=Sat Dec 7 08:10:48 2019, length=262432, window=hide
Category:	dropped
Size (bytes):	1123
Entropy (8bit):	4.941714290247457
Encrypted:	false
SSDEEP:	24:8Cdfm8SORfgKYkiE5ryxNEsQAiMIK+E6E63Pqygm:8CdT3R4w+vViMIK+/Syg
MD5:	08DAA9232BBF9FF45108D86A8DF52C85
SHA1:	D01116DE225F74CB43652FCB076418DF3D08C14A
SHA-256:	656FA798070F49F99228347FB7B15B2A5FB53C1A74AAD72F2EC831E698AFCDCB
SHA-512:	11D5E6903926F166B4FC92C5642F1F6DD462A748A0476C2285CE2B3B3CF358CC56F89321370FA33A083C2B8DA816D3C5EA395140375914FDB5CE02797A6504F4
Malicious:	false
Preview:	L..................F...."...(_OM]%..(_OM]%..{.#7... .........................:..DG..Yr?.D..U..k0.&...&...... M......G.H]%..X.pM]%......t...CFSF..1.....DWSl..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......DWSlWY.x....B.....................Bdg.A.p.p.D.a.t.a...B.P.1.....WY.x..Local.<......DWSlWY.x....V.........................L.o.c.a.l.....N.1.....WY.x..Temp..:......DWSlWY.x....\.....................!...T.e.m.p.....P.1.....WY.x..Honda.<......WY.xWY.x............................0.H.o.n.d.a.....\.2. ....OYI".Honda.exe.D......WY.xWY.x................p.............H.o.n.d.a...e.x.e.......a...............-.......`............LB......C:\Users\user\AppData\Local\Temp\Honda\Honda.exe..,.....\.....\.....\.....\.....\.....\.L.o.c.a.l.\.T.e.m.p.\.H.o.n.d.a.\.H.o.n.d.a...e.x.e.........\|....I.J.H..K..:...`.......X.......305090...........hT..CrF.f4... .By2=.b...,...W..hT..CrF.f4... .By2=.b...,...W..............1SPS.XF.L8C....&.m.q............/...S.-.1.-.5.-.2.1.-.2.2.4.6.1.2.2.6.5.8.-.3.

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.421610377481977
Encrypted:	false
SSDEEP:	6144:USvfpi6ceLP/9skLmb0OTMWSPHaJG8nAgeMZMMhA2fX4WABlEnNm0uhiTw:fvloTMW+EZMM6DFyQ03w
MD5:	D65AB7AFD3B1A72405EFFDD16A19054D
SHA1:	EED20C2561FD3F5A5CC5109C19521A6322D996AC
SHA-256:	18C11EC290DC7C893E9D0E90926226F2F87794157806490541C9F31E49549286
SHA-512:	CC9C39DA4DE4B20DA12727CF54F62BCC99FE3E7FE9DAC7747EEC33DDB7DCE14D8C437F5399E1EB55EC56E9AF208638EDE8D70C33EC8605888251E1E41DB24B88
Malicious:	false
Preview:	regf>...>....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm..M]%..............................................................................................................................................................................................................................................................................................................................................9Q.y........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

\Device\ConDrv

Download File

Process:	C:\Users\user\AppData\Local\Temp\Honda\Honda.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	298
Entropy (8bit):	4.924206445966445
Encrypted:	false
SSDEEP:	6:zx3M1tFAbQtASR30qyMstwYVoRRZBXVN+J0fFdCsq2UTiMdH8stCal+n:zK13P30ZMt9BFN+QdCT2UftCM+
MD5:	932782CF70ED00D22C0B08B5027B4E31
SHA1:	78F460A2155D9E819B8452C281285D7E0A7AC14F
SHA-256:	F2C2477FB3FD0A30F3D3D8637EF9C774B43E940043635DF90CDD804799A2ECE7
SHA-512:	C83E72797C03CABCAB066B95BAEEBB13944143846794061CF9482EA3B283979E470930047FDAE72A6F06F51F3127FF39DAAEFAAD7557E3AD49F590B9E7B78D24
Malicious:	false
Preview:	Microsoft (R) Build Engine version 4.8.4084.0..[Microsoft .NET Framework, version 4.0.30319.42000]..Copyright (C) Microsoft Corporation. All rights reserved.....MSBUILD : error MSB1003: Specify a project or solution file. The current working directory does not contain a project or solution file...

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.856255832941963
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	qBtDOzhQnS.exe
File size:	294'016 bytes
MD5:	70fcbdde18d2955bde7dda2f561f66d4
SHA1:	b85aa453d12edff3e22ca6ef8489be5a84f9493a
SHA256:	63322da9e2112712b4ef2c0b357a9ef93c38c6f9681938f19686ca055776a0ee
SHA512:	aef0d02d1a49c4f6c58dcd0a02c257570dea2205891886e215be8be8c23cd6c3d042c72196dfa2460d3a3b53fa53347ee72f5a7e7839e1f0e4aeba134d8b39a4
SSDEEP:	6144:Oukzez4QOcnvEGWctezYlu5kyoRYm0qAJcJalr7v:3Dz4QOcvEX5LoR1QJcQlr7v
TLSH:	6454AE217580C073D96325320AE4DBB56A7DFE704E655E8FA7A80F6E0F70281D731A6B
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........L..v...v...v...u...v...s.a.v...r...v...w...v...w.M.v...r...v...u...v...s...v.......v.......v...t...v.Rich..v................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x409922
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x67165891 [Mon Oct 21 13:35:13 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	31770ac6e89309fe8c99522fb04f055c

Authenticode Signature

Signature Valid:	false
Signature Issuer:	CN=Sectigo Public Code Signing CA R36, O=Sectigo Limited, C=GB
Signature Validation Error:	The digital signature of the object did not verify
Error Number:	-2146869232
Not Before, Not After	31/08/2023 02:00:00 31/08/2026 01:59:59
Subject Chain	CN=Privacy Technologies OU, O=Privacy Technologies OU, S=Harjumaa, C=EE
Version:	3
Thumbprint MD5:	AD1BCBF19AE2F91BB114D33B85359E56
Thumbprint SHA-1:	141D90A1BA8F61863FBEDDF7DD1D66C1D1E0B128
Thumbprint SHA-256:	A08EA2A7A257AD690B988446951E9DEF2986A2F3F546B6F0902805330F3B6B48
Serial:	00D0461B529F67189D43744E9CEFE172AE

Entrypoint Preview

Instruction
call 00007F0CED003270h
jmp 00007F0CED0026FFh
mov ecx, dword ptr [ebp-0Ch]
mov dword ptr fs:[00000000h], ecx
pop ecx
pop edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
push ecx
ret
mov ecx, dword ptr [ebp-10h]
xor ecx, ebp
call 00007F0CED0022A2h
jmp 00007F0CED002862h
push eax
push dword ptr fs:[00000000h]
lea eax, dword ptr [esp+0Ch]
sub esp, dword ptr [esp+0Ch]
push ebx
push esi
push edi
mov dword ptr [eax], ebp
mov ebp, eax
mov eax, dword ptr [00432180h]
xor eax, ebp
push eax
push dword ptr [ebp-04h]
mov dword ptr [ebp-04h], FFFFFFFFh
lea eax, dword ptr [ebp-0Ch]
mov dword ptr fs:[00000000h], eax
ret
push eax
push dword ptr fs:[00000000h]
lea eax, dword ptr [esp+0Ch]
sub esp, dword ptr [esp+0Ch]
push ebx
push esi
push edi
mov dword ptr [eax], ebp
mov ebp, eax
mov eax, dword ptr [00432180h]
xor eax, ebp
push eax
mov dword ptr [ebp-10h], eax
push dword ptr [ebp-04h]
mov dword ptr [ebp-04h], FFFFFFFFh
lea eax, dword ptr [ebp-0Ch]
mov dword ptr fs:[00000000h], eax
ret
push eax
push dword ptr fs:[00000000h]
lea eax, dword ptr [esp+0Ch]
sub esp, dword ptr [esp+0Ch]
push ebx
push esi
push edi
mov dword ptr [eax], ebp
mov ebp, eax
mov eax, dword ptr [00432180h]
xor eax, ebp
push eax
mov dword ptr [ebp-10h], esp
push dword ptr [ebp-04h]
mov dword ptr [ebp-04h], FFFFFFFFh
lea eax, dword ptr [ebp-0Ch]
mov dword ptr fs:[00000000h], eax

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x30bc0	0x28	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x43000	0x1e0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x44e00	0x2e80
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x44000	0x2104	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x2e088	0x1c	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x2e0c0	0x18	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x2dfc8	0x40	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x26000	0x158	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x247c5	0x24800	f7f28371252cdda3944b73e0bdd9e6bb	False	0.5836432470034246	data	6.666009514511532	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x26000	0xb3c6	0xb400	5fa71d87a495852454a60158be46cc77	False	0.42628038194444445	data	4.90018568771607	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x32000	0x106bc	0xf800	a2020229e4ee92ef30d213ba58a74184	False	0.9151650705645161	data	7.836333269007288	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x43000	0x1e0	0x200	9866eeb93e80b773405f3d7936b83641	False	0.52734375	data	4.7074344725994175	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x44000	0x2104	0x2200	81049f21fcefbafebc1cfbe39de7a7ce	False	0.7339154411764706	data	6.4554658693314	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
.bsp	0x47000	0x3000	0x3000	dc461632d58ae88e73a03f75c5dd10d9	False	0.018229166666666668	data	0.16185686701183552	IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x43060	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL

Import

KERNEL32.dll

GlobalFindAtomA, RaiseException, GetCurrentThreadId, IsProcessorFeaturePresent, GetLastError, FreeLibraryWhenCallbackReturns, CreateThreadpoolWork, SubmitThreadpoolWork, CloseThreadpoolWork, GetModuleHandleExW, WakeAllConditionVariable, SleepConditionVariableSRW, InitOnceComplete, InitOnceBeginInitialize, ReleaseSRWLockExclusive, AcquireSRWLockExclusive, TryAcquireSRWLockExclusive, WideCharToMultiByte, CloseHandle, QueryPerformanceCounter, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSectionEx, DeleteCriticalSection, EncodePointer, DecodePointer, MultiByteToWideChar, LCMapStringEx, GetSystemTimeAsFileTime, GetModuleHandleW, GetProcAddress, GetStringTypeW, GetCPInfo, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, IsDebuggerPresent, GetStartupInfoW, GetCurrentProcessId, InitializeSListHead, CreateFileW, RtlUnwind, SetLastError, InitializeCriticalSectionAndSpinCount, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, FreeLibrary, LoadLibraryExW, ExitProcess, GetModuleFileNameW, GetStdHandle, WriteFile, HeapAlloc, HeapFree, LCMapStringW, GetLocaleInfoW, IsValidLocale, GetUserDefaultLCID, EnumSystemLocalesW, GetFileType, FlushFileBuffers, GetConsoleOutputCP, GetConsoleMode, ReadFile, GetFileSizeEx, SetFilePointerEx, ReadConsoleW, HeapReAlloc, FindClose, FindFirstFileExW, FindNextFileW, IsValidCodePage, GetACP, GetOEMCP, GetCommandLineA, GetCommandLineW, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetProcessHeap, SetStdHandle, HeapSize, WriteConsoleW

