Edit tour

Windows Analysis Report
juwXcVX5AK.exe

Overview

General Information

Sample name:	juwXcVX5AK.exe renamed because original name is a hash value
Original sample name:	0bdab914290343e6ab408211372e1c1f.exe
Analysis ID:	1540305
MD5:	0bdab914290343e6ab408211372e1c1f
SHA1:	989b6da6765a24d553afb4045f3309515872f946
SHA256:	0a87f74121279e7b54007f092a1209b2424c69ed6242286dfb0159e453c5c9dc
Tags:	exeuser-abuse_ch
Infos:

Detection

Score:	80
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

AI detected suspicious sample

Allocates memory in foreign processes

Injects a PE file into a foreign processes

Machine Learning detection for sample

Sigma detected: New RUN Key Pointing to Suspicious Folder

Writes to foreign memory regions

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks if the current process is being debugged

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates a start menu entry (Start Menu\Programs\Startup)

Detected potential crypto function

Drops PE files

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found evasive API chain (date check)

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

One or more processes crash

PE / OLE file has an invalid certificate

PE file contains sections with non-standard names

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Startup Folder File Write

Stores files to the Windows start menu directory

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

juwXcVX5AK.exe (PID: 6244 cmdline: "C:\Users\user\Desktop\juwXcVX5AK.exe" MD5: 0BDAB914290343E6AB408211372E1C1F)

MSBuild.exe (PID: 1052 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

MSBuild.exe (PID: 5512 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

MSBuild.exe (PID: 6812 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

Honda.exe (PID: 4040 cmdline: "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

conhost.exe (PID: 5048 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

WerFault.exe (PID: 4024 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 6244 -s 276 MD5: C31336C1EFC2CCB44B4326EA793040F2)

Honda.exe (PID: 2448 cmdline: "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

conhost.exe (PID: 4420 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

Honda.exe (PID: 5584 cmdline: "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

conhost.exe (PID: 5544 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

Honda.exe (PID: 5100 cmdline: "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

conhost.exe (PID: 5532 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe", EventID: 13, EventType: SetValue, Image: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe, ProcessId: 6812, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\GoogleApp_edfc1216cedd4ba683411b06977550b7

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe", EventID: 13, EventType: SetValue, Image: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe, ProcessId: 6812, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\GoogleApp_edfc1216cedd4ba683411b06977550b7

Sigma detected: Startup Folder File Write

Source: File created

Author: Roberto Rodriguez (Cyb3rWard0g), OTR (Open Threat Research): Data: EventID: 11, Image: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe, ProcessId: 6812, TargetFilename: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleApp_d00173b1dd6d48babf9585781e66139c.lnk

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: juwXcVX5AK.exe

Avira: detected

Multi AV Scanner detection for submitted file

Source: juwXcVX5AK.exe

ReversingLabs: Detection: 68%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Machine Learning detection for sample

Source: juwXcVX5AK.exe

Joe Sandbox ML: detected

Source: juwXcVX5AK.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown

HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49718 version: TLS 1.2

Source: juwXcVX5AK.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source:

Binary string: f:\binaries\Intermediate\ndp_msbuild\xmakecommandline.csproj_1613737345\objr\x86\MSBuild.pdb source: Honda.exe, 00000008.00000000.2141415292.0000000000932000.00000002.00000001.01000000.00000008.sdmp, Honda.exe.4.dr

Source: C:\Users\user\Desktop\juwXcVX5AK.exe

Code function: 0_2_00F5D2FE FindFirstFileExW,

0_2_00F5D2FE

Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 104.18.38.233
Source: unknown	TCP traffic detected without corresponding DNS query: 104.18.38.233
Source: unknown	TCP traffic detected without corresponding DNS query: 104.18.38.233
Source: unknown	TCP traffic detected without corresponding DNS query: 104.18.38.233
Source: unknown	TCP traffic detected without corresponding DNS query: 104.18.38.233
Source: unknown	TCP traffic detected without corresponding DNS query: 104.18.38.233