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 23, 2024 17:07:36.050834894 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 23, 2024 17:07:36.175892115 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 23, 2024 17:07:36.175892115 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 23, 2024 17:07:45.659996033 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 23, 2024 17:07:45.785018921 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 23, 2024 17:07:45.785037041 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 23, 2024 17:07:47.551827908 CEST	443	49706	23.1.237.91	192.168.2.5
Oct 23, 2024 17:07:47.552031040 CEST	49706	443	192.168.2.5	23.1.237.91
Oct 23, 2024 17:07:53.965357065 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:53.965403080 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:53.965490103 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:53.965830088 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:53.965842009 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:54.891587973 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:54.891938925 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:54.896823883 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:54.896842003 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:54.897166967 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:54.907783985 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:54.955346107 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.154772997 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.154819012 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.154838085 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.154912949 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.155000925 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.155052900 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.155076027 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.156999111 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.157031059 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.157094955 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.157134056 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.157171011 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.157193899 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.271150112 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.271214962 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.271296024 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.271368027 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.271411896 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.271481037 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.273008108 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.273055077 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.273099899 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.273117065 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.273148060 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.273165941 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.274981976 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.275038958 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.275062084 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.275087118 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.275115967 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.275141001 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.277158976 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.277199984 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.277430058 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.277430058 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.277471066 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.277556896 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.386893034 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.386926889 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.387070894 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.387100935 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.387149096 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.388109922 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.388129950 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.388220072 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.388232946 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.388278961 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.389070034 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.389086008 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.389141083 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.389152050 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.389193058 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.392534971 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.392561913 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.392637968 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.392661095 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.392704010 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.502140045 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.502177000 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.502485037 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.502520084 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.502573967 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.502881050 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.502898932 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.502948046 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.502955914 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.502995014 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.503927946 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.503951073 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.504038095 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.504045963 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.504061937 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.504103899 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.504112005 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.504134893 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.504151106 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.504178047 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.527077913 CEST	49714	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.527129889 CEST	443	49714	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.785151958 CEST	49715	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.785181046 CEST	49716	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.785201073 CEST	443	49715	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.785222054 CEST	443	49716	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.785273075 CEST	49715	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.785301924 CEST	49716	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.786705971 CEST	49717	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.786737919 CEST	443	49717	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.786792994 CEST	49717	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.787364960 CEST	49715	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.787375927 CEST	443	49715	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.787462950 CEST	49716	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.787473917 CEST	443	49716	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.787949085 CEST	49718	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.787962914 CEST	443	49718	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.788022041 CEST	49718	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.788113117 CEST	49718	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.788120031 CEST	443	49718	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.788194895 CEST	49717	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.788206100 CEST	443	49717	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.788732052 CEST	49719	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.788741112 CEST	443	49719	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:55.788805008 CEST	49719	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.789093018 CEST	49719	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:55.789100885 CEST	443	49719	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.545130968 CEST	443	49716	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.545145988 CEST	443	49717	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.545954943 CEST	49717	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.545958996 CEST	49716	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.545984983 CEST	443	49717	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.545990944 CEST	443	49716	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.546425104 CEST	49717	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.546425104 CEST	49716	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.546431065 CEST	443	49716	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.546431065 CEST	443	49717	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.575088024 CEST	443	49719	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.575452089 CEST	443	49715	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.576067924 CEST	443	49718	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.581075907 CEST	49715	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.581113100 CEST	443	49715	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.581150055 CEST	49719	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.581175089 CEST	443	49719	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.581654072 CEST	49719	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.581660986 CEST	443	49719	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.581676006 CEST	49715	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.581681967 CEST	443	49715	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.582075119 CEST	49718	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.582093000 CEST	443	49718	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.582434893 CEST	49718	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.582439899 CEST	443	49718	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.681689978 CEST	443	49717	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.681773901 CEST	443	49717	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.681901932 CEST	49717	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.682109118 CEST	443	49716	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.682171106 CEST	443	49716	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.682215929 CEST	49716	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.682560921 CEST	49717	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.682586908 CEST	443	49717	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.682601929 CEST	49717	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.682609081 CEST	443	49717	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.683670044 CEST	49716	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.683686972 CEST	443	49716	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.683703899 CEST	49716	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.683710098 CEST	443	49716	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.686743975 CEST	49723	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.686788082 CEST	443	49723	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.686896086 CEST	49723	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.687582970 CEST	49724	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.687623978 CEST	443	49724	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.687686920 CEST	49724	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.687786102 CEST	49723	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.687802076 CEST	443	49723	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.687903881 CEST	49724	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.687915087 CEST	443	49724	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.716732979 CEST	443	49719	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.716761112 CEST	443	49719	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.716831923 CEST	443	49719	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.716907024 CEST	49719	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.717077971 CEST	49719	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.717329025 CEST	49719	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.717353106 CEST	443	49719	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.717369080 CEST	49719	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.717375040 CEST	443	49719	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.717566967 CEST	443	49715	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.717592955 CEST	443	49715	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.717644930 CEST	49715	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.717660904 CEST	443	49715	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.717705011 CEST	49715	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.719259024 CEST	49715	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.719280005 CEST	443	49715	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.719294071 CEST	49715	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.719300032 CEST	443	49715	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.719717979 CEST	443	49718	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.719742060 CEST	443	49718	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.719794035 CEST	49718	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.719814062 CEST	443	49718	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.721003056 CEST	49725	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.721043110 CEST	443	49725	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.721122980 CEST	49725	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.721234083 CEST	49718	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.721252918 CEST	443	49718	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.721265078 CEST	49718	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.721410036 CEST	443	49718	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.721441031 CEST	443	49718	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.721478939 CEST	49718	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.721803904 CEST	49725	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.721812963 CEST	443	49725	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.724087000 CEST	49726	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.724128008 CEST	443	49726	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.724205971 CEST	49726	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.724327087 CEST	49727	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.724339008 CEST	443	49727	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.724349022 CEST	49726	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.724361897 CEST	443	49726	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:56.724400997 CEST	49727	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.724479914 CEST	49727	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:56.724486113 CEST	443	49727	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.451491117 CEST	443	49724	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.452179909 CEST	49724	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.452193975 CEST	443	49724	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.452487946 CEST	443	49723	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.452821016 CEST	49724	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.452826023 CEST	443	49724	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.452989101 CEST	49723	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.453005075 CEST	443	49723	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.453460932 CEST	49723	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.453464985 CEST	443	49723	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.477497101 CEST	49706	443	192.168.2.5	23.1.237.91
Oct 23, 2024 17:07:57.478041887 CEST	49706	443	192.168.2.5	23.1.237.91
Oct 23, 2024 17:07:57.480998993 CEST	443	49727	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.481736898 CEST	49727	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.481780052 CEST	443	49727	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.482460022 CEST	49727	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.482466936 CEST	443	49727	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.482955933 CEST	443	49706	23.1.237.91	192.168.2.5
Oct 23, 2024 17:07:57.483303070 CEST	443	49706	23.1.237.91	192.168.2.5
Oct 23, 2024 17:07:57.483407974 CEST	49728	443	192.168.2.5	23.1.237.91
Oct 23, 2024 17:07:57.483438015 CEST	443	49728	23.1.237.91	192.168.2.5
Oct 23, 2024 17:07:57.483525038 CEST	49728	443	192.168.2.5	23.1.237.91
Oct 23, 2024 17:07:57.483871937 CEST	49728	443	192.168.2.5	23.1.237.91
Oct 23, 2024 17:07:57.483886003 CEST	443	49728	23.1.237.91	192.168.2.5
Oct 23, 2024 17:07:57.485727072 CEST	443	49726	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.486593962 CEST	49726	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.486609936 CEST	443	49726	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.487101078 CEST	49726	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.487106085 CEST	443	49726	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.493047953 CEST	443	49725	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.493635893 CEST	49725	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.493670940 CEST	443	49725	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.494261026 CEST	49725	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.494266987 CEST	443	49725	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.586707115 CEST	443	49724	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.587106943 CEST	443	49724	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.587389946 CEST	49724	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.587389946 CEST	49724	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.587513924 CEST	49724	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.587528944 CEST	443	49724	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.588920116 CEST	443	49723	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.588979006 CEST	443	49723	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.589071035 CEST	49723	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.589324951 CEST	49723	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.589348078 CEST	443	49723	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.589365959 CEST	49723	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.589374065 CEST	443	49723	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.591685057 CEST	49730	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.591727972 CEST	443	49730	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.591795921 CEST	49730	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.592300892 CEST	49730	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.592314959 CEST	443	49730	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.592602015 CEST	49731	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.592633009 CEST	443	49731	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.592833996 CEST	49731	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.592922926 CEST	49731	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.592938900 CEST	443	49731	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.619627953 CEST	443	49727	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.619980097 CEST	443	49727	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.620038033 CEST	49727	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.622447968 CEST	443	49726	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.622822046 CEST	443	49726	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.626049995 CEST	49726	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.631591082 CEST	49727	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.631620884 CEST	443	49727	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.631668091 CEST	49726	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.631686926 CEST	443	49726	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.631772995 CEST	49726	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.631778955 CEST	443	49726	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.634288073 CEST	443	49725	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.634397030 CEST	443	49725	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.634439945 CEST	49725	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.637065887 CEST	49725	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.637080908 CEST	443	49725	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.637118101 CEST	49725	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.637124062 CEST	443	49725	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.638650894 CEST	49732	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.638689041 CEST	443	49732	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.638843060 CEST	49732	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.639843941 CEST	49733	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.639878035 CEST	443	49733	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.640007019 CEST	49733	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.640196085 CEST	49734	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.640218973 CEST	443	49734	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.640264988 CEST	49734	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.640439034 CEST	49732	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.640440941 CEST	49733	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.640451908 CEST	443	49732	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.640453100 CEST	443	49733	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:57.640589952 CEST	49734	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:57.640599012 CEST	443	49734	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.155069113 CEST	443	49728	23.1.237.91	192.168.2.5
Oct 23, 2024 17:07:58.155272961 CEST	49728	443	192.168.2.5	23.1.237.91
Oct 23, 2024 17:07:58.342264891 CEST	443	49731	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.343180895 CEST	49731	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.343197107 CEST	443	49731	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.343900919 CEST	49731	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.343909025 CEST	443	49731	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.370193958 CEST	443	49730	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.370903015 CEST	49730	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.370929956 CEST	443	49730	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.371479988 CEST	49730	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.371495008 CEST	443	49730	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.399595022 CEST	443	49733	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.400234938 CEST	49733	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.400264978 CEST	443	49733	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.400831938 CEST	49733	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.400837898 CEST	443	49733	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.405855894 CEST	443	49734	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.406374931 CEST	49734	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.406404018 CEST	443	49734	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.406830072 CEST	49734	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.406833887 CEST	443	49734	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.406899929 CEST	443	49732	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.407190084 CEST	49732	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.407196045 CEST	443	49732	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.407609940 CEST	49732	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.407614946 CEST	443	49732	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.479671001 CEST	443	49731	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.479944944 CEST	443	49731	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.480012894 CEST	49731	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.480092049 CEST	49731	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.480092049 CEST	49731	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.480113983 CEST	443	49731	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.480125904 CEST	443	49731	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.483500957 CEST	49735	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.483537912 CEST	443	49735	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.483731985 CEST	49735	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.483917952 CEST	49735	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.483928919 CEST	443	49735	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.509244919 CEST	443	49730	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.509313107 CEST	443	49730	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.509641886 CEST	49730	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.509677887 CEST	49730	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.509696960 CEST	443	49730	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.509711981 CEST	49730	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.509717941 CEST	443	49730	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.513108015 CEST	49736	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.513149977 CEST	443	49736	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.513319969 CEST	49736	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.513470888 CEST	49736	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.513482094 CEST	443	49736	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.534044981 CEST	443	49733	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.534118891 CEST	443	49733	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.534193993 CEST	49733	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.534571886 CEST	49733	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.534583092 CEST	443	49733	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.534595013 CEST	49733	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.534600019 CEST	443	49733	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.538083076 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.538125038 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.538292885 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.538444042 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.538455963 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.548501015 CEST	443	49732	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.548945904 CEST	443	49732	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.549015999 CEST	49732	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.549053907 CEST	49732	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.549072027 CEST	443	49732	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.549089909 CEST	49732	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.549096107 CEST	443	49732	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.551235914 CEST	443	49734	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.551485062 CEST	443	49734	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.551978111 CEST	49734	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.552001953 CEST	49734	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.552011013 CEST	443	49734	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.552022934 CEST	49734	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.552026987 CEST	443	49734	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.552366018 CEST	49738	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.552395105 CEST	443	49738	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.552459002 CEST	49738	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.552725077 CEST	49738	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.552733898 CEST	443	49738	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.554153919 CEST	49739	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.554183960 CEST	443	49739	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:58.554507971 CEST	49739	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.554650068 CEST	49739	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:58.554666996 CEST	443	49739	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.250739098 CEST	443	49735	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.252914906 CEST	49735	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.252938032 CEST	443	49735	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.253443003 CEST	49735	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.253448009 CEST	443	49735	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.268742085 CEST	443	49736	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.269258976 CEST	49736	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.269284010 CEST	443	49736	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.269931078 CEST	49736	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.269937038 CEST	443	49736	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.313522100 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.313952923 CEST	443	49739	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.314131021 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.314158916 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.314183950 CEST	443	49738	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.314558983 CEST	49738	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.314582109 CEST	443	49738	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.314661980 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.314666986 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.314939976 CEST	49739	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.314944983 CEST	443	49739	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.314999104 CEST	49738	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.315002918 CEST	443	49738	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.315306902 CEST	49739	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.315310955 CEST	443	49739	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.390098095 CEST	443	49735	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.390170097 CEST	443	49735	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.390228033 CEST	49735	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.390444994 CEST	49735	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.390464067 CEST	443	49735	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.390491009 CEST	49735	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.390497923 CEST	443	49735	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.394215107 CEST	49742	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.394262075 CEST	443	49742	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.394355059 CEST	49742	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.394790888 CEST	49742	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.394800901 CEST	443	49742	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.407468081 CEST	443	49736	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.407527924 CEST	443	49736	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.407577991 CEST	49736	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.407768965 CEST	49736	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.407785892 CEST	443	49736	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.407804966 CEST	49736	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.407809973 CEST	443	49736	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.412066936 CEST	49743	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.412115097 CEST	443	49743	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.412178040 CEST	49743	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.412523031 CEST	49743	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.412534952 CEST	443	49743	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.451970100 CEST	443	49739	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.452230930 CEST	443	49739	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.452286005 CEST	49739	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.452543974 CEST	49739	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.452569008 CEST	443	49739	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.452580929 CEST	49739	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.452586889 CEST	443	49739	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.453334093 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.453450918 CEST	443	49738	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.453536987 CEST	443	49738	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.453589916 CEST	49738	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.453617096 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.453659058 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.455467939 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.455473900 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.455486059 CEST	49737	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.455488920 CEST	443	49737	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.457541943 CEST	49738	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.457554102 CEST	443	49738	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.457568884 CEST	49738	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.457573891 CEST	443	49738	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.460273027 CEST	49744	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.460304022 CEST	443	49744	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.460366964 CEST	49744	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.461637020 CEST	49745	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.461663961 CEST	443	49745	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.461718082 CEST	49745	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.462271929 CEST	49746	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.462280989 CEST	443	49746	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.462340117 CEST	49746	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.462568045 CEST	49744	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.462577105 CEST	443	49744	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.462738037 CEST	49745	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.462749958 CEST	443	49745	13.107.253.45	192.168.2.5
Oct 23, 2024 17:07:59.462966919 CEST	49746	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:07:59.462974072 CEST	443	49746	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.158453941 CEST	443	49742	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.159236908 CEST	49742	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.159282923 CEST	443	49742	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.159775019 CEST	49742	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.159784079 CEST	443	49742	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.173475981 CEST	443	49743	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.174657106 CEST	49743	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.174689054 CEST	443	49743	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.175543070 CEST	49743	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.175551891 CEST	443	49743	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.214868069 CEST	443	49744	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.215837002 CEST	49744	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.215873003 CEST	443	49744	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.216804981 CEST	49744	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.216810942 CEST	443	49744	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.233246088 CEST	443	49746	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.233839989 CEST	49746	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.233870029 CEST	443	49746	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.234338045 CEST	49746	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.234343052 CEST	443	49746	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.237397909 CEST	443	49745	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.237858057 CEST	49745	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.237888098 CEST	443	49745	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.239012957 CEST	49745	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.239036083 CEST	443	49745	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.312067986 CEST	443	49742	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.312144041 CEST	443	49742	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.312207937 CEST	49742	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.312679052 CEST	443	49743	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.312737942 CEST	443	49743	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.312771082 CEST	49742	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.312783957 CEST	49743	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.312823057 CEST	443	49742	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.312854052 CEST	49742	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.312871933 CEST	443	49742	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.315298080 CEST	49743	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.315325022 CEST	443	49743	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.315341949 CEST	49743	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.315346956 CEST	443	49743	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.322853088 CEST	49747	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.322915077 CEST	443	49747	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.322984934 CEST	49747	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.323333979 CEST	49747	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.323345900 CEST	443	49747	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.324875116 CEST	49748	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.324920893 CEST	443	49748	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.324975967 CEST	49748	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.325103045 CEST	49748	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.325114012 CEST	443	49748	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.359268904 CEST	443	49744	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.359411955 CEST	443	49744	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.359483957 CEST	49744	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.368676901 CEST	49744	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.368676901 CEST	49744	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.368715048 CEST	443	49744	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.368729115 CEST	443	49744	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.371728897 CEST	443	49746	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.371834993 CEST	443	49746	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.372175932 CEST	49746	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.373209953 CEST	49746	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.373212099 CEST	49749	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.373225927 CEST	443	49746	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.373239994 CEST	443	49749	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.373254061 CEST	49746	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.373260975 CEST	443	49746	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.373456001 CEST	49749	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.374088049 CEST	443	49745	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.374151945 CEST	443	49745	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.375570059 CEST	49749	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.375571966 CEST	49750	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.375581026 CEST	443	49749	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.375612020 CEST	443	49750	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.375660896 CEST	49745	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.375760078 CEST	49750	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.375777006 CEST	49745	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.375818968 CEST	443	49745	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.375859976 CEST	49745	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.375876904 CEST	443	49745	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.375910044 CEST	49750	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.375922918 CEST	443	49750	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.378047943 CEST	49751	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.378067970 CEST	443	49751	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:00.378374100 CEST	49751	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.379379034 CEST	49751	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:00.379393101 CEST	443	49751	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.078938007 CEST	443	49747	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.082236052 CEST	49747	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.082266092 CEST	443	49747	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.082803965 CEST	49747	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.082812071 CEST	443	49747	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.085875988 CEST	443	49748	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.086760998 CEST	49748	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.086760998 CEST	49748	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.086781979 CEST	443	49748	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.086791992 CEST	443	49748	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.114403963 CEST	443	49749	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.115768909 CEST	49749	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.115799904 CEST	443	49749	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.116228104 CEST	49749	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.116233110 CEST	443	49749	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.224220991 CEST	443	49748	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.224414110 CEST	443	49748	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.224792957 CEST	49748	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.224838018 CEST	49748	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.224838018 CEST	49748	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.224859953 CEST	443	49748	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.224870920 CEST	443	49748	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.228157997 CEST	49752	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.228204966 CEST	443	49752	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.230156898 CEST	49752	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.230319023 CEST	49752	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.230329990 CEST	443	49752	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.249628067 CEST	443	49749	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.250123978 CEST	443	49749	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.250237942 CEST	49749	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.250237942 CEST	49749	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.250380993 CEST	49749	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.250399113 CEST	443	49749	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.253344059 CEST	49754	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.253371954 CEST	443	49754	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.253923893 CEST	49754	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.253923893 CEST	49754	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.253956079 CEST	443	49754	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.260818958 CEST	443	49747	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.260976076 CEST	443	49747	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.261158943 CEST	49747	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.261159897 CEST	49747	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.261629105 CEST	49747	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.261670113 CEST	443	49747	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.263926029 CEST	49755	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.263963938 CEST	443	49755	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.264175892 CEST	49755	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.264175892 CEST	49755	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.264206886 CEST	443	49755	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.355822086 CEST	443	49750	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.360358953 CEST	49750	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.360373974 CEST	443	49750	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.363580942 CEST	49750	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.363590956 CEST	443	49750	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.498697996 CEST	443	49750	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.498814106 CEST	443	49750	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.498866081 CEST	49750	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.527028084 CEST	49750	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.527054071 CEST	443	49750	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.527070999 CEST	49750	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.527076006 CEST	443	49750	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.534038067 CEST	49756	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.534075022 CEST	443	49756	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.534146070 CEST	49756	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.534482956 CEST	49756	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.534492970 CEST	443	49756	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.991633892 CEST	443	49754	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.992973089 CEST	49754	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.992986917 CEST	443	49754	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.993976116 CEST	49754	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.993983030 CEST	443	49754	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.995508909 CEST	443	49752	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.996092081 CEST	49752	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.996098995 CEST	443	49752	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:01.996896029 CEST	49752	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:01.996901989 CEST	443	49752	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:02.024075031 CEST	443	49755	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:02.024651051 CEST	49755	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:02.024684906 CEST	443	49755	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:02.025237083 CEST	49755	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:02.025242090 CEST	443	49755	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:02.125256062 CEST	443	49754	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:02.125327110 CEST	443	49754	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:02.125371933 CEST	49754	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:02.125958920 CEST	49754	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:02.125960112 CEST	49754	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:02.125981092 CEST	443	49754	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:02.125993013 CEST	443	49754	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:02.133658886 CEST	49757	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:02.133713007 CEST	443	49757	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:02.133785963 CEST	49757	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:02.134125948 CEST	443	49752	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:02.134186983 CEST	49757	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:02.134188890 CEST	443	49752	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:02.134198904 CEST	443	49757	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:02.134232998 CEST	49752	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:02.134336948 CEST	49752	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:02.134349108 CEST	443	49752	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:02.134360075 CEST	49752	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:02.134367943 CEST	443	49752	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:02.137818098 CEST	49758	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:02.137855053 CEST	443	49758	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:02.137959957 CEST	49758	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:02.138134956 CEST	49758	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:02.138145924 CEST	443	49758	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:02.234757900 CEST	443	49755	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:02.234836102 CEST	443	49755	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:02.234913111 CEST	49755	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:02.297810078 CEST	49755	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:02.297844887 CEST	443	49755	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:02.297877073 CEST	49755	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:02.297888041 CEST	443	49755	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:02.424987078 CEST	49759	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:02.425033092 CEST	443	49759	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:02.425118923 CEST	49759	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:02.428383112 CEST	49759	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:02.428394079 CEST	443	49759	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:02.895643950 CEST	443	49757	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:02.896619081 CEST	49757	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:02.896646023 CEST	443	49757	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:02.897372007 CEST	49757	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:02.897377968 CEST	443	49757	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:02.907285929 CEST	443	49758	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:02.907969952 CEST	49758	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:02.907990932 CEST	443	49758	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:02.908423901 CEST	49758	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:02.908430099 CEST	443	49758	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.034085989 CEST	443	49757	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.034255028 CEST	443	49757	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.034327030 CEST	49757	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.034539938 CEST	49757	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.034559011 CEST	443	49757	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.034571886 CEST	49757	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.034576893 CEST	443	49757	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.038243055 CEST	49762	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.038285017 CEST	443	49762	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.038391113 CEST	49762	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.038551092 CEST	49762	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.038563013 CEST	443	49762	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.048548937 CEST	443	49758	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.049089909 CEST	443	49758	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.049166918 CEST	49758	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.049201012 CEST	49758	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.049218893 CEST	443	49758	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.049230099 CEST	49758	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.049235106 CEST	443	49758	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.051867962 CEST	49763	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.051908970 CEST	443	49763	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.054632902 CEST	49763	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.054804087 CEST	49763	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.054814100 CEST	443	49763	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.176513910 CEST	443	49759	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.177306890 CEST	49759	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.177335978 CEST	443	49759	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.177939892 CEST	49759	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.177943945 CEST	443	49759	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.317378044 CEST	443	49759	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.317451954 CEST	443	49759	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.317548990 CEST	49759	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.317847013 CEST	49759	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.317869902 CEST	443	49759	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.317883015 CEST	49759	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.317888021 CEST	443	49759	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.321126938 CEST	49764	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.321170092 CEST	443	49764	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.321309090 CEST	49764	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.321463108 CEST	49764	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.321475029 CEST	443	49764	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.805231094 CEST	443	49762	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.806200981 CEST	49762	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.806233883 CEST	443	49762	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.806957960 CEST	49762	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.806968927 CEST	443	49762	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.822586060 CEST	443	49763	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.824723959 CEST	49763	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.824755907 CEST	443	49763	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.825882912 CEST	49763	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.825896978 CEST	443	49763	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.961759090 CEST	443	49763	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.961870909 CEST	443	49763	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.962044954 CEST	49763	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.962546110 CEST	49763	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.962580919 CEST	443	49763	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.972908974 CEST	49765	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.972960949 CEST	443	49765	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:03.973293066 CEST	49765	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.974314928 CEST	49765	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:03.974325895 CEST	443	49765	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.070204020 CEST	443	49764	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.071094990 CEST	49764	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:04.071119070 CEST	443	49764	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.071548939 CEST	49764	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:04.071562052 CEST	443	49764	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.127341986 CEST	443	49762	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.127474070 CEST	443	49762	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.127630949 CEST	49762	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:04.127779961 CEST	49762	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:04.127804995 CEST	443	49762	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.127819061 CEST	49762	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:04.127825022 CEST	443	49762	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.131778955 CEST	49766	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:04.131819010 CEST	443	49766	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.132004023 CEST	49766	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:04.132215977 CEST	49766	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:04.132226944 CEST	443	49766	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.209919930 CEST	443	49764	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.209997892 CEST	443	49764	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.210074902 CEST	49764	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:04.210354090 CEST	49764	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:04.210374117 CEST	443	49764	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.210387945 CEST	49764	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:04.210393906 CEST	443	49764	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.214371920 CEST	49767	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:04.214421988 CEST	443	49767	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.214493036 CEST	49767	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:04.214705944 CEST	49767	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:04.214716911 CEST	443	49767	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.739197016 CEST	443	49765	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.742384911 CEST	49765	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:04.742414951 CEST	443	49765	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.742769957 CEST	49765	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:04.742780924 CEST	443	49765	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.878626108 CEST	443	49765	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.878726959 CEST	443	49765	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.878921986 CEST	49765	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:04.904720068 CEST	443	49766	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.924815893 CEST	49765	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:04.924817085 CEST	49765	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:04.924901962 CEST	443	49765	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.924937010 CEST	443	49765	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.933223963 CEST	49766	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:04.933254004 CEST	443	49766	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.937159061 CEST	49766	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:04.937181950 CEST	443	49766	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.966280937 CEST	443	49767	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.967190027 CEST	49768	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:04.967242002 CEST	443	49768	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.967525005 CEST	49768	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:04.971155882 CEST	49767	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:04.971187115 CEST	443	49767	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.971662045 CEST	49767	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:04.971668959 CEST	443	49767	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:04.975213051 CEST	49768	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:04.975244045 CEST	443	49768	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:05.072771072 CEST	443	49766	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:05.072877884 CEST	443	49766	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:05.072953939 CEST	49766	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:05.073379040 CEST	49766	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:05.073399067 CEST	443	49766	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:05.075400114 CEST	49766	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:05.075422049 CEST	443	49766	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:05.079394102 CEST	49769	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:05.079452038 CEST	443	49769	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:05.079519987 CEST	49769	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:05.080094099 CEST	49769	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:05.080105066 CEST	443	49769	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:05.104067087 CEST	443	49767	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:05.104401112 CEST	443	49767	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:05.104494095 CEST	49767	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:05.117105961 CEST	49767	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:05.117140055 CEST	443	49767	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:05.117156982 CEST	49767	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:05.117163897 CEST	443	49767	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:05.145086050 CEST	49770	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:05.145134926 CEST	443	49770	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:05.145198107 CEST	49770	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:05.145768881 CEST	49770	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:05.145782948 CEST	443	49770	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:05.728183031 CEST	443	49768	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:05.729022980 CEST	49768	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:05.729053974 CEST	443	49768	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:05.729448080 CEST	49768	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:05.729454041 CEST	443	49768	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:05.856522083 CEST	443	49769	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:05.857248068 CEST	49769	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:05.857271910 CEST	443	49769	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:05.857943058 CEST	49769	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:05.857949018 CEST	443	49769	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:05.874552011 CEST	443	49768	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:05.874723911 CEST	443	49768	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:05.874788046 CEST	49768	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:05.874969006 CEST	49768	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:05.875000000 CEST	443	49768	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:05.875020027 CEST	49768	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:05.875032902 CEST	443	49768	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:05.879407883 CEST	49771	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:05.879456043 CEST	443	49771	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:05.879538059 CEST	49771	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:05.879724979 CEST	49771	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:05.879734993 CEST	443	49771	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:05.909924030 CEST	443	49770	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:05.910770893 CEST	49770	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:05.910793066 CEST	443	49770	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:05.911310911 CEST	49770	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:05.911328077 CEST	443	49770	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:06.005085945 CEST	443	49769	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:06.005165100 CEST	443	49769	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:06.005362988 CEST	49769	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:06.005563974 CEST	49769	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:06.005578041 CEST	443	49769	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:06.005589008 CEST	49769	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:06.005594969 CEST	443	49769	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:06.009244919 CEST	49772	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:06.009308100 CEST	443	49772	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:06.009406090 CEST	49772	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:06.009615898 CEST	49772	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:06.009630919 CEST	443	49772	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:06.046371937 CEST	443	49770	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:06.046461105 CEST	443	49770	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:06.046555996 CEST	49770	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:06.046948910 CEST	49770	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:06.046972036 CEST	443	49770	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:06.046986103 CEST	49770	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:06.046992064 CEST	443	49770	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:06.050295115 CEST	49773	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:06.050344944 CEST	443	49773	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:06.050426960 CEST	49773	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:06.050566912 CEST	49773	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:06.050578117 CEST	443	49773	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:06.636157990 CEST	443	49771	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:06.637181044 CEST	49771	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:06.637223959 CEST	443	49771	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:06.637732983 CEST	49771	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:06.637737989 CEST	443	49771	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:06.915790081 CEST	443	49771	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:06.915857077 CEST	443	49771	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:06.915956020 CEST	49771	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:06.916241884 CEST	49771	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:06.916275978 CEST	443	49771	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:06.916309118 CEST	49771	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:06.916325092 CEST	443	49771	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:06.919641972 CEST	49774	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:06.919684887 CEST	443	49774	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:06.919796944 CEST	49774	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:06.919959068 CEST	49774	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:06.919969082 CEST	443	49774	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:06.922034979 CEST	443	49772	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:06.922463894 CEST	49772	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:06.922478914 CEST	443	49772	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:06.922985077 CEST	49772	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:06.922990084 CEST	443	49772	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.051553011 CEST	443	49773	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.055000067 CEST	49773	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.055027008 CEST	443	49773	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.055515051 CEST	49773	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.055527925 CEST	443	49773	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.058868885 CEST	443	49772	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.059024096 CEST	443	49772	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.059077978 CEST	49772	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.059134960 CEST	49772	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.059153080 CEST	443	49772	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.059175014 CEST	49772	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.059180975 CEST	443	49772	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.065921068 CEST	49775	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.065968990 CEST	443	49775	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.066037893 CEST	49775	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.066371918 CEST	49775	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.066385031 CEST	443	49775	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.186748028 CEST	443	49773	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.186815023 CEST	443	49773	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.186903000 CEST	49773	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.187149048 CEST	49773	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.187199116 CEST	443	49773	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.187230110 CEST	49773	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.187246084 CEST	443	49773	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.191658020 CEST	49776	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.191754103 CEST	443	49776	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.191848993 CEST	49776	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.193202019 CEST	49776	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.193243980 CEST	443	49776	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.741003036 CEST	443	49774	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.763689995 CEST	49774	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.763716936 CEST	443	49774	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.764401913 CEST	49774	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.764413118 CEST	443	49774	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.816832066 CEST	443	49775	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.826159954 CEST	49775	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.826198101 CEST	443	49775	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.827455044 CEST	49775	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.827471972 CEST	443	49775	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.898969889 CEST	443	49774	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.899064064 CEST	443	49774	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.899153948 CEST	49774	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.899436951 CEST	49774	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.899455070 CEST	443	49774	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.899467945 CEST	49774	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.899472952 CEST	443	49774	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.903167963 CEST	49777	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.903198004 CEST	443	49777	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.903273106 CEST	49777	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.903484106 CEST	49777	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.903495073 CEST	443	49777	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.949471951 CEST	443	49776	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.952131033 CEST	49776	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.952163935 CEST	443	49776	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.952691078 CEST	49776	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.952697039 CEST	443	49776	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.973663092 CEST	443	49775	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.973990917 CEST	443	49775	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.974144936 CEST	49775	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.974205017 CEST	49775	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.974227905 CEST	443	49775	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.974241018 CEST	49775	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.974256039 CEST	443	49775	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.977912903 CEST	49778	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.977961063 CEST	443	49778	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:07.978039026 CEST	49778	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.978204012 CEST	49778	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:07.978213072 CEST	443	49778	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:08.086798906 CEST	443	49776	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:08.086894989 CEST	443	49776	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:08.087074041 CEST	49776	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:08.095371008 CEST	49776	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:08.095411062 CEST	443	49776	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:08.095428944 CEST	49776	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:08.095436096 CEST	443	49776	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:08.098725080 CEST	49779	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:08.098766088 CEST	443	49779	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:08.098846912 CEST	49779	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:08.098995924 CEST	49779	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:08.099006891 CEST	443	49779	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:08.659033060 CEST	443	49777	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:08.660227060 CEST	49777	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:08.660262108 CEST	443	49777	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:08.660898924 CEST	49777	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:08.660906076 CEST	443	49777	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:08.726181984 CEST	443	49778	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:08.726982117 CEST	49778	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:08.727006912 CEST	443	49778	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:08.727586031 CEST	49778	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:08.727593899 CEST	443	49778	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:08.796667099 CEST	443	49777	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:08.796766043 CEST	443	49777	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:08.796914101 CEST	49777	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:08.800329924 CEST	49777	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:08.800348043 CEST	443	49777	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:08.800359964 CEST	49777	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:08.800365925 CEST	443	49777	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:08.804100990 CEST	49780	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:08.804198980 CEST	443	49780	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:08.804316998 CEST	49780	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:08.804502010 CEST	49780	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:08.804514885 CEST	443	49780	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:08.854104042 CEST	443	49779	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:08.854887009 CEST	49779	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:08.854918003 CEST	443	49779	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:08.855410099 CEST	49779	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:08.855420113 CEST	443	49779	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:08.864417076 CEST	443	49778	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:08.864501953 CEST	443	49778	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:08.864574909 CEST	49778	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:08.864877939 CEST	49778	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:08.864896059 CEST	443	49778	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:08.864907026 CEST	49778	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:08.864912033 CEST	443	49778	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:08.869048119 CEST	49781	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:08.869105101 CEST	443	49781	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:08.869194031 CEST	49781	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:08.869350910 CEST	49781	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:08.869364977 CEST	443	49781	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.001086950 CEST	443	49779	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.001255989 CEST	443	49779	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.001338959 CEST	49779	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.001542091 CEST	49779	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.001560926 CEST	443	49779	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.001573086 CEST	49779	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.001579046 CEST	443	49779	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.004858971 CEST	49782	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.004983902 CEST	443	49782	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.005094051 CEST	49782	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.005264997 CEST	49782	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.005299091 CEST	443	49782	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.580841064 CEST	443	49780	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.581492901 CEST	49780	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.581521034 CEST	443	49780	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.583199978 CEST	49780	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.583208084 CEST	443	49780	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.619036913 CEST	443	49781	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.619755030 CEST	49781	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.619781971 CEST	443	49781	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.620316029 CEST	49781	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.620322943 CEST	443	49781	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.721635103 CEST	443	49780	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.721718073 CEST	443	49780	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.721874952 CEST	49780	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.751168013 CEST	443	49782	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.751543999 CEST	49780	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.751574039 CEST	443	49780	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.751590014 CEST	49780	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.751596928 CEST	443	49780	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.760334015 CEST	49782	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.760360003 CEST	443	49782	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.760838985 CEST	49782	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.760843992 CEST	443	49782	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.762150049 CEST	443	49781	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.762305975 CEST	443	49781	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.762368917 CEST	49781	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.762449980 CEST	49781	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.762449980 CEST	49781	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.762497902 CEST	443	49781	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.762525082 CEST	443	49781	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.764265060 CEST	49783	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.764317989 CEST	443	49783	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.764406919 CEST	49783	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.764576912 CEST	49783	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.764605999 CEST	443	49783	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.769201994 CEST	49784	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.769243956 CEST	443	49784	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.769313097 CEST	49784	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.774692059 CEST	49784	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.774713993 CEST	443	49784	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.893172026 CEST	443	49782	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.893260002 CEST	443	49782	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.893331051 CEST	49782	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.893543005 CEST	49782	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.893573999 CEST	443	49782	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.893588066 CEST	49782	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.893594027 CEST	443	49782	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.904660940 CEST	49785	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.904733896 CEST	443	49785	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:09.904839993 CEST	49785	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.905541897 CEST	49785	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:09.905556917 CEST	443	49785	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:10.517808914 CEST	443	49783	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:10.531502008 CEST	443	49784	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:10.566294909 CEST	49783	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:10.581909895 CEST	49784	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:10.604948044 CEST	49783	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:10.604964018 CEST	443	49783	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:10.605089903 CEST	49784	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:10.605118036 CEST	443	49784	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:10.605571985 CEST	49784	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:10.605578899 CEST	443	49784	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:10.605658054 CEST	49783	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:10.605669975 CEST	443	49783	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:10.674057961 CEST	443	49785	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:10.675539017 CEST	49785	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:10.675570011 CEST	443	49785	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:10.676903009 CEST	49785	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:10.676918030 CEST	443	49785	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:10.740407944 CEST	443	49784	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:10.740490913 CEST	443	49784	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:10.740541935 CEST	49784	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:10.740756989 CEST	49784	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:10.740778923 CEST	443	49784	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:10.740794897 CEST	49784	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:10.740801096 CEST	443	49784	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:10.744055033 CEST	49786	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:10.744095087 CEST	443	49786	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:10.744163036 CEST	49786	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:10.744313955 CEST	49786	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:10.744323969 CEST	443	49786	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:10.745510101 CEST	443	49783	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:10.745573997 CEST	443	49783	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:10.745615005 CEST	49783	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:10.745676041 CEST	49783	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:10.745692015 CEST	443	49783	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:10.745702028 CEST	49783	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:10.745706081 CEST	443	49783	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:10.747893095 CEST	49787	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:10.747981071 CEST	443	49787	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:10.748060942 CEST	49787	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:10.748172998 CEST	49787	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:10.748202085 CEST	443	49787	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:10.815566063 CEST	443	49785	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:10.815759897 CEST	443	49785	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:10.815869093 CEST	49785	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:10.816148996 CEST	49785	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:10.816170931 CEST	443	49785	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:10.816184998 CEST	49785	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:10.816190958 CEST	443	49785	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:10.819473028 CEST	49788	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:10.819518089 CEST	443	49788	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:10.819596052 CEST	49788	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:10.819766998 CEST	49788	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:10.819778919 CEST	443	49788	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:11.500647068 CEST	443	49786	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:11.502017975 CEST	49786	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:11.502053022 CEST	443	49786	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:11.502468109 CEST	49786	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:11.502475977 CEST	443	49786	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:11.517117023 CEST	443	49787	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:11.520757914 CEST	49787	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:11.520795107 CEST	443	49787	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:11.521184921 CEST	49787	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:11.521189928 CEST	443	49787	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:11.634315014 CEST	443	49788	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:11.635116100 CEST	49788	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:11.635143042 CEST	443	49788	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:11.635732889 CEST	49788	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:11.635737896 CEST	443	49788	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:11.639018059 CEST	443	49786	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:11.639089108 CEST	443	49786	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:11.639326096 CEST	49786	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:11.639364958 CEST	49786	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:11.639384985 CEST	443	49786	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:11.639395952 CEST	49786	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:11.639401913 CEST	443	49786	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:11.642752886 CEST	49789	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:11.642805099 CEST	443	49789	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:11.642884016 CEST	49789	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:11.643011093 CEST	49789	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:11.643023014 CEST	443	49789	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:11.657613993 CEST	443	49787	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:11.657812119 CEST	443	49787	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:11.657912970 CEST	49787	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:11.658063889 CEST	49787	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:11.658063889 CEST	49787	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:11.658081055 CEST	443	49787	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:11.658092022 CEST	443	49787	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:11.661009073 CEST	49790	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:11.661039114 CEST	443	49790	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:11.661122084 CEST	49790	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:11.661283016 CEST	49790	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:11.661290884 CEST	443	49790	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:11.774022102 CEST	443	49788	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:11.774564981 CEST	443	49788	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:11.774786949 CEST	49788	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:11.774786949 CEST	49788	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:11.774786949 CEST	49788	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:11.777950048 CEST	49791	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:11.777998924 CEST	443	49791	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:11.778104067 CEST	49791	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:11.778287888 CEST	49791	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:11.778300047 CEST	443	49791	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:12.082042933 CEST	49788	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:12.082138062 CEST	443	49788	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:12.412028074 CEST	443	49789	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:12.412844896 CEST	49789	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:12.412873030 CEST	443	49789	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:12.413423061 CEST	49789	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:12.413434029 CEST	443	49789	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:12.448054075 CEST	443	49790	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:12.448911905 CEST	49790	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:12.448952913 CEST	443	49790	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:12.449440956 CEST	49790	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:12.449445963 CEST	443	49790	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:12.553010941 CEST	443	49789	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:12.553281069 CEST	443	49789	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:12.553406954 CEST	49789	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:12.553533077 CEST	49789	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:12.553590059 CEST	443	49789	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:12.553647041 CEST	49789	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:12.553662062 CEST	443	49789	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:12.557527065 CEST	49792	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:12.557615995 CEST	443	49792	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:12.557706118 CEST	49792	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:12.557853937 CEST	49792	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:12.557872057 CEST	443	49792	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:12.589499950 CEST	443	49790	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:12.589694023 CEST	443	49790	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:12.589811087 CEST	49790	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:12.590091944 CEST	49790	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:12.590120077 CEST	443	49790	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:12.590137005 CEST	49790	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:12.590143919 CEST	443	49790	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:12.594341040 CEST	49793	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:12.594414949 CEST	443	49793	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:12.594554901 CEST	49793	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:12.594803095 CEST	49793	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:12.594815969 CEST	443	49793	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:12.691922903 CEST	443	49791	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:12.738203049 CEST	49791	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:12.779984951 CEST	49791	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:12.780020952 CEST	443	49791	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:12.780667067 CEST	49791	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:12.780675888 CEST	443	49791	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:13.067205906 CEST	443	49791	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:13.067337036 CEST	443	49791	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:13.067419052 CEST	49791	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:13.079246998 CEST	49791	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:13.079282999 CEST	443	49791	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:13.079338074 CEST	49791	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:13.079345942 CEST	443	49791	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:13.122297049 CEST	49794	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:13.122375965 CEST	443	49794	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:13.122443914 CEST	49794	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:13.122929096 CEST	49794	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:13.122956038 CEST	443	49794	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:13.326442003 CEST	443	49792	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:13.327116966 CEST	49792	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:13.327148914 CEST	443	49792	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:13.327615023 CEST	49792	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:13.327621937 CEST	443	49792	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:13.360533953 CEST	443	49793	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:13.361381054 CEST	49793	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:13.361459970 CEST	443	49793	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:13.361705065 CEST	49793	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:13.361720085 CEST	443	49793	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:13.466150999 CEST	443	49792	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:13.466221094 CEST	443	49792	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:13.466372967 CEST	49792	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:13.466686964 CEST	49792	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:13.466711998 CEST	443	49792	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:13.466726065 CEST	49792	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:13.466732979 CEST	443	49792	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:13.470618010 CEST	49795	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:13.470665932 CEST	443	49795	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:13.470814943 CEST	49795	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:13.471067905 CEST	49795	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:13.471076965 CEST	443	49795	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:13.502432108 CEST	443	49793	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:13.502624035 CEST	443	49793	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:13.502798080 CEST	49793	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:13.503099918 CEST	49793	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:13.503139019 CEST	443	49793	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:13.503185987 CEST	49793	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:13.503201962 CEST	443	49793	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:13.506726027 CEST	49796	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:13.506774902 CEST	443	49796	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:13.506860018 CEST	49796	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:13.507010937 CEST	49796	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:13.507021904 CEST	443	49796	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:13.899996042 CEST	443	49794	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:13.900541067 CEST	49794	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:13.900582075 CEST	443	49794	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:13.901041985 CEST	49794	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:13.901050091 CEST	443	49794	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.041198015 CEST	443	49794	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.041290998 CEST	443	49794	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.041402102 CEST	49794	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.041670084 CEST	49794	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.041696072 CEST	443	49794	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.041712999 CEST	49794	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.041721106 CEST	443	49794	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.045310020 CEST	49797	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.045382023 CEST	443	49797	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.045468092 CEST	49797	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.045665979 CEST	49797	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.045681953 CEST	443	49797	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.233685017 CEST	443	49795	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.234647036 CEST	49795	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.234673023 CEST	443	49795	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.235160112 CEST	49795	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.235167027 CEST	443	49795	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.252758026 CEST	443	49796	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.253773928 CEST	49796	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.253808975 CEST	443	49796	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.255345106 CEST	49796	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.255359888 CEST	443	49796	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.374955893 CEST	443	49795	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.375058889 CEST	443	49795	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.375253916 CEST	49795	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.375690937 CEST	49795	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.375731945 CEST	443	49795	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.375754118 CEST	49795	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.375760078 CEST	443	49795	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.379852057 CEST	49798	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.379906893 CEST	443	49798	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.379995108 CEST	49798	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.380165100 CEST	49798	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.380181074 CEST	443	49798	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.390206099 CEST	443	49796	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.390647888 CEST	443	49796	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.390753031 CEST	49796	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.390791893 CEST	49796	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.390810966 CEST	443	49796	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.390822887 CEST	49796	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.390827894 CEST	443	49796	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.394071102 CEST	49799	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.394123077 CEST	443	49799	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.394220114 CEST	49799	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.394448042 CEST	49799	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.394464016 CEST	443	49799	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.829982042 CEST	443	49797	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.830892086 CEST	49797	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.830976009 CEST	443	49797	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.831408024 CEST	49797	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.831422091 CEST	443	49797	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.972043037 CEST	443	49797	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.972121000 CEST	443	49797	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.972240925 CEST	49797	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.972511053 CEST	49797	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.972537994 CEST	443	49797	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.976564884 CEST	49800	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.976629019 CEST	443	49800	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:14.976711035 CEST	49800	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.976880074 CEST	49800	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:14.976886988 CEST	443	49800	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:15.148055077 CEST	443	49798	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:15.148761034 CEST	49798	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:15.148796082 CEST	443	49798	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:15.149367094 CEST	49798	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:15.149374962 CEST	443	49798	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:15.160902977 CEST	443	49799	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:15.163211107 CEST	49799	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:15.163242102 CEST	443	49799	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:15.163690090 CEST	49799	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:15.163696051 CEST	443	49799	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:15.285819054 CEST	443	49798	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:15.285902023 CEST	443	49798	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:15.285965919 CEST	49798	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:15.286392927 CEST	49798	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:15.286417007 CEST	443	49798	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:15.286431074 CEST	49798	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:15.286437988 CEST	443	49798	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:15.292907000 CEST	49801	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:15.292958021 CEST	443	49801	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:15.293023109 CEST	49801	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:15.293356895 CEST	49801	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:15.293369055 CEST	443	49801	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:15.311760902 CEST	443	49799	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:15.311837912 CEST	443	49799	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:15.311933041 CEST	49799	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:15.313290119 CEST	49799	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:15.313319921 CEST	443	49799	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:15.313364983 CEST	49799	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:15.313374043 CEST	443	49799	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:15.317507029 CEST	49802	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:15.317610025 CEST	443	49802	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:15.317697048 CEST	49802	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:15.317961931 CEST	49802	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:15.317992926 CEST	443	49802	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:15.736844063 CEST	443	49800	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:15.737706900 CEST	49800	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:15.737728119 CEST	443	49800	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:15.738276958 CEST	49800	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:15.738285065 CEST	443	49800	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:15.876868010 CEST	443	49800	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:15.876890898 CEST	443	49800	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:15.876945019 CEST	443	49800	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:15.877100945 CEST	49800	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:15.877290010 CEST	49800	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:15.877701044 CEST	49800	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:15.877743959 CEST	443	49800	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:15.877773046 CEST	49800	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:15.877789021 CEST	443	49800	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:15.881220102 CEST	49803	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:15.881264925 CEST	443	49803	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:15.881336927 CEST	49803	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:15.881489038 CEST	49803	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:15.881500006 CEST	443	49803	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:16.250808001 CEST	443	49802	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:16.251492023 CEST	49802	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:16.251523018 CEST	443	49802	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:16.252134085 CEST	49802	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:16.252140045 CEST	443	49802	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:16.252942085 CEST	443	49801	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:16.253350019 CEST	49801	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:16.253365040 CEST	443	49801	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:16.253743887 CEST	49801	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:16.253747940 CEST	443	49801	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:16.389897108 CEST	443	49802	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:16.389975071 CEST	443	49802	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:16.390068054 CEST	49802	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:16.390388966 CEST	49802	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:16.390413046 CEST	443	49802	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:16.390424967 CEST	49802	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:16.390430927 CEST	443	49802	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:16.391967058 CEST	443	49801	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:16.392059088 CEST	443	49801	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:16.392119884 CEST	49801	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:16.392235994 CEST	49801	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:16.392256021 CEST	443	49801	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:16.392267942 CEST	49801	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:16.392275095 CEST	443	49801	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:16.394210100 CEST	49804	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:16.394258976 CEST	443	49804	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:16.394373894 CEST	49804	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:16.394478083 CEST	49805	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:16.394516945 CEST	443	49805	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:16.394531012 CEST	49804	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:16.394543886 CEST	443	49804	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:16.394576073 CEST	49805	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:16.394750118 CEST	49805	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:16.394761086 CEST	443	49805	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:16.868947983 CEST	443	49803	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:16.869577885 CEST	49803	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:16.869594097 CEST	443	49803	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:16.870096922 CEST	49803	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:16.870100975 CEST	443	49803	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:16.882575035 CEST	443	49756	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:16.883085966 CEST	49756	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:16.883110046 CEST	443	49756	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:16.883455992 CEST	49756	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:16.883460999 CEST	443	49756	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.006702900 CEST	443	49803	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.006731033 CEST	443	49803	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.006855011 CEST	49803	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.006879091 CEST	443	49803	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.006937027 CEST	443	49803	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.007006884 CEST	49803	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.007198095 CEST	49803	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.007211924 CEST	443	49803	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.007225037 CEST	49803	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.007230043 CEST	443	49803	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.010721922 CEST	49806	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.010771990 CEST	443	49806	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.010867119 CEST	49806	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.011055946 CEST	49806	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.011065960 CEST	443	49806	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.024346113 CEST	443	49756	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.024410009 CEST	443	49756	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.024472952 CEST	49756	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.024689913 CEST	49756	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.024708986 CEST	443	49756	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.024722099 CEST	49756	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.024727106 CEST	443	49756	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.027713060 CEST	49807	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.027746916 CEST	443	49807	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.027849913 CEST	49807	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.027983904 CEST	49807	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.027995110 CEST	443	49807	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.147995949 CEST	443	49805	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.148926020 CEST	49805	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.148960114 CEST	443	49805	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.149347067 CEST	49805	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.149350882 CEST	443	49805	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.159420013 CEST	443	49804	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.160324097 CEST	49804	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.160356998 CEST	443	49804	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.160744905 CEST	49804	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.160749912 CEST	443	49804	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.284759998 CEST	443	49805	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.284796000 CEST	443	49805	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.284948111 CEST	49805	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.284971952 CEST	443	49805	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.285092115 CEST	443	49805	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.285139084 CEST	49805	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.285607100 CEST	49805	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.285624027 CEST	443	49805	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.285635948 CEST	49805	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.285640955 CEST	443	49805	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.289098978 CEST	49808	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.289135933 CEST	443	49808	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.289216995 CEST	49808	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.289375067 CEST	49808	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.289386988 CEST	443	49808	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.307806969 CEST	443	49804	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.307830095 CEST	443	49804	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.307893038 CEST	49804	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.307895899 CEST	443	49804	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.307943106 CEST	49804	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.308203936 CEST	49804	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.308226109 CEST	443	49804	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.308238983 CEST	49804	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.308243990 CEST	443	49804	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.308615923 CEST	443	49728	23.1.237.91	192.168.2.5
Oct 23, 2024 17:08:17.308664083 CEST	49728	443	192.168.2.5	23.1.237.91
Oct 23, 2024 17:08:17.311507940 CEST	49809	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.311549902 CEST	443	49809	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.311613083 CEST	49809	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.311760902 CEST	49809	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.311772108 CEST	443	49809	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.783263922 CEST	443	49806	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.784272909 CEST	49806	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.784296989 CEST	443	49806	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.784750938 CEST	49806	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.784754992 CEST	443	49806	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.798388958 CEST	443	49807	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.798912048 CEST	49807	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.798937082 CEST	443	49807	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.799434900 CEST	49807	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.799438953 CEST	443	49807	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.923459053 CEST	443	49806	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.923727036 CEST	443	49806	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.923933983 CEST	49806	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.924083948 CEST	49806	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.924108028 CEST	443	49806	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.924120903 CEST	49806	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.924127102 CEST	443	49806	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.927755117 CEST	49810	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.927802086 CEST	443	49810	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.927892923 CEST	49810	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.928077936 CEST	49810	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.928090096 CEST	443	49810	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.939333916 CEST	443	49807	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.939409018 CEST	443	49807	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.939479113 CEST	49807	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.939774036 CEST	49807	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.939774036 CEST	49807	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.939793110 CEST	443	49807	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.939806938 CEST	443	49807	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.942971945 CEST	49811	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.943021059 CEST	443	49811	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:17.943094015 CEST	49811	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.943238974 CEST	49811	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:17.943253040 CEST	443	49811	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:18.063091040 CEST	443	49808	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:18.064996004 CEST	49808	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:18.065009117 CEST	443	49808	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:18.066016912 CEST	443	49809	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:18.066107988 CEST	49808	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:18.066111088 CEST	443	49808	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:18.066565990 CEST	49809	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:18.066593885 CEST	443	49809	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:18.067073107 CEST	49809	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:18.067076921 CEST	443	49809	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:18.202663898 CEST	443	49808	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:18.202769041 CEST	443	49808	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:18.202954054 CEST	49808	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:18.203160048 CEST	49808	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:18.203176022 CEST	443	49808	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:18.203190088 CEST	49808	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:18.203195095 CEST	443	49808	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:18.203255892 CEST	443	49809	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:18.203336000 CEST	443	49809	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:18.203377962 CEST	49809	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:18.203547001 CEST	49809	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:18.203574896 CEST	443	49809	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:18.203592062 CEST	49809	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:18.203598976 CEST	443	49809	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:18.207335949 CEST	49812	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:18.207374096 CEST	49813	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:18.207380056 CEST	443	49812	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:18.207417965 CEST	443	49813	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:18.207453012 CEST	49812	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:18.207475901 CEST	49813	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:18.207647085 CEST	49812	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:18.207659960 CEST	443	49812	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:18.207751989 CEST	49813	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:18.207762957 CEST	443	49813	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.003570080 CEST	443	49810	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.004432917 CEST	49810	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.004475117 CEST	443	49810	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.005063057 CEST	49810	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.005069971 CEST	443	49810	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.007271051 CEST	443	49811	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.007658005 CEST	49811	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.007726908 CEST	443	49811	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.008018970 CEST	49811	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.008037090 CEST	443	49811	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.133836031 CEST	443	49813	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.134500980 CEST	49813	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.134562016 CEST	443	49813	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.135015011 CEST	49813	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.135020971 CEST	443	49813	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.145242929 CEST	443	49811	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.145323038 CEST	443	49811	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.145374060 CEST	49811	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.145454884 CEST	443	49810	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.145575047 CEST	49811	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.145591974 CEST	443	49811	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.145603895 CEST	49811	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.145610094 CEST	443	49811	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.145612955 CEST	443	49810	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.145667076 CEST	49810	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.145817041 CEST	49810	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.145834923 CEST	443	49810	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.145845890 CEST	49810	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.145852089 CEST	443	49810	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.149312019 CEST	49815	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.149328947 CEST	49814	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.149349928 CEST	443	49815	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.149419069 CEST	443	49814	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.149446964 CEST	49815	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.149493933 CEST	49814	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.149655104 CEST	49815	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.149666071 CEST	49814	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.149668932 CEST	443	49815	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.149696112 CEST	443	49814	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.151195049 CEST	443	49812	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.151587963 CEST	49812	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.151627064 CEST	443	49812	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.152065039 CEST	49812	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.152076006 CEST	443	49812	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.270962000 CEST	443	49813	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.271058083 CEST	443	49813	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.271130085 CEST	49813	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.271405935 CEST	49813	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.271431923 CEST	443	49813	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.271449089 CEST	49813	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.271456003 CEST	443	49813	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.274902105 CEST	49816	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.274946928 CEST	443	49816	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.275028944 CEST	49816	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.275208950 CEST	49816	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.275218964 CEST	443	49816	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.531092882 CEST	443	49812	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.531172991 CEST	443	49812	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.531363964 CEST	49812	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.531693935 CEST	49812	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.531713009 CEST	443	49812	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.531725883 CEST	49812	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.531732082 CEST	443	49812	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.535309076 CEST	49817	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.535355091 CEST	443	49817	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.535434008 CEST	49817	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.535586119 CEST	49817	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.535597086 CEST	443	49817	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.897217035 CEST	443	49815	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.897836924 CEST	49815	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.897870064 CEST	443	49815	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.898356915 CEST	49815	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.898367882 CEST	443	49815	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.914232969 CEST	443	49814	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.914802074 CEST	49814	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.914828062 CEST	443	49814	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:19.915321112 CEST	49814	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:19.915328979 CEST	443	49814	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.033198118 CEST	443	49815	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.033277035 CEST	443	49815	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.033396006 CEST	49815	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.033725023 CEST	49815	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.033778906 CEST	443	49815	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.033813000 CEST	49815	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.033829927 CEST	443	49815	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.037770987 CEST	49818	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.037863970 CEST	443	49818	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.038065910 CEST	49818	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.038255930 CEST	49818	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.038289070 CEST	443	49818	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.042048931 CEST	443	49816	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.042501926 CEST	49816	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.042519093 CEST	443	49816	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.042998075 CEST	49816	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.043004036 CEST	443	49816	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.054239988 CEST	443	49814	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.054347038 CEST	443	49814	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.054418087 CEST	49814	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.054708958 CEST	49814	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.054728985 CEST	443	49814	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.054761887 CEST	49814	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.054768085 CEST	443	49814	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.058494091 CEST	49819	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.058549881 CEST	443	49819	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.058626890 CEST	49819	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.058804035 CEST	49819	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.058814049 CEST	443	49819	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.180461884 CEST	443	49816	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.180510998 CEST	443	49816	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.180557013 CEST	443	49816	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.180643082 CEST	49816	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.181034088 CEST	49816	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.181051970 CEST	443	49816	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.181063890 CEST	49816	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.181071043 CEST	443	49816	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.184741974 CEST	49820	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.184781075 CEST	443	49820	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.184859991 CEST	49820	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.185024977 CEST	49820	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.185041904 CEST	443	49820	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.317316055 CEST	443	49817	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.317960978 CEST	49817	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.317996979 CEST	443	49817	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.318586111 CEST	49817	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.318589926 CEST	443	49817	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.457845926 CEST	443	49817	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.457936049 CEST	443	49817	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.457995892 CEST	49817	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.458560944 CEST	49817	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.458589077 CEST	443	49817	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.458601952 CEST	49817	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.458609104 CEST	443	49817	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.464967966 CEST	49821	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.465020895 CEST	443	49821	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.465123892 CEST	49821	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.465338945 CEST	49821	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.465349913 CEST	443	49821	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.812367916 CEST	443	49819	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.816273928 CEST	49819	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.816324949 CEST	443	49819	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.816881895 CEST	49819	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.816895008 CEST	443	49819	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.823198080 CEST	443	49818	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.829415083 CEST	49818	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.829473019 CEST	443	49818	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.830080986 CEST	49818	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.830095053 CEST	443	49818	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.950336933 CEST	443	49819	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.950522900 CEST	443	49819	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.950937986 CEST	49819	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.951021910 CEST	49819	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.951021910 CEST	49819	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.951066017 CEST	443	49819	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.951095104 CEST	443	49819	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.951698065 CEST	443	49820	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.952610970 CEST	49820	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.952635050 CEST	443	49820	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.953160048 CEST	49820	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.953165054 CEST	443	49820	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.954809904 CEST	49822	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.954842091 CEST	443	49822	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.954920053 CEST	49822	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.955097914 CEST	49822	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.955106020 CEST	443	49822	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.962984085 CEST	443	49818	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.963016987 CEST	443	49818	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.963069916 CEST	49818	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.963073015 CEST	443	49818	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.963114023 CEST	49818	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.963300943 CEST	49818	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.963325977 CEST	443	49818	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.963340998 CEST	49818	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.963346004 CEST	443	49818	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.966300011 CEST	49823	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.966392040 CEST	443	49823	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:20.966883898 CEST	49823	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.967067003 CEST	49823	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:20.967097044 CEST	443	49823	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.091355085 CEST	443	49820	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.091624975 CEST	443	49820	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.091749907 CEST	49820	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.091825962 CEST	49820	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.091825962 CEST	49820	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.091867924 CEST	443	49820	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.091893911 CEST	443	49820	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.095300913 CEST	49824	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.095433950 CEST	443	49824	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.095659018 CEST	49824	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.095825911 CEST	49824	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.095860958 CEST	443	49824	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.228117943 CEST	443	49821	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.232296944 CEST	49821	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.232331038 CEST	443	49821	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.232836962 CEST	49821	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.232844114 CEST	443	49821	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.367650986 CEST	443	49821	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.367736101 CEST	443	49821	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.367846966 CEST	49821	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.368051052 CEST	49821	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.368076086 CEST	443	49821	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.368088961 CEST	49821	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.368094921 CEST	443	49821	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.371393919 CEST	49825	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.371437073 CEST	443	49825	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.371576071 CEST	49825	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.371726036 CEST	49825	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.371735096 CEST	443	49825	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.691366911 CEST	443	49822	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.692203045 CEST	49822	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.692236900 CEST	443	49822	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.692694902 CEST	49822	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.692703962 CEST	443	49822	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.726686954 CEST	443	49823	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.727319956 CEST	49823	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.727359056 CEST	443	49823	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.727813959 CEST	49823	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.727822065 CEST	443	49823	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.826412916 CEST	443	49822	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.826450109 CEST	443	49822	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.826505899 CEST	443	49822	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.826638937 CEST	49822	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.826679945 CEST	49822	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.826863050 CEST	49822	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.826889038 CEST	443	49822	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.826905966 CEST	49822	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.826914072 CEST	443	49822	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.830123901 CEST	49826	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.830163002 CEST	443	49826	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.830420971 CEST	49826	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.830420971 CEST	49826	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.830456972 CEST	443	49826	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.857764006 CEST	443	49824	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.860347033 CEST	49824	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.860380888 CEST	443	49824	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.860779047 CEST	49824	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.860790968 CEST	443	49824	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.861957073 CEST	443	49823	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.862224102 CEST	443	49823	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.862308025 CEST	49823	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.862556934 CEST	49823	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.862608910 CEST	443	49823	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.862638950 CEST	49823	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.862656116 CEST	443	49823	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.865874052 CEST	49827	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.865909100 CEST	443	49827	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.865983009 CEST	49827	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.866142988 CEST	49827	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.866156101 CEST	443	49827	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.995891094 CEST	443	49824	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.995990992 CEST	443	49824	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.996220112 CEST	49824	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.996411085 CEST	49824	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.996411085 CEST	49824	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:21.996433020 CEST	443	49824	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.996445894 CEST	443	49824	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:21.999984980 CEST	49828	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.000029087 CEST	443	49828	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.000123978 CEST	49828	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.000319004 CEST	49828	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.000345945 CEST	443	49828	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.120815039 CEST	443	49825	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.121608973 CEST	49825	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.121653080 CEST	443	49825	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.122107983 CEST	49825	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.122113943 CEST	443	49825	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.258277893 CEST	443	49825	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.258445978 CEST	443	49825	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.258528948 CEST	49825	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.258685112 CEST	49825	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.258713007 CEST	443	49825	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.258729935 CEST	49825	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.258737087 CEST	443	49825	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.262172937 CEST	49829	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.262221098 CEST	443	49829	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.262317896 CEST	49829	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.262460947 CEST	49829	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.262474060 CEST	443	49829	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.638243914 CEST	443	49827	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.639024973 CEST	49827	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.639064074 CEST	443	49827	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.639540911 CEST	49827	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.639545918 CEST	443	49827	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.766616106 CEST	443	49828	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.767438889 CEST	49828	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.767472029 CEST	443	49828	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.767926931 CEST	49828	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.767932892 CEST	443	49828	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.777687073 CEST	443	49827	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.777862072 CEST	443	49827	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.777934074 CEST	49827	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.777997971 CEST	49827	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.778023005 CEST	443	49827	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.778034925 CEST	49827	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.778040886 CEST	443	49827	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.781128883 CEST	49830	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.781208992 CEST	443	49830	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.781294107 CEST	49830	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.781444073 CEST	49830	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.781472921 CEST	443	49830	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.894670963 CEST	49751	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.896981955 CEST	49831	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.897080898 CEST	443	49831	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.897284031 CEST	49831	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.897490978 CEST	49831	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.897538900 CEST	443	49831	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.905428886 CEST	443	49828	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.905462980 CEST	443	49828	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.905518055 CEST	443	49828	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.905539036 CEST	49828	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.905563116 CEST	49828	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.905782938 CEST	49828	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.905798912 CEST	443	49828	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.905810118 CEST	49828	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.905814886 CEST	443	49828	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.909038067 CEST	49832	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.909081936 CEST	443	49832	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.909168005 CEST	49832	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.909349918 CEST	49832	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.909367085 CEST	443	49832	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.952820063 CEST	443	49826	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.956285954 CEST	49826	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.956309080 CEST	443	49826	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:22.956789970 CEST	49826	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:22.956798077 CEST	443	49826	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.026809931 CEST	443	49829	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.028305054 CEST	49829	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.028332949 CEST	443	49829	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.028794050 CEST	49829	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.028798103 CEST	443	49829	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.092628956 CEST	443	49826	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.092716932 CEST	443	49826	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.092767000 CEST	443	49826	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.092864990 CEST	49826	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.092897892 CEST	49826	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.093135118 CEST	49826	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.093161106 CEST	443	49826	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.093175888 CEST	49826	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.093182087 CEST	443	49826	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.096282959 CEST	49833	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.096333027 CEST	443	49833	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.096417904 CEST	49833	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.096601963 CEST	49833	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.096612930 CEST	443	49833	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.165399075 CEST	443	49829	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.165561914 CEST	443	49829	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.165745020 CEST	49829	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.165990114 CEST	49829	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.166032076 CEST	443	49829	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.166075945 CEST	49829	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.166091919 CEST	443	49829	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.169007063 CEST	49834	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.169117928 CEST	443	49834	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.169210911 CEST	49834	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.169389009 CEST	49834	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.169409990 CEST	443	49834	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.550771952 CEST	443	49830	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.551440001 CEST	49830	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.551470041 CEST	443	49830	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.551925898 CEST	49830	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.551933050 CEST	443	49830	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.663949013 CEST	443	49831	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.664103985 CEST	49831	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.665481091 CEST	49831	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.665492058 CEST	443	49831	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.665708065 CEST	443	49831	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.666579008 CEST	49831	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.690993071 CEST	443	49830	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.691054106 CEST	443	49830	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.691205978 CEST	49830	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.691591978 CEST	49830	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.691611052 CEST	443	49830	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.691622972 CEST	49830	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.691628933 CEST	443	49830	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.694796085 CEST	49835	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.694842100 CEST	443	49835	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.694911003 CEST	49835	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.695035934 CEST	49835	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.695045948 CEST	443	49835	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.707329988 CEST	443	49831	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.803663969 CEST	443	49831	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.803724051 CEST	443	49831	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.803905010 CEST	49831	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.804209948 CEST	49831	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.804230928 CEST	443	49831	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.804241896 CEST	49831	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.804248095 CEST	443	49831	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.807719946 CEST	49836	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.807781935 CEST	443	49836	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.807888985 CEST	49836	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.808074951 CEST	49836	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.808096886 CEST	443	49836	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.841537952 CEST	443	49832	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.841680050 CEST	49832	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.842941046 CEST	49832	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.842971087 CEST	443	49832	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.843214035 CEST	443	49832	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.844105959 CEST	49832	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.866972923 CEST	443	49833	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.867120981 CEST	49833	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.868448019 CEST	49833	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.868480921 CEST	443	49833	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.868731022 CEST	443	49833	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.869616032 CEST	49833	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.891381025 CEST	443	49832	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.911356926 CEST	443	49833	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.942059040 CEST	443	49834	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.942473888 CEST	49834	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.943595886 CEST	49834	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.943629980 CEST	443	49834	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.943886042 CEST	443	49834	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.944703102 CEST	49834	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.980809927 CEST	443	49832	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.980843067 CEST	443	49832	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.980897903 CEST	443	49832	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.980930090 CEST	49832	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.980973959 CEST	49832	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.981127977 CEST	49832	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.981156111 CEST	443	49832	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.981175900 CEST	49832	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.981183052 CEST	443	49832	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.984370947 CEST	49837	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.984463930 CEST	443	49837	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.984553099 CEST	49837	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.984685898 CEST	49837	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:23.984723091 CEST	443	49837	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:23.991359949 CEST	443	49834	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.007517099 CEST	443	49833	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.007590055 CEST	443	49833	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.007666111 CEST	49833	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.007862091 CEST	49833	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.007915020 CEST	443	49833	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.007950068 CEST	49833	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.007966995 CEST	443	49833	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.011648893 CEST	49838	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.011703014 CEST	443	49838	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.012233973 CEST	49838	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.012382984 CEST	49838	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.012408972 CEST	443	49838	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.077431917 CEST	443	49834	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.077606916 CEST	443	49834	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.077748060 CEST	49834	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.077960014 CEST	49834	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.077960014 CEST	49834	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.078005075 CEST	443	49834	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.078036070 CEST	443	49834	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.081006050 CEST	49839	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.081089973 CEST	443	49839	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.081178904 CEST	49839	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.081331015 CEST	49839	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.081362009 CEST	443	49839	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.460369110 CEST	443	49835	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.460980892 CEST	49835	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.461008072 CEST	443	49835	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.461484909 CEST	49835	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.461491108 CEST	443	49835	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.675924063 CEST	49704	80	192.168.2.5	104.18.38.233
Oct 23, 2024 17:08:24.676002979 CEST	49705	80	192.168.2.5	172.64.149.23
Oct 23, 2024 17:08:24.676038027 CEST	49703	80	192.168.2.5	172.64.149.23
Oct 23, 2024 17:08:24.819259882 CEST	443	49835	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.819346905 CEST	443	49835	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.819433928 CEST	49835	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.819664001 CEST	49835	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.819684029 CEST	443	49835	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.819696903 CEST	49835	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.819704056 CEST	443	49835	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.821165085 CEST	443	49836	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.821609974 CEST	49836	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.821644068 CEST	443	49836	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.821917057 CEST	80	49704	104.18.38.233	192.168.2.5
Oct 23, 2024 17:08:24.821940899 CEST	80	49705	172.64.149.23	192.168.2.5
Oct 23, 2024 17:08:24.821974993 CEST	49704	80	192.168.2.5	104.18.38.233
Oct 23, 2024 17:08:24.821991920 CEST	80	49703	172.64.149.23	192.168.2.5
Oct 23, 2024 17:08:24.822002888 CEST	49705	80	192.168.2.5	172.64.149.23
Oct 23, 2024 17:08:24.822046995 CEST	49703	80	192.168.2.5	172.64.149.23