Source: juwXcVX5AK.exe	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl04
Source: juwXcVX5AK.exe	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y
Source: juwXcVX5AK.exe	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0
Source: juwXcVX5AK.exe	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z
Source: juwXcVX5AK.exe	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0
Source: juwXcVX5AK.exe	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#
Source: juwXcVX5AK.exe	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#
Source: juwXcVX5AK.exe	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#
Source: juwXcVX5AK.exe	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#
Source: juwXcVX5AK.exe	String found in binary or memory: http://ocsp.comodoca.com0
Source: juwXcVX5AK.exe	String found in binary or memory: http://ocsp.sectigo.com0
Source: Amcache.hve.7.dr	String found in binary or memory: http://upx.sf.net
Source: juwXcVX5AK.exe	String found in binary or memory: https://sectigo.com/CPS0

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443

Source: unknown

HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49718 version: TLS 1.2

Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00F610A3	0_2_00F610A3
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00F5F840	0_2_00F5F840
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00F42805	0_2_00F42805
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00F4F9EC	0_2_00F4F9EC
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00F42A0F	0_2_00F42A0F
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00F49B05	0_2_00F49B05
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00F57C32	0_2_00F57C32
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00F5943C	0_2_00F5943C
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00F52D90	0_2_00F52D90
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00F4FD34	0_2_00F4FD34
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4_2_01063108	4_2_01063108
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4_2_01069A30	4_2_01069A30
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4_2_01060848	4_2_01060848
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4_2_010642E8	4_2_010642E8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4_2_010606FF	4_2_010606FF
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 8_2_01192788	8_2_01192788
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 8_2_01195A41	8_2_01195A41
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 8_2_01191E2F	8_2_01191E2F
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 10_2_01432788	10_2_01432788
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 10_2_01435A41	10_2_01435A41
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 10_2_01431E2F	10_2_01431E2F
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 13_2_02F15A41	13_2_02F15A41
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 13_2_02F12788	13_2_02F12788
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 13_2_02F11CC0	13_2_02F11CC0
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 15_2_023B5A41	15_2_023B5A41
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 15_2_023B2788	15_2_023B2788
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 15_2_023B1E2F	15_2_023B1E2F

Source: C:\Users\user\Desktop\juwXcVX5AK.exe

Code function: String function: 00F4A280 appears 50 times

Source: C:\Users\user\Desktop\juwXcVX5AK.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 6244 -s 276

Source: juwXcVX5AK.exe

Static PE information: invalid certificate

Source: juwXcVX5AK.exe	Binary or memory string: OriginalFilename vs juwXcVX5AK.exe
Source: juwXcVX5AK.exe, 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameLKSM.exe< vs juwXcVX5AK.exe

Source: juwXcVX5AK.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: Honda.exe, 0000000A.00000002.2265812530.0000000002EB1000.00000004.00000800.00020000.00000000.sdmp, Honda.exe, 0000000D.00000002.2346577140.0000000003071000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: q0C:\Users\user\AppData\Local\Temp\Honda\*.sln
Source: Honda.exe, 00000008.00000002.2154680304.0000000002DF1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: C:\Users\user\Desktop\*.sln
Source: Honda.exe, 0000000F.00000002.2427428463.0000000002411000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: qUC:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.sln
Source: Honda.exe, 00000008.00000000.2141415292.0000000000932000.00000002.00000001.01000000.00000008.sdmp, Honda.exe.4.dr	Binary or memory string: .configAMSBUILDDIRECTORYDELETERETRYCOUNTCMSBUILDDIRECTORYDELETRETRYTIMEOUT.sln
Source: Honda.exe, 00000008.00000000.2141415292.0000000000932000.00000002.00000001.01000000.00000008.sdmp, Honda.exe.4.dr	Binary or memory string: MSBuild MyApp.sln /t:Rebuild /p:Configuration=Release
Source: Honda.exe, 00000008.00000000.2141415292.0000000000932000.00000002.00000001.01000000.00000008.sdmp, Honda.exe.4.dr	Binary or memory string: f:\binaries\Intermediate\ndp_msbuild\xmakecommandline.csproj_1613737345\objr\x86\MSBuild.pdb
Source: Honda.exe, 00000008.00000002.2153917848.0000000000E28000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\C:\Users\user\Desktop\<.slnBj
Source: Honda.exe, 00000008.00000000.2141415292.0000000000932000.00000002.00000001.01000000.00000008.sdmp, Honda.exe, 00000008.00000002.2154680304.0000000002DF1000.00000004.00000800.00020000.00000000.sdmp, Honda.exe, 0000000A.00000002.2265812530.0000000002EB1000.00000004.00000800.00020000.00000000.sdmp, Honda.exe, 0000000D.00000002.2346577140.0000000003071000.00000004.00000800.00020000.00000000.sdmp, Honda.exe, 0000000F.00000002.2427428463.0000000002411000.00000004.00000800.00020000.00000000.sdmp, Honda.exe.4.dr	Binary or memory string: *.sln
Source: Honda.exe, 00000008.00000000.2141415292.0000000000932000.00000002.00000001.01000000.00000008.sdmp, Honda.exe.4.dr	Binary or memory string: MSBuild MyApp.csproj /t:Clean
Source: Honda.exe, 00000008.00000000.2141415292.0000000000932000.00000002.00000001.01000000.00000008.sdmp, Honda.exe.4.dr	Binary or memory string: /ignoreprojectextensions:.sln
Source: Honda.exe, 00000008.00000000.2141415292.0000000000932000.00000002.00000001.01000000.00000008.sdmp, Honda.exe.4.dr	Binary or memory string: MSBUILD : error MSB1048: Solution files cannot be debugged directly. Run MSBuild first with an environment variable MSBUILDEMITSOLUTION=1 to create a corresponding ".sln.metaproj" file. Then debug that.