Oct 23, 2024 17:08:24.822273970 CEST	49836	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.822282076 CEST	443	49836	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.823036909 CEST	49840	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.823075056 CEST	443	49840	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.823147058 CEST	49840	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.823281050 CEST	49840	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.823296070 CEST	443	49840	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.954796076 CEST	443	49838	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.957179070 CEST	49838	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.957241058 CEST	443	49838	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.957307100 CEST	443	49837	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.957763910 CEST	49838	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.957777977 CEST	443	49838	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.958122015 CEST	49837	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.958187103 CEST	443	49837	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.958606958 CEST	49837	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.958626032 CEST	443	49837	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.961570978 CEST	443	49839	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.961939096 CEST	49839	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.961954117 CEST	443	49839	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.962367058 CEST	49839	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.962378025 CEST	443	49839	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.962709904 CEST	443	49836	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.962766886 CEST	443	49836	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.962814093 CEST	443	49836	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.962816954 CEST	49836	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.962865114 CEST	49836	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.963013887 CEST	49836	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.963036060 CEST	443	49836	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.963051081 CEST	49836	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.963057995 CEST	443	49836	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.966173887 CEST	49841	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.966240883 CEST	443	49841	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:24.966325045 CEST	49841	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.966471910 CEST	49841	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:24.966491938 CEST	443	49841	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.089540005 CEST	443	49838	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.089610100 CEST	443	49838	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.089750051 CEST	49838	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.090025902 CEST	49838	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.090025902 CEST	49838	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.090070963 CEST	443	49838	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.090105057 CEST	443	49838	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.093375921 CEST	49842	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.093483925 CEST	443	49842	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.093601942 CEST	49842	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.093771935 CEST	49842	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.093807936 CEST	443	49842	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.094181061 CEST	443	49837	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.094346046 CEST	443	49837	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.094409943 CEST	49837	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.094449997 CEST	49837	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.094449997 CEST	49837	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.094469070 CEST	443	49837	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.094479084 CEST	443	49837	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.096609116 CEST	49843	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.096698046 CEST	443	49843	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.096790075 CEST	49843	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.096931934 CEST	49843	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.096967936 CEST	443	49843	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.100976944 CEST	443	49839	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.101038933 CEST	443	49839	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.101188898 CEST	49839	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.101229906 CEST	49839	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.101244926 CEST	443	49839	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.101257086 CEST	49839	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.101262093 CEST	443	49839	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.103362083 CEST	49844	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.103406906 CEST	443	49844	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.103473902 CEST	49844	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.103588104 CEST	49844	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.103614092 CEST	443	49844	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.574259996 CEST	443	49840	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.574968100 CEST	49840	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.575002909 CEST	443	49840	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.575486898 CEST	49840	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.575494051 CEST	443	49840	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.712299109 CEST	443	49840	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.712419033 CEST	443	49840	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.712469101 CEST	443	49840	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.712533951 CEST	49840	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.712683916 CEST	49840	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.712703943 CEST	443	49840	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.712713957 CEST	49840	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.712719917 CEST	443	49840	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.716073990 CEST	49845	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.716171980 CEST	443	49845	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.716348886 CEST	49845	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.716526031 CEST	49845	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.716557026 CEST	443	49845	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.730375051 CEST	443	49841	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.730886936 CEST	49841	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.730916023 CEST	443	49841	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.731398106 CEST	49841	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.731404066 CEST	443	49841	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.851397038 CEST	443	49843	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.852199078 CEST	49843	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.852235079 CEST	443	49843	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.852624893 CEST	49843	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.852632046 CEST	443	49843	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.856605053 CEST	443	49842	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.857065916 CEST	49842	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.857111931 CEST	443	49842	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.857441902 CEST	49842	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.857446909 CEST	443	49842	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.871208906 CEST	443	49844	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.871891975 CEST	49844	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.871917963 CEST	443	49844	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.872047901 CEST	49844	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.872054100 CEST	443	49844	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.872148991 CEST	443	49841	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.872256041 CEST	443	49841	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.872452021 CEST	49841	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.872522116 CEST	49841	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.872522116 CEST	49841	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.872565031 CEST	443	49841	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.872589111 CEST	443	49841	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.875715971 CEST	49846	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.875756979 CEST	443	49846	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.875844002 CEST	49846	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.876050949 CEST	49846	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.876063108 CEST	443	49846	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.991590023 CEST	443	49843	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.991666079 CEST	443	49843	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.991930962 CEST	49843	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.992063999 CEST	49843	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.992086887 CEST	443	49843	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:25.992100954 CEST	49843	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:25.992106915 CEST	443	49843	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.000194073 CEST	443	49842	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.000473022 CEST	443	49842	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.000610113 CEST	49842	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.001899004 CEST	49842	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.001923084 CEST	443	49842	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.002229929 CEST	49847	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.002285957 CEST	443	49847	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.002362967 CEST	49847	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.002693892 CEST	49847	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.002708912 CEST	443	49847	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.005412102 CEST	49848	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.005439997 CEST	443	49848	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.005522013 CEST	49848	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.005625963 CEST	49848	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.005635023 CEST	443	49848	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.012773037 CEST	443	49844	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.012800932 CEST	443	49844	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.012854099 CEST	443	49844	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.012892008 CEST	49844	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.012928963 CEST	49844	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.013175011 CEST	49844	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.013190985 CEST	443	49844	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.013206959 CEST	49844	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.013211966 CEST	443	49844	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.016195059 CEST	49849	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.016244888 CEST	443	49849	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.016334057 CEST	49849	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.016479015 CEST	49849	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.016491890 CEST	443	49849	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.465704918 CEST	443	49845	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.466511011 CEST	49845	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.466552973 CEST	443	49845	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.467173100 CEST	49845	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.467181921 CEST	443	49845	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.614018917 CEST	443	49845	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.614088058 CEST	443	49845	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.614152908 CEST	49845	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.614552975 CEST	49845	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.614552975 CEST	49845	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.614573956 CEST	443	49845	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.614586115 CEST	443	49845	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.617897987 CEST	49850	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.617947102 CEST	443	49850	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.618035078 CEST	49850	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.618221998 CEST	49850	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.618232012 CEST	443	49850	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.634748936 CEST	443	49846	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.635303974 CEST	49846	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.635339975 CEST	443	49846	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.635883093 CEST	49846	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.635891914 CEST	443	49846	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.766671896 CEST	443	49848	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.766685009 CEST	443	49847	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.767365932 CEST	49848	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.767368078 CEST	49847	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.767385006 CEST	443	49848	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.767390013 CEST	443	49847	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.767867088 CEST	49847	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.767873049 CEST	443	49847	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.767951012 CEST	49848	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.767956972 CEST	443	49848	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.774575949 CEST	443	49846	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.777679920 CEST	443	49846	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.777736902 CEST	443	49846	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.777764082 CEST	49846	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.777805090 CEST	49846	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.777875900 CEST	49846	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.777901888 CEST	443	49846	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.777916908 CEST	49846	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.777923107 CEST	443	49846	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.780992031 CEST	49851	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.781038046 CEST	443	49851	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.781121969 CEST	49851	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.781424046 CEST	49851	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.781435966 CEST	443	49851	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.789505005 CEST	443	49849	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.790088892 CEST	49849	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.790098906 CEST	443	49849	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.790561914 CEST	49849	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.790568113 CEST	443	49849	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.905478001 CEST	443	49848	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.905508995 CEST	443	49848	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.905555964 CEST	443	49848	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.905570030 CEST	49848	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.905599117 CEST	49848	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.905822039 CEST	49848	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.905844927 CEST	443	49848	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.905855894 CEST	49848	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.905862093 CEST	443	49848	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.907483101 CEST	443	49847	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.907686949 CEST	443	49847	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.907737970 CEST	49847	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.908241034 CEST	49847	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.908261061 CEST	443	49847	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.908277988 CEST	49847	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.908284903 CEST	443	49847	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.909076929 CEST	49852	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.909121990 CEST	443	49852	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.909176111 CEST	49852	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.909420967 CEST	49852	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.909432888 CEST	443	49852	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.911056042 CEST	49853	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.911097050 CEST	443	49853	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.911155939 CEST	49853	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.911300898 CEST	49853	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.911319017 CEST	443	49853	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.929616928 CEST	443	49849	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.929712057 CEST	443	49849	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.929765940 CEST	49849	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.930013895 CEST	49849	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.930032969 CEST	443	49849	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.930048943 CEST	49849	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.930053949 CEST	443	49849	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.934214115 CEST	49854	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.934278965 CEST	443	49854	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:26.934364080 CEST	49854	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.934526920 CEST	49854	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:26.934539080 CEST	443	49854	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.361457109 CEST	443	49850	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.362358093 CEST	49850	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.362385035 CEST	443	49850	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.363323927 CEST	49850	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.363329887 CEST	443	49850	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.500662088 CEST	443	49850	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.500699997 CEST	443	49850	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.500740051 CEST	49850	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.500746012 CEST	443	49850	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.500787973 CEST	49850	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.501120090 CEST	49850	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.501137018 CEST	443	49850	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.501152992 CEST	49850	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.501157999 CEST	443	49850	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.504530907 CEST	49855	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.504580021 CEST	443	49855	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.504658937 CEST	49855	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.504832029 CEST	49855	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.504842043 CEST	443	49855	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.546509981 CEST	443	49851	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.547013044 CEST	49851	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.547028065 CEST	443	49851	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.547492027 CEST	49851	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.547497034 CEST	443	49851	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.657927036 CEST	443	49853	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.658690929 CEST	49853	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.658723116 CEST	443	49853	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.659177065 CEST	49853	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.659183979 CEST	443	49853	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.662695885 CEST	443	49852	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.663264990 CEST	49852	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.663295984 CEST	443	49852	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.663672924 CEST	49852	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.663677931 CEST	443	49852	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.687827110 CEST	443	49851	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.687901974 CEST	443	49851	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.688086033 CEST	49851	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.688309908 CEST	49851	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.688329935 CEST	443	49851	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.688342094 CEST	49851	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.688347101 CEST	443	49851	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.691772938 CEST	49856	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.691903114 CEST	443	49856	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.692043066 CEST	49856	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.692296982 CEST	49856	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.692328930 CEST	443	49856	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.701742887 CEST	443	49854	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.702306986 CEST	49854	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.702326059 CEST	443	49854	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.702939987 CEST	49854	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.702944040 CEST	443	49854	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.795265913 CEST	443	49853	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.795346975 CEST	443	49853	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.795420885 CEST	49853	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.795855045 CEST	49853	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.795855045 CEST	49853	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.795877934 CEST	443	49853	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.795893908 CEST	443	49853	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.799154997 CEST	49857	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.799161911 CEST	443	49852	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.799191952 CEST	443	49852	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.799201965 CEST	443	49857	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.799232960 CEST	443	49852	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.799257040 CEST	49852	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.799292088 CEST	49857	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.799336910 CEST	49852	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.799470901 CEST	49857	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.799479961 CEST	443	49857	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.799495935 CEST	49852	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.799503088 CEST	443	49852	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.799525023 CEST	49852	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.799530029 CEST	443	49852	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.801954031 CEST	49858	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.801995039 CEST	443	49858	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.802058935 CEST	49858	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.802186012 CEST	49858	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.802198887 CEST	443	49858	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.977648020 CEST	443	49854	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.977863073 CEST	443	49854	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.977962971 CEST	49854	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.978102922 CEST	49854	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.978161097 CEST	443	49854	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.978193045 CEST	49854	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.978209972 CEST	443	49854	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.981654882 CEST	49859	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.981715918 CEST	443	49859	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:27.981832981 CEST	49859	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.982022047 CEST	49859	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:27.982057095 CEST	443	49859	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.267294884 CEST	443	49855	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.268050909 CEST	49855	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.268070936 CEST	443	49855	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.268570900 CEST	49855	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.268577099 CEST	443	49855	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.407802105 CEST	443	49855	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.407886982 CEST	443	49855	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.407943010 CEST	49855	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.408184052 CEST	49855	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.408227921 CEST	443	49855	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.408263922 CEST	49855	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.408281088 CEST	443	49855	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.412043095 CEST	49860	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.412076950 CEST	443	49860	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.412137985 CEST	49860	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.412342072 CEST	49860	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.412357092 CEST	443	49860	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.461139917 CEST	443	49856	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.461813927 CEST	49856	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.461890936 CEST	443	49856	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.462393999 CEST	49856	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.462409019 CEST	443	49856	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.571464062 CEST	443	49858	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.571577072 CEST	443	49857	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.572135925 CEST	49857	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.572154999 CEST	49858	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.572165966 CEST	443	49857	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.572221994 CEST	443	49858	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.572629929 CEST	49857	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.572638988 CEST	443	49857	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.572659969 CEST	49858	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.572674990 CEST	443	49858	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.602252007 CEST	443	49856	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.602921009 CEST	443	49856	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.602989912 CEST	443	49856	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.602988958 CEST	49856	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.603046894 CEST	49856	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.603111982 CEST	49856	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.603148937 CEST	443	49856	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.603177071 CEST	49856	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.603192091 CEST	443	49856	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.606193066 CEST	49861	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.606259108 CEST	443	49861	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.606343031 CEST	49861	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.606492043 CEST	49861	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.606506109 CEST	443	49861	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.710477114 CEST	443	49857	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.710480928 CEST	443	49858	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.710535049 CEST	443	49858	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.710587025 CEST	443	49858	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.710587025 CEST	443	49857	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.710658073 CEST	49858	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.710818052 CEST	49858	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.710822105 CEST	49857	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.710992098 CEST	49858	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.711009979 CEST	443	49858	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.711024046 CEST	49858	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.711029053 CEST	443	49858	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.712424040 CEST	49857	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.712445021 CEST	443	49857	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.712456942 CEST	49857	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.712462902 CEST	443	49857	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.715322971 CEST	49862	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.715361118 CEST	443	49862	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.715533018 CEST	49862	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.715867996 CEST	49863	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.715907097 CEST	443	49863	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.715959072 CEST	49863	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.716000080 CEST	49862	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.716012955 CEST	443	49862	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.716077089 CEST	49863	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.716085911 CEST	443	49863	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.736507893 CEST	443	49859	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.737137079 CEST	49859	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.737169027 CEST	443	49859	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.737643003 CEST	49859	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.737648010 CEST	443	49859	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.883871078 CEST	443	49859	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.884140015 CEST	443	49859	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.884269953 CEST	49859	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.884388924 CEST	49859	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.884442091 CEST	443	49859	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.884473085 CEST	49859	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.884490013 CEST	443	49859	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.887466908 CEST	49864	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.887568951 CEST	443	49864	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:28.887681961 CEST	49864	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.887846947 CEST	49864	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:28.887867928 CEST	443	49864	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.163409948 CEST	443	49860	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.164103031 CEST	49860	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.164119959 CEST	443	49860	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.164617062 CEST	49860	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.164621115 CEST	443	49860	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.311116934 CEST	443	49860	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.311187029 CEST	443	49860	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.311383963 CEST	49860	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.311688900 CEST	49860	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.311707020 CEST	443	49860	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.311717033 CEST	49860	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.311722040 CEST	443	49860	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.314786911 CEST	49865	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.314887047 CEST	443	49865	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.314980030 CEST	49865	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.315133095 CEST	49865	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.315160036 CEST	443	49865	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.357443094 CEST	443	49861	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.358158112 CEST	49861	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.358180046 CEST	443	49861	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.358654022 CEST	49861	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.358659983 CEST	443	49861	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.482722998 CEST	443	49863	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.483407974 CEST	49863	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.483488083 CEST	443	49863	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.483836889 CEST	49863	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.483850956 CEST	443	49863	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.485404015 CEST	443	49862	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.485652924 CEST	49862	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.485690117 CEST	443	49862	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.485944986 CEST	49862	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.485951900 CEST	443	49862	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.493699074 CEST	443	49861	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.493870974 CEST	443	49861	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.493938923 CEST	49861	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.493977070 CEST	49861	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.493995905 CEST	443	49861	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.494008064 CEST	49861	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.494013071 CEST	443	49861	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.497067928 CEST	49866	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.497122049 CEST	443	49866	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.497199059 CEST	49866	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.497322083 CEST	49866	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.497333050 CEST	443	49866	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.622922897 CEST	443	49862	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.623270988 CEST	443	49862	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.623337030 CEST	49862	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.623370886 CEST	49862	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.623389959 CEST	443	49862	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.623399973 CEST	49862	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.623404980 CEST	443	49862	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.623444080 CEST	443	49863	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.624133110 CEST	443	49863	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.624228954 CEST	49863	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.624248028 CEST	443	49863	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.624284983 CEST	443	49863	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.624325991 CEST	49863	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.624347925 CEST	49863	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.624362946 CEST	443	49863	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.624377012 CEST	49863	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.624382973 CEST	443	49863	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.626580000 CEST	49867	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.626657009 CEST	49868	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.626676083 CEST	443	49867	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.626745939 CEST	443	49868	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.626773119 CEST	49867	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.626808882 CEST	49868	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.626964092 CEST	49867	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.626966953 CEST	49868	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.626988888 CEST	443	49868	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.626996040 CEST	443	49867	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.650414944 CEST	443	49864	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.651137114 CEST	49864	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.651216984 CEST	443	49864	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.651638031 CEST	49864	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.651649952 CEST	443	49864	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.787050962 CEST	443	49864	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.787292957 CEST	443	49864	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.787341118 CEST	49864	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.787372112 CEST	443	49864	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.787389994 CEST	443	49864	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.787439108 CEST	49864	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.790839911 CEST	49864	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.790860891 CEST	443	49864	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.790874958 CEST	49864	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.790880919 CEST	443	49864	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.801971912 CEST	49869	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.802086115 CEST	443	49869	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:29.802167892 CEST	49869	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.806456089 CEST	49869	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:29.806499958 CEST	443	49869	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.065990925 CEST	443	49865	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.066672087 CEST	49865	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.066696882 CEST	443	49865	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.067188025 CEST	49865	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.067197084 CEST	443	49865	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.204627037 CEST	443	49865	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.204807997 CEST	443	49865	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.204936981 CEST	49865	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.205106020 CEST	49865	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.205157042 CEST	443	49865	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.205188990 CEST	49865	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.205204964 CEST	443	49865	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.208566904 CEST	49870	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.208678961 CEST	443	49870	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.208775997 CEST	49870	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.208934069 CEST	49870	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.208957911 CEST	443	49870	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.258935928 CEST	443	49866	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.259860039 CEST	49866	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.259895086 CEST	443	49866	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.260377884 CEST	49866	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.260389090 CEST	443	49866	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.372318983 CEST	443	49867	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.372845888 CEST	49867	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.372926950 CEST	443	49867	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.373375893 CEST	49867	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.373389006 CEST	443	49867	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.389736891 CEST	443	49868	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.390259981 CEST	49868	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.390350103 CEST	443	49868	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.390789032 CEST	49868	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.390814066 CEST	443	49868	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.396872044 CEST	443	49866	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.396944046 CEST	443	49866	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.396997929 CEST	49866	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.397157907 CEST	49866	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.397183895 CEST	443	49866	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.397200108 CEST	49866	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.397209883 CEST	443	49866	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.400548935 CEST	49871	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.400588989 CEST	443	49871	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.400655031 CEST	49871	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.400803089 CEST	49871	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.400810003 CEST	443	49871	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.508198977 CEST	443	49867	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.508384943 CEST	443	49867	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.508486032 CEST	49867	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.508723974 CEST	49867	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.508774042 CEST	443	49867	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.508805037 CEST	49867	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.508838892 CEST	443	49867	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.512934923 CEST	49872	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.512984037 CEST	443	49872	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.513072014 CEST	49872	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.513428926 CEST	49872	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.513462067 CEST	443	49872	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.524538994 CEST	443	49868	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.524621964 CEST	443	49868	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.524699926 CEST	49868	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.524979115 CEST	49868	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.524979115 CEST	49868	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.525026083 CEST	443	49868	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.525053024 CEST	443	49868	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.529104948 CEST	49873	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.529153109 CEST	443	49873	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.529242039 CEST	49873	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.529479027 CEST	49873	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.529495955 CEST	443	49873	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.574417114 CEST	443	49869	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.575155973 CEST	49869	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.575248957 CEST	443	49869	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.575675964 CEST	49869	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.575691938 CEST	443	49869	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.713177919 CEST	443	49869	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.713270903 CEST	443	49869	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.713403940 CEST	49869	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.713696957 CEST	49869	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.713748932 CEST	443	49869	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.713778973 CEST	49869	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.713794947 CEST	443	49869	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.716738939 CEST	49874	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.716806889 CEST	443	49874	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.716886997 CEST	49874	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.717037916 CEST	49874	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.717051983 CEST	443	49874	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.973709106 CEST	443	49870	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.974386930 CEST	49870	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.974417925 CEST	443	49870	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:30.974996090 CEST	49870	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:30.975008011 CEST	443	49870	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.111742973 CEST	443	49870	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.111856937 CEST	443	49870	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.112096071 CEST	49870	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.112312078 CEST	49870	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.112348080 CEST	443	49870	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.112369061 CEST	49870	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.112380028 CEST	443	49870	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.115274906 CEST	49875	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.115375996 CEST	443	49875	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.115477085 CEST	49875	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.115601063 CEST	49875	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.115624905 CEST	443	49875	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.150715113 CEST	443	49871	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.151527882 CEST	49871	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.151607990 CEST	443	49871	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.152051926 CEST	49871	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.152065039 CEST	443	49871	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.280297041 CEST	443	49872	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.281090021 CEST	49872	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.281173944 CEST	443	49872	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.281578064 CEST	49872	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.281591892 CEST	443	49872	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.294394970 CEST	443	49873	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.294888020 CEST	49873	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.294922113 CEST	443	49873	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.295241117 CEST	49873	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.295248985 CEST	443	49873	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.311074018 CEST	443	49871	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.311151981 CEST	443	49871	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.311242104 CEST	49871	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.311496973 CEST	49871	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.311548948 CEST	443	49871	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.311579943 CEST	49871	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.311597109 CEST	443	49871	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.314738989 CEST	49876	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.314790010 CEST	443	49876	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.314877987 CEST	49876	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.315020084 CEST	49876	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.315045118 CEST	443	49876	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.439537048 CEST	443	49873	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.440382004 CEST	443	49873	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.440439939 CEST	49873	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.440490961 CEST	49873	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.440490961 CEST	49873	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.440514088 CEST	443	49873	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.440531015 CEST	443	49873	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.443521976 CEST	443	49872	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.443572044 CEST	443	49872	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.443625927 CEST	49872	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.443648100 CEST	443	49872	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.443691015 CEST	49872	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.444962978 CEST	49872	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.444962978 CEST	49872	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.445017099 CEST	443	49872	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.445046902 CEST	443	49872	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.448662043 CEST	49877	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.448769093 CEST	443	49877	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.448844910 CEST	49877	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.449340105 CEST	49878	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.449431896 CEST	443	49878	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.449498892 CEST	49878	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.449582100 CEST	49877	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.449619055 CEST	443	49877	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.449821949 CEST	49878	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.449851036 CEST	443	49878	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.488279104 CEST	443	49874	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.489571095 CEST	49874	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.489646912 CEST	443	49874	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.490097046 CEST	49874	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.490109921 CEST	443	49874	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.629137039 CEST	443	49874	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.629228115 CEST	443	49874	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.629307032 CEST	49874	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.629683018 CEST	49874	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.629683018 CEST	49874	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.629710913 CEST	443	49874	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.629728079 CEST	443	49874	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.632702112 CEST	49879	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.632792950 CEST	443	49879	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.632882118 CEST	49879	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.633023024 CEST	49879	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.633045912 CEST	443	49879	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.875521898 CEST	443	49875	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.876282930 CEST	49875	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.876326084 CEST	443	49875	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:31.876801014 CEST	49875	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:31.876816988 CEST	443	49875	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.013233900 CEST	443	49875	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.013339996 CEST	443	49875	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.013458967 CEST	49875	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.013724089 CEST	49875	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.013751984 CEST	443	49875	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.013772011 CEST	49875	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.013780117 CEST	443	49875	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.017230034 CEST	49880	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.017288923 CEST	443	49880	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.017391920 CEST	49880	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.017575979 CEST	49880	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.017589092 CEST	443	49880	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.065984011 CEST	443	49876	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.066620111 CEST	49876	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.066653013 CEST	443	49876	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.067269087 CEST	49876	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.067274094 CEST	443	49876	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.201661110 CEST	443	49878	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.202353954 CEST	443	49877	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.202516079 CEST	49878	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.202577114 CEST	443	49878	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.202625990 CEST	443	49876	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.202677965 CEST	443	49876	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.202756882 CEST	49876	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.202769041 CEST	49877	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.202780962 CEST	443	49876	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.202814102 CEST	443	49876	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.202831984 CEST	443	49877	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.202862024 CEST	49876	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.203032017 CEST	49878	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.203043938 CEST	443	49878	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.203164101 CEST	49877	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.203177929 CEST	443	49877	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.203196049 CEST	49876	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.203231096 CEST	443	49876	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.203255892 CEST	49876	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.203270912 CEST	443	49876	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.206270933 CEST	49881	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.206316948 CEST	443	49881	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.206402063 CEST	49881	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.206548929 CEST	49881	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.206556082 CEST	443	49881	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.337265968 CEST	443	49877	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.337306976 CEST	443	49877	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.337368965 CEST	443	49877	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.337518930 CEST	49877	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.337830067 CEST	49877	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.337830067 CEST	49877	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.338228941 CEST	443	49878	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.338255882 CEST	443	49878	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.338263988 CEST	49877	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.338289022 CEST	443	49877	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.338300943 CEST	443	49878	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.338318110 CEST	49878	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.338356018 CEST	49878	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.338459015 CEST	49878	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.338480949 CEST	443	49878	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.338491917 CEST	49878	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.338496923 CEST	443	49878	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.341389894 CEST	49882	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.341401100 CEST	49883	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.341437101 CEST	443	49882	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.341444969 CEST	443	49883	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.341531992 CEST	49882	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.341706991 CEST	49882	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.341710091 CEST	49883	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.341710091 CEST	49883	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.341717958 CEST	443	49882	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.341741085 CEST	443	49883	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.399842978 CEST	443	49879	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.400547981 CEST	49879	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.400590897 CEST	443	49879	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.401041031 CEST	49879	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.401050091 CEST	443	49879	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.540169954 CEST	443	49879	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.540368080 CEST	443	49879	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.540447950 CEST	49879	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.540652037 CEST	49879	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.540683985 CEST	443	49879	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.540704012 CEST	49879	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.540712118 CEST	443	49879	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.543709040 CEST	49884	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.543749094 CEST	443	49884	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.543824911 CEST	49884	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.543976068 CEST	49884	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.543983936 CEST	443	49884	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.784846067 CEST	443	49880	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.785545111 CEST	49880	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.785605907 CEST	443	49880	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.786031008 CEST	49880	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.786043882 CEST	443	49880	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.925178051 CEST	443	49880	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.925220013 CEST	443	49880	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.925268888 CEST	443	49880	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.925276041 CEST	49880	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.925316095 CEST	49880	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.925585985 CEST	49880	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.925612926 CEST	443	49880	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.928631067 CEST	49885	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.928664923 CEST	443	49885	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.928730965 CEST	49885	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.928869963 CEST	49885	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.928879976 CEST	443	49885	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.966582060 CEST	443	49881	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.967087984 CEST	49881	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.967113018 CEST	443	49881	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:32.967586994 CEST	49881	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:32.967592001 CEST	443	49881	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.085002899 CEST	443	49883	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.085777998 CEST	49883	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.085803032 CEST	443	49883	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.086258888 CEST	49883	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.086262941 CEST	443	49883	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.103657007 CEST	443	49881	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.103738070 CEST	443	49881	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.103789091 CEST	49881	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.103991985 CEST	49881	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.104003906 CEST	443	49881	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.104016066 CEST	49881	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.104021072 CEST	443	49881	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.107188940 CEST	49886	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.107234001 CEST	443	49886	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.107305050 CEST	49886	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.107479095 CEST	49886	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.107490063 CEST	443	49886	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.107544899 CEST	443	49882	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.107907057 CEST	49882	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.107937098 CEST	443	49882	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.108330011 CEST	49882	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.108335018 CEST	443	49882	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.244867086 CEST	443	49882	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.244901896 CEST	443	49882	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.244951963 CEST	443	49882	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.244961023 CEST	49882	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.244991064 CEST	49882	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.245199919 CEST	49882	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.245224953 CEST	443	49882	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.245238066 CEST	49882	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.245244026 CEST	443	49882	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.248949051 CEST	49887	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.248981953 CEST	443	49887	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.249048948 CEST	49887	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.249228954 CEST	49887	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.249238968 CEST	443	49887	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.263906956 CEST	443	49883	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.263931990 CEST	443	49883	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.263987064 CEST	49883	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.264010906 CEST	443	49883	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.264142990 CEST	443	49883	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.264185905 CEST	49883	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.264225960 CEST	49883	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.264239073 CEST	443	49883	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.264247894 CEST	49883	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.264252901 CEST	443	49883	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.267003059 CEST	49888	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.267049074 CEST	443	49888	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.267113924 CEST	49888	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.267251968 CEST	49888	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.267262936 CEST	443	49888	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.287971020 CEST	443	49884	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.288532972 CEST	49884	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.288562059 CEST	443	49884	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.289001942 CEST	49884	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.289011955 CEST	443	49884	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.439281940 CEST	443	49884	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.439385891 CEST	443	49884	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.439445019 CEST	49884	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.439485073 CEST	443	49884	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.439510107 CEST	443	49884	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.439562082 CEST	49884	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.439691067 CEST	49884	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.439711094 CEST	443	49884	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.439722061 CEST	49884	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.439727068 CEST	443	49884	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.443196058 CEST	49889	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.443248034 CEST	443	49889	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.443332911 CEST	49889	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.443469048 CEST	49889	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.443483114 CEST	443	49889	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.712299109 CEST	443	49885	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.713057995 CEST	49885	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.713083029 CEST	443	49885	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.713648081 CEST	49885	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.713656902 CEST	443	49885	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.850773096 CEST	443	49885	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.850864887 CEST	443	49885	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.851279974 CEST	49885	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.851636887 CEST	49885	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.851636887 CEST	49885	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.851654053 CEST	443	49885	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.851663113 CEST	443	49885	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.855166912 CEST	49891	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.855223894 CEST	443	49891	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.855298996 CEST	49891	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.855619907 CEST	49891	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.855640888 CEST	443	49891	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.862401962 CEST	443	49886	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.862941027 CEST	49886	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.862970114 CEST	443	49886	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:33.867451906 CEST	49886	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:33.867468119 CEST	443	49886	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.000214100 CEST	443	49886	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.000406027 CEST	443	49886	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.000608921 CEST	49886	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.000709057 CEST	49886	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.000709057 CEST	49886	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.000760078 CEST	443	49886	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.000796080 CEST	443	49886	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.004128933 CEST	49892	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.004232883 CEST	443	49892	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.004317999 CEST	49892	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.004460096 CEST	49892	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.004489899 CEST	443	49892	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.008646965 CEST	443	49887	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.009407043 CEST	49887	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.009433031 CEST	443	49887	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.009635925 CEST	49887	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.009644032 CEST	443	49887	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.040855885 CEST	443	49888	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.041451931 CEST	49888	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.041486025 CEST	443	49888	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.041904926 CEST	49888	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.041913033 CEST	443	49888	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.147723913 CEST	443	49887	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.147810936 CEST	443	49887	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.148098946 CEST	49887	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.148098946 CEST	49887	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.148272038 CEST	49887	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.148288965 CEST	443	49887	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.157414913 CEST	49893	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.157522917 CEST	443	49893	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.157731056 CEST	49893	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.158034086 CEST	49893	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.158070087 CEST	443	49893	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.181924105 CEST	443	49888	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.181962967 CEST	443	49888	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.182015896 CEST	443	49888	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.182050943 CEST	49888	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.182087898 CEST	49888	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.182360888 CEST	49888	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.182382107 CEST	443	49888	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.182394981 CEST	49888	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.182399988 CEST	443	49888	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.186033964 CEST	49894	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.186125994 CEST	443	49894	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.186240911 CEST	49894	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.186450958 CEST	49894	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.186482906 CEST	443	49894	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.195480108 CEST	443	49889	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.196084976 CEST	49889	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.196119070 CEST	443	49889	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.196583033 CEST	49889	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.196598053 CEST	443	49889	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.330990076 CEST	443	49889	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.331073999 CEST	443	49889	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.331394911 CEST	49889	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.331445932 CEST	49889	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.331445932 CEST	49889	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.331470966 CEST	443	49889	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.331486940 CEST	443	49889	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.334928036 CEST	49895	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.334991932 CEST	443	49895	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.335103989 CEST	49895	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.335273981 CEST	49895	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.335288048 CEST	443	49895	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.599745035 CEST	443	49891	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.600251913 CEST	49891	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.600289106 CEST	443	49891	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.600709915 CEST	49891	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.600719929 CEST	443	49891	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.732181072 CEST	443	49891	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.732738018 CEST	443	49891	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.732824087 CEST	49891	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.732891083 CEST	443	49891	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.732937098 CEST	443	49891	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.732989073 CEST	49891	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.733047009 CEST	49891	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.733047009 CEST	49891	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.733087063 CEST	443	49891	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.733113050 CEST	443	49891	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.736095905 CEST	49896	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.736146927 CEST	443	49896	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.736238956 CEST	49896	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.736386061 CEST	49896	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.736393929 CEST	443	49896	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.756958008 CEST	443	49892	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.757476091 CEST	49892	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.757515907 CEST	443	49892	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.757987976 CEST	49892	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.757997036 CEST	443	49892	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.893863916 CEST	443	49892	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.894011974 CEST	443	49892	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.894079924 CEST	49892	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.894210100 CEST	49892	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.894247055 CEST	443	49892	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.894283056 CEST	49892	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.894296885 CEST	443	49892	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.897854090 CEST	49897	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.897905111 CEST	443	49897	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.897983074 CEST	49897	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.898447037 CEST	49897	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.898463011 CEST	443	49897	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.936764002 CEST	443	49894	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.937304020 CEST	49894	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.937340975 CEST	443	49894	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.937755108 CEST	49894	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.937762022 CEST	443	49894	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.956557035 CEST	443	49893	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.957160950 CEST	49893	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.957245111 CEST	443	49893	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:34.957623959 CEST	49893	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:34.957638979 CEST	443	49893	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.074278116 CEST	443	49894	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.074417114 CEST	443	49894	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.074508905 CEST	49894	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.074764013 CEST	49894	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.074794054 CEST	443	49894	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.074825048 CEST	49894	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.074832916 CEST	443	49894	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.077883959 CEST	49898	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.077927113 CEST	443	49898	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.078001022 CEST	49898	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.078160048 CEST	49898	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.078174114 CEST	443	49898	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.096540928 CEST	443	49893	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.096695900 CEST	443	49893	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.096746922 CEST	443	49893	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.096765041 CEST	49893	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.096831083 CEST	49893	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.096873045 CEST	49893	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.096873045 CEST	49893	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.096916914 CEST	443	49893	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.096944094 CEST	443	49893	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.099462032 CEST	49899	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.099502087 CEST	443	49899	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.099565983 CEST	49899	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.099695921 CEST	49899	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.099709988 CEST	443	49899	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.103912115 CEST	443	49895	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.104334116 CEST	49895	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.104407072 CEST	443	49895	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.104825020 CEST	49895	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.104837894 CEST	443	49895	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.241971016 CEST	443	49895	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.242055893 CEST	443	49895	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.242178917 CEST	49895	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.242464066 CEST	49895	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.242491961 CEST	443	49895	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.242505074 CEST	49895	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.242512941 CEST	443	49895	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.245935917 CEST	49900	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.245982885 CEST	443	49900	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.246078014 CEST	49900	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.246263027 CEST	49900	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.246275902 CEST	443	49900	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.491710901 CEST	443	49896	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.492611885 CEST	49896	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.492660999 CEST	443	49896	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.493030071 CEST	49896	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.493036032 CEST	443	49896	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.628767967 CEST	443	49896	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.628854036 CEST	443	49896	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.628933907 CEST	49896	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.629404068 CEST	49896	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.629456997 CEST	443	49896	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.629506111 CEST	49896	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.629523993 CEST	443	49896	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.632896900 CEST	49901	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.632940054 CEST	443	49901	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.634912968 CEST	49901	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.635109901 CEST	49901	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.635128021 CEST	443	49901	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.659635067 CEST	443	49897	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.664283991 CEST	49897	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.664334059 CEST	443	49897	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.664740086 CEST	49897	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.664752007 CEST	443	49897	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.798337936 CEST	443	49897	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.798422098 CEST	443	49897	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.798654079 CEST	49897	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.798798084 CEST	49897	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.798825026 CEST	443	49897	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.798841953 CEST	49897	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.798849106 CEST	443	49897	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.802130938 CEST	49902	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.802210093 CEST	443	49902	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.802304983 CEST	49902	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.802468061 CEST	49902	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.802488089 CEST	443	49902	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.840002060 CEST	443	49898	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.844285965 CEST	49898	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.844321966 CEST	443	49898	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.844753981 CEST	49898	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.844763041 CEST	443	49898	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.855608940 CEST	443	49899	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.860131025 CEST	49899	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.860157967 CEST	443	49899	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.860574961 CEST	49899	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.860580921 CEST	443	49899	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.979815006 CEST	443	49898	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.979886055 CEST	443	49898	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.980038881 CEST	49898	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.980247021 CEST	49898	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.980268955 CEST	443	49898	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.980283022 CEST	49898	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.980290890 CEST	443	49898	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.983223915 CEST	49903	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.983263969 CEST	443	49903	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.983355999 CEST	49903	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.983468056 CEST	49903	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.983479023 CEST	443	49903	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.999129057 CEST	443	49899	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.999166012 CEST	443	49899	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.999217033 CEST	443	49899	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.999298096 CEST	49899	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.999349117 CEST	49899	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.999562025 CEST	49899	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.999579906 CEST	443	49899	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:35.999596119 CEST	49899	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:35.999602079 CEST	443	49899	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.002827883 CEST	49904	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.002854109 CEST	443	49904	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.002944946 CEST	49904	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.003233910 CEST	49904	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.003249884 CEST	443	49904	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.006206989 CEST	443	49900	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.008176088 CEST	49900	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.008203030 CEST	443	49900	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.008642912 CEST	49900	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.008650064 CEST	443	49900	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.144630909 CEST	443	49900	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.147744894 CEST	443	49900	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.150357962 CEST	49900	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.150405884 CEST	49900	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.150433064 CEST	443	49900	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.150448084 CEST	49900	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.150455952 CEST	443	49900	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.157617092 CEST	49905	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.157658100 CEST	443	49905	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.157742977 CEST	49905	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.157933950 CEST	49905	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.157946110 CEST	443	49905	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.385641098 CEST	443	49901	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.386859894 CEST	49901	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.386884928 CEST	443	49901	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.387382030 CEST	49901	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.387387991 CEST	443	49901	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.526803017 CEST	443	49901	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.526834965 CEST	443	49901	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.526879072 CEST	443	49901	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.526880980 CEST	49901	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.526936054 CEST	49901	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.527281046 CEST	49901	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.527306080 CEST	443	49901	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.527337074 CEST	49901	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.527343988 CEST	443	49901	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.530436993 CEST	49906	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.530474901 CEST	443	49906	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.530564070 CEST	49906	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.530730963 CEST	49906	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.530742884 CEST	443	49906	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.583894968 CEST	443	49902	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.584644079 CEST	49902	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.584678888 CEST	443	49902	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.585150957 CEST	49902	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.585161924 CEST	443	49902	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.720458031 CEST	443	49902	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.720530033 CEST	443	49902	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.720712900 CEST	49902	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.721016884 CEST	49902	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.721043110 CEST	443	49902	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.721060038 CEST	49902	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.721074104 CEST	443	49902	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.725553989 CEST	49907	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.725594997 CEST	443	49907	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.725653887 CEST	49907	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.725928068 CEST	49907	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.725936890 CEST	443	49907	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.746670961 CEST	443	49903	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.747098923 CEST	49903	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.747117043 CEST	443	49903	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.747616053 CEST	49903	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.747625113 CEST	443	49903	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.767841101 CEST	443	49904	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.768279076 CEST	49904	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.768295050 CEST	443	49904	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.768956900 CEST	49904	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.768961906 CEST	443	49904	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.887804985 CEST	443	49903	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.887845993 CEST	443	49903	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.887897015 CEST	443	49903	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.887974024 CEST	49903	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.888000011 CEST	49903	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.888289928 CEST	49903	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.888312101 CEST	443	49903	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.888329983 CEST	49903	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.888336897 CEST	443	49903	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.891673088 CEST	49908	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.891714096 CEST	443	49908	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.891798973 CEST	49908	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.891978979 CEST	49908	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.891993999 CEST	443	49908	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.906460047 CEST	443	49904	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.910314083 CEST	443	49904	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.910391092 CEST	49904	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.910420895 CEST	49904	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.910433054 CEST	443	49904	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.910444975 CEST	49904	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.910449982 CEST	443	49904	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.913081884 CEST	49909	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.913132906 CEST	443	49909	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.913217068 CEST	49909	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.913362980 CEST	49909	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.913377047 CEST	443	49909	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.946346998 CEST	443	49905	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.946851015 CEST	49905	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.946876049 CEST	443	49905	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:36.947329998 CEST	49905	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:36.947334051 CEST	443	49905	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.085140944 CEST	443	49905	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.087702036 CEST	443	49905	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.087752104 CEST	443	49905	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.087776899 CEST	49905	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.087816954 CEST	49905	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.087878942 CEST	49905	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.087899923 CEST	443	49905	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.087913990 CEST	49905	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.087919950 CEST	443	49905	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.091104984 CEST	49910	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.091155052 CEST	443	49910	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.091247082 CEST	49910	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.091425896 CEST	49910	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.091439962 CEST	443	49910	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.276017904 CEST	443	49906	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.276889086 CEST	49906	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.276909113 CEST	443	49906	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.277400970 CEST	49906	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.277405977 CEST	443	49906	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.412374973 CEST	443	49906	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.412446022 CEST	443	49906	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.412570953 CEST	49906	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.412786007 CEST	49906	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.412803888 CEST	443	49906	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.412837029 CEST	49906	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.412843943 CEST	443	49906	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.416043043 CEST	49911	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.416100025 CEST	443	49911	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.416280031 CEST	49911	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.416367054 CEST	49911	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.416387081 CEST	443	49911	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.465272903 CEST	443	49907	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.465810061 CEST	49907	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.465840101 CEST	443	49907	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.466397047 CEST	49907	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.466402054 CEST	443	49907	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.599473953 CEST	443	49907	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.599505901 CEST	443	49907	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.599559069 CEST	443	49907	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.599565983 CEST	49907	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.599612951 CEST	49907	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.599884033 CEST	49907	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.599900007 CEST	443	49907	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.599914074 CEST	49907	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.599920034 CEST	443	49907	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.603140116 CEST	49912	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.603188038 CEST	443	49912	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.603271961 CEST	49912	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.603455067 CEST	49912	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.603468895 CEST	443	49912	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.647031069 CEST	443	49908	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.647674084 CEST	49908	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.647690058 CEST	443	49908	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.648071051 CEST	49908	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.648077965 CEST	443	49908	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.680558920 CEST	443	49909	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.681639910 CEST	49909	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.681678057 CEST	443	49909	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.688158035 CEST	49909	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.688175917 CEST	443	49909	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.786935091 CEST	443	49908	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.786957979 CEST	443	49908	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.787005901 CEST	443	49908	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.787189960 CEST	49908	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.787189960 CEST	49908	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.787419081 CEST	49908	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.787439108 CEST	443	49908	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.787450075 CEST	49908	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.787456036 CEST	443	49908	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.790880919 CEST	49913	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.790941954 CEST	443	49913	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.791054964 CEST	49913	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.791229963 CEST	49913	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.791245937 CEST	443	49913	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.825202942 CEST	443	49909	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.825273991 CEST	443	49909	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.825429916 CEST	443	49909	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.825439930 CEST	49909	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.825489044 CEST	49909	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.825611115 CEST	49909	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.825647116 CEST	443	49909	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.825670004 CEST	49909	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.825681925 CEST	443	49909	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.828663111 CEST	49914	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.828718901 CEST	443	49914	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.828803062 CEST	49914	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.828978062 CEST	49914	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.828994036 CEST	443	49914	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.846879005 CEST	443	49910	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.847451925 CEST	49910	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.847480059 CEST	443	49910	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.848067045 CEST	49910	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.848072052 CEST	443	49910	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.984148026 CEST	443	49910	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.984229088 CEST	443	49910	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.984319925 CEST	49910	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.984607935 CEST	49910	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.984626055 CEST	443	49910	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.984642029 CEST	49910	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.984647989 CEST	443	49910	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.988102913 CEST	49915	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.988158941 CEST	443	49915	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:37.988285065 CEST	49915	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.988432884 CEST	49915	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:37.988444090 CEST	443	49915	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.174804926 CEST	443	49911	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.175574064 CEST	49911	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.175604105 CEST	443	49911	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.176208973 CEST	49911	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.176214933 CEST	443	49911	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.340867043 CEST	443	49911	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.340944052 CEST	443	49911	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.341068983 CEST	443	49911	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.341137886 CEST	49911	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.341365099 CEST	49911	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.341365099 CEST	49911	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.341391087 CEST	49911	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.341413975 CEST	443	49911	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.344841957 CEST	49916	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.344901085 CEST	443	49916	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.344971895 CEST	49916	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.345118999 CEST	49916	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.345134974 CEST	443	49916	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.359302998 CEST	443	49912	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.359903097 CEST	49912	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.359936953 CEST	443	49912	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.360425949 CEST	49912	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.360433102 CEST	443	49912	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.499593019 CEST	443	49912	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.500190973 CEST	443	49912	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.500258923 CEST	49912	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.500401020 CEST	49912	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.500441074 CEST	443	49912	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.500478029 CEST	49912	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.500494957 CEST	443	49912	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.506398916 CEST	49917	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.506495953 CEST	443	49917	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.506573915 CEST	49917	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.506875992 CEST	49917	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.506910086 CEST	443	49917	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.555645943 CEST	443	49913	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.556267023 CEST	49913	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.556308031 CEST	443	49913	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.556773901 CEST	49913	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.556780100 CEST	443	49913	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.598005056 CEST	443	49914	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.598592997 CEST	49914	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.598653078 CEST	443	49914	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.599050045 CEST	49914	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.599066973 CEST	443	49914	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.695826054 CEST	443	49913	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.695902109 CEST	443	49913	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.696012974 CEST	443	49913	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.696082115 CEST	49913	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.696082115 CEST	49913	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.701527119 CEST	49913	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.701527119 CEST	49913	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.701585054 CEST	443	49913	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.701615095 CEST	443	49913	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.705583096 CEST	49918	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.705688000 CEST	443	49918	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.705784082 CEST	49918	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.706017971 CEST	49918	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.706051111 CEST	443	49918	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.736767054 CEST	443	49914	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.737648964 CEST	443	49914	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.737728119 CEST	49914	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.737812042 CEST	49914	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.737812042 CEST	49914	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.737859964 CEST	443	49914	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.737886906 CEST	443	49914	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.740878105 CEST	49919	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.740982056 CEST	443	49919	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.741061926 CEST	49919	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.741214991 CEST	49919	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.741249084 CEST	443	49919	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.751110077 CEST	443	49915	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.751482964 CEST	49915	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.751558065 CEST	443	49915	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.751946926 CEST	49915	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.751960993 CEST	443	49915	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.890269041 CEST	443	49915	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.890305996 CEST	443	49915	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.890358925 CEST	443	49915	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.890599966 CEST	49915	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.890599966 CEST	49915	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.890820980 CEST	49915	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.890820980 CEST	49915	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.890862942 CEST	443	49915	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.890888929 CEST	443	49915	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.894120932 CEST	49920	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.894171953 CEST	443	49920	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:38.894298077 CEST	49920	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.894591093 CEST	49920	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:38.894602060 CEST	443	49920	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.098083019 CEST	443	49916	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.099030018 CEST	49916	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.099098921 CEST	443	49916	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.099781036 CEST	49916	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.099795103 CEST	443	49916	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.232609987 CEST	443	49916	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.232826948 CEST	443	49916	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.232930899 CEST	49916	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.233180046 CEST	49916	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.233244896 CEST	443	49916	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.233283997 CEST	49916	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.233302116 CEST	443	49916	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.236809015 CEST	49921	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.236896038 CEST	443	49921	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.237101078 CEST	49921	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.237207890 CEST	49921	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.237230062 CEST	443	49921	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.280441999 CEST	443	49917	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.281363010 CEST	49917	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.281404972 CEST	443	49917	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.281830072 CEST	49917	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.281841040 CEST	443	49917	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.444252968 CEST	443	49917	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.449631929 CEST	443	49918	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.450355053 CEST	49918	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.450383902 CEST	443	49918	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.450740099 CEST	49918	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.450745106 CEST	443	49918	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.459126949 CEST	443	49917	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.459184885 CEST	443	49917	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.459192991 CEST	49917	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.459255934 CEST	49917	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.459340096 CEST	49917	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.459386110 CEST	443	49917	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.459414005 CEST	49917	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.459429979 CEST	443	49917	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.462610960 CEST	49922	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.462652922 CEST	443	49922	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.462836981 CEST	49922	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.462882042 CEST	49922	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.462893963 CEST	443	49922	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.499490023 CEST	443	49919	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.500163078 CEST	49919	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.500194073 CEST	443	49919	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.500699043 CEST	49919	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.500708103 CEST	443	49919	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.583659887 CEST	443	49918	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.583731890 CEST	443	49918	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.583808899 CEST	49918	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.584074974 CEST	49918	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.584101915 CEST	443	49918	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.584116936 CEST	49918	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.584125042 CEST	443	49918	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.587420940 CEST	49923	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.587471962 CEST	443	49923	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.587558985 CEST	49923	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.587727070 CEST	49923	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.587739944 CEST	443	49923	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.637209892 CEST	443	49919	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.637280941 CEST	443	49919	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.637336016 CEST	49919	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.637615919 CEST	49919	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.637644053 CEST	443	49919	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.637661934 CEST	49919	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.637670040 CEST	443	49919	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.640486002 CEST	49924	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.640527964 CEST	443	49924	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.640598059 CEST	49924	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.640733004 CEST	49924	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.640743017 CEST	443	49924	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.660212994 CEST	443	49920	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.660631895 CEST	49920	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.660661936 CEST	443	49920	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.661106110 CEST	49920	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.661113024 CEST	443	49920	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.800199986 CEST	443	49920	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.800230980 CEST	443	49920	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.800282001 CEST	443	49920	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.800318003 CEST	49920	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.800362110 CEST	49920	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.800689936 CEST	49920	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.800709963 CEST	443	49920	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.800726891 CEST	49920	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.800731897 CEST	443	49920	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.804033995 CEST	49925	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.804085016 CEST	443	49925	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.804178953 CEST	49925	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.804354906 CEST	49925	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.804368019 CEST	443	49925	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.986736059 CEST	443	49921	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.987565994 CEST	49921	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.987596989 CEST	443	49921	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:39.988073111 CEST	49921	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:39.988078117 CEST	443	49921	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.122675896 CEST	443	49921	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.122766972 CEST	443	49921	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.122827053 CEST	49921	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.123061895 CEST	49921	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.123078108 CEST	443	49921	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.123090982 CEST	49921	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.123095989 CEST	443	49921	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.126588106 CEST	49926	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.126635075 CEST	443	49926	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.126724958 CEST	49926	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.126905918 CEST	49926	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.126919031 CEST	443	49926	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.200836897 CEST	443	49922	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.201618910 CEST	49922	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.201648951 CEST	443	49922	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.202188969 CEST	49922	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.202195883 CEST	443	49922	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.337409019 CEST	443	49923	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.338035107 CEST	49923	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.338074923 CEST	443	49923	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.338645935 CEST	49923	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.338653088 CEST	443	49923	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.344439983 CEST	443	49922	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.344506025 CEST	443	49922	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.344598055 CEST	49922	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.344850063 CEST	49922	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.344871044 CEST	443	49922	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.344883919 CEST	49922	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.344888926 CEST	443	49922	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.348305941 CEST	49927	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.348359108 CEST	443	49927	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.348428011 CEST	49927	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.348618984 CEST	49927	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.348630905 CEST	443	49927	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.402573109 CEST	443	49924	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.403187990 CEST	49924	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.403222084 CEST	443	49924	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.403711081 CEST	49924	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.403717995 CEST	443	49924	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.474152088 CEST	443	49923	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.474185944 CEST	443	49923	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.474235058 CEST	443	49923	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.474314928 CEST	49923	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.474359989 CEST	49923	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.474642992 CEST	49923	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.474663973 CEST	443	49923	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.474674940 CEST	49923	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.474680901 CEST	443	49923	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.477766991 CEST	49928	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.477828979 CEST	443	49928	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.477910042 CEST	49928	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.478065968 CEST	49928	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.478081942 CEST	443	49928	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.542613983 CEST	443	49924	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.542695045 CEST	443	49924	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.542747021 CEST	49924	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.542911053 CEST	49924	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.542933941 CEST	443	49924	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.542949915 CEST	49924	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.542956114 CEST	443	49924	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.546123981 CEST	49929	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.546204090 CEST	443	49929	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.546288013 CEST	49929	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.546453953 CEST	49929	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.546471119 CEST	443	49929	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.550672054 CEST	443	49925	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.551223993 CEST	49925	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.551249981 CEST	443	49925	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.551697969 CEST	49925	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.551703930 CEST	443	49925	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.685795069 CEST	443	49925	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.685828924 CEST	443	49925	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.685879946 CEST	443	49925	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.685945034 CEST	49925	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.685982943 CEST	49925	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.686183929 CEST	49925	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.686209917 CEST	443	49925	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.686223984 CEST	49925	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.686230898 CEST	443	49925	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.689189911 CEST	49930	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.689296961 CEST	443	49930	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.689389944 CEST	49930	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.689543009 CEST	49930	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.689574957 CEST	443	49930	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.870335102 CEST	443	49926	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.870925903 CEST	49926	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.870950937 CEST	443	49926	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:40.871426105 CEST	49926	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:40.871432066 CEST	443	49926	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.006438017 CEST	443	49926	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.006649017 CEST	443	49926	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.006720066 CEST	49926	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.006886005 CEST	49926	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.006906033 CEST	443	49926	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.006917953 CEST	49926	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.006922960 CEST	443	49926	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.010435104 CEST	49931	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.010479927 CEST	443	49931	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.010602951 CEST	49931	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.010786057 CEST	49931	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.010797024 CEST	443	49931	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.101002932 CEST	443	49927	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.101600885 CEST	49927	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.101651907 CEST	443	49927	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.102118015 CEST	49927	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.102124929 CEST	443	49927	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.233356953 CEST	443	49928	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.234191895 CEST	49928	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.234226942 CEST	443	49928	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.234602928 CEST	49928	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.234611988 CEST	443	49928	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.238008976 CEST	443	49927	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.238166094 CEST	443	49927	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.238255024 CEST	49927	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.238473892 CEST	49927	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.238504887 CEST	443	49927	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.238523006 CEST	49927	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.238531113 CEST	443	49927	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.241890907 CEST	49932	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.242008924 CEST	443	49932	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.242120981 CEST	49932	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.242283106 CEST	49932	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.242307901 CEST	443	49932	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.313710928 CEST	443	49929	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.314702988 CEST	49929	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.314727068 CEST	443	49929	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.315215111 CEST	49929	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.315220118 CEST	443	49929	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.370425940 CEST	443	49928	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.370579004 CEST	443	49928	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.370620966 CEST	443	49928	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.370640039 CEST	49928	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.370666027 CEST	49928	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.370886087 CEST	49928	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.370902061 CEST	443	49928	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.370918989 CEST	49928	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.370927095 CEST	443	49928	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.374002934 CEST	49933	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.374051094 CEST	443	49933	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.374130964 CEST	49933	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.374281883 CEST	49933	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.374294996 CEST	443	49933	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.449609995 CEST	443	49930	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.450189114 CEST	49930	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.450227976 CEST	443	49930	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.450704098 CEST	49930	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.450711966 CEST	443	49930	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.452210903 CEST	443	49929	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.452299118 CEST	443	49929	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.452347040 CEST	49929	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.452445030 CEST	49929	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.452466011 CEST	443	49929	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.452476978 CEST	49929	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.452481985 CEST	443	49929	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.455334902 CEST	49934	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.455384970 CEST	443	49934	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.455456018 CEST	49934	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.455590963 CEST	49934	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.455602884 CEST	443	49934	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.587400913 CEST	443	49930	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.587565899 CEST	443	49930	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.587657928 CEST	49930	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.587836027 CEST	49930	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.587866068 CEST	443	49930	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.587884903 CEST	49930	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.587896109 CEST	443	49930	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.590898037 CEST	49935	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.590946913 CEST	443	49935	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.591018915 CEST	49935	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.591173887 CEST	49935	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.591187000 CEST	443	49935	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.782290936 CEST	443	49931	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.783579111 CEST	49931	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.783605099 CEST	443	49931	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.784048080 CEST	49931	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.784053087 CEST	443	49931	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.920685053 CEST	443	49931	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.920763969 CEST	443	49931	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.920876026 CEST	49931	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.920917034 CEST	443	49931	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.920969963 CEST	443	49931	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.921025038 CEST	49931	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.921215057 CEST	49931	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.921248913 CEST	443	49931	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.921276093 CEST	49931	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.921291113 CEST	443	49931	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.924283028 CEST	49936	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.924339056 CEST	443	49936	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.924479008 CEST	49936	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.924612999 CEST	49936	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.924627066 CEST	443	49936	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.998594999 CEST	443	49932	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.999138117 CEST	49932	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.999203920 CEST	443	49932	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:41.999703884 CEST	49932	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:41.999717951 CEST	443	49932	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.135813951 CEST	443	49932	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.135984898 CEST	443	49932	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.136068106 CEST	49932	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.136204958 CEST	49932	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.136250019 CEST	443	49932	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.136276960 CEST	49932	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.136292934 CEST	443	49932	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.136555910 CEST	443	49933	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.137824059 CEST	49933	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.137855053 CEST	443	49933	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.138299942 CEST	49933	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.138309002 CEST	443	49933	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.139954090 CEST	49937	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.140038013 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.140177011 CEST	49937	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.140302896 CEST	49937	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.140321016 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.235902071 CEST	443	49934	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.236469984 CEST	49934	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.236506939 CEST	443	49934	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.236969948 CEST	49934	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.236979961 CEST	443	49934	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.273792982 CEST	443	49933	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.274535894 CEST	443	49933	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.274615049 CEST	49933	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.274657965 CEST	443	49933	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.274725914 CEST	49933	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.274787903 CEST	49933	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.274789095 CEST	49933	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.274836063 CEST	443	49933	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.274863005 CEST	443	49933	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.277870893 CEST	49938	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.277961016 CEST	443	49938	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.278042078 CEST	49938	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.278178930 CEST	49938	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.278198004 CEST	443	49938	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.365344048 CEST	443	49935	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.365937948 CEST	49935	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.365998983 CEST	443	49935	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.366396904 CEST	49935	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.366410971 CEST	443	49935	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.380247116 CEST	443	49934	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.380398989 CEST	443	49934	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.380472898 CEST	49934	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.380587101 CEST	49934	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.380634069 CEST	443	49934	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.380664110 CEST	49934	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.380681038 CEST	443	49934	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.383825064 CEST	49939	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.383912086 CEST	443	49939	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.383996964 CEST	49939	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.384135008 CEST	49939	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.384156942 CEST	443	49939	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.509541988 CEST	443	49935	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.509622097 CEST	443	49935	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.509680986 CEST	49935	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.513401985 CEST	49935	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.513458014 CEST	443	49935	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.513495922 CEST	49935	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.513514042 CEST	443	49935	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.517611980 CEST	49940	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.517674923 CEST	443	49940	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.517740965 CEST	49940	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.518114090 CEST	49940	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.518147945 CEST	443	49940	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.720839977 CEST	443	49936	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.733922958 CEST	49936	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.733963966 CEST	443	49936	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.738289118 CEST	49936	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.738305092 CEST	443	49936	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.870383978 CEST	443	49936	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.870492935 CEST	443	49936	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.870640039 CEST	49936	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.870980024 CEST	49936	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.871004105 CEST	443	49936	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.871015072 CEST	49936	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.871021032 CEST	443	49936	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.874090910 CEST	49941	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.874144077 CEST	443	49941	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.874242067 CEST	49941	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.874382973 CEST	49941	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.874396086 CEST	443	49941	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.898816109 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.899430037 CEST	49937	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.899492979 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:42.900053024 CEST	49937	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:42.900068045 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.041143894 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.041217089 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.041343927 CEST	49937	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.041373014 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.041398048 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.041450977 CEST	49937	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.041675091 CEST	49937	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.041693926 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.041707039 CEST	49937	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.041713953 CEST	443	49937	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.045053959 CEST	49942	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.045137882 CEST	443	49942	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.045252085 CEST	49942	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.045435905 CEST	49942	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.045466900 CEST	443	49942	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.076163054 CEST	443	49938	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.077434063 CEST	49938	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.077497959 CEST	443	49938	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.077934980 CEST	49938	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.077950001 CEST	443	49938	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.140229940 CEST	443	49939	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.141201019 CEST	49939	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.141237974 CEST	443	49939	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.141701937 CEST	49939	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.141715050 CEST	443	49939	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.211136103 CEST	443	49938	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.211282015 CEST	443	49938	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.211519003 CEST	49938	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.211604118 CEST	49938	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.211604118 CEST	49938	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.211659908 CEST	443	49938	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.211689949 CEST	443	49938	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.214921951 CEST	49943	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.215024948 CEST	443	49943	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.215186119 CEST	49943	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.215353012 CEST	49943	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.215377092 CEST	443	49943	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.272002935 CEST	443	49940	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.272829056 CEST	49940	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.272869110 CEST	443	49940	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.273297071 CEST	49940	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.273303986 CEST	443	49940	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.274636030 CEST	443	49939	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.274671078 CEST	443	49939	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.274727106 CEST	443	49939	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.274738073 CEST	49939	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.274789095 CEST	49939	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.275021076 CEST	49939	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.275021076 CEST	49939	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.275060892 CEST	443	49939	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.275096893 CEST	443	49939	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.278147936 CEST	49944	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.278192043 CEST	443	49944	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.278259993 CEST	49944	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.278390884 CEST	49944	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.278402090 CEST	443	49944	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.410691977 CEST	443	49940	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.410882950 CEST	443	49940	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.410963058 CEST	49940	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.411073923 CEST	49940	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.411073923 CEST	49940	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.411123991 CEST	443	49940	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.411149979 CEST	443	49940	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.414113045 CEST	49945	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.414196968 CEST	443	49945	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.414295912 CEST	49945	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.414472103 CEST	49945	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.414506912 CEST	443	49945	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.637238026 CEST	443	49941	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.638048887 CEST	49941	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.638082027 CEST	443	49941	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.638458014 CEST	49941	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.638463974 CEST	443	49941	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.774739981 CEST	443	49941	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.774780989 CEST	443	49941	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.774836063 CEST	443	49941	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.775008917 CEST	49941	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.775008917 CEST	49941	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.775214911 CEST	49941	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.775255919 CEST	443	49941	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.775290966 CEST	49941	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.775300980 CEST	443	49941	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.778594017 CEST	49946	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.778635025 CEST	443	49946	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.778722048 CEST	49946	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.778911114 CEST	49946	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.778927088 CEST	443	49946	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.824512005 CEST	443	49942	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.825243950 CEST	49942	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.825278997 CEST	443	49942	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.825818062 CEST	49942	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.825824022 CEST	443	49942	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.962163925 CEST	443	49942	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.962270975 CEST	443	49942	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.962333918 CEST	49942	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.962510109 CEST	49942	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.962537050 CEST	443	49942	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.962574959 CEST	49942	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.962583065 CEST	443	49942	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.965534925 CEST	49947	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.965568066 CEST	443	49947	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.965643883 CEST	49947	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.965951920 CEST	49947	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.965967894 CEST	443	49947	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.987308025 CEST	443	49943	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.987996101 CEST	49943	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.988087893 CEST	443	49943	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:43.988605022 CEST	49943	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:43.988619089 CEST	443	49943	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.060704947 CEST	443	49944	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.061358929 CEST	49944	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.061395884 CEST	443	49944	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.061820030 CEST	49944	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.061825037 CEST	443	49944	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.124237061 CEST	443	49943	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.124439001 CEST	443	49943	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.124536991 CEST	49943	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.124694109 CEST	49943	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.124694109 CEST	49943	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.124744892 CEST	443	49943	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.124773026 CEST	443	49943	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.127891064 CEST	49948	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.127943039 CEST	443	49948	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.128041983 CEST	49948	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.128202915 CEST	49948	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.128221035 CEST	443	49948	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.180891037 CEST	443	49945	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.181463003 CEST	49945	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.181477070 CEST	443	49945	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.181950092 CEST	49945	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.181955099 CEST	443	49945	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.198245049 CEST	443	49944	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.198537111 CEST	443	49944	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.198602915 CEST	49944	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.198642015 CEST	49944	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.198662043 CEST	443	49944	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.198671103 CEST	49944	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.198676109 CEST	443	49944	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.201355934 CEST	49949	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.201392889 CEST	443	49949	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.201459885 CEST	49949	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.201589108 CEST	49949	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.201603889 CEST	443	49949	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.318344116 CEST	443	49945	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.320482969 CEST	443	49945	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.320561886 CEST	49945	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.320571899 CEST	443	49945	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.320624113 CEST	49945	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.320673943 CEST	49945	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.320689917 CEST	443	49945	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.320699930 CEST	49945	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.320704937 CEST	443	49945	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.323591948 CEST	49950	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.323703051 CEST	443	49950	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.323822975 CEST	49950	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.323957920 CEST	49950	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.323981047 CEST	443	49950	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.760925055 CEST	443	49946	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.761642933 CEST	49946	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.761671066 CEST	443	49946	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.762129068 CEST	49946	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.762135029 CEST	443	49946	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.894176006 CEST	443	49948	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.894906044 CEST	49948	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.894939899 CEST	443	49948	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.895406008 CEST	49948	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.895411968 CEST	443	49948	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.895992994 CEST	443	49947	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.896378994 CEST	49947	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.896441936 CEST	443	49947	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.896756887 CEST	49947	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.896770954 CEST	443	49947	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.897150993 CEST	443	49946	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.897490978 CEST	443	49946	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.897557020 CEST	49946	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.897646904 CEST	49946	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.897665977 CEST	443	49946	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.897682905 CEST	49946	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.897690058 CEST	443	49946	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.901103973 CEST	49951	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.901143074 CEST	443	49951	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.901205063 CEST	49951	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.901443005 CEST	49951	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.901459932 CEST	443	49951	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.963160992 CEST	443	49949	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.963777065 CEST	49949	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.963799953 CEST	443	49949	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:44.964256048 CEST	49949	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:44.964265108 CEST	443	49949	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.026657104 CEST	443	49948	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.026842117 CEST	443	49948	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.026946068 CEST	49948	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.027074099 CEST	49948	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.027096033 CEST	443	49948	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.027108908 CEST	49948	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.027116060 CEST	443	49948	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.030117035 CEST	49952	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.030184984 CEST	443	49952	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.030263901 CEST	49952	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.030416965 CEST	49952	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.030433893 CEST	443	49952	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.031116962 CEST	443	49947	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.031259060 CEST	443	49947	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.031466961 CEST	49947	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.031467915 CEST	49947	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.031467915 CEST	49947	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.033333063 CEST	49953	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.033389091 CEST	443	49953	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.033454895 CEST	49953	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.033585072 CEST	49953	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.033603907 CEST	443	49953	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.090934992 CEST	443	49950	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.100884914 CEST	443	49949	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.101069927 CEST	443	49949	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.101279020 CEST	49949	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.113008022 CEST	49950	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.113034010 CEST	443	49950	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.113527060 CEST	49950	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.113532066 CEST	443	49950	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.114037991 CEST	49949	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.114056110 CEST	443	49949	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.114087105 CEST	49949	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.114092112 CEST	443	49949	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.117645025 CEST	49954	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.117752075 CEST	443	49954	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.117826939 CEST	49954	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.122068882 CEST	49954	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.122109890 CEST	443	49954	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.246850014 CEST	443	49950	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.246958971 CEST	443	49950	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.247093916 CEST	49950	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.332063913 CEST	49947	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.332104921 CEST	443	49947	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.354195118 CEST	49950	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.354259014 CEST	443	49950	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.354279041 CEST	49950	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.354289055 CEST	443	49950	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.358701944 CEST	49955	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.358797073 CEST	443	49955	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.358884096 CEST	49955	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.360567093 CEST	49955	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.360601902 CEST	443	49955	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.680823088 CEST	443	49951	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.681590080 CEST	49951	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.681615114 CEST	443	49951	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.682060003 CEST	49951	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.682063103 CEST	443	49951	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.790683031 CEST	443	49952	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.791435003 CEST	49952	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.791455030 CEST	443	49952	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.791883945 CEST	49952	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.791888952 CEST	443	49952	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.794076920 CEST	443	49953	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.794377089 CEST	49953	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.794445992 CEST	443	49953	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.794703960 CEST	49953	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.794719934 CEST	443	49953	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.822837114 CEST	443	49951	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.823373079 CEST	443	49951	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.823479891 CEST	49951	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.823545933 CEST	49951	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.823565960 CEST	443	49951	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.823580027 CEST	49951	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.823585987 CEST	443	49951	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.826836109 CEST	49956	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.826900959 CEST	443	49956	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.827003002 CEST	49956	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.827173948 CEST	49956	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.827183008 CEST	443	49956	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.885873079 CEST	443	49954	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.886569977 CEST	49954	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.886595964 CEST	443	49954	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.886996031 CEST	49954	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.887001038 CEST	443	49954	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.927045107 CEST	443	49952	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.927186966 CEST	443	49952	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.927273989 CEST	49952	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.927419901 CEST	49952	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.927448034 CEST	443	49952	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.927489042 CEST	49952	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.927503109 CEST	443	49952	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.930340052 CEST	49957	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.930434942 CEST	443	49957	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.930530071 CEST	49957	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.930658102 CEST	49957	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.930691004 CEST	443	49957	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.931543112 CEST	443	49953	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.931617975 CEST	443	49953	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.931684017 CEST	49953	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.931751013 CEST	443	49953	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.931788921 CEST	443	49953	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.931838989 CEST	49953	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.931838989 CEST	49953	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.931890965 CEST	443	49953	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.931926012 CEST	49953	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.931941986 CEST	443	49953	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.934468031 CEST	49958	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.934554100 CEST	443	49958	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:45.934632063 CEST	49958	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.934745073 CEST	49958	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:45.934770107 CEST	443	49958	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.021739960 CEST	443	49954	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.021831989 CEST	443	49954	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.021886110 CEST	49954	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.022115946 CEST	49954	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.022140980 CEST	443	49954	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.022166014 CEST	49954	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.022171974 CEST	443	49954	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.025356054 CEST	49959	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.025403023 CEST	443	49959	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.025469065 CEST	49959	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.025619030 CEST	49959	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.025631905 CEST	443	49959	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.127540112 CEST	443	49955	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.128305912 CEST	49955	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.128339052 CEST	443	49955	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.128793001 CEST	49955	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.128799915 CEST	443	49955	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.266386032 CEST	443	49955	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.266446114 CEST	443	49955	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.266509056 CEST	443	49955	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.266525984 CEST	49955	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.266566038 CEST	49955	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.266916037 CEST	49955	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.266916037 CEST	49955	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.266956091 CEST	443	49955	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.266976118 CEST	443	49955	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.270150900 CEST	49960	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.270219088 CEST	443	49960	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.270299911 CEST	49960	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.270461082 CEST	49960	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.270476103 CEST	443	49960	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.573999882 CEST	443	49956	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.574651003 CEST	49956	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.574697971 CEST	443	49956	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.575351954 CEST	49956	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.575362921 CEST	443	49956	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.692905903 CEST	443	49957	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.693476915 CEST	49957	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.693521023 CEST	443	49957	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.693998098 CEST	49957	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.694006920 CEST	443	49957	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.705604076 CEST	443	49958	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.706072092 CEST	49958	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.706099987 CEST	443	49958	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.706438065 CEST	49958	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.706448078 CEST	443	49958	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.711193085 CEST	443	49956	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.711261988 CEST	443	49956	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.711324930 CEST	49956	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.711482048 CEST	49956	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.711502075 CEST	443	49956	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.711510897 CEST	49956	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.711517096 CEST	443	49956	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.714373112 CEST	49961	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.714417934 CEST	443	49961	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.714570045 CEST	49961	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.714694023 CEST	49961	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.714709044 CEST	443	49961	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.796953917 CEST	443	49959	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.797626019 CEST	49959	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.797708988 CEST	443	49959	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.798069954 CEST	49959	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.798085928 CEST	443	49959	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.826401949 CEST	443	49957	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.826482058 CEST	443	49957	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.826597929 CEST	443	49957	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.826600075 CEST	49957	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.826649904 CEST	49957	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.826735973 CEST	49957	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.826765060 CEST	443	49957	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.826781034 CEST	49957	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.826787949 CEST	443	49957	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.829312086 CEST	49963	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.829365015 CEST	443	49963	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.829447985 CEST	49963	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.829587936 CEST	49963	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.829612970 CEST	443	49963	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.847824097 CEST	443	49958	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.847991943 CEST	443	49958	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.848072052 CEST	49958	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.848176956 CEST	49958	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.848176956 CEST	49958	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.848223925 CEST	443	49958	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.848256111 CEST	443	49958	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.850644112 CEST	49964	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.850694895 CEST	443	49964	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.850795984 CEST	49964	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.850934982 CEST	49964	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.850951910 CEST	443	49964	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.936557055 CEST	443	49959	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.936719894 CEST	443	49959	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.936830044 CEST	49959	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.936989069 CEST	49959	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.937014103 CEST	443	49959	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.937026024 CEST	49959	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.937032938 CEST	443	49959	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.939932108 CEST	49965	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.939977884 CEST	443	49965	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:46.940077066 CEST	49965	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.940218925 CEST	49965	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:46.940231085 CEST	443	49965	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.029369116 CEST	443	49960	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.031677961 CEST	49960	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.031716108 CEST	443	49960	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.032491922 CEST	49960	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.032496929 CEST	443	49960	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.169054031 CEST	443	49960	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.169357061 CEST	443	49960	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.169418097 CEST	49960	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.169476986 CEST	49960	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.169476986 CEST	49960	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.169504881 CEST	443	49960	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.169516087 CEST	443	49960	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.172867060 CEST	49966	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.172961950 CEST	443	49966	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.173125029 CEST	49966	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.173259974 CEST	49966	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.173270941 CEST	443	49966	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.480248928 CEST	443	49961	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.480935097 CEST	49961	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.480966091 CEST	443	49961	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.481456995 CEST	49961	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.481463909 CEST	443	49961	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.603029013 CEST	443	49963	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.603635073 CEST	49963	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.603667021 CEST	443	49963	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.604129076 CEST	49963	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.604136944 CEST	443	49963	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.611152887 CEST	443	49964	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.611597061 CEST	49964	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.611663103 CEST	443	49964	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.611979008 CEST	49964	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.611993074 CEST	443	49964	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.619947910 CEST	443	49961	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.620018959 CEST	443	49961	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.620069981 CEST	49961	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.620091915 CEST	443	49961	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.620137930 CEST	443	49961	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.620186090 CEST	49961	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.620213985 CEST	49961	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.620213985 CEST	49961	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.620230913 CEST	443	49961	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.620239973 CEST	443	49961	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.623219967 CEST	49967	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.623255014 CEST	443	49967	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.623325109 CEST	49967	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.623454094 CEST	49967	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.623465061 CEST	443	49967	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.700793028 CEST	443	49965	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.703566074 CEST	49965	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.703577995 CEST	443	49965	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.705852985 CEST	49965	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.705857992 CEST	443	49965	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.742465019 CEST	443	49963	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.742537975 CEST	443	49963	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.742592096 CEST	49963	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.742763996 CEST	49963	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.742789030 CEST	443	49963	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.742803097 CEST	49963	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.742810965 CEST	443	49963	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.746092081 CEST	49968	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.746133089 CEST	443	49968	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.746207952 CEST	49968	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.746321917 CEST	49968	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.746340990 CEST	443	49968	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.748756886 CEST	443	49964	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.748842001 CEST	443	49964	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.748891115 CEST	49964	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.749012947 CEST	49964	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.749037027 CEST	443	49964	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.749054909 CEST	49964	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.749062061 CEST	443	49964	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.751465082 CEST	49969	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.751503944 CEST	443	49969	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.751574993 CEST	49969	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.751682043 CEST	49969	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.751693010 CEST	443	49969	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.839062929 CEST	443	49965	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.839090109 CEST	443	49965	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.839148045 CEST	443	49965	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.839195013 CEST	49965	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.839240074 CEST	49965	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.839499950 CEST	49965	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.839518070 CEST	443	49965	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.839531898 CEST	49965	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.839538097 CEST	443	49965	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.842567921 CEST	49970	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.842609882 CEST	443	49970	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:47.842706919 CEST	49970	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.842848063 CEST	49970	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:47.842854977 CEST	443	49970	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.263535023 CEST	443	49966	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.264071941 CEST	49966	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.264101982 CEST	443	49966	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.264550924 CEST	49966	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.264561892 CEST	443	49966	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.397916079 CEST	443	49967	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.398457050 CEST	49967	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.398479939 CEST	443	49967	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.398969889 CEST	49967	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.398976088 CEST	443	49967	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.499828100 CEST	443	49968	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.500611067 CEST	49968	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.500654936 CEST	443	49968	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.501009941 CEST	49968	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.501019955 CEST	443	49968	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.511662960 CEST	443	49966	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.511744976 CEST	443	49966	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.511980057 CEST	49966	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.512021065 CEST	49966	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.512042046 CEST	443	49966	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.512057066 CEST	49966	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.512064934 CEST	443	49966	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.515269995 CEST	49971	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.515309095 CEST	443	49971	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.515393972 CEST	49971	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.515523911 CEST	49971	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.515537977 CEST	443	49971	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.521635056 CEST	443	49969	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.522068977 CEST	49969	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.522078037 CEST	443	49969	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.522531986 CEST	49969	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.522536039 CEST	443	49969	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.535161972 CEST	443	49967	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.535191059 CEST	443	49967	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.535274982 CEST	49967	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.535301924 CEST	443	49967	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.535444975 CEST	49967	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.535459042 CEST	443	49967	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.535466909 CEST	49967	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.535634041 CEST	443	49967	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.535666943 CEST	443	49967	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.538357019 CEST	49972	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.538399935 CEST	443	49972	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.538414001 CEST	49967	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.538466930 CEST	49972	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.538611889 CEST	49972	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.538623095 CEST	443	49972	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.600166082 CEST	443	49970	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.600811005 CEST	49970	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.600842953 CEST	443	49970	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.601314068 CEST	49970	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.601326942 CEST	443	49970	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.639637947 CEST	443	49968	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.639661074 CEST	443	49968	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.639718056 CEST	443	49968	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.639740944 CEST	49968	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.639786005 CEST	49968	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.640054941 CEST	49968	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.640077114 CEST	443	49968	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.640098095 CEST	49968	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.640105963 CEST	443	49968	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.643393040 CEST	49973	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.643486023 CEST	443	49973	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.643668890 CEST	49973	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.643855095 CEST	49973	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.643888950 CEST	443	49973	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.662667990 CEST	443	49969	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.662725925 CEST	443	49969	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.662801981 CEST	443	49969	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.662817955 CEST	49969	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.662858009 CEST	49969	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.663101912 CEST	49969	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.663125992 CEST	443	49969	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.663161039 CEST	49969	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.663167000 CEST	443	49969	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.666522026 CEST	49974	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.666567087 CEST	443	49974	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.666682005 CEST	49974	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.666871071 CEST	49974	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.666881084 CEST	443	49974	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.737355947 CEST	443	49970	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.737397909 CEST	443	49970	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.737469912 CEST	443	49970	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.737468004 CEST	49970	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.737572908 CEST	49970	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.737683058 CEST	49970	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.737708092 CEST	443	49970	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.737726927 CEST	49970	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.737732887 CEST	443	49970	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.740993977 CEST	49975	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.741091013 CEST	443	49975	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:48.741178989 CEST	49975	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.741314888 CEST	49975	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:48.741336107 CEST	443	49975	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.257661104 CEST	443	49971	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.258380890 CEST	49971	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.258418083 CEST	443	49971	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.258929014 CEST	49971	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.258934975 CEST	443	49971	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.315411091 CEST	443	49972	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.316365004 CEST	49972	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.316390038 CEST	443	49972	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.316883087 CEST	49972	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.316889048 CEST	443	49972	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.393407106 CEST	443	49971	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.393516064 CEST	443	49971	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.393719912 CEST	49971	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.393853903 CEST	49971	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.393876076 CEST	443	49971	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.393888950 CEST	49971	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.393894911 CEST	443	49971	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.396967888 CEST	49976	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.397021055 CEST	443	49976	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.397108078 CEST	49976	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.397253036 CEST	49976	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.397274017 CEST	443	49976	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.408952951 CEST	443	49973	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.412046909 CEST	49973	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.412106037 CEST	443	49973	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.412532091 CEST	49973	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.412545919 CEST	443	49973	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.451061964 CEST	443	49974	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.454355001 CEST	443	49972	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.454428911 CEST	443	49972	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.454502106 CEST	49972	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.455377102 CEST	49974	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.455389023 CEST	443	49974	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.455903053 CEST	49974	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.455909014 CEST	443	49974	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.456115961 CEST	49972	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.456137896 CEST	443	49972	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.456147909 CEST	49972	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.456154108 CEST	443	49972	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.460336924 CEST	49977	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.460390091 CEST	443	49977	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.460459948 CEST	49977	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.460716009 CEST	49977	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.460726976 CEST	443	49977	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.498600006 CEST	443	49975	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.499067068 CEST	49975	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.499113083 CEST	443	49975	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.499558926 CEST	49975	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.499569893 CEST	443	49975	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.548197031 CEST	443	49973	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.548264980 CEST	443	49973	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.548336029 CEST	49973	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.548609972 CEST	49973	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.548635006 CEST	443	49973	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.548649073 CEST	49973	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.548656940 CEST	443	49973	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.551964998 CEST	49978	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.552026987 CEST	443	49978	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.552109957 CEST	49978	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.552249908 CEST	49978	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.552263021 CEST	443	49978	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.589466095 CEST	443	49974	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.589564085 CEST	443	49974	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.589613914 CEST	49974	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.589813948 CEST	49974	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.589832067 CEST	443	49974	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.589843988 CEST	49974	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.589849949 CEST	443	49974	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.592969894 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.593003988 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.593074083 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.593255997 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.593270063 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.636188030 CEST	443	49975	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.636212111 CEST	443	49975	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.636280060 CEST	443	49975	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.636284113 CEST	49975	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.636334896 CEST	49975	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.636590004 CEST	49975	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.636627913 CEST	443	49975	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.636655092 CEST	49975	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.636670113 CEST	443	49975	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.639977932 CEST	49980	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.640080929 CEST	443	49980	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:49.640161991 CEST	49980	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.640399933 CEST	49980	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:49.640434980 CEST	443	49980	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.141397953 CEST	443	49976	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.142158031 CEST	49976	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.142201900 CEST	443	49976	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.142575026 CEST	49976	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.142582893 CEST	443	49976	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.240776062 CEST	443	49977	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.241365910 CEST	49977	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.241424084 CEST	443	49977	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.241879940 CEST	49977	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.241894960 CEST	443	49977	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.277549982 CEST	443	49976	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.277612925 CEST	443	49976	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.277725935 CEST	49976	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.277743101 CEST	443	49976	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.277798891 CEST	49976	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.277961016 CEST	49976	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.277985096 CEST	443	49976	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.278006077 CEST	49976	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.278012991 CEST	443	49976	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.281070948 CEST	49981	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.281171083 CEST	443	49981	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.281277895 CEST	49981	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.281419992 CEST	49981	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.281455994 CEST	443	49981	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.317471981 CEST	443	49978	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.318137884 CEST	49978	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.318166018 CEST	443	49978	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.318466902 CEST	49978	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.318475962 CEST	443	49978	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.346674919 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.347078085 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.347120047 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.347548008 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.347562075 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.618781090 CEST	443	49978	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.618834019 CEST	443	49978	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.618895054 CEST	49978	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.618928909 CEST	443	49978	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.618961096 CEST	443	49978	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.619005919 CEST	49978	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.619251013 CEST	49978	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.619271040 CEST	443	49978	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.619283915 CEST	49978	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.619291067 CEST	443	49978	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.619957924 CEST	443	49980	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.620457888 CEST	443	49977	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.620517969 CEST	443	49977	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.620560884 CEST	443	49977	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.620593071 CEST	49977	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.620639086 CEST	443	49977	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.620670080 CEST	49977	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.620680094 CEST	443	49977	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.620690107 CEST	49977	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.620708942 CEST	443	49977	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.620742083 CEST	49977	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.620765924 CEST	49977	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.620779991 CEST	443	49977	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.620852947 CEST	443	49977	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.620903015 CEST	49977	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.622356892 CEST	49980	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.622433901 CEST	443	49980	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.622876883 CEST	49980	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.622893095 CEST	443	49980	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.623337030 CEST	49977	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.623337030 CEST	49977	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.623368979 CEST	443	49977	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.623393059 CEST	443	49977	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.623917103 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.623946905 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.623966932 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.624005079 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.624021053 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.624049902 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.624070883 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.625422001 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.625467062 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.625478029 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.625500917 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.625516891 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.625538111 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.625556946 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.625993967 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.626012087 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.626035929 CEST	49979	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.626048088 CEST	443	49979	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.628562927 CEST	49982	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.628628016 CEST	443	49982	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.628704071 CEST	49982	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.629184961 CEST	49982	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.629211903 CEST	443	49982	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.629648924 CEST	49983	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.629698038 CEST	443	49983	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.629755974 CEST	49983	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.629925013 CEST	49983	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.629941940 CEST	443	49983	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.630099058 CEST	49984	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.630108118 CEST	443	49984	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.630163908 CEST	49984	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.630358934 CEST	49984	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.630369902 CEST	443	49984	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.764950037 CEST	443	49980	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.764966011 CEST	443	49980	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.765085936 CEST	49980	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.765119076 CEST	443	49980	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.765172958 CEST	49980	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.765378952 CEST	49980	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.765387058 CEST	443	49980	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.765397072 CEST	443	49980	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.765399933 CEST	49980	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.765441895 CEST	443	49980	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.768296003 CEST	49985	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.768340111 CEST	443	49985	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:50.768415928 CEST	49985	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.768557072 CEST	49985	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:50.768582106 CEST	443	49985	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.054538012 CEST	443	49981	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.055186033 CEST	49981	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.055226088 CEST	443	49981	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.055655956 CEST	49981	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.055664062 CEST	443	49981	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.193687916 CEST	443	49981	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.193713903 CEST	443	49981	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.193768978 CEST	49981	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.193783998 CEST	443	49981	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.193831921 CEST	49981	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.194118977 CEST	49981	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.194149017 CEST	443	49981	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.194161892 CEST	49981	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.194169044 CEST	443	49981	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.197253942 CEST	49986	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.197285891 CEST	443	49986	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.197355032 CEST	49986	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.197496891 CEST	49986	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.197504997 CEST	443	49986	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.392405033 CEST	443	49982	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.393040895 CEST	443	49983	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.393304110 CEST	49982	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.393362999 CEST	443	49982	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.393373013 CEST	49983	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.393414021 CEST	443	49983	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.393724918 CEST	49982	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.393740892 CEST	443	49982	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.393918037 CEST	49983	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.393929005 CEST	443	49983	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.401268959 CEST	443	49984	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.401612997 CEST	49984	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.401631117 CEST	443	49984	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.401989937 CEST	49984	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.401994944 CEST	443	49984	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.519001007 CEST	443	49985	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.519802094 CEST	49985	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.519869089 CEST	443	49985	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.520292997 CEST	49985	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.520309925 CEST	443	49985	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.533339024 CEST	443	49982	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.533509970 CEST	443	49982	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.533556938 CEST	443	49983	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.533603907 CEST	49982	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.533855915 CEST	49982	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.533855915 CEST	49982	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.533884048 CEST	443	49982	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.533900023 CEST	443	49982	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.534003973 CEST	443	49983	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.534060955 CEST	49983	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.534223080 CEST	49983	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.534245014 CEST	443	49983	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.534265041 CEST	49983	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.534272909 CEST	443	49983	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.537472963 CEST	49987	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.537517071 CEST	443	49987	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.537544966 CEST	49988	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.537585974 CEST	443	49988	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.537599087 CEST	49987	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.537627935 CEST	49988	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.537730932 CEST	49987	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.537743092 CEST	443	49987	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.537843943 CEST	49988	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.537853956 CEST	443	49988	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.546327114 CEST	443	49984	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.546420097 CEST	443	49984	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.546519041 CEST	49984	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.546741962 CEST	49984	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.546767950 CEST	443	49984	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.546782970 CEST	49984	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.546792030 CEST	443	49984	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.549936056 CEST	49989	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.549985886 CEST	443	49989	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.550069094 CEST	49989	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.550211906 CEST	49989	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.550226927 CEST	443	49989	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.657150984 CEST	443	49985	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.657229900 CEST	443	49985	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.657309055 CEST	49985	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.657587051 CEST	49985	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.657619953 CEST	443	49985	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.657634974 CEST	49985	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.657644033 CEST	443	49985	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.660918951 CEST	49990	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.660974979 CEST	443	49990	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.661195040 CEST	49990	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.661286116 CEST	49990	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.661294937 CEST	443	49990	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.958895922 CEST	443	49986	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.959495068 CEST	49986	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.959534883 CEST	443	49986	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:51.960084915 CEST	49986	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:51.960093021 CEST	443	49986	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.146591902 CEST	443	49986	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.146629095 CEST	443	49986	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.146686077 CEST	443	49986	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.146698952 CEST	49986	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:52.146733999 CEST	49986	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:52.148252964 CEST	49986	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:52.148277998 CEST	443	49986	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.148288012 CEST	49986	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:52.148293972 CEST	443	49986	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.278270006 CEST	443	49988	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.282505989 CEST	49988	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:52.282531023 CEST	443	49988	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.283165932 CEST	49988	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:52.283170938 CEST	443	49988	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.315687895 CEST	443	49987	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.316185951 CEST	49987	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:52.316234112 CEST	443	49987	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.316663027 CEST	49987	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:52.316668987 CEST	443	49987	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.320099115 CEST	443	49989	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.320533991 CEST	49989	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:52.320595980 CEST	443	49989	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.320955038 CEST	49989	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:52.320969105 CEST	443	49989	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.411698103 CEST	443	49988	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.412013054 CEST	443	49988	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.412097931 CEST	49988	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:52.412167072 CEST	49988	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:52.412180901 CEST	443	49988	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.412190914 CEST	49988	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:52.412195921 CEST	443	49988	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.415613890 CEST	443	49990	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.416049004 CEST	49990	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:52.416066885 CEST	443	49990	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.416533947 CEST	49990	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:52.416538000 CEST	443	49990	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.454004049 CEST	443	49987	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.454173088 CEST	443	49987	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.454272032 CEST	49987	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:52.454396963 CEST	49987	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:52.454441071 CEST	443	49987	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.454492092 CEST	49987	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:52.454509974 CEST	443	49987	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.456378937 CEST	443	49989	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.456546068 CEST	443	49989	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.456614017 CEST	49989	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:52.456651926 CEST	49989	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:52.456651926 CEST	49989	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:52.456671953 CEST	443	49989	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.456686974 CEST	443	49989	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.552351952 CEST	443	49990	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.552423954 CEST	443	49990	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.552525043 CEST	49990	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:52.552798033 CEST	49990	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:52.552828074 CEST	443	49990	13.107.253.45	192.168.2.5
Oct 23, 2024 17:08:52.552839994 CEST	49990	443	192.168.2.5	13.107.253.45
Oct 23, 2024 17:08:52.552845001 CEST	443	49990	13.107.253.45	192.168.2.5