Source: classification engine

Classification label: mal80.evad.winEXE@17/13@0/0

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleApp_d00173b1dd6d48babf9585781e66139c.lnk

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Mutant created: NULL
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess6244
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5048:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5544:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4420:120:WilError_03

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

File created: C:\Users\user\AppData\Local\Temp\Honda

Jump to behavior

Source: juwXcVX5AK.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\juwXcVX5AK.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: juwXcVX5AK.exe

ReversingLabs: Detection: 68%

Source: unknown	Process created: C:\Users\user\Desktop\juwXcVX5AK.exe "C:\Users\user\Desktop\juwXcVX5AK.exe"
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 6244 -s 276
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process created: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"	Jump to behavior
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"	Jump to behavior
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process created: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"	Jump to behavior

Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: scrrun.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{72C24DD5-D70A-438B-8A42-98424B88AFB8}\InProcServer32

Jump to behavior

Source: GoogleApp_d00173b1dd6d48babf9585781e66139c.lnk.4.dr

LNK file: ..\..\..\..\..\..\Local\Temp\Honda\Honda.exe

Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: juwXcVX5AK.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: juwXcVX5AK.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: juwXcVX5AK.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: juwXcVX5AK.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: juwXcVX5AK.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: juwXcVX5AK.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: juwXcVX5AK.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source: juwXcVX5AK.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:

Source: juwXcVX5AK.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: juwXcVX5AK.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: juwXcVX5AK.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: juwXcVX5AK.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: juwXcVX5AK.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Source: juwXcVX5AK.exe

Static PE information: section name: .bsp

Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00F4992C push ecx; ret	0_2_00F4993F
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00F42F17 push eax; ret	0_2_00F42F76
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4_2_01067EDE pushad ; iretd	4_2_01067EDF

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

File created: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe

Jump to dropped file

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleApp_d00173b1dd6d48babf9585781e66139c.lnk

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleApp_d00173b1dd6d48babf9585781e66139c.lnk

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run GoogleApp_edfc1216cedd4ba683411b06977550b7			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run GoogleApp_edfc1216cedd4ba683411b06977550b7			Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 1060000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 2A00000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 4A00000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 1190000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 2DF0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 2C00000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 1430000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 2EB0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 2BF0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 2F10000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 3070000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 5070000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 2370000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 2410000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 4410000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Window / User API: threadDelayed 438

Jump to behavior

Source: C:\Users\user\Desktop\juwXcVX5AK.exe

Evasive API call chain: GetSystemTimeAsFileTime,DecisionNodes

graph_0-19966

Source: C:\Users\user\Desktop\juwXcVX5AK.exe

API coverage: 3.8 %

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1176	Thread sleep count: 438 > 30	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 1340	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe TID: 5256	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe TID: 5092	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe TID: 5936	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe TID: 6556	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Users\user\Desktop\juwXcVX5AK.exe

Code function: 0_2_00F5D2FE FindFirstFileExW,

0_2_00F5D2FE

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior

Source: Amcache.hve.7.dr	Binary or memory string: VMware
Source: Amcache.hve.7.dr	Binary or memory string: VMware Virtual USB Mouse
Source: Amcache.hve.7.dr	Binary or memory string: vmci.syshbin
Source: Amcache.hve.7.dr	Binary or memory string: VMware, Inc.
Source: Amcache.hve.7.dr	Binary or memory string: VMware20,1hbin@
Source: Amcache.hve.7.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: Amcache.hve.7.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.7.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.7.dr	Binary or memory string: VMware-42 27 80 4d 99 30 0e 9c-c1 9b 2a 23 ea 1f c4 20
Source: Amcache.hve.7.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.7.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: Amcache.hve.7.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.7.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.7.dr	Binary or memory string: vmci.sys
Source: Amcache.hve.7.dr	Binary or memory string: vmci.syshbin`
Source: Amcache.hve.7.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: Amcache.hve.7.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.7.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.7.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.7.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.7.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: Amcache.hve.7.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: Amcache.hve.7.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.7.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.7.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.7.dr	Binary or memory string: VMware VMCI Bus Device
Source: Amcache.hve.7.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.7.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: Amcache.hve.7.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563

Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Process queried: DebugPort			Jump to behavior
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Process queried: DebugPort			Jump to behavior

Source: C:\Users\user\Desktop\juwXcVX5AK.exe

Code function: 0_2_00F42F17 LdrInitializeThunk,

0_2_00F42F17

Source: C:\Users\user\Desktop\juwXcVX5AK.exe

Code function: 0_2_00F4A085 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

0_2_00F4A085

Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00F42F7C mov edi, dword ptr fs:[00000030h]	0_2_00F42F7C
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00F53BBE mov ecx, dword ptr fs:[00000030h]	0_2_00F53BBE
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00F5CC6F mov eax, dword ptr fs:[00000030h]	0_2_00F5CC6F

Source: C:\Users\user\Desktop\juwXcVX5AK.exe

Code function: 0_2_00F5E177 GetProcessHeap,

0_2_00F5E177

Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00F4A085 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_00F4A085
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00F4A212 SetUnhandledExceptionFilter,	0_2_00F4A212
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00F50B69 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_00F50B69
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00F49E74 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_00F49E74

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Allocates memory in foreign processes

Source: C:\Users\user\Desktop\juwXcVX5AK.exe

Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000 protect: page execute and read and write

Jump to behavior

Injects a PE file into a foreign processes

Source: C:\Users\user\Desktop\juwXcVX5AK.exe

Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000 value starts with: 4D5A

Jump to behavior

Writes to foreign memory regions

Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000	Jump to behavior
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 402000	Jump to behavior
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 410000	Jump to behavior
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 412000	Jump to behavior
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 8D5008	Jump to behavior

Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"	Jump to behavior
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"	Jump to behavior
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process created: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"	Jump to behavior

Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: EnumSystemLocalesW,	0_2_00F6007C
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: EnumSystemLocalesW,	0_2_00F60031
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: EnumSystemLocalesW,	0_2_00F57026
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,	0_2_00F601A2
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: EnumSystemLocalesW,	0_2_00F60117
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: GetLocaleInfoW,	0_2_00F603F5
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: GetLocaleInfoW,	0_2_00F574EF
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: GetACP,IsValidCodePage,GetLocaleInfoW,	0_2_00F5FD8F
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	0_2_00F6051E
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	0_2_00F606F3
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: GetLocaleInfoW,	0_2_00F60624

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\juwXcVX5AK.exe

Code function: 0_2_00F4A2C5 GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

0_2_00F4A2C5

Source: Amcache.hve.7.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.7.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.7.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.7.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23090.2008-0\msmpeng.exe
Source: Amcache.hve.7.dr	Binary or memory string: MsMpEng.exe