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 23, 2024 17:07:44.665647984 CEST	1.1.1.1	192.168.2.5	0xd578	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 17:07:44.665647984 CEST	1.1.1.1	192.168.2.5	0xd578	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 23, 2024 17:07:53.964479923 CEST	1.1.1.1	192.168.2.5	0x30cb	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 17:07:53.964479923 CEST	1.1.1.1	192.168.2.5	0x30cb	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 17:07:53.964479923 CEST	1.1.1.1	192.168.2.5	0x30cb	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false

Target ID:	0
Start time:	11:07:39
Start date:	23/10/2024
Path:	C:\Users\user\Desktop\qBtDOzhQnS.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\qBtDOzhQnS.exe"
Imagebase:	0x240000
File size:	294'016 bytes
MD5 hash:	70FCBDDE18D2955BDE7DDA2F561F66D4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	11:07:39
Start date:	23/10/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Imagebase:	0x6b0000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	11:07:40
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 1440 -s 272
Imagebase:	0x420000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	11:07:40
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\Honda\Honda.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Imagebase:	0xfd0000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, ReversingLabs
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	11:07:40
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	11:07:52
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\Honda\Honda.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Imagebase:	0x630000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	11:07:52
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	11:08:00
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\Honda\Honda.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Imagebase:	0x650000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	11:08:00
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	11:08:08
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\Honda\Honda.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Imagebase:	0x250000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	11:08:08
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6d64d0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	1.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	2.9%
Total number of Nodes:	1391
Total number of Limit Nodes:	6

Executed Functions

Function 00242F7C Relevance: 1.6, APIs: 1, Instructions: 55
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualProtect.KERNELBASE(00280260,000004E4,00000040,?), ref: 00242FD1

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: d4df0cafff632111ee3c61e061d5b3743cd377538ad3d4f8fd830fac08624fd8
Instruction ID: 6da577980268f39e040c83b1ccf6296dfd269479c7376bc24d0c1c878d496311
Opcode Fuzzy Hash: d4df0cafff632111ee3c61e061d5b3743cd377538ad3d4f8fd830fac08624fd8
Instruction Fuzzy Hash: 051106722147059FE319EF24D805B1AB390EB88720F00491DF954873C2DB71F925CB95

Function 0025C9D4 Relevance: 7.7, APIs: 5, Instructions: 202
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__alloca_probe_16.LIBCMT ref: 0025CA5B
__alloca_probe_16.LIBCMT ref: 0025CB1C
__freea.LIBCMT ref: 0025CB83

Part of subcall function 00257A23: HeapAlloc.KERNEL32(00000000,0025DBAE,?,?,0025DBAE,00000220,?,?,?), ref: 00257A55

__freea.LIBCMT ref: 0025CB98
__freea.LIBCMT ref: 0025CBA8

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: __freea$__alloca_probe_16$AllocHeap
String ID:
API String ID: 1096550386-0
Opcode ID: 34a8604f29d0fec1d9d574f632e7dbcf31024809ca2d415ee62e72d09083dd23
Instruction ID: 06ea13ce4e6124ab98eea08f135ee5ff0011efb6171d67b6409f8dd14adfb075
Opcode Fuzzy Hash: 34a8604f29d0fec1d9d574f632e7dbcf31024809ca2d415ee62e72d09083dd23
Instruction Fuzzy Hash: AD51D57262031B6FEF259E64DC82EBB7BA9EF44755B240128FD04E6101F670CD68C7A8

Function 0025DDAA Relevance: 3.2, APIs: 2, Instructions: 177
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0025D8DA: GetOEMCP.KERNEL32(00000000,?,?,?,?), ref: 0025D905

IsValidCodePage.KERNEL32(-00000030,00000000,?,?,?,?,?,?,?,?,0025DBF1,?,00000000,?,?,?), ref: 0025DE0B
GetCPInfo.KERNEL32(00000000,?,?,?,?,?,?,?,?,0025DBF1,?,00000000,?,?,?), ref: 0025DE4D

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: CodeInfoPageValid
String ID:
API String ID: 546120528-0
Opcode ID: 06a6d8c2760107fd580c458142cf303a4ff1140a441420bb4b512a50a2e7827c
Instruction ID: f88657e02dea17ef9ad27aa9e466e6992a1135b35d362cdaf0d8d0e657113727
Opcode Fuzzy Hash: 06a6d8c2760107fd580c458142cf303a4ff1140a441420bb4b512a50a2e7827c
Instruction Fuzzy Hash: A0513670A203069EDB30CF35C8856AABBF4FF91301F18406ED8878B651D674A95ACB54

Function 0025762C Relevance: 3.0, APIs: 2, Instructions: 34
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LCMapStringEx.KERNELBASE(?,0025CAC2,?,?,00000000,?,00000000,00000000,00000000,00000000,00000000), ref: 00257660
LCMapStringW.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,?,00000000,?,?,0025CAC2,?,?,00000000,?,00000000), ref: 0025767E

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: String
String ID:
API String ID: 2568140703-0
Opcode ID: 4cbf23acfeec23058b0c9f16183f51b3bc7afa91a84ef727d27044ea5704f6d2
Instruction ID: 2d3a44a185e2297353e0da0aeb98ddfe1b44433194ca63cc66e0179ace503d60
Opcode Fuzzy Hash: 4cbf23acfeec23058b0c9f16183f51b3bc7afa91a84ef727d27044ea5704f6d2
Instruction Fuzzy Hash: 12F07A3205461ABBCF125F94EC09DDE3F6AEF48361F058110FE1965120C772C972AF98

Function 0025D9AE Relevance: 1.6, APIs: 1, Instructions: 147
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCPInfo.KERNEL32(E8458D00,?,0025DBFD,0025DBF1,00000000), ref: 0025D9E0

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: Info
String ID:
API String ID: 1807457897-0
Opcode ID: ed07b4e5034f32b4b63d278cbbc77334555f81842d98258dbc7f81fae0ccde5d
Instruction ID: 74e1d595833ca8f64763346755c0c6fda1e221680dccc0fb3f448ff966ad442f
Opcode Fuzzy Hash: ed07b4e5034f32b4b63d278cbbc77334555f81842d98258dbc7f81fae0ccde5d
Instruction Fuzzy Hash: 575157716282589FCB318E28CC84BE67BBDEB55305F2405EDE89AC7142D2749D5ADF20

Function 002457E2 Relevance: 1.5, APIs: 1, Instructions: 17
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

KiUserExceptionDispatcher.NTDLL ref: 002457EF

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: DispatcherExceptionUser
String ID:
API String ID: 6842923-0
Opcode ID: bd1690509c1f838720082d8af9a0130c25c25c31b5af909bb7ef5cb085a674f4
Instruction ID: fa0ce73d23fb3d21cc0b382e968c6f81ee0f921ab4eea9ff3c9d506a2b7e9fd8
Opcode Fuzzy Hash: bd1690509c1f838720082d8af9a0130c25c25c31b5af909bb7ef5cb085a674f4
Instruction Fuzzy Hash: DAD0A774D10208ABCF0CFBB4C849C9E73BCAF05301B5080B8B82D8B456DB70E92DCA41

Non-executed Functions

Function 002610A3 Relevance: 10.2, APIs: 1, Strings: 4, Instructions: 1436COMMONLIBRARYCODE

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 00261287

Strings

1#IND, xrefs: 002611A8
1#QNAN, xrefs: 002611B6
1#SNAN, xrefs: 002611AF
1#INF, xrefs: 002611D9

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: 67085c033e22c800372680c5c488e749abbaeeef8d7b9efdbbd462d8cd726f6f
Instruction ID: 9d6c426191bdadd5414e4be15970e72b00429a2c71e34afdccf2aa1fe8c1f98c
Opcode Fuzzy Hash: 67085c033e22c800372680c5c488e749abbaeeef8d7b9efdbbd462d8cd726f6f
Instruction Fuzzy Hash: D5D24C71E286298FDB65CE28CD407EAB7B5EB45305F1841EAD80DE7240DB74AEE58F40

Function 0026051E Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 85COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(?,2000000B,0026083C,00000002,00000000,?,?,?,0026083C,?,00000000), ref: 002605B7
GetLocaleInfoW.KERNEL32(?,20001004,0026083C,00000002,00000000,?,?,?,0026083C,?,00000000), ref: 002605E0
GetACP.KERNEL32(?,?,0026083C,?,00000000), ref: 002605F5

Strings

OCP, xrefs: 00260572
ACP, xrefs: 0026053C

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: InfoLocale
String ID: ACP$OCP
API String ID: 2299586839-711371036
Opcode ID: d063eba5499c7c0ceb4a29b690fa5b4a9563c6325f93e0fbcf59502872bcd96e
Instruction ID: 5c17f785d8171d22100cae101d8f9a60e2ee2816cb5ea394da93379a14afdaef
Opcode Fuzzy Hash: d063eba5499c7c0ceb4a29b690fa5b4a9563c6325f93e0fbcf59502872bcd96e
Instruction Fuzzy Hash: BC21F822A70102EADB30DF55C984A9773A6FB54B60BD68464E94BD7110E732DED0EF90

Function 002606F3 Relevance: 7.7, APIs: 5, Instructions: 183COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00258DB3: GetLastError.KERNEL32(?,00000008,002569CC), ref: 00258DB7
Part of subcall function 00258DB3: SetLastError.KERNEL32(00000000,00270710,00000024,0024DDA3), ref: 00258E59

GetUserDefaultLCID.KERNEL32(?,?,?,00000055,?), ref: 002607FF
IsValidCodePage.KERNEL32(00000000), ref: 00260848
IsValidLocale.KERNEL32(?,00000001), ref: 00260857
GetLocaleInfoW.KERNEL32(?,00001001,-00000050,00000040,?,000000D0,00000055,00000000,?,?,00000055,00000000), ref: 0026089F
GetLocaleInfoW.KERNEL32(?,00001002,00000030,00000040), ref: 002608BE

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: Locale$ErrorInfoLastValid$CodeDefaultPageUser
String ID:
API String ID: 415426439-0
Opcode ID: a72e5d7907f20829fc3664e502d165efba8a5e9ce89d4d10c116aeb064fb154a
Instruction ID: ad79f5a00111d52ef405e4f092a5fc9a3949fa71eb7c7e6530fb44b0ab6db8d6
Opcode Fuzzy Hash: a72e5d7907f20829fc3664e502d165efba8a5e9ce89d4d10c116aeb064fb154a
Instruction Fuzzy Hash: 5F51847192020AABDB11DFA5DCC5ABFB7B8FF04700F144469E911E7190E7B09D949FA1

Function 00252D90 Relevance: 7.4, APIs: 2, Strings: 2, Instructions: 449COMMONLIBRARYCODE

Download Yara Rule

Strings

O#&, xrefs: 002530D3, 002530B1
O#&, xrefs: 00252DAB, 00252F2E, 00253157, 002530F0, 00252F7D

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID:
String ID: O#&$O#&
API String ID: 0-3634657242
Opcode ID: 5d6c2b0c2b7731d556a830f47680bcf32448849bf7266fb62c648a6abdd5fe24
Instruction ID: ee6ccbb7ba3eec4aff37210063ebfaaaf7c1d24352dc2b0fc2ee02ebc91718ea
Opcode Fuzzy Hash: 5d6c2b0c2b7731d556a830f47680bcf32448849bf7266fb62c648a6abdd5fe24
Instruction Fuzzy Hash: 89F16E71E1021A9FDF14CFA8D880AADB7B1FF49315F158269E819A7380D731AE19CB94

Function 0025FD8F Relevance: 7.3, APIs: 3, Strings: 1, Instructions: 251COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00258DB3: GetLastError.KERNEL32(?,00000008,002569CC), ref: 00258DB7
Part of subcall function 00258DB3: SetLastError.KERNEL32(00000000,00270710,00000024,0024DDA3), ref: 00258E59

GetACP.KERNEL32(?,?,?,?,?,?,00254F88,?,?,?,00000055,?,-00000050,?,?,00000004), ref: 0025FE50
IsValidCodePage.KERNEL32(00000000,?,?,?,?,?,?,00254F88,?,?,?,00000055,?,-00000050,?,?), ref: 0025FE7B
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078,-00000050,00000000,000000D0), ref: 0025FFDE

Strings

utf8, xrefs: 0025FF4D

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: ErrorLast$CodeInfoLocalePageValid
String ID: utf8
API String ID: 607553120-905460609
Opcode ID: 898ef955ac3ce606bcde3913ac12aba325795a972f918c7c7e645f454d5397eb
Instruction ID: 7efd158d48c98a5542786acee18d306f0e137af1f8d1366e8e54a6aeb6862d87
Opcode Fuzzy Hash: 898ef955ac3ce606bcde3913ac12aba325795a972f918c7c7e645f454d5397eb
Instruction Fuzzy Hash: 8D71E731620307AADB64AF34DD86BA7B3A8EF05702F104079FD05D75D1FA74ED688A58

Function 00257C32 Relevance: 6.3, APIs: 4, Instructions: 337COMMONLIBRARYCODE

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00257CBF

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: 345b19b73ae581e04342a76ae529d1a1f04ad07f21d6b651d60a02739456ec14
Instruction ID: c4784b6d371a0b684e016be6bb4f73ffe4c240efbd5ddf2a1199729e0bf3b15a
Opcode Fuzzy Hash: 345b19b73ae581e04342a76ae529d1a1f04ad07f21d6b651d60a02739456ec14
Instruction Fuzzy Hash: F6B17D329692469FDB15CF28D881BFEBBF5EF15301F1441A6EC05AB341D2349C29CBA4

Function 0024A085 Relevance: 6.1, APIs: 4, Instructions: 70COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017,?), ref: 0024A091
IsDebuggerPresent.KERNEL32 ref: 0024A15D
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 0024A176
UnhandledExceptionFilter.KERNEL32(?), ref: 0024A180

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: ExceptionFilterPresentUnhandled$DebuggerFeatureProcessor
String ID:
API String ID: 254469556-0
Opcode ID: 12f110b32e1738186bcc9fa05a0dcdb41216fde86d42c68897b219ca770ea46e
Instruction ID: eff8630ba247a910e83de0afd6bc96a46695621c2ce0f4102ffd47586177ee11
Opcode Fuzzy Hash: 12f110b32e1738186bcc9fa05a0dcdb41216fde86d42c68897b219ca770ea46e
Instruction Fuzzy Hash: AD31F5B5D512299BDF21DFA4D9497CDBBB8BF08300F1041AAE40DAB250EBB19B84CF45

Function 002601A2 Relevance: 4.7, APIs: 3, Instructions: 205COMMON

Download Yara Rule

APIs

Part of subcall function 00258DB3: GetLastError.KERNEL32(?,00000008,002569CC), ref: 00258DB7
Part of subcall function 00258DB3: SetLastError.KERNEL32(00000000,00270710,00000024,0024DDA3), ref: 00258E59

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 002601F6
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00260240
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00260306

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: InfoLocale$ErrorLast
String ID:
API String ID: 661929714-0
Opcode ID: c91473212f14c837b06233bbcce19060880933cb6c50c2d40530dee2989c2a45
Instruction ID: 285abdf36374b274fabdeaad54d60cc61dd2688ae4bd0d4502898d03cf98d9ec
Opcode Fuzzy Hash: c91473212f14c837b06233bbcce19060880933cb6c50c2d40530dee2989c2a45
Instruction Fuzzy Hash: 08616A719202179FDB289F24CCD6BAB77A9EF04301F1040AAED05D66C5EBB4DDA4EB50

Function 00250B69 Relevance: 4.6, APIs: 3, Instructions: 77COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32(?,?,?,?,?,?), ref: 00250C61
SetUnhandledExceptionFilter.KERNEL32(00000000,?,?,?,?,?,?), ref: 00250C6B
UnhandledExceptionFilter.KERNEL32(?,?,?,?,?,?,?), ref: 00250C78

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: 0a56fcba4d5cff91f198adb3bc1e3b156a78c3dec8b0cee1971e35fa3299a884
Instruction ID: 5d4e083804cbe9221073897364a231b11a6e4040b08d3abeb9efaf9985414c9a
Opcode Fuzzy Hash: 0a56fcba4d5cff91f198adb3bc1e3b156a78c3dec8b0cee1971e35fa3299a884
Instruction Fuzzy Hash: CF31E57491122DABCB21DF24DD8978CBBB8BF08310F5042EAE81DA7260E7709F958F45

Function 00242805 Relevance: 4.0, APIs: 1, Strings: 1, Instructions: 477COMMON

Download Yara Rule

Strings

ios base: %i, xrefs: 0024297D

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: H_prolog3_catch
String ID: ios base: %i
API String ID: 3886170330-1055636949
Opcode ID: 1bed98e838690cf17e0f0a903a092bbf199afb1fa90032ddc1825ba6540a07cc
Instruction ID: 2b24a454b9d3939a480a185c3f9761822c332c4b07c76518722d8b5e1b98395b
Opcode Fuzzy Hash: 1bed98e838690cf17e0f0a903a092bbf199afb1fa90032ddc1825ba6540a07cc
Instruction Fuzzy Hash: A1E17732928716CBD31CDF3AC8812AEBBE5EF89320F94463EF955972D1D33589198B41

Function 00242A0F Relevance: 1.9, APIs: 1, Instructions: 384COMMON

Download Yara Rule

APIs

Part of subcall function 0024301A: __EH_prolog3_catch.LIBCMT ref: 00243021

_Deallocate.LIBCONCRT ref: 00242E06

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: DeallocateH_prolog3_catch
String ID:
API String ID: 20358830-0
Opcode ID: b205591d52042a80474cd02ee0ade2311398e6ed513a44da6cb67509e3884182
Instruction ID: 2a592274d78052707bf49a6c099fd1dedb3be5b5bd03147c4a57c962418da125
Opcode Fuzzy Hash: b205591d52042a80474cd02ee0ade2311398e6ed513a44da6cb67509e3884182
Instruction Fuzzy Hash: 85B1A332D30A1B8BC70CDD7AC9812DEBA95EB5A320F954337F925EB2D0D37549158644

Function 0025943C Relevance: 1.8, APIs: 1, Instructions: 274COMMONLIBRARYCODE

Download Yara Rule

APIs

RaiseException.KERNEL32(C000000D,00000000,00000001,?,?,00000008,?,?,00259437,?,?,00000008,?,?,00264915,00000000), ref: 00259669

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: ExceptionRaise
String ID:
API String ID: 3997070919-0
Opcode ID: ecd39c3c58b2fa3ef480ccb1e802b2aba3002949740ddcfab2bd68e1bd95b027
Instruction ID: c9ca72f253db027f97ae7b057edfbb580cc0b5272891acf04f5b83924d7b418b
Opcode Fuzzy Hash: ecd39c3c58b2fa3ef480ccb1e802b2aba3002949740ddcfab2bd68e1bd95b027
Instruction Fuzzy Hash: 49B17E31220609CFDB15CF28C486B657BE0FF45366F658658E89ACF2A1C335E9A6CB44

Function 00249B05 Relevance: 1.7, APIs: 1, Instructions: 242COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(0000000A), ref: 00249B1B

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: FeaturePresentProcessor
String ID:
API String ID: 2325560087-0
Opcode ID: 171fb774c41b5123c0737f69b81051c233bb333bc08498555cb96c121ab7cc62
Instruction ID: 7f55681bd1a0ef3fae0f85cb945f92049ad436c98e2d9381b18ed197a91c5d0c
Opcode Fuzzy Hash: 171fb774c41b5123c0737f69b81051c233bb333bc08498555cb96c121ab7cc62
Instruction Fuzzy Hash: 6EA18DB1E11605CFDB18CF55E8896AABBF0FB48314F54812AD909EB3A1D33499D5CF90

Function 0025D2FE Relevance: 1.6, APIs: 1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b235b0639c27779bc620343d29e8720f37d44510bd81982bfff96c92b42eb00b
Instruction ID: 270528c611dcebb25f5d1852a58e71059eec620b8658947a0922ac567d832c52
Opcode Fuzzy Hash: b235b0639c27779bc620343d29e8720f37d44510bd81982bfff96c92b42eb00b
Instruction Fuzzy Hash: 1D41C3B5C1421DAFDB20DF69CC89AAEBBB8EF45301F5442D9E80DD3201DA309E998F54

Function 0024FD34 Relevance: 1.6, Strings: 1, Instructions: 344COMMONLIBRARYCODE

Download Yara Rule

Strings

0, xrefs: 0024FEC2

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: b9d189e10ec5af54e9d63aa83f2ad516a46a0de35016d0ca71a12e950f3f18a3
Instruction ID: 26599f20e93884cd4d11b92af773e7d6b6793218fc3012b4ab02b262a4bc1012
Opcode Fuzzy Hash: b9d189e10ec5af54e9d63aa83f2ad516a46a0de35016d0ca71a12e950f3f18a3
Instruction Fuzzy Hash: 59C1F430A20647CFCB6CCF68C680A7EB7B1BF85311F244629D856976A2C770EC69CB55

Function 002603F5 Relevance: 1.6, APIs: 1, Instructions: 83COMMON

Download Yara Rule

APIs

Part of subcall function 00258DB3: GetLastError.KERNEL32(?,00000008,002569CC), ref: 00258DB7
Part of subcall function 00258DB3: SetLastError.KERNEL32(00000000,00270710,00000024,0024DDA3), ref: 00258E59

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00260449

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: 121a144e2bab4f660f9214bde00843517c3e19aaf7e532a5e2e80ad4a9755526
Instruction ID: 0cef915c966584bb1af864f83b343be3ea191219771291d6f8c27ee07438fd92
Opcode Fuzzy Hash: 121a144e2bab4f660f9214bde00843517c3e19aaf7e532a5e2e80ad4a9755526
Instruction Fuzzy Hash: 5E21B371561207AFDB289F65DC81ABB33A8EF44311F10407AFE05D6141EF74DDA4AB50

Function 0026007C Relevance: 1.6, APIs: 1, Instructions: 63COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00258DB3: GetLastError.KERNEL32(?,00000008,002569CC), ref: 00258DB7
Part of subcall function 00258DB3: SetLastError.KERNEL32(00000000,00270710,00000024,0024DDA3), ref: 00258E59

EnumSystemLocalesW.KERNEL32(002601A2,00000001,00000000,?,-00000050,?,002607D3,00000000,?,?,?,00000055,?), ref: 002600EE

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: 17b4957e713eb636a9e18e678b302f448db787ce4c7b03b9d2ede67eeee4ed62
Instruction ID: d371ef550f765871437cfe2b7fc310fae38433843106780620c8ca6fb20921bd
Opcode Fuzzy Hash: 17b4957e713eb636a9e18e678b302f448db787ce4c7b03b9d2ede67eeee4ed62
Instruction Fuzzy Hash: CD1129366103065FDB189F39C8D16BBB792FF80319B14442CE98647B40D7717852DB40

Function 00260624 Relevance: 1.5, APIs: 1, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 00258DB3: GetLastError.KERNEL32(?,00000008,002569CC), ref: 00258DB7
Part of subcall function 00258DB3: SetLastError.KERNEL32(00000000,00270710,00000024,0024DDA3), ref: 00258E59

GetLocaleInfoW.KERNEL32(?,20000001,?,00000002,?,00000000,?,?,002603BE,00000000,00000000,?), ref: 00260650

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: 36ec6ab8012ec32f0e8d761bc8daf7451c44a7dcb6a72dbd8f892a4d5b2ab299
Instruction ID: 958234dc8e1b6972290bb254b716fd20adf01ba6d67e9a03cca0fd6fe9e27c9a
Opcode Fuzzy Hash: 36ec6ab8012ec32f0e8d761bc8daf7451c44a7dcb6a72dbd8f892a4d5b2ab299
Instruction Fuzzy Hash: 33F0A932620116BBDB285B64C885BBB776CEB80754F154425EC06A3180EAB4FEA1DDE4

Function 00260117 Relevance: 1.5, APIs: 1, Instructions: 41COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00258DB3: GetLastError.KERNEL32(?,00000008,002569CC), ref: 00258DB7
Part of subcall function 00258DB3: SetLastError.KERNEL32(00000000,00270710,00000024,0024DDA3), ref: 00258E59

EnumSystemLocalesW.KERNEL32(002603F5,00000001,?,?,-00000050,?,00260797,-00000050,?,?,?,00000055,?,-00000050,?,?), ref: 00260161

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: 1e454b4e30082e2042b97f76e7710b362726be8deddfed0a0996c49749f4549c
Instruction ID: f7d4674ea25161e7f2aef2e7b648e52f1520b4c18095dffcd1be6ce4e4fce2c9
Opcode Fuzzy Hash: 1e454b4e30082e2042b97f76e7710b362726be8deddfed0a0996c49749f4549c
Instruction Fuzzy Hash: DCF022363143056FCB285F3898C1A7B7B90EB82368F04806CFA094B690C6B1AC91EA40

Function 00257026 Relevance: 1.5, APIs: 1, Instructions: 33COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00250E12: EnterCriticalSection.KERNEL32(?,?,00258A8B,?,002707B0,00000008,00258C4F,?,f$,?), ref: 00250E21

EnumSystemLocalesW.KERNEL32(00257019,00000001,00270750,0000000C,002573EB,00000000), ref: 0025705E

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: CriticalEnterEnumLocalesSectionSystem
String ID:
API String ID: 1272433827-0
Opcode ID: 2b16d162a3625f7b779c1ecc0fa86cbd8f53dc6b45656c4dc71092b793e78342
Instruction ID: a57305705a19c1040f0dadbd9d43a0425d09142ca95866eceaea6b82556cfd77
Opcode Fuzzy Hash: 2b16d162a3625f7b779c1ecc0fa86cbd8f53dc6b45656c4dc71092b793e78342
Instruction Fuzzy Hash: F4F08732A60304EFDB04DF98F98AB8C77E0FB44722F10852AF8009B2A1D6B949188F44

Function 00260031 Relevance: 1.5, APIs: 1, Instructions: 31COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00258DB3: GetLastError.KERNEL32(?,00000008,002569CC), ref: 00258DB7
Part of subcall function 00258DB3: SetLastError.KERNEL32(00000000,00270710,00000024,0024DDA3), ref: 00258E59

EnumSystemLocalesW.KERNEL32(0025FF8A,00000001,?,?,?,002607F5,-00000050,?,?,?,00000055,?,-00000050,?,?,00000004), ref: 00260068

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: a96b8cc14f87da6bd9f8eae641c8d879d5e0fe3d01eb14437ffdf8318c3dee06
Instruction ID: d39f80f1c6d5896ee45428bc9e41b4eebf68f6fdb1000b6f1dc2eeda292c4f26
Opcode Fuzzy Hash: a96b8cc14f87da6bd9f8eae641c8d879d5e0fe3d01eb14437ffdf8318c3dee06
Instruction Fuzzy Hash: BFF0AB3A300206A7CB089F35D94976B7FD0EFC2721F06406CFE098B690C6B59883DB90

Function 002574EF Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(00000000,?,00000000,?,-00000050,?,?,?,00255AEE,?,20001004,00000000,00000002,?,?,002550F0), ref: 00257523

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: InfoLocale
String ID:
API String ID: 2299586839-0
Opcode ID: 1bdd6bfe613e65222ed5cb1338a1386ffc0c02546cfe248cd96314fe384bc406
Instruction ID: d596bcacc3f85ddd138f21c2a508f9e845e257a27c1dcd1d3414f659a6729791
Opcode Fuzzy Hash: 1bdd6bfe613e65222ed5cb1338a1386ffc0c02546cfe248cd96314fe384bc406
Instruction Fuzzy Hash: 2EE04F355A4629BBCF122F60FC0CA9E7F19EF44762F008010FC0965221CB718935AAD9

Function 0024A212 Relevance: 1.5, APIs: 1, Instructions: 3COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32(Function_0000A21E,00249799), ref: 0024A217

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: 717b86c16bef29cda3b221de211a1acaf733739cceb2d940b7d68d7ea1f094ca
Instruction ID: 11dc3539590a5d8420715e96e9ea8fb03c1d3ece750392760ddc57b1207e5ad1
Opcode Fuzzy Hash: 717b86c16bef29cda3b221de211a1acaf733739cceb2d940b7d68d7ea1f094ca
Instruction Fuzzy Hash:

Function 0025E177 Relevance: 1.3, APIs: 1, Instructions: 5memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32 ref: 0025E177

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: HeapProcess
String ID:
API String ID: 54951025-0
Opcode ID: 9e9f5c10a2d9d63c20d1797c2bac88105824d3b5b54060e08097e20ba457c6ca
Instruction ID: f33ff108f8f8a8d9333f9b9e7d88bef5a87a9332150f2eaf28987d75bf0fe117
Opcode Fuzzy Hash: 9e9f5c10a2d9d63c20d1797c2bac88105824d3b5b54060e08097e20ba457c6ca
Instruction Fuzzy Hash: 87A00174602251CB97508F35BB0D3093AEDAA4A691B0581A9A509C6A61EB6484559B01

Function 0025F840 Relevance: .3, Instructions: 327COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: ErrorLastProcess$CurrentFeatureInfoLocalePresentProcessorTerminate
String ID:
API String ID: 3471368781-0
Opcode ID: 3030344eb2366605545b965ba6d345ff8f690204f1c3bfc172aa79822bae5469
Instruction ID: 49c63d26098e54033275569971f6811f5104b7a0c8a7aa492903b95c016b74a4
Opcode Fuzzy Hash: 3030344eb2366605545b965ba6d345ff8f690204f1c3bfc172aa79822bae5469
Instruction Fuzzy Hash: D1B106365207429BCB389F24CD92BB7B3E9EF4430AF14447DED47C6580EAB4A999CB04

Function 0024F9EC Relevance: .3, Instructions: 314COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ba923bc28fe2ac29092aa9363a8f5423b77f09e97f3fdd13ebfb712225a3662e
Instruction ID: 51f1ba88544a76ec12065e013983e41e8e15b6f05487c513d1f0b54c12590385
Opcode Fuzzy Hash: ba923bc28fe2ac29092aa9363a8f5423b77f09e97f3fdd13ebfb712225a3662e
Instruction Fuzzy Hash: 5AB1047092061B8BCFACCF68C6A16BFB7B1EF85308F14062ED856D7281C7709965CB55

Function 00242F17 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f14d64f1da07fe331bfaae95d6a1e44a8d132c8fdbbed1d03501634470bc0fb7
Instruction ID: 1de8fcb645186e603b9395b679f0426239cd7d054a819c57451a9786d81b5281
Opcode Fuzzy Hash: f14d64f1da07fe331bfaae95d6a1e44a8d132c8fdbbed1d03501634470bc0fb7
Instruction Fuzzy Hash: A1E06D7462A204D7F3089A54D49975B7AE9EBC5310F51C03DF149DB3D4CFB858189BD2

Function 0025CC6F Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c9be6b6f35371869e062396f73cb3a676a20dd67872fdeac340a7b63f963c531
Instruction ID: 7bd10a32b5bb3200adf9c0c1fd835c49b2fe580cb33009f4a02da82484c2d774
Opcode Fuzzy Hash: c9be6b6f35371869e062396f73cb3a676a20dd67872fdeac340a7b63f963c531
Instruction Fuzzy Hash: E6E08C72931238EBCB28DF88C904A8AF3ECEB44B52F210496B905D3100D270EE04CBD8

Function 00253BBE Relevance: .0, Instructions: 12COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5235bc6f45b747b251e4dee57095da2f280f55043986cdd14d68c6e044f9f23d
Instruction ID: 573f96796877d36f6b80cc27025911e68df73839d02177957a1871aa1d39ea7a
Opcode Fuzzy Hash: 5235bc6f45b747b251e4dee57095da2f280f55043986cdd14d68c6e044f9f23d
Instruction Fuzzy Hash: 26C08C78220A484ACE29DD1482B13A43354AB91BC7F90288CCC560B642C93E9D9ADA04

Function 002492CD Relevance: 14.0, APIs: 4, Strings: 4, Instructions: 19
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleW.KERNEL32(kernel32.dll), ref: 002492D3
GetProcAddress.KERNEL32(00000000,GetCurrentPackageId), ref: 002492E1
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 002492F2
GetProcAddress.KERNEL32(00000000,GetTempPath2W), ref: 00249303

Strings

kernel32.dll, xrefs: 002492CE
GetCurrentPackageId, xrefs: 002492DB
GetSystemTimePreciseAsFileTime, xrefs: 002492E7
GetTempPath2W, xrefs: 002492F8

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: GetCurrentPackageId$GetSystemTimePreciseAsFileTime$GetTempPath2W$kernel32.dll
API String ID: 667068680-1247241052
Opcode ID: 0c3ecc2308ded4a65bc1c04d5acdf5ff1d68755f5ebb0848b5a1398c40e178b7
Instruction ID: 03f96c4a7c818d17b57d9448856d494ac3ab62cf5b22b9497e9ebf07deb86659
Opcode Fuzzy Hash: 0c3ecc2308ded4a65bc1c04d5acdf5ff1d68755f5ebb0848b5a1398c40e178b7
Instruction Fuzzy Hash: 3EE0EC765A7210BBA7049FB4FC0D8863EB8BB0775670042B2F419D26A0D6F004A1CB90

Function 0024CE02 Relevance: 12.6, APIs: 3, Strings: 4, Instructions: 303
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

type_info::operator==.LIBVCRUNTIME ref: 0024CF21
___TypeMatch.LIBVCRUNTIME ref: 0024D02F
CallUnexpected.LIBVCRUNTIME ref: 0024D19C

Strings

hr&, xrefs: 0024CF18
csm, xrefs: 0024CE3F
csm, xrefs: 0024CEAC
csm, xrefs: 0024CF58

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: CallMatchTypeUnexpectedtype_info::operator==
String ID: csm$csm$csm$hr&
API String ID: 1206542248-1486902641
Opcode ID: 1f725974a3a63a791473b4895988a4e229def2c205785b9f15f9046f0b102012
Instruction ID: d4f09ef6a75695ff7c62707aa74ee986bae9f75eb188f810b4ae31bc51fd122e
Opcode Fuzzy Hash: 1f725974a3a63a791473b4895988a4e229def2c205785b9f15f9046f0b102012
Instruction Fuzzy Hash: AAB19C3192120AEFDF1DDFA8C8819AEB7B5BF14310F24415AE8096B202D370DA61CFA1

Function 0025B85E Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 298
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

, xrefs: 0025BAD7

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID:
String ID:
API String ID: 0-3907804496
Opcode ID: 762056daf24658a9a28aab463d849e8cea271f32d0f0670fcb8be9053420d44e
Instruction ID: 1fc6ce7b975aca1af345e17fe352df580289c937d985ee4eb8fe3972fec11efa
Opcode Fuzzy Hash: 762056daf24658a9a28aab463d849e8cea271f32d0f0670fcb8be9053420d44e
Instruction Fuzzy Hash: C1B11670A2024A9FDB16CF98C884BAD7BB1FF45316F144095EC01AB392C7B09D69CF68

Function 002571EF Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 74
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FreeLibrary.KERNEL32(00000000,?,00000000,00000800,00000000,F8250000,?,2270AA1E,f$,002572FC,f$,?,F8250000,00000000), ref: 002572B0

Strings

ext-ms-, xrefs: 0025725A
api-ms-, xrefs: 00257246
f$, xrefs: 002571F1

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: FreeLibrary
String ID: api-ms-$ext-ms-$f$
API String ID: 3664257935-495176632
Opcode ID: 40816619a65a743fc174448bb181d08d60b72b7f5799081e5f64ef08ee26b811
Instruction ID: a7f3a3103eba1471552234eb46105fb9584e7a03bf4aded62a3469b8a5a79352
Opcode Fuzzy Hash: 40816619a65a743fc174448bb181d08d60b72b7f5799081e5f64ef08ee26b811
Instruction Fuzzy Hash: 75212732A69212E7CB219F60BC48A5A3768BB01771F250120FD15E72D1DA70ED2CC6E4