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Native API	21 Registry Run Keys / Startup Folder	311 Process Injection	1 Masquerading	OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	21 Registry Run Keys / Startup Folder	1 Disable or Modify Tools	LSASS Memory	41 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	1 Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	41 Virtualization/Sandbox Evasion	Security Account Manager	41 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	Steganography	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	311 Process Injection	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	3 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Obfuscated Files or Information	Cached Domain Credentials	22 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label
juwXcVX5AK.exe	68%	ReversingLabs	Win32.Trojan.LummaC
juwXcVX5AK.exe	100%	Avira	TR/Kryptik.uxqhb
juwXcVX5AK.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	0%	ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0	0%	URL Reputation	safe
http://upx.sf.net	0%	URL Reputation	safe
https://sectigo.com/CPS0	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0	0%	URL Reputation	safe
http://ocsp.sectigo.com0	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#	juwXcVX5AK.exe	false	URL Reputation: safe	unknown
http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0	juwXcVX5AK.exe	false	URL Reputation: safe	unknown
http://upx.sf.net	Amcache.hve.7.dr	false	URL Reputation: safe	unknown
https://sectigo.com/CPS0	juwXcVX5AK.exe	false	URL Reputation: safe	unknown
http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#	juwXcVX5AK.exe	false	URL Reputation: safe	unknown
http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#	juwXcVX5AK.exe	false	URL Reputation: safe	unknown
http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y	juwXcVX5AK.exe	false	URL Reputation: safe	unknown
http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0	juwXcVX5AK.exe	false	URL Reputation: safe	unknown
http://ocsp.sectigo.com0	juwXcVX5AK.exe	false	URL Reputation: safe	unknown
http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z	juwXcVX5AK.exe	false	URL Reputation: safe	unknown
http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#	juwXcVX5AK.exe	false	URL Reputation: safe	unknown

World Map of Contacted IPs

⊘No contacted IP infos

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540305
Start date and time:	2024-10-23 17:03:05 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 46s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	juwXcVX5AK.exe renamed because original name is a hash value
Original Sample Name:	0bdab914290343e6ab408211372e1c1f.exe
Detection:	MAL
Classification:	mal80.evad.winEXE@17/13@0/0
EGA Information:	Successful, ratio: 16.7%
HCA Information:	Successful, ratio: 91% Number of executed functions: 140 Number of non-executed functions: 53
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 40.126.32.134, 40.126.32.136, 40.126.32.138, 20.190.160.22, 20.190.160.20, 40.126.32.74, 20.190.160.14, 40.126.32.68, 40.113.103.199, 192.229.221.95, 20.189.173.22, 199.232.214.172, 4.175.87.197, 40.69.42.241, 4.245.163.56
Excluded domains from analysis (whitelisted): prdv4a.aadg.msidentity.com, client.wns.windows.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, slscr.update.microsoft.com, otelrules.afd.azureedge.net, www.tm.v4.a.prd.aadg.trafficmanager.net, onedsblobprdwus17.westus.cloudapp.azure.com, ctldl.windowsupdate.com, login.msa.msidentity.com, fe3cr.delivery.mp.microsoft.com, wns.notify.trafficmanager.net, fe3.delivery.mp.microsoft.com, ocsp.digicert.com, login.live.com, ocsp.edge.digicert.com, blobcollector.events.data.trafficmanager.net, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, azureedge-t-prod.trafficmanager.net, umwatson.events.data.microsoft.com, wu-b-net.trafficmanager.net, www.tm.lg.prod.aadmsa.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Execution Graph export aborted for target Honda.exe, PID 2448 because it is empty
Execution Graph export aborted for target Honda.exe, PID 4040 because it is empty
Execution Graph export aborted for target Honda.exe, PID 5100 because it is empty
Execution Graph export aborted for target Honda.exe, PID 5584 because it is empty
Execution Graph export aborted for target MSBuild.exe, PID 6812 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
VT rate limit hit for: juwXcVX5AK.exe

Simulations

Behavior and APIs

Time	Type	Description
11:03:56	API Interceptor	1x Sleep call for process: MSBuild.exe modified
11:04:01	API Interceptor	1x Sleep call for process: WerFault.exe modified
17:04:01	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run GoogleApp_edfc1216cedd4ba683411b06977550b7 "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
17:04:09	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run GoogleApp_edfc1216cedd4ba683411b06977550b7 "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
17:04:17	Autostart	Run: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleApp_d00173b1dd6d48babf9585781e66139c.lnk