Function 002490E3 Relevance: 12.2, APIs: 8, Instructions: 175COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000000,00000000,00000001,?,00000000,00000000,?,?,?,00000001), ref: 0024912C
__alloca_probe_16.LIBCMT ref: 00249158
MultiByteToWideChar.KERNEL32(00000001,00000001,00000000,?,00000000,00000000), ref: 00249197
LCMapStringEx.KERNEL32(?,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 002491B4
LCMapStringEx.KERNEL32(?,?,00000000,00000000,00000000,?,00000000,00000000,00000000), ref: 002491F3
__alloca_probe_16.LIBCMT ref: 00249210
LCMapStringEx.KERNEL32(?,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00249252
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,?,00000000,00000000), ref: 00249275

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: ByteCharMultiStringWide$__alloca_probe_16
String ID:
API String ID: 2040435927-0
Opcode ID: b90c1dbc4d55c8bb499c25298017ad83b53f874d64e721510a7d867008ceae4b
Instruction ID: ea94d372abd11e8940614729d0d29be02cad009cd4cbc0b970de8fc7e2e1fcc8
Opcode Fuzzy Hash: b90c1dbc4d55c8bb499c25298017ad83b53f874d64e721510a7d867008ceae4b
Instruction Fuzzy Hash: 6951A172A2021BBFDF248FA4DC49FAB7BA9EB41740F144125FD09E6150D7B19CA0CB60

Function 0024C8D0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 0024C907
___except_validate_context_record.LIBVCRUNTIME ref: 0024C90F
_ValidateLocalCookies.LIBCMT ref: 0024C998
__IsNonwritableInCurrentImage.LIBCMT ref: 0024C9C3
_ValidateLocalCookies.LIBCMT ref: 0024CA18

Strings

csm, xrefs: 0024C9AD

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 5f71af9cbcce8f5cec12d476c87f5bd9912fbe9b4454b2b62374433581e0a82e
Instruction ID: 9464499052814e3c9fbea86aa0ba4e95e57fbf1ad2a0747663da4bdf57a21c43
Opcode Fuzzy Hash: 5f71af9cbcce8f5cec12d476c87f5bd9912fbe9b4454b2b62374433581e0a82e
Instruction Fuzzy Hash: 3341E534A21219FBCF18DF6CC885AAEBBB4BF45324F248155E8199B392D731D921CF91

Function 002473C5 Relevance: 10.5, APIs: 7, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 002473CC
std::_Lockit::_Lockit.LIBCPMT ref: 002473D6
int.LIBCPMT ref: 002473ED

Part of subcall function 00241830: std::_Lockit::_Lockit.LIBCPMT ref: 00241841
Part of subcall function 00241830: std::_Lockit::~_Lockit.LIBCPMT ref: 0024185B

codecvt.LIBCPMT ref: 00247410
std::_Facet_Register.LIBCPMT ref: 00247427
std::_Lockit::~_Lockit.LIBCPMT ref: 00247447
Concurrency::cancel_current_task.LIBCPMT ref: 00247454

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_H_prolog3Registercodecvt
String ID:
API String ID: 2133458128-0
Opcode ID: dd1cb3990ae1ca20b22be18b33092d44b72467d31199331451b672c2ff5fb8c6
Instruction ID: 6d1cb01a9150fdc1d319c570a3dc82417904cba45956f4a33ddee320051152bb
Opcode Fuzzy Hash: dd1cb3990ae1ca20b22be18b33092d44b72467d31199331451b672c2ff5fb8c6
Instruction Fuzzy Hash: 2C01D2399341269BCB0DEFA4D8496BEBB75AF84320F244449E4216B2C2CF709D75CF81

Function 00244A2F Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 48COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00244A3B
int.LIBCPMT ref: 00244A4E

Part of subcall function 00241830: std::_Lockit::_Lockit.LIBCPMT ref: 00241841
Part of subcall function 00241830: std::_Lockit::~_Lockit.LIBCPMT ref: 0024185B

std::_Facet_Register.LIBCPMT ref: 00244A81
std::_Lockit::~_Lockit.LIBCPMT ref: 00244A97
Concurrency::cancel_current_task.LIBCPMT ref: 00244AA2

Strings

|d&, xrefs: 00244A35

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_Register
String ID: |d&
API String ID: 2081738530-1899389816
Opcode ID: 8c1e076666f563300e0edf763cb2967a41e00cc7810fc5a8e4ac6f0bb1a78bc3
Instruction ID: 98ecef4c67a6ffdc39ae00b7ba71e1e3f26ce9ca3af941fa74b3069a5d0eef2e
Opcode Fuzzy Hash: 8c1e076666f563300e0edf763cb2967a41e00cc7810fc5a8e4ac6f0bb1a78bc3
Instruction Fuzzy Hash: 5A012636930125ABCB1CBF54D81A99E7BACDF80760B210548F901A7381EF309E71CF80

Function 0024CA94 Relevance: 9.1, APIs: 6, Instructions: 60COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,0024CA8B,0024AD89,002469F4,2270AA1E,?,?,?,?,002652D0,000000FF), ref: 0024CAA2
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 0024CAB0
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 0024CAC9
SetLastError.KERNEL32(00000000,?,0024CA8B,0024AD89,002469F4,2270AA1E,?,?,?,?,002652D0,000000FF), ref: 0024CB1B

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: f92efc06d83ace59e27485b278b6a1c8e71992d6d64abd5372acc4230ffa24fe
Instruction ID: d1d3b998c0e84031c9fbfc935766cfedb5e7085590d88db0d4d1b776b128fec0
Opcode Fuzzy Hash: f92efc06d83ace59e27485b278b6a1c8e71992d6d64abd5372acc4230ffa24fe
Instruction Fuzzy Hash: 2401D83223A722AEEB6D2E78BC8A9662744EB017B5730023AF525511E2EF918D649580

Function 00253BE0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 42libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,2270AA1E,?,?,00000000,002654C3,000000FF,?,00253B70,00253CA0,?,00253B44,00000000), ref: 00253C15
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 00253C27
FreeLibrary.KERNEL32(00000000,?,?,00000000,002654C3,000000FF,?,00253B70,00253CA0,?,00253B44,00000000), ref: 00253C49

Strings

CorExitProcess, xrefs: 00253C1F
mscoree.dll, xrefs: 00253C0E

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: a00bd03c34a62c3693e0acac101e1db8e2dc581c943e19108876249a31f7c1bb
Instruction ID: 4988a8add8c823cd7c9d0d5fc1d2e76217828f0c3da187081af02b808f16037f
Opcode Fuzzy Hash: a00bd03c34a62c3693e0acac101e1db8e2dc581c943e19108876249a31f7c1bb
Instruction Fuzzy Hash: D801A231950669FBDB158F50EC0DFAEBBB8FB04B22F004525E811A22D0DBB49954CA90

Function 00248BAA Relevance: 7.6, APIs: 5, Instructions: 116threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 00248BBE
AcquireSRWLockExclusive.KERNEL32(00000003,?,00000002,?,002434CC,?,?), ref: 00248BDD
AcquireSRWLockExclusive.KERNEL32(00000003,00000000,00000000,?,00000002,?,002434CC,?,?), ref: 00248C0B
TryAcquireSRWLockExclusive.KERNEL32(00000003,00000000,00000000,?,00000002,?,002434CC,?,?), ref: 00248C66
TryAcquireSRWLockExclusive.KERNEL32(00000003,00000000,00000000,?,00000002,?,002434CC,?,?), ref: 00248C7D

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: AcquireExclusiveLock$CurrentThread
String ID:
API String ID: 66001078-0
Opcode ID: d31222299237658d9e4a9910af6ad1690cd6f7653dcd823f04377ef4dc90c6a7
Instruction ID: 9ee123fee2f228afe55e04480933dddb9c41927e8950e81f4f6437ed8aabe266
Opcode Fuzzy Hash: d31222299237658d9e4a9910af6ad1690cd6f7653dcd823f04377ef4dc90c6a7
Instruction Fuzzy Hash: 4E411431932A06DBCB2CDF65D4C5AAEB3F4FF08311B50492AD546D7A50EB30E9A4CB60

Function 002448F7 Relevance: 7.5, APIs: 5, Instructions: 48COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00244903
int.LIBCPMT ref: 00244916

Part of subcall function 00241830: std::_Lockit::_Lockit.LIBCPMT ref: 00241841
Part of subcall function 00241830: std::_Lockit::~_Lockit.LIBCPMT ref: 0024185B

std::_Facet_Register.LIBCPMT ref: 00244949
std::_Lockit::~_Lockit.LIBCPMT ref: 0024495F
Concurrency::cancel_current_task.LIBCPMT ref: 0024496A

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_Register
String ID:
API String ID: 2081738530-0
Opcode ID: 172ecf10bbe8c0a8ff4d527ae39ddce73efb8c7f38306da5e2856c379bafa0e1
Instruction ID: c2bf0fd11feded9ffb5716bd7d630454dc44827bbeef74092e3fc58c9d0e1666
Opcode Fuzzy Hash: 172ecf10bbe8c0a8ff4d527ae39ddce73efb8c7f38306da5e2856c379bafa0e1
Instruction Fuzzy Hash: 03012B36931115ABCB1DBF94D81599E776CDF80760B210104F90597281EF309E71DF80

Function 00244F6E Relevance: 7.5, APIs: 5, Instructions: 48COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00244F7A
int.LIBCPMT ref: 00244F8D

Part of subcall function 00241830: std::_Lockit::_Lockit.LIBCPMT ref: 00241841
Part of subcall function 00241830: std::_Lockit::~_Lockit.LIBCPMT ref: 0024185B

std::_Facet_Register.LIBCPMT ref: 00244FC0
std::_Lockit::~_Lockit.LIBCPMT ref: 00244FD6
Concurrency::cancel_current_task.LIBCPMT ref: 00244FE1

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_Register
String ID:
API String ID: 2081738530-0
Opcode ID: a1a3a6b3958f0766c1c492c30cf0472f06fb4a8204f2dbf33922743223aac79d
Instruction ID: 49e150d51525e66c943626e6e9883cc4dc28aaee371448788d7c8fd26e0b324c
Opcode Fuzzy Hash: a1a3a6b3958f0766c1c492c30cf0472f06fb4a8204f2dbf33922743223aac79d
Instruction Fuzzy Hash: A3012636930125EBCB1CBF64E80999E77ACEF80360B260509F90297690EF30DE75CB80

Function 002487C2 Relevance: 7.5, APIs: 5, Instructions: 44COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 002487C9
std::_Lockit::_Lockit.LIBCPMT ref: 002487D4
std::_Lockit::~_Lockit.LIBCPMT ref: 00248842

Part of subcall function 00248925: std::locale::_Locimp::_Locimp.LIBCPMT ref: 0024893D

std::locale::_Setgloballocale.LIBCPMT ref: 002487EF
_Yarn.LIBCPMT ref: 00248805

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: Lockitstd::_std::locale::_$H_prolog3LocimpLocimp::_Lockit::_Lockit::~_SetgloballocaleYarn
String ID:
API String ID: 1088826258-0
Opcode ID: bb1bd75688b6710a5bc46a62f15321b37e5f481c61a6007e7d24543274f1bc73
Instruction ID: 6441e086b1631129fe83842d83085e41be10bb47e0f49702a92cce6f447800e3
Opcode Fuzzy Hash: bb1bd75688b6710a5bc46a62f15321b37e5f481c61a6007e7d24543274f1bc73
Instruction Fuzzy Hash: 4501F279A225219BCB0EEF20E84957CBBB5FF85350B144048E80257382CF746E66CFC2

Function 0024DB97 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 27libraryCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(?,00000000,00000800,?,0024DB48,?,?,00000000,?,?,?,0024DC72,00000002,FlsGetValue,00267CF0,FlsGetValue), ref: 0024DBA4
GetLastError.KERNEL32(?,0024DB48,?,?,00000000,?,?,?,0024DC72,00000002,FlsGetValue,00267CF0,FlsGetValue,?,?,0024CAB5), ref: 0024DBAE
LoadLibraryExW.KERNEL32(?,00000000,00000000), ref: 0024DBD6

Strings

api-ms-, xrefs: 0024DBBB

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: LibraryLoad$ErrorLast
String ID: api-ms-
API String ID: 3177248105-2084034818
Opcode ID: 987995071b74a5172e656ecd491a954240832a2bf227c4dd54e89bb42a3d2b85
Instruction ID: e4d1ebd406743ae0286a2d4201f282affa824ba91b2461cdae2e944640745a5e
Opcode Fuzzy Hash: 987995071b74a5172e656ecd491a954240832a2bf227c4dd54e89bb42a3d2b85
Instruction Fuzzy Hash: FAE01A30294209B6EB201F61EC0EF593E5AEB00B55F104430F94DA94E1EBB198689988

Function 00259DB0 Relevance: 6.3, APIs: 4, Instructions: 338fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32(2270AA1E,00000000,00000000,7591F550), ref: 00259E13

Part of subcall function 0025CDFB: WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,00000000,?,0000FDE9,00000000,-00000008,00000000,?,0025CB79,?,00000000,-00000008), ref: 0025CEA7

WriteFile.KERNEL32(?,?,00000000,?,00000000), ref: 0025A06E
WriteFile.KERNEL32(?,?,00000001,?,00000000), ref: 0025A0B6
GetLastError.KERNEL32 ref: 0025A159

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: FileWrite$ByteCharConsoleErrorLastMultiOutputWide
String ID:
API String ID: 2112829910-0
Opcode ID: 88cb1746573414d517183984c0cc514c63d2da3a42a1710f5a4feb7bab83455c
Instruction ID: 1f88f8d217e897bd2abd5fd0b9d4bc2bea6724d050a5e55db41f0b9e569426d9
Opcode Fuzzy Hash: 88cb1746573414d517183984c0cc514c63d2da3a42a1710f5a4feb7bab83455c
Instruction Fuzzy Hash: 03D17A75E102489FCF15CFA8D881AADBBB5FF08305F18826AE855EB351D730A859CF54

Function 0024CBAB Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 0024CC72
___AdjustPointer.LIBCMT ref: 0024CC95
___AdjustPointer.LIBCMT ref: 0024CD31

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: 23244c8dbac44482aeeb4756e126f419573a7d5346c9faefed5f694529ad0464
Instruction ID: 0d0c93a881ce54e4e6fdd77be538bce0c69cf6dd6fe2369b7a8d66211adc00ab
Opcode Fuzzy Hash: 23244c8dbac44482aeeb4756e126f419573a7d5346c9faefed5f694529ad0464
Instruction Fuzzy Hash: EC51E475A26606DFDB6D8F58D885BBA77A4FF00314F34412EE80987691E771ECA0CB90

Function 0025D0BB Relevance: 6.1, APIs: 4, Instructions: 82COMMON

Download Yara Rule

APIs

Part of subcall function 0025CDFB: WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,00000000,?,0000FDE9,00000000,-00000008,00000000,?,0025CB79,?,00000000,-00000008), ref: 0025CEA7

GetLastError.KERNEL32 ref: 0025D11F
__dosmaperr.LIBCMT ref: 0025D126
GetLastError.KERNEL32(?,?,?,?), ref: 0025D160
__dosmaperr.LIBCMT ref: 0025D167

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: ErrorLast__dosmaperr$ByteCharMultiWide
String ID:
API String ID: 1913693674-0
Opcode ID: 58aade5df2e4d4f91f220d4fb1f4e53aa045022ef4feb03959f4c1bc44001659
Instruction ID: 1e9e2952b184bf7ac9a940a336680856cc10655dca787495ac206b67b4fa0aeb
Opcode Fuzzy Hash: 58aade5df2e4d4f91f220d4fb1f4e53aa045022ef4feb03959f4c1bc44001659
Instruction Fuzzy Hash: 1121B371220606AF9B30AF658C8092BB7A9FF053A6710C819FD29D7251DB70EC78CB94

Function 002532F6 Relevance: 6.1, APIs: 4, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bc6948813c97b0c1ed85cb4790d8689220969864f31ce85efac72f4c30284164
Instruction ID: 2c76f58d5db6a385d180fada9ca8ad288c912da1c5ef2184312b04c6fe9ea998
Opcode Fuzzy Hash: bc6948813c97b0c1ed85cb4790d8689220969864f31ce85efac72f4c30284164
Instruction Fuzzy Hash: F621BE31620206BF9B21EFA5DC4096AB7A9BF003A67109565FC15D7141DF70EE388BA8

Function 0025E06A Relevance: 6.1, APIs: 4, Instructions: 74COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32 ref: 0025E072

Part of subcall function 0025CDFB: WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,00000000,?,0000FDE9,00000000,-00000008,00000000,?,0025CB79,?,00000000,-00000008), ref: 0025CEA7

FreeEnvironmentStringsW.KERNEL32(00000000), ref: 0025E0AA
FreeEnvironmentStringsW.KERNEL32(00000000), ref: 0025E0CA

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: EnvironmentStrings$Free$ByteCharMultiWide
String ID:
API String ID: 158306478-0
Opcode ID: db0974261bb4a7709fce446c0120c772f22f35745e9487c921c84d910eb256c4
Instruction ID: e3aab9305d9296d869a87de9acd72937fcc8b8a533a01f36238e0f860b795310
Opcode Fuzzy Hash: db0974261bb4a7709fce446c0120c772f22f35745e9487c921c84d910eb256c4
Instruction Fuzzy Hash: 781108B29255167F6A2527726C8DC7F296CDE453967110024FC06E2241FEF0DE2445B9

Function 00263966 Relevance: 6.0, APIs: 4, Instructions: 29COMMONLIBRARYCODE

Download Yara Rule

APIs

WriteConsoleW.KERNEL32(00000000,0000000C,00000000,00000000,00000000,?,00262877,00000000,00000001,00000000,7591F550,?,0025A1AD,7591F550,00000000,00000000), ref: 0026397D
GetLastError.KERNEL32(?,00262877,00000000,00000001,00000000,7591F550,?,0025A1AD,7591F550,00000000,00000000,7591F550,7591F550,?,0025A734,00000000), ref: 00263989

Part of subcall function 0026394F: CloseHandle.KERNEL32(FFFFFFFE,00263999,?,00262877,00000000,00000001,00000000,7591F550,?,0025A1AD,7591F550,00000000,00000000,7591F550,7591F550), ref: 0026395F

___initconout.LIBCMT ref: 00263999

Part of subcall function 00263911: CreateFileW.KERNEL32(CONOUT$,40000000,00000003,00000000,00000003,00000000,00000000,00263940,00262864,7591F550,?,0025A1AD,7591F550,00000000,00000000,7591F550), ref: 00263924

WriteConsoleW.KERNEL32(00000000,0000000C,00000000,00000000,?,00262877,00000000,00000001,00000000,7591F550,?,0025A1AD,7591F550,00000000,00000000,7591F550), ref: 002639AE

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast___initconout
String ID:
API String ID: 2744216297-0
Opcode ID: a6fabfc8cb82812bcfda62241f5bc1d85060b9eecb76cc7b1c3bfb6811ab7097
Instruction ID: 55de83a85960b18f49d48f04e96cfc26a7189570cb08bfe6ed31014943c0d7d5
Opcode Fuzzy Hash: a6fabfc8cb82812bcfda62241f5bc1d85060b9eecb76cc7b1c3bfb6811ab7097
Instruction Fuzzy Hash: B7F01C36011125BBCF225FD5EC0CA8A7F66FB197B1F014451FA1995231CA728974DF90

Function 0024D1A7 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 112COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32(00000000,?), ref: 0024D1CC

Strings

MOC, xrefs: 0024D1DE
RCC, xrefs: 0024D1E6

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: EncodePointer
String ID: MOC$RCC
API String ID: 2118026453-2084237596
Opcode ID: f9a1ea44ab77c497136ff68f272603d35148825bc5485c294fd9b87715535d39
Instruction ID: 0a661574db97090765bcb609ec786fd482e8596ae9830ecebd165a29203e664b
Opcode Fuzzy Hash: f9a1ea44ab77c497136ff68f272603d35148825bc5485c294fd9b87715535d39
Instruction Fuzzy Hash: 4B41487191020AAFDF1ADFA8CC81AEEBBB5BF48304F188159F905A6222D375D960DF51

Function 00246AB5 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 73COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00246B3D
RaiseException.KERNEL32(?,?,?,?,?), ref: 00246B62

Part of subcall function 0024AD9B: RaiseException.KERNEL32(E06D7363,00000001,00000003,00241365,?,?,?,?,00241365,?,00270B30), ref: 0024ADFB

Part of subcall function 0024DD93: IsProcessorFeaturePresent.KERNEL32(00000017,0024F12B,?,?,?,?,00000000,002508D9,?,?,?), ref: 0024DDAF

Strings

csm, xrefs: 00246AF1

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: ExceptionRaise$FeaturePresentProcessor__alloca_probe_16
String ID: csm
API String ID: 1924019822-1018135373
Opcode ID: 3cffffe16b771a3269a8b426c638cff283ed4695bc8863b87df8f676588dc67c
Instruction ID: 682b4b40244f6ffc2970b07c4da0f2a15b60e0870ac668b66cb590e141a7fe82
Opcode Fuzzy Hash: 3cffffe16b771a3269a8b426c638cff283ed4695bc8863b87df8f676588dc67c
Instruction Fuzzy Hash: DD219D31E10219EBCF29DF95D949AEEB7B8EF01719F140419E809BB250CB30AD65CB82

Function 0024301A Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 70COMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 00243021

Part of subcall function 00244A2F: std::_Lockit::_Lockit.LIBCPMT ref: 00244A3B
Part of subcall function 00244A2F: int.LIBCPMT ref: 00244A4E
Part of subcall function 00244A2F: std::_Lockit::~_Lockit.LIBCPMT ref: 00244A97

Strings

|d&, xrefs: 0024302B, 00243030, 00243043, 00243073, 002430FE
xd&, xrefs: 002430A0

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: Lockitstd::_$H_prolog3_catchLockit::_Lockit::~_
String ID: xd&$|d&
API String ID: 1693569656-1042830553
Opcode ID: decce30914b6a4916e021417271908259543416f4aa687beafc10f1971a9c197
Instruction ID: 21da2983325bb2e86bb4332eb412009bf5bae0f49d964e038c08bd8469d66158
Opcode Fuzzy Hash: decce30914b6a4916e021417271908259543416f4aa687beafc10f1971a9c197
Instruction Fuzzy Hash: D921A035E11204DFDB08DFA8C995EAEBBF4AF48310F248199F109AB292C7309D52CF50

Function 00241C1C Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 38COMMON

Download Yara Rule

APIs

InitOnceBeginInitialize.KERNEL32(00282678,00000000,?,00000000), ref: 00241C30
InitOnceComplete.KERNEL32(00282678,00000000,00000000), ref: 00241C47

Strings

p&(, xrefs: 00241C51

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: InitOnce$BeginCompleteInitialize
String ID: p&(
API String ID: 51270584-1574673052
Opcode ID: 1ae90b093e228b646e7e9a18751976cb2f7d8e2a795d16a98635ddd23d83d335
Instruction ID: 5ecc0d4d71ec2a92f8d081ee073f283f0bd9cd9a22e78e28902c2def41f60f3a
Opcode Fuzzy Hash: 1ae90b093e228b646e7e9a18751976cb2f7d8e2a795d16a98635ddd23d83d335
Instruction Fuzzy Hash: 0DF08931622122FFDF286F52EC4DDBF3B6DDF45B91B040065F505D2001D660D960D6B2

Function 0024175B Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 33COMMONLIBRARYCODE

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00241762
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 0024179A

Part of subcall function 002488C0: _Yarn.LIBCPMT ref: 002488DF
Part of subcall function 002488C0: _Yarn.LIBCPMT ref: 00248903

Strings

bad locale name, xrefs: 002417A8

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: Yarnstd::_$Locinfo::_Locinfo_ctorLockitLockit::_
String ID: bad locale name
API String ID: 1908188788-1405518554
Opcode ID: da7f7a12943075270636855fadf96582ece989e9205f320dfe9f2730d23e97db
Instruction ID: 12ce2834aa8bc0809844214ea8eecf1f7def0820715b8e8a4b299a98541ffcf4
Opcode Fuzzy Hash: da7f7a12943075270636855fadf96582ece989e9205f320dfe9f2730d23e97db
Instruction Fuzzy Hash: B6F0177195AB809E8334DF6A9481447FBE4BE292113908A2FE1DEC3A11D770A458CF6A

Function 00241000 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 19COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00241007

Strings

,b&, xrefs: 0024100C, 0024101F
\b&, xrefs: 00241011

Memory Dump Source

Source File: 00000000.00000002.2618514574.0000000000241000.00000020.00000001.01000000.00000003.sdmp, Offset: 00240000, based on PE: true

Associated: 00000000.00000002.2618491106.0000000000240000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618544554.0000000000266000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618608036.0000000000272000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618637745.0000000000280000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618843428.0000000000281000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618903057.0000000000283000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2618922135.0000000000287000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_240000_qBtDOzhQnS.jbxd

Similarity

API ID: H_prolog3
String ID: ,b&$\b&
API String ID: 431132790-1375509254
Opcode ID: c600b528928012028e06500dcb1d679a6696fbe62c52d3b5c1aa846000cd6946
Instruction ID: aa90969e8db3c48dbb459aa2cee848c7a7d4051c1b5f1fbbb6d5d6fb63846bdd
Opcode Fuzzy Hash: c600b528928012028e06500dcb1d679a6696fbe62c52d3b5c1aa846000cd6946
Instruction Fuzzy Hash: 71E01AB0971216DADB08EBA0890A79D7965BB12714F508588E1146A3C1D7F606BCCB32

Analysis Process: MSBuild.exePID: 1436, Parent PID: 1440COMMON

Executed Functions

Function 01010848 Relevance: 10.0, Strings: 6, Instructions: 2507COMMON

Download Yara Rule

Strings

>%kl, xrefs: 0101192D
K$S , xrefs: 01010A78
tmB, xrefs: 01012F70
b6K, xrefs: 010108C4
;(:, xrefs: 01010959
K(:, xrefs: 0101099F

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID: ;(:$>%kl$K$S $K(:$b6K$tmB
API String ID: 0-3814818819
Opcode ID: 308757f040388e60d3ac912f270e998b225ca93ae6199cb4edecc430c9112a99
Instruction ID: d4637a5312bf61c0360c78878b97c60216cfc3fb94ca8a7a56791470c433b39e
Opcode Fuzzy Hash: 308757f040388e60d3ac912f270e998b225ca93ae6199cb4edecc430c9112a99
Instruction Fuzzy Hash: B553AE74E002199FCB65CF68C984A9DBBF5BB48304F1481EAE859EB355E734AE85CF40

Function 010142E8 Relevance: 9.4, Strings: 5, Instructions: 3156COMMON

Download Yara Rule

Strings

uZD, xrefs: 010153E5
6I(k, xrefs: 01014484
7qs, xrefs: 01014D3C
H, xrefs: 01015716
qul}, xrefs: 010144D1

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID: 6I(k$7qs$qul}$uZD$H
API String ID: 0-2913260691
Opcode ID: f530f36ae3b78cf4d362f6e518180b71570f3655d895588c47f613c119d4c56e
Instruction ID: 7bbde04cf267ae50b55ae2643b1db467ebed4607ae71c21836e3fd480a53f027
Opcode Fuzzy Hash: f530f36ae3b78cf4d362f6e518180b71570f3655d895588c47f613c119d4c56e
Instruction Fuzzy Hash: FE73A074E006199FCBA4CF68C984A9DBBF5BB49304F1481EAE859E7355E734AE81CF40

Function 010142C8 Relevance: 5.7, Strings: 3, Instructions: 1918COMMON

Download Yara Rule

Strings

uZD, xrefs: 010153E5
6I(k, xrefs: 010145A4
qul}, xrefs: 010144D1

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID: 6I(k$qul}$uZD
API String ID: 0-2795441010
Opcode ID: 9ff70e2051332f717a0cb4ef681df784242cdfb309bb81815209153a21f7ae91
Instruction ID: 5ae530bd07fca74f8f4be907d9cc25e9865b7fb61bb69887ece9b3e05e6fae7f
Opcode Fuzzy Hash: 9ff70e2051332f717a0cb4ef681df784242cdfb309bb81815209153a21f7ae91
Instruction Fuzzy Hash: 38239F74E006199FCB54CF69C984A9DBBF5EB48304F1481EAE858EB355E734AA86CF40

Function 010107BA Relevance: 5.4, Strings: 4, Instructions: 370COMMON

Download Yara Rule

Strings

K$S , xrefs: 01010A78
b6K, xrefs: 010108C4
;(:, xrefs: 01010959
K(:, xrefs: 0101099F

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID: ;(:$K$S $K(:$b6K
API String ID: 0-896138553
Opcode ID: 88e6e2e3d5932c0dc54666137b3ce517a19e0a4c7b356749c34ea676395b7f8b
Instruction ID: dafc6624ab8f72de10a608d76bfee5d6945feeb45f7b02d0afb93b062f2aa54f
Opcode Fuzzy Hash: 88e6e2e3d5932c0dc54666137b3ce517a19e0a4c7b356749c34ea676395b7f8b
Instruction Fuzzy Hash: 9FF10474E002498FCB44DFA8C58499DBBF2EF49304F5581AAE445EB36AEB34E946CB41

Function 010107E0 Relevance: 5.4, Strings: 4, Instructions: 366COMMON

Download Yara Rule

Strings

K$S , xrefs: 01010A78
b6K, xrefs: 010108C4
;(:, xrefs: 01010959
K(:, xrefs: 0101099F

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID: ;(:$K$S $K(:$b6K
API String ID: 0-896138553
Opcode ID: 7a6020287107a63fae16f392481b1fafaaedd0fb167f59eddf20ed3915504ea4
Instruction ID: 5f74fecf18ccf7d4c8b110f58754471ab7a4b57ac6d34a78f9c62655d101a279
Opcode Fuzzy Hash: 7a6020287107a63fae16f392481b1fafaaedd0fb167f59eddf20ed3915504ea4
Instruction Fuzzy Hash: 01F10475E002498FCB44DFA8C58499DBBF2EF48304F6581AAE445EB369EB34E946CF41

Function 01019A30 Relevance: 4.6, Strings: 3, Instructions: 894COMMON

Download Yara Rule

Strings

E"W, xrefs: 0101A327
(jgA, xrefs: 01019C51
g2%, xrefs: 01019FA7

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID: (jgA$E"W$g2%
API String ID: 0-2601187164
Opcode ID: beb6d39d8cac0b7ba6ce183e22fab1a57442c7bbdeaa4e7783def6a4bec293af
Instruction ID: 29d6138d262405fa1d9b8549b49edec5e4d630b8006f74b1d2a63a82609dc024
Opcode Fuzzy Hash: beb6d39d8cac0b7ba6ce183e22fab1a57442c7bbdeaa4e7783def6a4bec293af
Instruction Fuzzy Hash: F492D274E01259CFCB64CFA9C984A9DBBF1BF88300F1485AAE459E7355E734AA81CF50

Function 01013108 Relevance: 1.6, Strings: 1, Instructions: 307COMMON

Download Yara Rule

Strings

-x, xrefs: 010131A5

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID: -x
API String ID: 0-1059959070
Opcode ID: ffd6a7ecaf249239b46dcb6f1d56bb50642532c264090eb85a2214e883c44ba2
Instruction ID: ab6ed81f6f904b0658162b8131252fce1e933af45a686d385cdefecb45b813e0
Opcode Fuzzy Hash: ffd6a7ecaf249239b46dcb6f1d56bb50642532c264090eb85a2214e883c44ba2
Instruction Fuzzy Hash: 49D1E275E0060A9FCB14DFA8D984A9DBBF2FB48350F14856AE419EB399D734E942CF40

Function 01013A49 Relevance: .6, Instructions: 568COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6ddd52c2fa997974cb38e4ff6763b0cd947e4d34359dfbc56e9824520b651e5d
Instruction ID: 9ad86c2e6f591b532f38c9a01ca38cda6b7133f2953ca74bbde1fa1ef9d5811c
Opcode Fuzzy Hash: 6ddd52c2fa997974cb38e4ff6763b0cd947e4d34359dfbc56e9824520b651e5d
Instruction Fuzzy Hash: 3642D835A006468FCB05DFACD88499CBBB1FF88314B598655E415EB3A6CB34ED86CF84

Function 01018488 Relevance: .5, Instructions: 458COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 40380ef6a72832715f39ad9934f75d07312ff20c2bf6fc39f2939ae9ba60d610
Instruction ID: 9936e359f07b7fbcf9bb8c088e537a257bb12837d1b829dc355ae58064c4d816
Opcode Fuzzy Hash: 40380ef6a72832715f39ad9934f75d07312ff20c2bf6fc39f2939ae9ba60d610
Instruction Fuzzy Hash: E3717D31A006028FCB15DF6CD880999BBB1FF84314B19C75AD055DB3AACB34ED86CB84

Function 01018A3C Relevance: .4, Instructions: 444COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 13c392906d3ff02dfeb79553bff6947e8ef4be2fe8c95879412e2e49028f7e56
Instruction ID: 72643e901d291b727f61caf4219e9582b3237ac128271986262d72d6061a2dd7
Opcode Fuzzy Hash: 13c392906d3ff02dfeb79553bff6947e8ef4be2fe8c95879412e2e49028f7e56
Instruction Fuzzy Hash: 8E21AF31D05249EFCB0AEBA8DA915DDBFF2AF8A310F1481A7E401E7265CA315E15CB61

Function 0101898D Relevance: .4, Instructions: 422COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 078fffb34234877430dc173cd2641e582b28eee4b0e80fc738ccffb13e8f7fc4
Instruction ID: 4c618ebca1b343a240ebfd389b0ef6407a406675924aad62ab0f309b8f0ac021
Opcode Fuzzy Hash: 078fffb34234877430dc173cd2641e582b28eee4b0e80fc738ccffb13e8f7fc4
Instruction Fuzzy Hash: E221D2319052449FCB0AEBA8DA505DDBFF6EF8A310F1085A7E441A725AC6315E058761

Function 01018A25 Relevance: .4, Instructions: 402COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 977459ff7073c94df4f9d2f4415f038a2582d8485e18e851113d154e448b852f
Instruction ID: c6d7d412c4c06f0c4ea2e63595dbf5c02334ac7f0d62a0df41b0e22c3a68277f
Opcode Fuzzy Hash: 977459ff7073c94df4f9d2f4415f038a2582d8485e18e851113d154e448b852f
Instruction Fuzzy Hash: 4521B231D05249EFCB06EFA8D9545DDBFF2AF8A310F1481A7E401E7265D6315E05CB61

Function 01019078 Relevance: .4, Instructions: 374COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9dd2d31cceb5bcb6a6342bd3403117d2e6c9ca6d9bd08661eb66f41b606a9602
Instruction ID: 4edb3266f5544dbf4f0805a349b9d7934e5612a762adbc08e3080a575e5d26aa
Opcode Fuzzy Hash: 9dd2d31cceb5bcb6a6342bd3403117d2e6c9ca6d9bd08661eb66f41b606a9602
Instruction Fuzzy Hash: 36E17D71A002058FDB14CF98D894AADBBF1FB89304F15856AD489EB395DB38E946CF40

Function 010195B9 Relevance: .3, Instructions: 251COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0622f96d24c6960fbcf7bce3cc461fac5952a2d369d830406f62aaf1103d7c66
Instruction ID: 9bffc9fbd235cc6c1b3334029ec6fc9fae68cf8715e1d007ce04a6deadfb6df5
Opcode Fuzzy Hash: 0622f96d24c6960fbcf7bce3cc461fac5952a2d369d830406f62aaf1103d7c66
Instruction Fuzzy Hash: 4DA18D71A006068FCB15DF6CD89099DB7B2FF84314B198669E059DB3AADB34ED82CB44

Function 01013680 Relevance: .2, Instructions: 188COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 179f31f4fcdb69ec7979c675b4c5d05d3d1e319e03be657b14260f217b4a48dd
Instruction ID: 2154fd5e03faf95c295180ba0da2f011ce156b14606dfaf7a2191a04eb340683
Opcode Fuzzy Hash: 179f31f4fcdb69ec7979c675b4c5d05d3d1e319e03be657b14260f217b4a48dd
Instruction Fuzzy Hash: 6081C171A006428FDB19DF6CD88499DFBF2FF883107148659D452EB2AAD734ED86CB90

Function 0101A915 Relevance: .1, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7eb0f70d6831eee83eb7fe7dd389160b659bcf44556c87064faed0a3e65cb55f
Instruction ID: 2125f1c80fdf6cf796f794c6cdab49c635dd62e73fd0bf19665568b2a7b81962
Opcode Fuzzy Hash: 7eb0f70d6831eee83eb7fe7dd389160b659bcf44556c87064faed0a3e65cb55f
Instruction Fuzzy Hash: 9E518AB1E01288DFDB14CFA9D854BEDBFF5BF48304F14806AE488AB254D7795986CB50

Function 0101A770 Relevance: .1, Instructions: 128COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9e028fa3d40fcff7540d2276a3e5b3f27312c7c4eec523fbe1b0b9c201786149
Instruction ID: 1b0b7ff31a2e7e2babe945640c86383074a1290114fe5366f6e0afa40a94cc92
Opcode Fuzzy Hash: 9e028fa3d40fcff7540d2276a3e5b3f27312c7c4eec523fbe1b0b9c201786149
Instruction Fuzzy Hash: DA514971E01258CFDB54CFA9D9407DEBBF5FF48310F14812AE899AB258DB789842CB91

Function 0101A764 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 935cb974955b8afa416c4fd80e178550217336d2b2c8250183d2730fe1e296d3
Instruction ID: f29b75c3487f06c5b18ad07d1fc54011a868f55e021a2e2a20e6613412a8d14e
Opcode Fuzzy Hash: 935cb974955b8afa416c4fd80e178550217336d2b2c8250183d2730fe1e296d3
Instruction Fuzzy Hash: 15415C70E01249DFDB14CFA9D9807DEBBF1BF48300F14812AE889EB254D7789846CB91

Function 0101A424 Relevance: .1, Instructions: 93COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 329bd7bef347767b2271d57ef935ac7aa6ba2aa122010205df49308c0f4d0436
Instruction ID: 2d8f08a5d80999cda6eb2b5cdc0e8b4503891e8bf95280412d4f5c892dd4779d
Opcode Fuzzy Hash: 329bd7bef347767b2271d57ef935ac7aa6ba2aa122010205df49308c0f4d0436
Instruction Fuzzy Hash: 6431E831B056468FC701DB78D8949AABBF2EFC5300B15C266D449C72AAEF34E846CB51

Function 010130F8 Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7102f81ac1002c5eaa12a17f3585fc36ca85ebee2295d444dcebb8d0de39384
Instruction ID: a50bc36d824933050cdb878f847493967ac0f4e1235ba2e90bdbfcaf1492ded6
Opcode Fuzzy Hash: b7102f81ac1002c5eaa12a17f3585fc36ca85ebee2295d444dcebb8d0de39384
Instruction Fuzzy Hash: 4B317A74A041058FDB45DBACD995AADBBF6FB48300F14C06AD815EB399DB38EA02CF50

Function 01018E70 Relevance: .1, Instructions: 88COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e308f21f4a9b5a605dd943b7f59d9d2eef7cd237291f36e3603339a78177c4b5
Instruction ID: 5db0fb8f9f4073927f03c4fe55d0691bbdd1e76fe8ea0e94b164f71eda3b6df7
Opcode Fuzzy Hash: e308f21f4a9b5a605dd943b7f59d9d2eef7cd237291f36e3603339a78177c4b5
Instruction Fuzzy Hash: 12313931E04245DFCF06EBB8D9915DEBFF29F89300F0485ABD441A7266CA351E45CB51

Function 01013938 Relevance: .1, Instructions: 85COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21c9d1d13beabd5182e70c718fe775e4ad0c7293ca9f15a0b4fa116856b6ffd8
Instruction ID: 2e730bb9bded17c8692ffdb44ba27074a3b09a2bb7ac4bd48503d28d6666d334
Opcode Fuzzy Hash: 21c9d1d13beabd5182e70c718fe775e4ad0c7293ca9f15a0b4fa116856b6ffd8
Instruction Fuzzy Hash: 9931D931D002498FCF05DF68D884DEEFBB5EF44320F15C66AD411AB291DB74690ACB91

Function 0101A920 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 37660a1b10485ef44af7239d917388494c815baa03889469de704686e9d3fff3
Instruction ID: 65cbda0f022205a8ec439fac06fcadd82aab7c864e1daac11a0a93fbd1620c63
Opcode Fuzzy Hash: 37660a1b10485ef44af7239d917388494c815baa03889469de704686e9d3fff3
Instruction Fuzzy Hash: 253126B5E01258DFDB14CFA9D980ADEBFF5BF48310F10802AE445B7244CB38A841CB90

Function 01012FD3 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bd02138ae798e4942d65fc7a84064e9f7e100bed62f6082b9a308089bbe5c49d
Instruction ID: 9ebf6797e10fea1887bfdcb716e23b304b05ecaef56143e27c25f01432140477
Opcode Fuzzy Hash: bd02138ae798e4942d65fc7a84064e9f7e100bed62f6082b9a308089bbe5c49d
Instruction Fuzzy Hash: E311333660424A8FCB06CB68C8545ECBF71FF82324F1542AAC041AB1E2DB35695BCB80

Function 01018D38 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5590c5e81d9dff2dfc9d0c18733d841ac537be03ea5a50e1dbe287ca42e035f7
Instruction ID: 7ba9257998fecbdf95894dc4e79e2da7643d43af048587755d5a85479c92becc
Opcode Fuzzy Hash: 5590c5e81d9dff2dfc9d0c18733d841ac537be03ea5a50e1dbe287ca42e035f7
Instruction Fuzzy Hash: 01219331E01249DFCF09EFB9DA505DEBFF6AF89310F108167D401A7269DA315D058B61

Function 0101949A Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 93dd6005b52e1c7878fbe97373e7ab966cde5db1fcba6f5cc64eaac17286d744
Instruction ID: d47bae033d45e154448662b61d58f4e6179f3eca54ecde9f67d8a12711223d20
Opcode Fuzzy Hash: 93dd6005b52e1c7878fbe97373e7ab966cde5db1fcba6f5cc64eaac17286d744
Instruction Fuzzy Hash: C51194319043858FCB02CF68D8D48DDBFB0EF46324B5946AAD051EB1E2D7749D0ACB50

Function 0101392A Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 92aded760cb936e212e9a5eb9e527172da6d065cbd0f95507cb996760a533c09
Instruction ID: de2042c60a81e51dff86607bb2fc14cc9a30b8f798afa0494a1b718065001206
Opcode Fuzzy Hash: 92aded760cb936e212e9a5eb9e527172da6d065cbd0f95507cb996760a533c09
Instruction Fuzzy Hash: 70115E319002498FCB05CFA8E8809DDFBB1EB45320F15826AD461AB295DB74A95ACF94

Function 00CDD035 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2094562403.0000000000CDD000.00000040.00000800.00020000.00000000.sdmp, Offset: 00CDD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_cdd000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a5259ee33637455f42ac987898bfc87a59ab91d2e44a434ead61b8f8d7ebbab7
Instruction ID: bd36fb8c73778d833fc89e686726049122ccc8b944265f862c9e301daf414a0c
Opcode Fuzzy Hash: a5259ee33637455f42ac987898bfc87a59ab91d2e44a434ead61b8f8d7ebbab7
Instruction Fuzzy Hash: 1901A7715043449AE7209A26C984B67BF9CEFC5320F18C46BEE1A0A386C779AC42CA71

Function 010194B8 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9c32cbc2e0bfd8d1e430142fb4401984233335cc5f5d2596b710e21dfcc7042d
Instruction ID: ab761315e0f801537e2a20756d8c5a3e060de936a83064f85360160c52b477f5
Opcode Fuzzy Hash: 9c32cbc2e0bfd8d1e430142fb4401984233335cc5f5d2596b710e21dfcc7042d
Instruction Fuzzy Hash: 3F01BC31D0020ACFCF04CF98E8C08DDB7B4EB84324B158666E125AB2D0DB34A90ACB94

Function 00CDD034 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2094562403.0000000000CDD000.00000040.00000800.00020000.00000000.sdmp, Offset: 00CDD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_cdd000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f35a0bd7cbe269429e84427e23dbf87ca478210801c3698cde27291252adce5
Instruction ID: 28f994e9e10bfab567b3ddb59fde76fb33e71269e155b17cab0e89472ca0ea24
Opcode Fuzzy Hash: 6f35a0bd7cbe269429e84427e23dbf87ca478210801c3698cde27291252adce5
Instruction Fuzzy Hash: 2BF0C2724043449AE7208E16C884B66FFD8EF91324F18C45BEE490E286C379AC41CA70

Function 01018E18 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f0b6b350e2e79bec4465642d34123b1e448dbc735bf092839b07d6543e94f0f3
Instruction ID: c6e2b618a462811ede098893bbd848e8abc059e724b6caa352db5ffe49603ed7
Opcode Fuzzy Hash: f0b6b350e2e79bec4465642d34123b1e448dbc735bf092839b07d6543e94f0f3
Instruction Fuzzy Hash: D3F02E328493516FC7036778DC419DABFA4DF03320706419FE8C4871A3C7285D85C785

Function 01010D40 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 203f6acf436a4aaeec7127c602b060fde18c78d31bbd5400e04b5cfe6528d77f
Instruction ID: 45293146e0a3c3df9ce62399b8e815359c747d3d4c90ce7eee127e7b113ce4a9
Opcode Fuzzy Hash: 203f6acf436a4aaeec7127c602b060fde18c78d31bbd5400e04b5cfe6528d77f
Instruction Fuzzy Hash: 9DF0E037904125AFCB15DFECE8808DDFFA1EB40314B1681AAD445D7591CB31AD82CBC0

Function 01019468 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.2095661406.0000000001010000.00000040.00000800.00020000.00000000.sdmp, Offset: 01010000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_1010000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ce86d9d845a1f25062956fb24192db720332e0ad7ea43060f376ee62ff10628d
Instruction ID: fb612d318b796c0636dce16fd1b3655bb80d051768050ab15296045491ded7d7
Opcode Fuzzy Hash: ce86d9d845a1f25062956fb24192db720332e0ad7ea43060f376ee62ff10628d
Instruction Fuzzy Hash: 82C04C31441018DBE7359768E838F987B71AB44306F50D895D145D2165CF3459C0DF32

Analysis Process: Honda.exePID: 3228, Parent PID: 1436COMMON

Executed Functions

Function 01951CC0 Relevance: 6.7, Strings: 5, Instructions: 475COMMON

Download Yara Rule

Strings

$]q, xrefs: 01951D1A
LR]q, xrefs: 0195213F
$]q, xrefs: 01951D0E
LR]q, xrefs: 01951EDF
", xrefs: 01951F97

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID: "$LR]q$LR]q$$]q$$]q
API String ID: 0-4274975949
Opcode ID: 26cd130d23a0114d47fe681435406a542ceb7019652d22e00ebceb84789aa559
Instruction ID: e1121292ad6f42d7e20f4771c1571f9caafea77c5d9ebd8c40e28f49a9fcdcd2
Opcode Fuzzy Hash: 26cd130d23a0114d47fe681435406a542ceb7019652d22e00ebceb84789aa559
Instruction Fuzzy Hash: 5A02AF34B00106CFCB59CF68D884AAEBBB6FF89311F148569D919EB291DB34DD42CB91

Function 01952788 Relevance: 2.0, Instructions: 2012COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5b59b5f2e9a2f7958600637e8d2da086b7e9d51be4d0ea7a315d398120aca1b0
Instruction ID: ab0074f93b07b437f81a30e6437b7c31d594bf1abce83cd11771ee5e34f024d3
Opcode Fuzzy Hash: 5b59b5f2e9a2f7958600637e8d2da086b7e9d51be4d0ea7a315d398120aca1b0
Instruction Fuzzy Hash: 0F03F030A00309DFD726CF68DD48B99B7BAFF89700F118595E8086B2A5DB71AE85CF51

Function 01955A41 Relevance: 1.7, Strings: 1, Instructions: 444COMMON

Download Yara Rule

Strings

$]q, xrefs: 01955A71

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID: $]q
API String ID: 0-1007455737
Opcode ID: 2a8e2bad96f6ca4a5271e5c01a72ea0ad3de05b882bf618c8673252fc9fc2bb0
Instruction ID: d30b6c27c39fb8e9cee6e16249073849c1918b187565b8721be8879c9954be2b
Opcode Fuzzy Hash: 2a8e2bad96f6ca4a5271e5c01a72ea0ad3de05b882bf618c8673252fc9fc2bb0
Instruction Fuzzy Hash: 4FF1AF30B002059FEB64CF68D948B6ABBF6AF84705F158429D909AB296DB35EC46CB50

Function 01951993 Relevance: 2.7, Strings: 2, Instructions: 171COMMON

Download Yara Rule

Strings

(aq, xrefs: 01951AD3
tP]q, xrefs: 01951C43

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID: (aq$tP]q
API String ID: 0-840380033
Opcode ID: 4c3df4c475baaefe8de756d6d553d05661deab68d82d1d9a5d02887a2f7da126
Instruction ID: 223606a5aaf07adb818a67fe166fdc99330ecfaa828837f2d0227687ffa791a0
Opcode Fuzzy Hash: 4c3df4c475baaefe8de756d6d553d05661deab68d82d1d9a5d02887a2f7da126
Instruction Fuzzy Hash: B351CC30B00205CFDB59DB78D458BADBBF2AF49705F1440A9D80AAB3A1DB35DD41CB92

Function 019517C8 Relevance: 2.7, Strings: 2, Instructions: 162COMMON

Download Yara Rule

Strings

Haq, xrefs: 0195181D
(aq, xrefs: 019518B1

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID: (aq$Haq
API String ID: 0-3785302501
Opcode ID: cf1f33c72ce79308f3319fffb34a911dc99e5cdc70226a67d527b305dc7d213b
Instruction ID: bc5f5913424a3a7d5bc323f5ef9f925e92337daad9cc0048a77eb833c580d57a
Opcode Fuzzy Hash: cf1f33c72ce79308f3319fffb34a911dc99e5cdc70226a67d527b305dc7d213b
Instruction Fuzzy Hash: 8051DF31E002099FCB59DFA9A8146EEBFB5FFC5310F1480BAD919E7250EB344A05CB92

Function 01954C68 Relevance: 1.7, Strings: 1, Instructions: 418COMMON

Download Yara Rule

Strings

`Q]q, xrefs: 01954FBA

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID: `Q]q
API String ID: 0-1594560043
Opcode ID: 560a41e2e5a8cdf31ec939d361963f229ba8e08933cc167b443ac42752a4de39
Instruction ID: d143b70fc2c47ca63377c799f8f431abb2e09dde72500e1897751134a044c807
Opcode Fuzzy Hash: 560a41e2e5a8cdf31ec939d361963f229ba8e08933cc167b443ac42752a4de39
Instruction Fuzzy Hash: 4211D230A042468FDB44EBBDD9587AD7BF2BF89300F104029CD09F7290EB799D508BA1

Function 01950848 Relevance: 1.4, Strings: 1, Instructions: 116COMMON

Download Yara Rule

Strings

4']q, xrefs: 0195085B

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID: 4']q
API String ID: 0-1259897404
Opcode ID: ae9ad268c58472c61ea1f2a750150b561480f42d336527ec4fc545f56e3a6caf
Instruction ID: a4b49dddaee5f4668fd6b6010f27ae8310ec4f3a664e3ea5e888a853c05c3651
Opcode Fuzzy Hash: ae9ad268c58472c61ea1f2a750150b561480f42d336527ec4fc545f56e3a6caf
Instruction Fuzzy Hash: 2E419130A002099FCB04DFBCE458B9DBBF6FF88304F148565E509AB255EB349D49CB91

Function 01951CB0 Relevance: 1.4, Strings: 1, Instructions: 100COMMON

Download Yara Rule

Strings

$]q, xrefs: 01951D0E

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID: $]q
API String ID: 0-1007455737
Opcode ID: bef4cc72ac1ff9392d6b1d1419c21a851875e30ffe7d369ae9db78194badd332
Instruction ID: 6d369ccb89f49019b724eb5b70a689467aa8ab859bbe522b9654a620dd0d274e
Opcode Fuzzy Hash: bef4cc72ac1ff9392d6b1d1419c21a851875e30ffe7d369ae9db78194badd332
Instruction Fuzzy Hash: 39416D34B001099FC758EF2CE848AAAB7F6FF89311B118569E919DB364EB349E05CF51

Function 01950838 Relevance: 1.3, Strings: 1, Instructions: 78COMMON

Download Yara Rule

Strings

4']q, xrefs: 0195085B

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID: 4']q
API String ID: 0-1259897404
Opcode ID: c6805aea74d74613e882a3f151d50282626bb6ae2c26bc521bd4663708c9d81d
Instruction ID: 924a24e2c1de5b0b62963596568d53026e65a2063f016d3f75fbeda67cab82b1
Opcode Fuzzy Hash: c6805aea74d74613e882a3f151d50282626bb6ae2c26bc521bd4663708c9d81d
Instruction Fuzzy Hash: D6318470E00209DFCB05DFACF598A9DBBB6FF84304F148125E9056B269DB749D49CB51

Function 01951B68 Relevance: 1.3, Strings: 1, Instructions: 77COMMON

Download Yara Rule

Strings

tP]q, xrefs: 01951C43

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID: tP]q
API String ID: 0-2175968468
Opcode ID: 7c7e57e0d0f2b2447b39d27a4c27f8909419be2d4937b7f87a428df60286c5c3
Instruction ID: 2c4484af004d12da02db4b9418d7a081761fa91b4da3d55c039c1f08b3bb30d3
Opcode Fuzzy Hash: 7c7e57e0d0f2b2447b39d27a4c27f8909419be2d4937b7f87a428df60286c5c3
Instruction Fuzzy Hash: 76213931B001168FCB58EF78D49896DBBB5AF4871572144A9D90AEF361DA36EC02CB81

Function 01951B78 Relevance: 1.3, Strings: 1, Instructions: 69COMMON

Download Yara Rule

Strings

tP]q, xrefs: 01951C43

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID: tP]q
API String ID: 0-2175968468
Opcode ID: 4ffcbb488e61dce6b7f8b3be6a7fdd1cb0685ead0d2d8dc7b5652e7d0a7575ab
Instruction ID: b6b3f810d18a23a82f0deaffd3b45c4cc5a68a9acc4a8d4395786fc863969d88
Opcode Fuzzy Hash: 4ffcbb488e61dce6b7f8b3be6a7fdd1cb0685ead0d2d8dc7b5652e7d0a7575ab
Instruction Fuzzy Hash: 00213770B00116CFCB58EF78D49896DBBB6AF49715B2144A9D90ADF3A1DB36DC02CB81

Function 01954F48 Relevance: 1.3, Strings: 1, Instructions: 56COMMON

Download Yara Rule

Strings

`Q]q, xrefs: 01954FBA

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID: `Q]q
API String ID: 0-1594560043
Opcode ID: c5c74bdb4b7ce6c66aaae3a1f6dabd0d02ca81f90ffebdb76f0ed521a80b821a
Instruction ID: 4c67912bf2953b7796771ef7c7ce2aada82f6df9d24fd45f79feed15f87fa4e3
Opcode Fuzzy Hash: c5c74bdb4b7ce6c66aaae3a1f6dabd0d02ca81f90ffebdb76f0ed521a80b821a
Instruction Fuzzy Hash: 2D118130A002068BEB54EBBDD9586AE7BF6AF89300F104429DD05F7294EF799D508BA5

Function 01954F43 Relevance: 1.3, Strings: 1, Instructions: 55COMMON

Download Yara Rule

Strings

`Q]q, xrefs: 01954FBA

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID: `Q]q
API String ID: 0-1594560043
Opcode ID: 88d9d44329813660768049306ca05855efd0b2ca6b6267a0eadd94fd830b3925
Instruction ID: 1b646d5712eab9b479da19a2db34a6ebf05d038bcc8e9fb73ad0ad625f9259b5
Opcode Fuzzy Hash: 88d9d44329813660768049306ca05855efd0b2ca6b6267a0eadd94fd830b3925
Instruction Fuzzy Hash: FC11D030A002069BEB44EBADD958BAD7BF6BF88300F104029DD05F7384EB799D548BA1

Function 01951063 Relevance: .2, Instructions: 219COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4ddf920a96ae523e5e8b596153dcff4c2febbe7a2d3e858e9345723e1dcf57d1
Instruction ID: d8020c29ad344ccf40e24a7b9781db2f380b72cddd000bf4dc83a121b2d1ae17
Opcode Fuzzy Hash: 4ddf920a96ae523e5e8b596153dcff4c2febbe7a2d3e858e9345723e1dcf57d1
Instruction Fuzzy Hash: 84911A71E00208DFCB15DBE9D854AEEBBBAEF89300F14812AE919E7254DB359906CF51

Function 01955E28 Relevance: .2, Instructions: 185COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b121053cbc909a99ccc0fba38c4c06beea91ad5077e93da1978f4db7df8c48f5
Instruction ID: 0cfb252f63db8821f0f7b87351df89b5c71d419fac570153b707d17312b64f23
Opcode Fuzzy Hash: b121053cbc909a99ccc0fba38c4c06beea91ad5077e93da1978f4db7df8c48f5
Instruction Fuzzy Hash: EC618E30B00215AFEB54DF69D844BAEBBF6BF88751F158069ED09AB292CB349C41CB50

Function 01954A76 Relevance: .2, Instructions: 151COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9f4edd71727213fa83c855dd41f714f1ffc5eca5447ecc2e31f83069a7d5c093
Instruction ID: 1d6b6bc539a94895996e1143ba11805f36cda61c646d21bf23478df100791816
Opcode Fuzzy Hash: 9f4edd71727213fa83c855dd41f714f1ffc5eca5447ecc2e31f83069a7d5c093
Instruction Fuzzy Hash: 50517F30600606DFCB96DF68C484998BBF6FF45350F46C4A9E449AB626E730FD84CB94

Function 0195614F Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1df9aad250c7f07ba121ce92e400e83e66a0745d2dfef529c6e81a3502316bf5
Instruction ID: 11534ad340610596f5b8ba99b10492e587a79f17190a8fd9f62a0a2e850a2782
Opcode Fuzzy Hash: 1df9aad250c7f07ba121ce92e400e83e66a0745d2dfef529c6e81a3502316bf5
Instruction Fuzzy Hash: 04319171E002099FCB44DFBDD8446EEBBB5FB85314F504569D918E7251EB314A0ACB91

Function 01952777 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4657f3c032836009c1b20a5d2b69c804c97c5c1cd5b4717885f5ec0c4b4ae772
Instruction ID: f83ffd675d618eacefe4d998232354eefd62d41e30649dcfc6cc58b00d432e94
Opcode Fuzzy Hash: 4657f3c032836009c1b20a5d2b69c804c97c5c1cd5b4717885f5ec0c4b4ae772
Instruction Fuzzy Hash: AE21D331A00204CFD758CFA9D848BA97BF9EF45312F4584A9ED09EB292C735D944CF61

Function 01956060 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 27c073671f0b3234b0550883cc65fdc4dea1af1d63cd6d41b867bb97c6ba00cd
Instruction ID: e4c0b0730f33b8830f928abf5eb333b13c30dc2359f28a9709035fa263309b37
Opcode Fuzzy Hash: 27c073671f0b3234b0550883cc65fdc4dea1af1d63cd6d41b867bb97c6ba00cd
Instruction Fuzzy Hash: 0F112571E043495FCB55DA3DA8087AE7FBAEBC5314F0140BEE918DB242DA714905CB91

Function 01955218 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ee16e10dd87d3f4441012a5fe287754ec7abcd763117da320f73736b38b1a2d0
Instruction ID: de5e918570d88627b2416e69bb60a2cfd51acaf15e99421d8b7c687679f7e00e
Opcode Fuzzy Hash: ee16e10dd87d3f4441012a5fe287754ec7abcd763117da320f73736b38b1a2d0
Instruction Fuzzy Hash: E201DD767101218FC715973DF9088197BA9EF8975131940A9EC05DF376DA35EC01CB90

Function 01950A98 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: df4ae1aee0d09e2df0aaa14fa7ad0bd99e62ea19facfa491e110ad74dace5837
Instruction ID: 3fe8e6563f201339d6722ca1933a80412b4266a661b4a029cfb37359aa88cc76
Opcode Fuzzy Hash: df4ae1aee0d09e2df0aaa14fa7ad0bd99e62ea19facfa491e110ad74dace5837
Instruction Fuzzy Hash: DE01A7357043009BEB155B78E85DA597FA5EB42706F0800B9ED0AC7391EA698C41CB52

Function 01955228 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 250ea88a596a3e8c1df0a84d7df68a7783a2f08bbff9725aa597685ab53049be
Instruction ID: 4c91bbed5adf3a93471f66c24276fdb06209a51a5fca76cc75614b0fe6e5bfc6
Opcode Fuzzy Hash: 250ea88a596a3e8c1df0a84d7df68a7783a2f08bbff9725aa597685ab53049be
Instruction Fuzzy Hash: CDF04476B101208FC7299B3DF54881A77EAEF89B6531501A9EC05DB375CA35EC018B90

Function 01955139 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ce32b2d82fcc4f3fb97b31c9d145eeb4bb16d67a0505f1029dba25d80570b07
Instruction ID: 404ff7ee419b819076933e149c423a0d7313671d191080f075bf88575597e58f
Opcode Fuzzy Hash: 8ce32b2d82fcc4f3fb97b31c9d145eeb4bb16d67a0505f1029dba25d80570b07
Instruction Fuzzy Hash: 7DF0E9353451419FC308DA29E864C5A7FB6FBCA260714507AD90EC7266DA358C058B60

Function 01950AA8 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 581d57718b62e0fdc1fa52fc7057245e78c792c066829e7b24ff8f0f2ba02842
Instruction ID: 234f9dd36fba854baed83b5ed771ef72a62168ac1f362d7fef38522da02ffe5d
Opcode Fuzzy Hash: 581d57718b62e0fdc1fa52fc7057245e78c792c066829e7b24ff8f0f2ba02842
Instruction Fuzzy Hash: 9AF09635B0021187DB149B7CF45CB2A7E59E741746F08017CAE0AD3390DEA5CC51C791

Function 01954B34 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 10c7bcfea08395cfe3833ae3fdbd8dab3177b772971da842ed986ed58ced8190
Instruction ID: a75455a6c8b65a8cc67bb11e7507ac0ced906afefd438a1fa257645581e3c08f
Opcode Fuzzy Hash: 10c7bcfea08395cfe3833ae3fdbd8dab3177b772971da842ed986ed58ced8190
Instruction Fuzzy Hash: 06F02471D05348EFCB45DBF5A8588DCBFB0EF85300B0480DAD45A97536E6788709CB41

Function 01955148 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 79c9a6e6f0b83e75dfaa891ea1fbafdf675e52130f439b55da514c0305772cf9
Instruction ID: 35eb061b483be69e46fe32c9e6017bfa83bea83d5a0e74cdf0a8cae3320e6f45
Opcode Fuzzy Hash: 79c9a6e6f0b83e75dfaa891ea1fbafdf675e52130f439b55da514c0305772cf9
Instruction Fuzzy Hash: EFE09B353011049BC318DA69E458C5AB7FAFBCC361750443DE50EC3319DE755D058B60

Function 019513B0 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a6f5572259fe15255bcffea7137c2980e9aa7466aaad0e66cf8e3274b957bfc8
Instruction ID: fd6a4182fe6b4b3d1f555b74ce61d6930bd5cd1d235631ad3a9832f4e50ecf8d
Opcode Fuzzy Hash: a6f5572259fe15255bcffea7137c2980e9aa7466aaad0e66cf8e3274b957bfc8
Instruction Fuzzy Hash: C1F0F4B0A40205CFCB14EF68E168A68B7B1EF88344F204468E80A9B3A1CB799C01CF00

Function 01950F28 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5ca9a6a611885ee345bb0c6de7b149707e7c732c16b5f2f5a468ec10c90f48a2
Instruction ID: 6ab6d059370a6b2d0ef99076726d98383671db9678f3d0b9802e4f884e79dc9f
Opcode Fuzzy Hash: 5ca9a6a611885ee345bb0c6de7b149707e7c732c16b5f2f5a468ec10c90f48a2
Instruction Fuzzy Hash: 88E09230E09249DFC741CFBCA9105AC7FB4EB9630071801AEED08D7212E6714F08CB51

Function 01950F70 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a8ace282f6076370fc02126738087f83f8e0698ee91bb856aa047321c8eb7dca
Instruction ID: ec8bdf035a9b3c3cb7bd56b3bd1abf6bed33147e699eeb436a7bf04674430995
Opcode Fuzzy Hash: a8ace282f6076370fc02126738087f83f8e0698ee91bb856aa047321c8eb7dca
Instruction Fuzzy Hash: C2E02B7150D3504FC7418A7CBC805417BE89B03365B0508FBFC4CC7352E1508C4083E1

Function 01950F38 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2099658572.0000000001950000.00000040.00000800.00020000.00000000.sdmp, Offset: 01950000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1950000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 131f2624b9ec024d2857500b7c5ddbd9dd9639b78826bd20eee78134815831b7
Instruction ID: facb12a4f6f097713bc5622aa51c5191e0e3009cc69e0bebdb98f432539767ca
Opcode Fuzzy Hash: 131f2624b9ec024d2857500b7c5ddbd9dd9639b78826bd20eee78134815831b7
Instruction Fuzzy Hash: 03D01230E00109EF8B00DFACE90595D7BF9EB85204B1045A9D908D3204EA715F149B41

Analysis Process: Honda.exePID: 7360, Parent PID: 1028COMMON

Executed Functions

Function 00F92788 Relevance: 2.0, Instructions: 2001COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2215787120.0000000000F90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f90000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f08173c75ac4a44998d44d9b2aba572fccf6d7123c18b6c21a7cfd71121763f
Instruction ID: c74f3b9cd5b8de1ad9b557a6f3f30bd0585cdb98c16fc2894b51b7d02c042d7b
Opcode Fuzzy Hash: 6f08173c75ac4a44998d44d9b2aba572fccf6d7123c18b6c21a7cfd71121763f
Instruction Fuzzy Hash: 7B03E030A00319DFDB16EF64CD44B99B7B6FF89700F118596E9086B2A5CB71AE86CF41

Function 00F95A41 Relevance: 1.7, Strings: 1, Instructions: 440COMMON

Download Yara Rule

Strings

$]q, xrefs: 00F95A71

Memory Dump Source

Source File: 00000009.00000002.2215787120.0000000000F90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f90000_Honda.jbxd

Similarity

API ID:
String ID: $]q
API String ID: 0-1007455737
Opcode ID: d692d6eeaed2fac55a10c56c06716d7da5a60fa8966d14bdb35ed9f889731029
Instruction ID: 375345840dc8e399e28aeb5e56dc51deb65751e84f1125e02137486a1043eaed
Opcode Fuzzy Hash: d692d6eeaed2fac55a10c56c06716d7da5a60fa8966d14bdb35ed9f889731029
Instruction Fuzzy Hash: 3FF1AD30B00B059FEB25DF64C994B6EB7F2AF85B25F148429D8069B291DB35EC46DB80

Function 00F917C8 Relevance: 2.7, Strings: 2, Instructions: 161COMMON

Download Yara Rule

Strings

Haq, xrefs: 00F9181D
(aq, xrefs: 00F918B1

Memory Dump Source

Source File: 00000009.00000002.2215787120.0000000000F90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f90000_Honda.jbxd

Similarity

API ID:
String ID: (aq$Haq
API String ID: 0-3785302501
Opcode ID: 7be56618430ce7d5d24a60fcd747e14d346a6f3e8147e2872daabd6a44305fac
Instruction ID: 855a7b24c7e4543354fa865fae888c105be27111c4e4a3a699c8ace9f87bc102
Opcode Fuzzy Hash: 7be56618430ce7d5d24a60fcd747e14d346a6f3e8147e2872daabd6a44305fac
Instruction Fuzzy Hash: 4151E131E042499FDF09DFB998102EEBFB1EF95310F0480BAD459D72A1EB34490ADB91

Function 00F91CC0 Relevance: 2.6, Strings: 2, Instructions: 121COMMON

Download Yara Rule

Strings

$]q, xrefs: 00F91D0E
$]q, xrefs: 00F91D1A

Memory Dump Source

Source File: 00000009.00000002.2215787120.0000000000F90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f90000_Honda.jbxd

Similarity

API ID:
String ID: $]q$$]q
API String ID: 0-127220927
Opcode ID: ce08e564dfbd02268932837ac792c8d27ad80cbfbf9165c3469c41108e433860
Instruction ID: ab7d97b253977f052e74f8b5d37f1e4a06e321159bb9b5bb2e875bbfb6c2124d
Opcode Fuzzy Hash: ce08e564dfbd02268932837ac792c8d27ad80cbfbf9165c3469c41108e433860
Instruction Fuzzy Hash: 98419534A002098FDB09DF68D85499E7BF6FF85350B10857AE406CB365DB34DD06DB51

Function 00F91CB0 Relevance: 1.4, Strings: 1, Instructions: 124COMMON

Download Yara Rule

Strings

$]q, xrefs: 00F91D0E

Memory Dump Source

Source File: 00000009.00000002.2215787120.0000000000F90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f90000_Honda.jbxd

Similarity

API ID:
String ID: $]q
API String ID: 0-1007455737
Opcode ID: e6688fa8068b8a4e1ff593bff9a1e11e5d6e98ce4ac163a08e93977085accf57
Instruction ID: 080edf959b8926053b767d44ea290e6872b50c704a50d465e401146f2b262beb
Opcode Fuzzy Hash: e6688fa8068b8a4e1ff593bff9a1e11e5d6e98ce4ac163a08e93977085accf57
Instruction Fuzzy Hash: 2741A239A0010ACFDB09EF68D8949AE7BB6FF85351710857AE406CB365DB309D06DF51

Function 00F90848 Relevance: 1.4, Strings: 1, Instructions: 117COMMON

Download Yara Rule

Strings

4']q, xrefs: 00F9085B

Memory Dump Source

Source File: 00000009.00000002.2215787120.0000000000F90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f90000_Honda.jbxd

Similarity

API ID:
String ID: 4']q
API String ID: 0-1259897404
Opcode ID: efcb46545561e0a5bb4d2c7d89966474ad3bcf84f2ecdf549b8e268de8a870f8
Instruction ID: cf70d543e907dc6213cdf4c20ff258d354c6240224a16b44cf800e638cd41c6a
Opcode Fuzzy Hash: efcb46545561e0a5bb4d2c7d89966474ad3bcf84f2ecdf549b8e268de8a870f8
Instruction Fuzzy Hash: 0C419070A002099FDB05EFB8E895B9D7BF2EF84304F108529E105AB395DF789D4ADB91

Function 00F91B68 Relevance: 1.4, Strings: 1, Instructions: 100COMMON

Download Yara Rule

Strings

tP]q, xrefs: 00F91C43

Memory Dump Source

Source File: 00000009.00000002.2215787120.0000000000F90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f90000_Honda.jbxd

Similarity

API ID:
String ID: tP]q
API String ID: 0-2175968468
Opcode ID: e0cdd749c4e99cff42ad850e2b35a438c0c956600f718ec0c34c75afa12fef30
Instruction ID: 88540b41434f9814cf9381b7afdf95819382f0d3d97babf098ba9ab581ed48af
Opcode Fuzzy Hash: e0cdd749c4e99cff42ad850e2b35a438c0c956600f718ec0c34c75afa12fef30
Instruction Fuzzy Hash: C9319C70B00202CFDB18EF78D498A6DB7B2BF84715B1144A9D40A8B3B2DB35DC02DB82

Function 00F90838 Relevance: 1.3, Strings: 1, Instructions: 78COMMON

Download Yara Rule

Strings

4']q, xrefs: 00F9085B

Memory Dump Source

Source File: 00000009.00000002.2215787120.0000000000F90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f90000_Honda.jbxd

Similarity

API ID:
String ID: 4']q
API String ID: 0-1259897404
Opcode ID: 71668bd0dae7c179249263dc8ced63e0f81b564970e164a789b168296da888e7
Instruction ID: c36c405afb9b0139258254d2ff5db86f4a41ae29e5a3f5e7a26d5eab5b915cf6
Opcode Fuzzy Hash: 71668bd0dae7c179249263dc8ced63e0f81b564970e164a789b168296da888e7
Instruction Fuzzy Hash: 5C31A1349402499FDF05EFA8E895B8D7BB2FF84304F009129D1056B2A6DB74988ADB51

Function 00F91B78 Relevance: 1.3, Strings: 1, Instructions: 69COMMON

Download Yara Rule

Strings

tP]q, xrefs: 00F91C43

Memory Dump Source

Source File: 00000009.00000002.2215787120.0000000000F90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f90000_Honda.jbxd

Similarity

API ID:
String ID: tP]q
API String ID: 0-2175968468
Opcode ID: c24c239606ec590b89ed08cc57e4a27b619e90218702cbf8e2d63b9751e6be5e
Instruction ID: 96dffd0a2d0b82be1deee943b904bca815eb6122129cb489963e82c004d54f72
Opcode Fuzzy Hash: c24c239606ec590b89ed08cc57e4a27b619e90218702cbf8e2d63b9751e6be5e
Instruction Fuzzy Hash: 71213970B001168FCB58EF79D49896DB7B2BF48715B2144A9D40ADB3B1DB35DC02CB81

Function 00F94F48 Relevance: 1.3, Strings: 1, Instructions: 56COMMON

Download Yara Rule

Strings

`Q]q, xrefs: 00F94FBA

Memory Dump Source

Source File: 00000009.00000002.2215787120.0000000000F90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f90000_Honda.jbxd

Similarity

API ID:
String ID: `Q]q
API String ID: 0-1594560043
Opcode ID: 317b452a7f13e21cafc5009e546c1b75e3f18823e9b92c1d446e7503f4373e89
Instruction ID: 2560b064315632919f83b16186ac3e856173cca6b2a44390f8382e0d5ed01ad2
Opcode Fuzzy Hash: 317b452a7f13e21cafc5009e546c1b75e3f18823e9b92c1d446e7503f4373e89
Instruction Fuzzy Hash: 0111B670A042168BEF14EBB5C955BAE7BF6AF88304F104029D401F7394DF35AD45EBA1

Function 00F94F42 Relevance: 1.3, Strings: 1, Instructions: 56COMMON

Download Yara Rule

Strings

`Q]q, xrefs: 00F94FBA

Memory Dump Source

Source File: 00000009.00000002.2215787120.0000000000F90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f90000_Honda.jbxd

Similarity

API ID:
String ID: `Q]q
API String ID: 0-1594560043
Opcode ID: a3f7539fa98d837f463fe1cf63c6fc12b1691fc90a31c536ef3b9bc27213fe9a
Instruction ID: 50f033d21d5d0c0e2569e5e52c1981a0f5b852dbe7dbe397e6345b02fdc7f2d4
Opcode Fuzzy Hash: a3f7539fa98d837f463fe1cf63c6fc12b1691fc90a31c536ef3b9bc27213fe9a
Instruction Fuzzy Hash: 0111D330A042568FEF14EBB5C951BAE7FF2AF89300F104029D402E7395DB359D06EBA1

Function 00F94868 Relevance: .2, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2215787120.0000000000F90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f90000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eebdddc274401d1b7cc1d92c1340a9587babfd6192b2620f6bdb356835f8b2ce
Instruction ID: f748fee251f6106dd1932dbd4350026dc7b90b0f0eaf10e9607070c306e71a2b
Opcode Fuzzy Hash: eebdddc274401d1b7cc1d92c1340a9587babfd6192b2620f6bdb356835f8b2ce
Instruction Fuzzy Hash: 73A17630600A058FDB19DF28C584E69BBF6EF51350F46C5A9E449CB626E734FD8ACB84

Function 00F91062 Relevance: .2, Instructions: 219COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2215787120.0000000000F90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f90000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5633fd4d105ce9692a7a206f81bd8645d1e2ede25a3d451b651ded0ad3028a82
Instruction ID: ba928739b350c43176eeb0b96609a6b6cd24f404f6d377651c7d47133d85317a
Opcode Fuzzy Hash: 5633fd4d105ce9692a7a206f81bd8645d1e2ede25a3d451b651ded0ad3028a82
Instruction Fuzzy Hash: 62917F71E002089FDF05EFE5D854AEEBBBAFF89310F14802AE906E7254DB359906DB50

Function 00F95E28 Relevance: .2, Instructions: 184COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2215787120.0000000000F90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f90000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 44be418938bae9a06c206275b7c7cae9c75ad7205ceb77284073a4dbb1841c3e
Instruction ID: 8a9ff2bf727e6a0b8df4575cf8a34021b4ebc99312dc29223bb814d4c1e99c6b
Opcode Fuzzy Hash: 44be418938bae9a06c206275b7c7cae9c75ad7205ceb77284073a4dbb1841c3e
Instruction Fuzzy Hash: E4618E35B042189FDB05DF68D894BAEBBF2BF89724F148065E805EB3A1CB349C42DB50

Function 00F92777 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2215787120.0000000000F90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f90000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 18ce1762081522bff1db37a4955b8873501e393df00ec2e744e8c9acac6a8dc0
Instruction ID: 3d2d35e6a4f685e62d6f617c3a117f7df0e5d88d78563620423d723d3adec57e
Opcode Fuzzy Hash: 18ce1762081522bff1db37a4955b8873501e393df00ec2e744e8c9acac6a8dc0
Instruction Fuzzy Hash: 4B31D031E05204EFEB54DF65D844BAD7BF5EF45321F0884AAE805DB1A2D3389D44EB60

Function 00F96060 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2215787120.0000000000F90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f90000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3ce1551ca44fb8320f974a80e25bfe4ce80a551355104aa5ba8b36fc64a6597d
Instruction ID: 6b45d6a5a83473f18157d3163b9170aefb505d06a31478f09f7d60d860108268
Opcode Fuzzy Hash: 3ce1551ca44fb8320f974a80e25bfe4ce80a551355104aa5ba8b36fc64a6597d
Instruction Fuzzy Hash: EE112571E082885FCB19DB799894B9E3FB5DFC6324F1440ADD4898B252DA720806C750

Function 00F95218 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2215787120.0000000000F90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f90000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7df065e3977653b6d07d4aadef99830dc0c60b34ef82f5a8ea01d7ff9c91e4b
Instruction ID: 09068d0ec4dfeaa549b77b762abf61a04ad9936433f4ba6b23844af10808a5f3
Opcode Fuzzy Hash: b7df065e3977653b6d07d4aadef99830dc0c60b34ef82f5a8ea01d7ff9c91e4b
Instruction Fuzzy Hash: 7E01D835B451604FC7159B3DE45491A3BE5DFCA72131941AAD805DB371CA34DC03CB90

Function 00F95228 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2215787120.0000000000F90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f90000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1149a4ea59ba93d6e6aad5ece9fa037e2d9a7d8379f40f1215680661c21daccc
Instruction ID: 4b74487a318da2b0cda9bf185b7e24f3d5b51e0b0b27b62e2058e76dbcf95da0
Opcode Fuzzy Hash: 1149a4ea59ba93d6e6aad5ece9fa037e2d9a7d8379f40f1215680661c21daccc
Instruction Fuzzy Hash: 35F06876B112309FCB19AB3DF44491A77EAEF89B6531501B9E805DB374DA35EC02CB90

Function 00F90A98 Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2215787120.0000000000F90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f90000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9f86e723fb6d032d9b3ddd08ccafa481c63328d3835b5e118918928bd17c8924
Instruction ID: 4224a3c6064de46a7264eba5c12b4a8a6f64c0436752763f9aea970e7022b060
Opcode Fuzzy Hash: 9f86e723fb6d032d9b3ddd08ccafa481c63328d3835b5e118918928bd17c8924
Instruction Fuzzy Hash: 6A012634B083844FEF156B70E86D3293B62AB82754B0404BDD906C72E2DE688C46D7C1

Function 00F90AA8 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2215787120.0000000000F90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f90000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1052beb0e48598e893b2f461abf173189e2d8135cd2b74f1f6dd500c9c2948c0
Instruction ID: 9e6d6a5ab984a30d4cae5ceccba1cced522b68d038e7fbc283ae15a60637db03
Opcode Fuzzy Hash: 1052beb0e48598e893b2f461abf173189e2d8135cd2b74f1f6dd500c9c2948c0
Instruction Fuzzy Hash: 43F09035B003158BEF187B75E82C32A3656EB91B65F0404789A0AC3391EEA9CC42E7C1

Function 00F95139 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2215787120.0000000000F90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f90000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 621bee8b7b1ac75756d502091e1be6f61b718a9ebd111552306dc1ef2dbfba50
Instruction ID: 59e48aab6b61bdf36b2dc42d0158648a363660f654b017a687a9549a0e8a7b41
Opcode Fuzzy Hash: 621bee8b7b1ac75756d502091e1be6f61b718a9ebd111552306dc1ef2dbfba50
Instruction Fuzzy Hash: 6CF0E2393862845FC304DB79D8A48997FB6EFCB220718807AE84AC7376CA314C07C761

Function 00F94B34 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2215787120.0000000000F90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f90000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 46633360d0db343c46a423dabbc2891a971b2066c594a7d099538bf85ccfd88c
Instruction ID: 38302ee4a9e7d0ee9198abbf027207d3c5283cdfadf487340896ee771c667420
Opcode Fuzzy Hash: 46633360d0db343c46a423dabbc2891a971b2066c594a7d099538bf85ccfd88c
Instruction Fuzzy Hash: 00F0F071D05344EEDB01DBB5A8544A87FB0EF91304B1480DAD05687566E6788606DB41

Function 00F95148 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2215787120.0000000000F90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f90000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b65d548a64b94e7c281d6e42e5dd5534dcd5ccdeba61440d860decad485c93c1
Instruction ID: b9541af94ce20450874f7b89877a0ab053a50c0a7c72c36e030f14e05739eb8f
Opcode Fuzzy Hash: b65d548a64b94e7c281d6e42e5dd5534dcd5ccdeba61440d860decad485c93c1
Instruction Fuzzy Hash: 29E09B353401045BC314DF69E85485AB7BAFBD93517544439E90EC3325DE355C06C761

Function 00F913B0 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2215787120.0000000000F90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f90000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc8e88180099c799c47d41d5f19ef6a0ff00130e10faf3668987ca32357dd735
Instruction ID: 7ad9f8a80fd349c4c1737fc141a9cb0eebef8db9712ebd7a26aa9f3e84b84315
Opcode Fuzzy Hash: dc8e88180099c799c47d41d5f19ef6a0ff00130e10faf3668987ca32357dd735
Instruction Fuzzy Hash: F4F01778640206CFDB14EF74D568A2877B1FF89344F204468E4068B3B5CB79D806DF01

Function 00F90F28 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2215787120.0000000000F90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f90000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9c34e2d558e18fe4122b8cc267b1cdcb87de27c1c51a94e5400bd482f68505b2
Instruction ID: 5c3dd2094d9e61d9c0a04f773aa0d1faceb56f899fc8ee7fd010fc4b68e35486
Opcode Fuzzy Hash: 9c34e2d558e18fe4122b8cc267b1cdcb87de27c1c51a94e5400bd482f68505b2
Instruction Fuzzy Hash: 23E0DF30A09288AFCB01DFB4EA625AE7FB4DF47204B1044EACC48D7223E6704F05E750

Function 00F90F70 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2215787120.0000000000F90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f90000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 039236a2995df64e75a441a1ddd7b077bc3c9e95ef6464ffddc593fcc597a06a
Instruction ID: fa6ef9e43a9d01298d2d9fee6bfcfd5e6e4f40f032abc5a8e4fb93d3895506e7
Opcode Fuzzy Hash: 039236a2995df64e75a441a1ddd7b077bc3c9e95ef6464ffddc593fcc597a06a
Instruction Fuzzy Hash: 4AE02B3351E3904FDB714A797C016A13FD88B22314B1104FBD845C3263D5408D0497C5

Function 00F90F38 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2215787120.0000000000F90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f90000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 392fd88f170a0e7c335bd19190e8c923b982b20a09613ec44bc8ed7b7152fb29
Instruction ID: 80930cadfbd0e7b0421cbf3bf354fb643afc5a4e10aa481e58ddadf8433e4f93
Opcode Fuzzy Hash: 392fd88f170a0e7c335bd19190e8c923b982b20a09613ec44bc8ed7b7152fb29
Instruction Fuzzy Hash: 34D01770A0420DEF8B04EFA8EA4195EBBF9EB85244B1041A99808D7211EA71AF00AB90