Joe Sandbox View / Context

IPs

⊘No context

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0017.t-0009.t-msedge.net	qBtDOzhQnS.exe	Get hash	malicious	Unknown	Browse	13.107.246.45
	KO8mPIAMHh.exe	Get hash	malicious	Unknown	Browse	13.107.246.45
	otq9AG1EIk.exe	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://api-restauration.basiic.net/fWmcv/	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://1drv.ms/o/c/6c73e1f3356d6c81/EvfBo1LISVpEg8JGFA7u8GsBL0LmooIAfd5Q39ROhQ0Lhw?e=ZTugWV	Get hash	malicious	HtmlDropper	Browse	13.107.246.45
	roquette October.pdf	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	13.107.246.45
	email3.zip	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	17296647868999e9ff16d1142358270a9bb6f9c24ecf80decc9807b9c07915c5b4d8998fe0763.dat-decoded.exe	Get hash	malicious	PureLog Stealer, zgRAT	Browse	13.107.246.45
	172966479269a7051532d8beea04d9546bd0c0aa8d447d08a4733d3eae1e222b2fd27f6742927.dat-decoded.exe	Get hash	malicious	Remcos	Browse	13.107.246.45
fp2e7a.wpc.phicdn.net	qBtDOzhQnS.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	https://email.email.pandadoc.net/c/eJxUkMtu2zoQhp9G3NkQhxQlLbRIjo8QpKjRS5qi3QTD4TCmZYuyRNm1nr4w0PSyGwzmG3z_7xprlPWVcJHmI_fpJbjmguOnLn78cm0vTw-4fw8_dttdENzIEmoji9oYsWsAtST2VKmiVOSoJqdyVNYa9pUnKUIDOWiZA0hTgDZrUNoXnphIopaly3TORwyH9YC9Qxdp3XMSYXpJIxKjPXCTxpnFodmlNEyZusugzaDFYfiDUDxm0L7pZ9CeIVNtih33mdpIlF4hGzaGIM8ta2mV83UNlbFYlJCbQhsoM9WKPqbgA2EKsb_VACXX1jKtlM9hpQHcqiKvVsZXuvB16WTBIo6v2IflN7T_8Ly_7-p6G_bz4wbM8n1Sp6MYG7ePPU-Zzu186Pg0H4abuhj5HKZfrF4mPLvT5vndMpR0h183E0MpUvOW7q9xlXB85X820-3i3IC4xLGbBiS-Pf3v-o2eUuge_l-21bG_2vt-fvz8MwAA__9XraZ6	Get hash	malicious	Unknown	Browse	192.229.221.95
	ufp4rvU3SP.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	igCCUqSW2T.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	tfduJDS9iM.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	otq9AG1EIk.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	KO8mPIAMHh.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	otq9AG1EIk.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	KO8mPIAMHh.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	https://1drv.ms/o/c/6c73e1f3356d6c81/EvfBo1LISVpEg8JGFA7u8GsBL0LmooIAfd5Q39ROhQ0Lhw?e=ZTugWV	Get hash	malicious	HtmlDropper	Browse	192.229.221.95
bg.microsoft.map.fastly.net	roquette October.pdf	Get hash	malicious	HTMLPhisher	Browse	199.232.214.172
	http://wxqlb.ecobusinessegypt.com/4Upeae17759oIun1207nsacmhsouq29959VLTMIPDLABHITRZ3224VGST20749x12	Get hash	malicious	Unknown	Browse	199.232.214.172
	https://hnamedmr.ukremediatlon.co.uk/LVGwXwqP	Get hash	malicious	Unknown	Browse	199.232.210.172
	https://clinicaotoface1.websiteseguro.com/no/ai/	Get hash	malicious	Unknown	Browse	199.232.210.172
	file.exe	Get hash	malicious	Unknown	Browse	199.232.214.172
	Jwhite Pay Increase EFile997843.pdf	Get hash	malicious	Unknown	Browse	199.232.210.172
	https://get.massive.io/01JAV1F4JHAVFK2T933H9X3447?secret=XXfezwrLxDLZFdqU	Get hash	malicious	Unknown	Browse	199.232.210.172
	SecuriteInfo.com.Win32.RATX-gen.24741.12192.exe	Get hash	malicious	Unknown	Browse	199.232.210.172
	SecuriteInfo.com.Trojan.PackedNET.3087.23336.17285.exe	Get hash	malicious	Unknown	Browse	199.232.210.172
	SecuriteInfo.com.Win32.MalwareX-gen.13871.31396.exe	Get hash	malicious	Unknown	Browse	199.232.210.172