Non-executed Functions

Function 00F91E2F Relevance: 5.4, Strings: 4, Instructions: 408COMMON

Download Yara Rule

Strings

", xrefs: 00F91F97
LR]q, xrefs: 00F91E69
LR]q, xrefs: 00F91EDF
LR]q, xrefs: 00F9213F

Memory Dump Source

Source File: 00000009.00000002.2215787120.0000000000F90000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_f90000_Honda.jbxd

Similarity

API ID:
String ID: "$LR]q$LR]q$LR]q
API String ID: 0-2830924732
Opcode ID: 1505c83d32b584eeaba12dd1132c81f6c1edf7ef9a085ba88704d58acf80d387
Instruction ID: 190ccd7c8c76b24a2ec8903f56569fa234ce1006556592ed5a36776172a6678a
Opcode Fuzzy Hash: 1505c83d32b584eeaba12dd1132c81f6c1edf7ef9a085ba88704d58acf80d387
Instruction Fuzzy Hash: FBE1A030B002069FEF15DF69C890BAEB7B2FF88324F148569D4159B2A5D734DD82EB91

Analysis Process: Honda.exePID: 7592, Parent PID: 1028COMMON

Executed Functions

Function 01162788 Relevance: 2.0, Instructions: 2014COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2296793844.0000000001160000.00000040.00000800.00020000.00000000.sdmp, Offset: 01160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_1160000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1464c37140388d16978e9babe8b081d6590f84282956ce898f5d3e5d718859a4
Instruction ID: d2acd781bdd2e47153f27093f34016b6190abfc82eebfaab890b752cbed7f7c0
Opcode Fuzzy Hash: 1464c37140388d16978e9babe8b081d6590f84282956ce898f5d3e5d718859a4
Instruction Fuzzy Hash: 5503ED30A40309DFDB16DF68CD44B99B7BAFF89700F118596E5086B2A5CBB1AEC5CB41

Function 01165A41 Relevance: 1.7, Strings: 1, Instructions: 440COMMON

Download Yara Rule

Strings

$]q, xrefs: 01165A71

Memory Dump Source

Source File: 0000000C.00000002.2296793844.0000000001160000.00000040.00000800.00020000.00000000.sdmp, Offset: 01160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_1160000_Honda.jbxd

Similarity

API ID:
String ID: $]q
API String ID: 0-1007455737
Opcode ID: 6a5afe0974324098650b290c5223d93c6410dd97856dbdb0ee26efb762adf5d5
Instruction ID: 589e4308d83a36f4a2b4b9ae5072407c155f47b2e4257d23e329f922d8d6342b
Opcode Fuzzy Hash: 6a5afe0974324098650b290c5223d93c6410dd97856dbdb0ee26efb762adf5d5
Instruction Fuzzy Hash: 4EF1E230B002059FDB69DF68C944B6EB7F7BF85344F148429D40AAB296DB36EC56CB81

Function 011617C8 Relevance: 3.9, Strings: 3, Instructions: 156COMMON

Download Yara Rule

Strings

(aq, xrefs: 011618B1
Haq, xrefs: 0116181D
D@, xrefs: 0116182E

Memory Dump Source

Source File: 0000000C.00000002.2296793844.0000000001160000.00000040.00000800.00020000.00000000.sdmp, Offset: 01160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_1160000_Honda.jbxd

Similarity

API ID:
String ID: (aq$D@$Haq
API String ID: 0-203922957
Opcode ID: 133e615b48b8026080a3b3b53e9f933438aa6073e05c1a2bb4e808b332d9ce87
Instruction ID: 1e91f229e6af9c0075e1f8bfbf951082511ce8483418ba1f00f1ea36a1c46a3f
Opcode Fuzzy Hash: 133e615b48b8026080a3b3b53e9f933438aa6073e05c1a2bb4e808b332d9ce87
Instruction Fuzzy Hash: 2D51E131E042599FCB09DF7998106EEBFB5EFC5310F1480BAD449E7291EB354A19CB91

Function 01161992 Relevance: 2.6, Strings: 2, Instructions: 131COMMON

Download Yara Rule

Strings

D@, xrefs: 01161AE4
(aq, xrefs: 01161AD3

Memory Dump Source

Source File: 0000000C.00000002.2296793844.0000000001160000.00000040.00000800.00020000.00000000.sdmp, Offset: 01160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_1160000_Honda.jbxd

Similarity

API ID:
String ID: (aq$D@
API String ID: 0-2680470403
Opcode ID: e3069cd56cd2d0ca6ea0217f0f9e8f76889992fff3fec26fc5abf62d09d0c1c5
Instruction ID: c39efe8c064360144535f933055b8fda762d7eb1d19f931daaeda7b0b6caaf60
Opcode Fuzzy Hash: e3069cd56cd2d0ca6ea0217f0f9e8f76889992fff3fec26fc5abf62d09d0c1c5
Instruction Fuzzy Hash: F7411631A00209EFE71CDF68D4187EEBBF5EF88315F044469D409AB291DB36895ACB92

Function 01161CC0 Relevance: 2.6, Strings: 2, Instructions: 120COMMON

Download Yara Rule

Strings

$]q, xrefs: 01161D0E
$]q, xrefs: 01161D1A

Memory Dump Source

Source File: 0000000C.00000002.2296793844.0000000001160000.00000040.00000800.00020000.00000000.sdmp, Offset: 01160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_1160000_Honda.jbxd

Similarity

API ID:
String ID: $]q$$]q
API String ID: 0-127220927
Opcode ID: e1ad616d9be4482a8905b0ef4003f86cce6b83073c057d292e88ea83f86a08dd
Instruction ID: 0f58e0ca1995ef9aeff69fee346cf6eb43af4d80a75f405b5b2de212c03118fa
Opcode Fuzzy Hash: e1ad616d9be4482a8905b0ef4003f86cce6b83073c057d292e88ea83f86a08dd
Instruction Fuzzy Hash: 1241A2346001059FC709EF39E8989AE7BF6EFC9310714816AE409DB265DB309D4ACB52

Function 01160848 Relevance: 1.4, Strings: 1, Instructions: 117COMMON

Download Yara Rule

Strings

4']q, xrefs: 0116085B

Memory Dump Source

Source File: 0000000C.00000002.2296793844.0000000001160000.00000040.00000800.00020000.00000000.sdmp, Offset: 01160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_1160000_Honda.jbxd

Similarity

API ID:
String ID: 4']q
API String ID: 0-1259897404
Opcode ID: 9085994573970a10c6eea577e9946dc1bfc9db0cdfcb2c5e1ab18614afba8041
Instruction ID: cc3a9ef216c8b901bd512ec001fca92e116b0fe32ba407038ae8db342c059d33
Opcode Fuzzy Hash: 9085994573970a10c6eea577e9946dc1bfc9db0cdfcb2c5e1ab18614afba8041
Instruction Fuzzy Hash: C8418170A402099FCB05EFBCE895B9D7BF6EF88304F108529E109AB355DB359D49CB92

Function 01161B68 Relevance: 1.4, Strings: 1, Instructions: 104COMMON

Download Yara Rule

Strings

tP]q, xrefs: 01161C43

Memory Dump Source

Source File: 0000000C.00000002.2296793844.0000000001160000.00000040.00000800.00020000.00000000.sdmp, Offset: 01160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_1160000_Honda.jbxd

Similarity

API ID:
String ID: tP]q
API String ID: 0-2175968468
Opcode ID: ffd9d6d798ca5e4e015b6c126290e4a415d7da164c69ffb7b674a0a514d0506e
Instruction ID: ceae438535606f82acbed81a7ca450f46ee6fba74af6d074c0383c664bae792a
Opcode Fuzzy Hash: ffd9d6d798ca5e4e015b6c126290e4a415d7da164c69ffb7b674a0a514d0506e
Instruction Fuzzy Hash: F1319D70B00215DFDB5CEF78D44896DBBB6AF88705B1184A9D40A8B261DB36ED02CB82

Function 01161B78 Relevance: 1.3, Strings: 1, Instructions: 69COMMON

Download Yara Rule

Strings

tP]q, xrefs: 01161C43

Memory Dump Source

Source File: 0000000C.00000002.2296793844.0000000001160000.00000040.00000800.00020000.00000000.sdmp, Offset: 01160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_1160000_Honda.jbxd

Similarity

API ID:
String ID: tP]q
API String ID: 0-2175968468
Opcode ID: f72523c38ed2865783e079c1b7a04ca753c953aaf408f8a55ef35f343c3164dd
Instruction ID: f9bc979cac55b1e0b7b4393a4c2ee0450f65e2ca39658c5d3440f310154a977d
Opcode Fuzzy Hash: f72523c38ed2865783e079c1b7a04ca753c953aaf408f8a55ef35f343c3164dd
Instruction Fuzzy Hash: B9213C70B001158FCB58EF78D49896DBBB5AF4871572144A9D50ADB3A5DB36EC02CB81

Function 01164F42 Relevance: 1.3, Strings: 1, Instructions: 56COMMON

Download Yara Rule

Strings

`Q]q, xrefs: 01164FBA

Memory Dump Source

Source File: 0000000C.00000002.2296793844.0000000001160000.00000040.00000800.00020000.00000000.sdmp, Offset: 01160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_1160000_Honda.jbxd

Similarity

API ID:
String ID: `Q]q
API String ID: 0-1594560043
Opcode ID: 8484174ff2f66ff7a77eecd30e665a1dcca207d2599cd7ab977f2e986ce3e87b
Instruction ID: 50649896a107e428f55beeee4b8455651843c9b28455cf934580c2c5617f2aff
Opcode Fuzzy Hash: 8484174ff2f66ff7a77eecd30e665a1dcca207d2599cd7ab977f2e986ce3e87b
Instruction Fuzzy Hash: BA110330A082558FDB19EBBEC8147AD7BF6AF88300F104029E401FB384DB368D15CBA2

Function 01164F48 Relevance: 1.3, Strings: 1, Instructions: 56COMMON

Download Yara Rule

Strings

`Q]q, xrefs: 01164FBA

Memory Dump Source

Source File: 0000000C.00000002.2296793844.0000000001160000.00000040.00000800.00020000.00000000.sdmp, Offset: 01160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_1160000_Honda.jbxd

Similarity

API ID:
String ID: `Q]q
API String ID: 0-1594560043
Opcode ID: e0e9ae38513f5aebd609eff0c4cf71ad48e7cdde77222f1180c88fc2399fde9c
Instruction ID: 7c5b230a8a2daec42455bf6ec970ff1fa881ea0e4312d2982b80ef67db7b3947
Opcode Fuzzy Hash: e0e9ae38513f5aebd609eff0c4cf71ad48e7cdde77222f1180c88fc2399fde9c
Instruction Fuzzy Hash: C811B630A042158FDB19EBBED9547AE7BFAAF88340F104469E401BB394DF369D15C7A2

Function 01164868 Relevance: .2, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2296793844.0000000001160000.00000040.00000800.00020000.00000000.sdmp, Offset: 01160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_1160000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 78f85d63d0060e1bd3e7d553b10bd4f0d9211ad813c2df2bd770f099dc5b818f
Instruction ID: 8449f4a5114cfce7f09fa4356d4ab343c2690b8f731231569ade1e9497ce96bd
Opcode Fuzzy Hash: 78f85d63d0060e1bd3e7d553b10bd4f0d9211ad813c2df2bd770f099dc5b818f
Instruction Fuzzy Hash: D8A16B34200605DFC719DF18C584E69BBFAEF45340F4AC5A9E04A9BA66E731FD98CB84

Function 01161062 Relevance: .2, Instructions: 219COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2296793844.0000000001160000.00000040.00000800.00020000.00000000.sdmp, Offset: 01160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_1160000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 190172656116dc624423b6798eaf733d4bd3250611a8f66b4cab0371e6a050f2
Instruction ID: e7beae361914db7ca4ee343bc4f141c607f855218a3eff44d9316783b1b75ead
Opcode Fuzzy Hash: 190172656116dc624423b6798eaf733d4bd3250611a8f66b4cab0371e6a050f2
Instruction Fuzzy Hash: 8D915171E00208AFCB09DFE5D8549EEBBFABF88704F14802AE509EB254DB319946CF51

Function 01165E28 Relevance: .2, Instructions: 184COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2296793844.0000000001160000.00000040.00000800.00020000.00000000.sdmp, Offset: 01160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_1160000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fcae812deef3acbe7315526011a414038e8fbce774edf802f535646f0c08b5b5
Instruction ID: 83c3278b5a627b9c32852d5c4b2ff5d5fa12c83d9dedb73bb6a748ed684aade2
Opcode Fuzzy Hash: fcae812deef3acbe7315526011a414038e8fbce774edf802f535646f0c08b5b5
Instruction Fuzzy Hash: 9661AE30B042159FDB09DF69D884BAEBBF6BF88750F158065E805EB292CB31DC45CB91

Function 01166060 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2296793844.0000000001160000.00000040.00000800.00020000.00000000.sdmp, Offset: 01160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_1160000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e02047a4856a453f8692527a5866845bfaf6a99f973f9258c304b86485b667a1
Instruction ID: 8a2d8138be82e04368e1cb9cfea47cf228e7100972909ca78f37231786524075
Opcode Fuzzy Hash: e02047a4856a453f8692527a5866845bfaf6a99f973f9258c304b86485b667a1
Instruction Fuzzy Hash: FE110670E082885FCB5ADB7C9858BAE3FB5DFC6214F1500BED4489B253DB72490AC781

Function 01165218 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2296793844.0000000001160000.00000040.00000800.00020000.00000000.sdmp, Offset: 01160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_1160000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 64e32e215d9b82752fac79edf9cadb6a67ae75203460286bfe9e1464b192ceeb
Instruction ID: 0e2bc0a7cca1644ea3cce25ed101921e5d795bde6836ee549578aef9718b0d64
Opcode Fuzzy Hash: 64e32e215d9b82752fac79edf9cadb6a67ae75203460286bfe9e1464b192ceeb
Instruction Fuzzy Hash: E101D4357501308FC71AAB3DE85882A3BEA9F8961131901BAE804DF376CE21EC068B90

Function 01165228 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2296793844.0000000001160000.00000040.00000800.00020000.00000000.sdmp, Offset: 01160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_1160000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e9dd107f770431394be1f5bca69e58f9a6fb846f57c66eb0b777626b0afc982e
Instruction ID: 55a4ed088a51db94a8fdd507c1a70c68c90e32a35686535a0fabd899157d58de
Opcode Fuzzy Hash: e9dd107f770431394be1f5bca69e58f9a6fb846f57c66eb0b777626b0afc982e
Instruction Fuzzy Hash: 55F068767101308FC719AB3DF44881A77EEAF8D76531501BAE805DB375CA35EC018B90

Function 01160AA8 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2296793844.0000000001160000.00000040.00000800.00020000.00000000.sdmp, Offset: 01160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_1160000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8ba238eb81a670ac4cdc53fea3ebe8e2c1274f575b6df65354524379773bae51
Instruction ID: d718cf5afca8022544fc7ab09ad7820651045120e6de98e3e7d545f9bcf057a7
Opcode Fuzzy Hash: 8ba238eb81a670ac4cdc53fea3ebe8e2c1274f575b6df65354524379773bae51
Instruction Fuzzy Hash: 13F0F6317042059BDB0CAB7DE81932E3A59A74CA85F000579A60ACB3E4DFA2C894C3C1

Function 01165139 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2296793844.0000000001160000.00000040.00000800.00020000.00000000.sdmp, Offset: 01160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_1160000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 583ac6c589bfb6a72f5e82afe62cf01698ebaa6e72b342b321df9981b81d03a4
Instruction ID: 4349599e692cedbef571c769905e40d42ab7151beffd8525329c00c9d672a223
Opcode Fuzzy Hash: 583ac6c589bfb6a72f5e82afe62cf01698ebaa6e72b342b321df9981b81d03a4
Instruction Fuzzy Hash: 83F090313451445FC309DB29DC688AE7BA6EFCA211708407AE449CB266CA31880AC752

Function 01160F07 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2296793844.0000000001160000.00000040.00000800.00020000.00000000.sdmp, Offset: 01160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_1160000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c79fe5a7d7b3472bfcda48791bbd579149429a2e15ef84177564918ee335cf1
Instruction ID: 4d503fa66744329823625a02f5e0c28ea29ec3ae3b12a1d9745de727acec6098
Opcode Fuzzy Hash: 6c79fe5a7d7b3472bfcda48791bbd579149429a2e15ef84177564918ee335cf1
Instruction Fuzzy Hash: 61F0E562A1E3940FE70757399C111653FECCB1B110B4608E7E884CB253E3419D1483E7

Function 01164B34 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2296793844.0000000001160000.00000040.00000800.00020000.00000000.sdmp, Offset: 01160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_1160000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f05a09641697d0efbba095d72e065b2a65f25c94faf745c0bfa32317c5d661b5
Instruction ID: 05d1daf4d91a22e549095c7b9b5a3ed7691fa4d177185dfeceb63b0728f107a1
Opcode Fuzzy Hash: f05a09641697d0efbba095d72e065b2a65f25c94faf745c0bfa32317c5d661b5
Instruction Fuzzy Hash: 12F0F071909284EEDB15DBB5A8550DC7FB4EF81300B0880EAD05697566E7744609CB41

Function 01165148 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2296793844.0000000001160000.00000040.00000800.00020000.00000000.sdmp, Offset: 01160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_1160000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8b63c9d07d0b50d59055d8a488b802d4a5914f437ed87f41f5b744b9ebdaa422
Instruction ID: 4d4952efda89027337dba13fc614c014d9cc35525863029408360c4ba5066b20
Opcode Fuzzy Hash: 8b63c9d07d0b50d59055d8a488b802d4a5914f437ed87f41f5b744b9ebdaa422
Instruction Fuzzy Hash: B0E09B313001045FC308DB2AEC5885EB7BAFBC9351754443AE50DC3325DE355C058761

Function 011613B0 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2296793844.0000000001160000.00000040.00000800.00020000.00000000.sdmp, Offset: 01160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_1160000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21585f644d89120adeca7e98b3c3d786e104aedde58992cf5a6c40aaab47d74c
Instruction ID: 525e3216c39d8a16dd936c81675e734fde64aec814471606fe672d18414df28e
Opcode Fuzzy Hash: 21585f644d89120adeca7e98b3c3d786e104aedde58992cf5a6c40aaab47d74c
Instruction Fuzzy Hash: 18F0A478640205CFDB18EF65D5A8A6977B5EF88304F104469E40A9F3A5CB7A9C45CF01

Function 01160F28 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2296793844.0000000001160000.00000040.00000800.00020000.00000000.sdmp, Offset: 01160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_1160000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0c1842d2e8f00efeca01a5a3b7a4b38cc66de54183e0d877c9c4bb0ef4b5495a
Instruction ID: f2a21176a288dbd8c4c5e3f39ef4de20ab5177286409f686c4b5b3f8e4066d34
Opcode Fuzzy Hash: 0c1842d2e8f00efeca01a5a3b7a4b38cc66de54183e0d877c9c4bb0ef4b5495a
Instruction Fuzzy Hash: C4E01A30A49188AFCB42DFB4A9624AC7FF9DF4A240B1045EAD84DEB263E6355E09D741

Function 01160F38 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2296793844.0000000001160000.00000040.00000800.00020000.00000000.sdmp, Offset: 01160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_1160000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3869184b5e024ec58f75b6c9ba7ef5b5765482fc07da08f99385f2a9c61d5347
Instruction ID: 9b52a1200beadd93ae9a0d4a41a88f83fd7f83ae2cad87c34b439a1280c6d883
Opcode Fuzzy Hash: 3869184b5e024ec58f75b6c9ba7ef5b5765482fc07da08f99385f2a9c61d5347
Instruction Fuzzy Hash: 30D01230A00108EF8B40DFB8E94195D77F9DF44200B1051A9940DE7211EB315F049B41

Non-executed Functions

Function 01161E2F Relevance: 5.4, Strings: 4, Instructions: 411COMMON

Download Yara Rule

Strings

", xrefs: 01161F97
LR]q, xrefs: 01161E69
LR]q, xrefs: 01161EDF
LR]q, xrefs: 0116213F

Memory Dump Source

Source File: 0000000C.00000002.2296793844.0000000001160000.00000040.00000800.00020000.00000000.sdmp, Offset: 01160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_1160000_Honda.jbxd

Similarity

API ID:
String ID: "$LR]q$LR]q$LR]q
API String ID: 0-2830924732
Opcode ID: d771cd01783435b6317d8e2d0c7e805279ec8c33aeb0fc5bb601c5ae415fe4b9
Instruction ID: 533e483621afe871f4aaca8d3facd4cfc1874778b90b9669414a37a8cfe63a2e
Opcode Fuzzy Hash: d771cd01783435b6317d8e2d0c7e805279ec8c33aeb0fc5bb601c5ae415fe4b9
Instruction Fuzzy Hash: 2CE1E130B042169FDB19CF68C880ABEBBF6FFC8300F148569D505AB292D731D956CB92

Analysis Process: Honda.exePID: 7688, Parent PID: 1028COMMON

Executed Functions

Function 00C12788 Relevance: 2.0, Instructions: 2018COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2379612054.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_c10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b8537eb5b6c9f386b2a26f7d6f5d1338b948f48461a968333f38ede3d09515b9
Instruction ID: 1de5285876b7b432882fb81d89620825e3ac58248f0556f11b3198f17217c4b9
Opcode Fuzzy Hash: b8537eb5b6c9f386b2a26f7d6f5d1338b948f48461a968333f38ede3d09515b9
Instruction Fuzzy Hash: F003EC34A00319CFDB1ADF64DD44B99B7B6FF8A700F118595E5086B2A5CBB1AEC6CB40

Function 00C15A41 Relevance: 1.7, Strings: 1, Instructions: 447COMMON

Download Yara Rule

Strings

$]q, xrefs: 00C15A71

Memory Dump Source

Source File: 0000000E.00000002.2379612054.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_c10000_Honda.jbxd

Similarity

API ID:
String ID: $]q
API String ID: 0-1007455737
Opcode ID: 4cf4bbf33d0cb470849ca1f679bd51ab50cc2a91e8091ff2e7b195809c8b5bca
Instruction ID: c70162cc5a87c9deb8403110c47760e60ee2e55e63799a0491ce48633044f6eb
Opcode Fuzzy Hash: 4cf4bbf33d0cb470849ca1f679bd51ab50cc2a91e8091ff2e7b195809c8b5bca
Instruction Fuzzy Hash: 42F19034B00605DFDB14DF64D984BAEB7F2AFC6704F148429D4169B2A1DB35ED86DB80

Function 00C117C8 Relevance: 2.7, Strings: 2, Instructions: 157COMMON

Download Yara Rule

Strings

Haq, xrefs: 00C1181D
(aq, xrefs: 00C118B1

Memory Dump Source

Source File: 0000000E.00000002.2379612054.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_c10000_Honda.jbxd

Similarity

API ID:
String ID: (aq$Haq
API String ID: 0-3785302501
Opcode ID: b8cd603029745680ecd350de4d0daef0820f8207f42bec8c6e168eb2cda0631d
Instruction ID: bfdb30696a74f7277c50e6a42fb76e5d7897ef75edb39c7c1ea3fa2ad77e7554
Opcode Fuzzy Hash: b8cd603029745680ecd350de4d0daef0820f8207f42bec8c6e168eb2cda0631d
Instruction Fuzzy Hash: 9F51D271E042489FCB05EFB998106EEBFB1EFC6310F14C0AAD559D7291EB344A4ADB91

Function 00C11CC0 Relevance: 2.6, Strings: 2, Instructions: 123COMMON

Download Yara Rule

Strings

$]q, xrefs: 00C11D0E
$]q, xrefs: 00C11D1A

Memory Dump Source

Source File: 0000000E.00000002.2379612054.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_c10000_Honda.jbxd

Similarity

API ID:
String ID: $]q$$]q
API String ID: 0-127220927
Opcode ID: 3d4cb8deb7a827bc6ed5a485d2f26efb58b19c6b3e32396c3a34b2b04fc9b8eb
Instruction ID: a853de36c3f15e69a27630060f4d3ea94d39d44568291dd6dc146011188e07e9
Opcode Fuzzy Hash: 3d4cb8deb7a827bc6ed5a485d2f26efb58b19c6b3e32396c3a34b2b04fc9b8eb
Instruction Fuzzy Hash: 1141DE39A002059FC709EF29E8449DE7BF6EF85310B14C169E81ACB375EB349D4ACB91

Function 00C11B68 Relevance: 1.4, Strings: 1, Instructions: 130COMMON

Download Yara Rule

Strings

tP]q, xrefs: 00C11C43

Memory Dump Source

Source File: 0000000E.00000002.2379612054.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_c10000_Honda.jbxd

Similarity

API ID:
String ID: tP]q
API String ID: 0-2175968468
Opcode ID: 4fdb4b000a7945fbc0e1a7906c06b4ec047074fecd756ec5593446e536d0f6ac
Instruction ID: 9d0a102db119851195080b3793106fc23ab3d355714cc15149451d28da559dfa
Opcode Fuzzy Hash: 4fdb4b000a7945fbc0e1a7906c06b4ec047074fecd756ec5593446e536d0f6ac
Instruction Fuzzy Hash: 3E4113B1A04211CFC708DF78D4589EDBBB1BF46315B1844A8D91A9B271EB39DD82DB81

Function 00C11CB0 Relevance: 1.4, Strings: 1, Instructions: 115COMMON

Download Yara Rule

Strings

$]q, xrefs: 00C11D0E

Memory Dump Source

Source File: 0000000E.00000002.2379612054.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_c10000_Honda.jbxd

Similarity

API ID:
String ID: $]q
API String ID: 0-1007455737
Opcode ID: 5a4e44cecafe3b909d9e24f34449fe66e2fd233bfe83e07e0615a5c439b7831b
Instruction ID: 2a5b6a243bf6521bf69d9ecc4f8bc74a4a7bde4177ff3c7d6831b1df22656380
Opcode Fuzzy Hash: 5a4e44cecafe3b909d9e24f34449fe66e2fd233bfe83e07e0615a5c439b7831b
Instruction Fuzzy Hash: CB41D135B00105DFCB09EF29E8549EE7BB6EF853007158169E819CB274DB349E4ADB91

Function 00C10848 Relevance: 1.4, Strings: 1, Instructions: 115COMMON

Download Yara Rule

Strings

4']q, xrefs: 00C1085B

Memory Dump Source

Source File: 0000000E.00000002.2379612054.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_c10000_Honda.jbxd

Similarity

API ID:
String ID: 4']q
API String ID: 0-1259897404
Opcode ID: b2f59c7dac0aa5e27d1eee82833c7ccf287d4359ec69d9ab69876cafb1d3a79c
Instruction ID: b1ae68d9f73d8a25eaacbca837d60efd8b3a499cce3cd21e32c16d45cb434b4d
Opcode Fuzzy Hash: b2f59c7dac0aa5e27d1eee82833c7ccf287d4359ec69d9ab69876cafb1d3a79c
Instruction Fuzzy Hash: 23419034A002099FCB05EFB8E855BDD7BB2EF85304F208165E105AB265DB74998ADB91

Function 00C10838 Relevance: 1.3, Strings: 1, Instructions: 78COMMON

Download Yara Rule

Strings

4']q, xrefs: 00C1085B

Memory Dump Source

Source File: 0000000E.00000002.2379612054.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_c10000_Honda.jbxd

Similarity

API ID:
String ID: 4']q
API String ID: 0-1259897404
Opcode ID: 7f986d437e89fb9f67e212801099f3b061fcc70e1d9fc4d19daebc6d4d8868c2
Instruction ID: 5e2dc5e7b810828909e8a5a0765c3e585442c33881d2c430c7c7501d79506b81
Opcode Fuzzy Hash: 7f986d437e89fb9f67e212801099f3b061fcc70e1d9fc4d19daebc6d4d8868c2
Instruction Fuzzy Hash: E631A134A40249DFCB09EFA8E894ACD7FB2FF85304F208165D0056B27ADB74998ADB51

Function 00C11B78 Relevance: 1.3, Strings: 1, Instructions: 69COMMON

Download Yara Rule

Strings

tP]q, xrefs: 00C11C43

Memory Dump Source

Source File: 0000000E.00000002.2379612054.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_c10000_Honda.jbxd

Similarity

API ID:
String ID: tP]q
API String ID: 0-2175968468
Opcode ID: cdf3bbcb211099bad4f75e6133463caae76b9ee41f7802856a5010bfb5a941b4
Instruction ID: 13ab418d9e3a6f73fc612ccb04f9dfa1ec62e921430ac7a40fa88dcf1841eb27
Opcode Fuzzy Hash: cdf3bbcb211099bad4f75e6133463caae76b9ee41f7802856a5010bfb5a941b4
Instruction Fuzzy Hash: 21216D70B00116CFCB58EF78D4989ADB7B1AF49704B2044A9D90ADB3B1EB39DD42CB80

Function 00C14F43 Relevance: 1.3, Strings: 1, Instructions: 56COMMON

Download Yara Rule

Strings

`Q]q, xrefs: 00C14FBA

Memory Dump Source

Source File: 0000000E.00000002.2379612054.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_c10000_Honda.jbxd

Similarity

API ID:
String ID: `Q]q
API String ID: 0-1594560043
Opcode ID: f357890d6937d6c88aef48da88991a69aa1c9b3902f3e7bf22044603a3586836
Instruction ID: 8ae5935531e943b2b4867c4c1f43c30addd2f309af386c3c704926915ed00b45
Opcode Fuzzy Hash: f357890d6937d6c88aef48da88991a69aa1c9b3902f3e7bf22044603a3586836
Instruction Fuzzy Hash: 3611D074A442458FDB18EBE5C550BED7BF2AF89300F104029D406AB3A4DB358A46EBA1

Function 00C14F48 Relevance: 1.3, Strings: 1, Instructions: 56COMMON

Download Yara Rule

Strings

`Q]q, xrefs: 00C14FBA

Memory Dump Source

Source File: 0000000E.00000002.2379612054.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_c10000_Honda.jbxd

Similarity

API ID:
String ID: `Q]q
API String ID: 0-1594560043
Opcode ID: d8ce9dbe18c50d10584dbd7548cae87547a3ffb9fafa5b2e1e67c0a89a140f4c
Instruction ID: d23d19193fd76306d41e35dea15658b2bf5a11e7ad290bd8982f2c40e823e5d3
Opcode Fuzzy Hash: d8ce9dbe18c50d10584dbd7548cae87547a3ffb9fafa5b2e1e67c0a89a140f4c
Instruction Fuzzy Hash: A911B674A442158BDB18EBF6C554BEE7BF2AF89300F108029D405B7394DF359E45A7A1

Function 00C11063 Relevance: .3, Instructions: 253COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2379612054.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_c10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f993ef90a3883209708122795e8ddfa39c31ab711374b36ef86c2dfaaff3ef2e
Instruction ID: 43778d9201f0eaadf182c788fc7ea08531ca53578fa79cb2f037c891291d860f
Opcode Fuzzy Hash: f993ef90a3883209708122795e8ddfa39c31ab711374b36ef86c2dfaaff3ef2e
Instruction Fuzzy Hash: 55A18E71E00208DFCB05DFE5D844AEEBBBABF89304F14812AE519E7260DB349986DF50

Function 00C14868 Relevance: .2, Instructions: 237COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2379612054.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_c10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cc00ad5e1a34056a1f7190d20199341ac642c7f071654055bf3f99bc0319cf32
Instruction ID: 8281cc340df6dca13a87bfeb61ceffe5068000795d96d2672947e4ecf401231c
Opcode Fuzzy Hash: cc00ad5e1a34056a1f7190d20199341ac642c7f071654055bf3f99bc0319cf32
Instruction Fuzzy Hash: C4A18D30200605CFC719DF18D594EA9BBFAEF46340F46C5A9E0499B666D730FD89DB84

Function 00C15E28 Relevance: .2, Instructions: 186COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2379612054.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_c10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7e4dd99cbb12f21e82fe2a189f1e02450e677e3f7878564b84ca6cc49fa095ae
Instruction ID: 92eb81ea579cc8a337123ee26d60efea1bafb0067d3c90c61722e966f8862f51
Opcode Fuzzy Hash: 7e4dd99cbb12f21e82fe2a189f1e02450e677e3f7878564b84ca6cc49fa095ae
Instruction Fuzzy Hash: 80618C35B042149FDB04DFA4D884BEEBBF2AF89710F148065E805AB2A1DB349D86DB90

Function 00C12777 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2379612054.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_c10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f54cce10a0faa711d995448e002ee12d4a2855ad51842ef6cd76e3fff9ab35b7
Instruction ID: 8d6ca5c6e7a1bf53d05a98ed8335d8590331fd26144b10201d87cede24d862e3
Opcode Fuzzy Hash: f54cce10a0faa711d995448e002ee12d4a2855ad51842ef6cd76e3fff9ab35b7
Instruction Fuzzy Hash: 3021D236A042048FE714CF65D854BEE7BF5EF46301F058069E519C71A1D734DE94EBA0

Function 00C16060 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2379612054.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_c10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7ee4caf012f5542de392fa420170e35975ec75e749b1226bb1c46d3d3c01c684
Instruction ID: adf856042a90e2639c591303856494b9b0fa906a8ba76a0c95a13b2f6846d234
Opcode Fuzzy Hash: 7ee4caf012f5542de392fa420170e35975ec75e749b1226bb1c46d3d3c01c684
Instruction Fuzzy Hash: 59113271E482445FCB15DB78A894BDE3FB6DFCA304F1540AED0589B282DB71090A8B81

Function 00C15218 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2379612054.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_c10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c33d981c00e6cb227f3a2c5212ca883bcf9407d47793b1810613fe43e78369e7
Instruction ID: d9b8344eef39f3ed658a43ac4703b1b7b3c74dce3a440c2a8710e5144d91923f
Opcode Fuzzy Hash: c33d981c00e6cb227f3a2c5212ca883bcf9407d47793b1810613fe43e78369e7
Instruction Fuzzy Hash: BF012F7AB401218FC719AB3DE844C5A7BEAAF9971431501BAE805DB372CA20EC079B90

Function 00C15228 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2379612054.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_c10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bba84b992a21b21e0b40d3e6fa7a1a1bd46f44efb9a76593182ffddeb34b4583
Instruction ID: 85e06ffaa4a40ac0c0edae6a65b48534380ce0ad4aa5ded49de0f5a76a1a5112
Opcode Fuzzy Hash: bba84b992a21b21e0b40d3e6fa7a1a1bd46f44efb9a76593182ffddeb34b4583
Instruction Fuzzy Hash: FAF0A4767101208FC718AB3DE404C1A77EAAF8972531501B9E805DB334CA31EC029BD0

Function 00C10A98 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2379612054.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_c10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 168e50e47d6f87ad851b60fa98fc9f8b71c809ae95b2e7b917b0beee934be43f
Instruction ID: 2e63db1388a214ba6fc2b19d662a2aed0ced1f9e86fbff5c80c17000a4defee9
Opcode Fuzzy Hash: 168e50e47d6f87ad851b60fa98fc9f8b71c809ae95b2e7b917b0beee934be43f
Instruction Fuzzy Hash: A1F081353043108BDB086B74E8197AE3BA5AB42749F110478A50ACB2B0EBF58CC6F790

Function 00C15139 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2379612054.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_c10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 035889297cbf5a41846f6a29f3319ca73337a4e6ca4ce89892b04e6249d09246
Instruction ID: a500d09429c38516118f86724d175d1b2dbb0dc5dc92bc9109da50199b3641a7
Opcode Fuzzy Hash: 035889297cbf5a41846f6a29f3319ca73337a4e6ca4ce89892b04e6249d09246
Instruction Fuzzy Hash: C4F0BE363491405FC308DB39ECA489EBFB6EFD9210B18806AE40AC72B6DA304C0B9B51

Function 00C10AA8 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2379612054.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_c10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 167c8d5281516f6406ebbe7b9ad3beee4290dae0c049df6698a3628371d2205e
Instruction ID: 281107d7605781a78a237e6529676980c87c6f1e0559bf9a7106b9b09b8447d3
Opcode Fuzzy Hash: 167c8d5281516f6406ebbe7b9ad3beee4290dae0c049df6698a3628371d2205e
Instruction Fuzzy Hash: A8F06D3670432187DB0C6B75E8187AE3A65AB41B49F140478AA0AC72A0EFE5CCC6F791

Function 00C14B34 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2379612054.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_c10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 735dc15bd82b844d5bf3c39b5cd846db287c0b51fdcaab52f11abea3e1a9cb17
Instruction ID: 658c900435c7e4e9db4385ea858a94ffa4897880fc774e6813451a99bdc1ab19
Opcode Fuzzy Hash: 735dc15bd82b844d5bf3c39b5cd846db287c0b51fdcaab52f11abea3e1a9cb17
Instruction Fuzzy Hash: D4F0F0B2D09344EFCB15DBB6A8584EC7FB0EF82304B1480EAD05987535E6748649EB51

Function 00C15148 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2379612054.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_c10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5cd16a47e58a8e2684bdb7e98aa364cef2c006d3d0621a97449ae511e488b10b
Instruction ID: 98d31772106357348ffe0fcc7e18fd8fbab1671223ed0fb3edfa71430e08422e
Opcode Fuzzy Hash: 5cd16a47e58a8e2684bdb7e98aa364cef2c006d3d0621a97449ae511e488b10b
Instruction Fuzzy Hash: 7AE09B363041045BC308DB29EC54C9EB7FAFBC93517544439E50DC3325DE355C068761

Function 00C113B0 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2379612054.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_c10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 35b1c160d4978cbc1ab2f8b6280c303d1cac0a9c5a09cdc8ce9983cb9710c1ed
Instruction ID: dc578b4dad26629df396ff2402d938410fc0167c13b282f5c9415df5a0aba964
Opcode Fuzzy Hash: 35b1c160d4978cbc1ab2f8b6280c303d1cac0a9c5a09cdc8ce9983cb9710c1ed
Instruction Fuzzy Hash: C3F0B778640205CFDB18EF74D569EA87BB2EF49308F204469E5069B3B5CB79D846EF01

Function 00C10F28 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2379612054.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_c10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8a8516bba78413f0c361dc6f00c8d7927eb6039f15db8559f3be701e7e9dfaae
Instruction ID: 2896a8a4ea500348be56d51fa6731575fb838190b9651450c71bd74cf27e8614
Opcode Fuzzy Hash: 8a8516bba78413f0c361dc6f00c8d7927eb6039f15db8559f3be701e7e9dfaae
Instruction Fuzzy Hash: 91E09235A892489FCB02DBB4A9519DC7FB5DF56204B1081AAD809D7262E6314E0A9B40

Function 00C10F70 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2379612054.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_c10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 114e379866b7d12b4666d34fee2dee9bcb15e9635e92ce1573bd9f8bb87fecf7
Instruction ID: b0b94e1d7d310477b9ad74fc11a8dd4d7463b8380315ac10f203421ab9d39ced
Opcode Fuzzy Hash: 114e379866b7d12b4666d34fee2dee9bcb15e9635e92ce1573bd9f8bb87fecf7
Instruction Fuzzy Hash: 67E0C23274E7900FC312867878116D97BE44B53354B2504FBF886C72A2E2808C85A7C1

Function 00C10F38 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.2379612054.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_c10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a2a85997682d4cd66ffd183e9aea1b05b5190d632fc0ac22b1461d2f756af591
Instruction ID: 3d315f465b6bed494648e18bdabb5f053d1897f5f32a963eb57614eaff34e1aa
Opcode Fuzzy Hash: a2a85997682d4cd66ffd183e9aea1b05b5190d632fc0ac22b1461d2f756af591
Instruction Fuzzy Hash: C4D01231A00108EF8B04DFB4E94195D7BF9DF44204B1081A9940CD3220EB315F049B40

Non-executed Functions

Function 00C11E2F Relevance: 5.4, Strings: 4, Instructions: 411COMMON

Download Yara Rule

Strings

LR]q, xrefs: 00C1213F
LR]q, xrefs: 00C11EDF
", xrefs: 00C11F97
LR]q, xrefs: 00C11E69

Memory Dump Source

Source File: 0000000E.00000002.2379612054.0000000000C10000.00000040.00000800.00020000.00000000.sdmp, Offset: 00C10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_c10000_Honda.jbxd

Similarity

API ID:
String ID: "$LR]q$LR]q$LR]q
API String ID: 0-2830924732
Opcode ID: dbcec16e092192f33dda18cd3a75a4d1ddbf040beac8a2d2e96142e6e7a85b72
Instruction ID: 83339f02f1e7dffd0c29e22c43542ea4c6ff731ca10d11402e2176c48a84c3bc
Opcode Fuzzy Hash: dbcec16e092192f33dda18cd3a75a4d1ddbf040beac8a2d2e96142e6e7a85b72
Instruction Fuzzy Hash: 1EE1D234B002069FDB14DFA8C880BEEB7B2EF8A304F248569D515DB291D734DE86E791

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report qBtDOzhQnS.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_qBtDOzhQnS.exe_61834c8bbb89331017ec34ae3ed187d76665b41_0168f847_d47be348-6fc8-4099-aeaa-e67d31b84c5c\Report.wer

C:\ProgramData\Microsoft\Windows\WER\Temp\WER9BF.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WERA1E.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WERA4E.tmp.xml

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Honda.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\MSBuild.exe.log

C:\Users\user\AppData\Local\Temp\Honda\Honda.exe

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleApp_55b285c7db754d2a97daaba8c7555d59.lnk

C:\Windows\appcompat\Programs\Amcache.hve

\Device\ConDrv

Static File Info

General

File Icon

Static PE Info

General

Authenticode Signature

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Windows Analysis Report
qBtDOzhQnS.exe

Function 00242F7C Relevance: 1.6, APIs: 1, Instructions: 55
memoryCOMMON

Function 0025C9D4 Relevance: 7.7, APIs: 5, Instructions: 202
COMMON

Function 0025DDAA Relevance: 3.2, APIs: 2, Instructions: 177
COMMON

Function 0025762C Relevance: 3.0, APIs: 2, Instructions: 34
COMMONLIBRARYCODE

Function 0025D9AE Relevance: 1.6, APIs: 1, Instructions: 147
COMMON

Function 002457E2 Relevance: 1.5, APIs: 1, Instructions: 17
COMMON