ASNs

⊘No context

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	qBtDOzhQnS.exe	Get hash	malicious	Unknown	Browse	13.107.246.45
	sample.pdf	Get hash	malicious	HtmlDropper	Browse	13.107.246.45
	https://email.email.pandadoc.net/c/eJxUkMtu2zoQhp9G3NkQhxQlLbRIjo8QpKjRS5qi3QTD4TCmZYuyRNm1nr4w0PSyGwzmG3z_7xprlPWVcJHmI_fpJbjmguOnLn78cm0vTw-4fw8_dttdENzIEmoji9oYsWsAtST2VKmiVOSoJqdyVNYa9pUnKUIDOWiZA0hTgDZrUNoXnphIopaly3TORwyH9YC9Qxdp3XMSYXpJIxKjPXCTxpnFodmlNEyZusugzaDFYfiDUDxm0L7pZ9CeIVNtih33mdpIlF4hGzaGIM8ta2mV83UNlbFYlJCbQhsoM9WKPqbgA2EKsb_VACXX1jKtlM9hpQHcqiKvVsZXuvB16WTBIo6v2IflN7T_8Ly_7-p6G_bz4wbM8n1Sp6MYG7ePPU-Zzu186Pg0H4abuhj5HKZfrF4mPLvT5vndMpR0h183E0MpUvOW7q9xlXB85X820-3i3IC4xLGbBiS-Pf3v-o2eUuge_l-21bG_2vt-fvz8MwAA__9XraZ6	Get hash	malicious	Unknown	Browse	13.107.246.45
	ufp4rvU3SP.exe	Get hash	malicious	Unknown	Browse	13.107.246.45
	igCCUqSW2T.exe	Get hash	malicious	Unknown	Browse	13.107.246.45
	otq9AG1EIk.exe	Get hash	malicious	Unknown	Browse	13.107.246.45
	http://docusign.net	Get hash	malicious	Unknown	Browse	13.107.246.45
	KO8mPIAMHh.exe	Get hash	malicious	Unknown	Browse	13.107.246.45
	tfduJDS9iM.exe	Get hash	malicious	Unknown	Browse	13.107.246.45
	otq9AG1EIk.exe	Get hash	malicious	Unknown	Browse	13.107.246.45

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	qBtDOzhQnS.exe	Get hash	malicious	Unknown	Browse
	ufp4rvU3SP.exe	Get hash	malicious	Unknown	Browse
	igCCUqSW2T.exe	Get hash	malicious	Unknown	Browse
	tfduJDS9iM.exe	Get hash	malicious	Unknown	Browse
	otq9AG1EIk.exe	Get hash	malicious	Unknown	Browse
	KO8mPIAMHh.exe	Get hash	malicious	Unknown	Browse
	tfduJDS9iM.exe	Get hash	malicious	Unknown	Browse
	otq9AG1EIk.exe	Get hash	malicious	Unknown	Browse
	KO8mPIAMHh.exe	Get hash	malicious	Unknown	Browse
	76Kobq8opu.exe	Get hash	malicious	Unknown	Browse

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_juwXcVX5AK.exe_bfe27b7320ad53d947e34bb313186fe1a87ede_980bb77e_75f5b610-552d-4915-9cc3-ff29b87733dc\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.6561871318829428
Encrypted:	false
SSDEEP:	192:vOOpLB6BlGB1YS80BU/cQMjhzuiFKZ24IO8T1IOc:Zz6qzR3BU/wjhzuiFKY4IO8+z
MD5:	BD29EF40D73D58B17757FD86B5D0BFD5
SHA1:	03B0A944E2794E694F121B658861B55867E5B342
SHA-256:	F34FA4D86DD03E50510374E6EF419F1C71E9445AEF2B2BEFE9F1EACA9AB5CEFB
SHA-512:	874F2EB6995F44FCA7241D3BC53AD7C3E55A48F89F3702FB56B53CD3D637B200BA435CDDDCCEF7E8F3BD9FAEE65A482A52883DF35672D73513BA497ECF62BD0E
Malicious:	true
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.B.E.X.....E.v.e.n.t.T.i.m.e.=.1.3.3.7.4.1.6.9.4.3.7.0.6.5.0.4.9.1.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.7.4.1.6.9.4.3.8.2.8.3.7.9.4.0.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.7.5.f.5.b.6.1.0.-.5.5.2.d.-.4.9.1.5.-.9.c.c.3.-.f.f.2.9.b.8.7.7.3.3.d.c.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.b.c.5.a.7.4.8.a.-.4.e.f.e.-.4.9.5.6.-.b.0.c.5.-.2.3.f.f.7.6.7.3.4.3.3.7.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.j.u.w.X.c.V.X.5.A.K...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.8.6.4.-.0.0.0.1.-.0.0.1.5.-.1.9.4.a.-.2.2.c.8.5.c.2.5.d.b.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.2.9.0.a.9.8.d.0.7.6.b.3.7.e.f.d.e.d.1.8.4.8.8.d.d.2.0.6.9.2.2.b.0.0.0.0.f.f.f.f.!.0.0.0.0.9.8.9.b.6.d.a.6.7.6.5.a.2.4.d.5.5.3.a.f.b.4.0.4.5.f.3.3.0.9.5.1.5.8.7.2.f.9.4.6.!.j.u.w.X.c.V.X.5.A.K...e.x.e.....T.a.r.g.e.t.A.p.p.V.e.r.=.2.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER7A4E.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 14 streams, Wed Oct 23 15:03:57 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	44452
Entropy (8bit):	1.595594180506171
Encrypted:	false
SSDEEP:	96:5a8R6onPgTc6snWkci77EUIbpf72XGUKS9vSbcrKVkjS68LWx4Wqx9avYfCo44Pm:j8OK2cOr59vMqF6Ro+e/50jukDXJNL
MD5:	A897D65988A275F71A35C11EAE214026
SHA1:	AA90F92F48FA933FF8FFDC89BBFCD8921FDD84AD
SHA-256:	2F950FA06863345F4F85922778AE1F169DD4D8054B8ACC75B41E90F4FDD99777
SHA-512:	50F247A54D299BB0F93627E0308494715CAF6F1D13D6CC0C346F1FFD521CBF9AA57236FEC5CB97724E3256906733D3C24AD9334CB865E275FF91EEECF7ED2B9A
Malicious:	false
Preview:	MDMP..a..... .......]..g........................d...........t...............T.......8...........T...........P...T...........0...........................................................................................eJ..............GenuineIntel............T.......d...\..g.............................0..............,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6...................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WER7AEC.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	8376
Entropy (8bit):	3.701339580765277
Encrypted:	false
SSDEEP:	192:R6l7wVeJjrjc6P+DLM6Y2DZmSU9SuCKgmfpu4Q4prp89bz6sfCvRm:R6lXJzc62DLM6YlSU9dCKgmfM4QLzZf1
MD5:	5EDF3B14EA5F2EA34A11E7A4765ECB89
SHA1:	51D3AEE4AA93B5220E2FFA97323E8BDEB5D68384
SHA-256:	E8C28E6EFE7F0242A422F62E49F8C8B69E536FFC55D9FEEB72D1A629C7952420
SHA-512:	FA15A06F78E428233718EC352142064C5FD048CBA6332A675D36A83F31B083CF0D7298C47E6FB0B097E8DC525AE82493743AB6BA1FC6BE67ECA2B357B0651464
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.6.2.4.4.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER7B0C.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4696
Entropy (8bit):	4.483567209902765
Encrypted:	false
SSDEEP:	48:cvIwWl8zsSJg77aI9WhWpW8VYpYm8M4J7fUFrv+q8v+fC1c7ed:uIjfgI7cw7VlJ7CK+qe7ed
MD5:	31174C956265667CFFACD5FD6AE52B75
SHA1:	83DA7CA63CDF869B04441DCFFC37F36A089F5058
SHA-256:	C23BE29A601EF586E9E6D9DF3C3438031127B51E460684852A04B44A9201CD8D
SHA-512:	209E13C06C906EFAC65B831D512E4ABEF6EB8792435755BA142E816BDCD6C0AB9065BC671C219DFA475811C5259A0E37C3EC0F0FAE3FAE5808F83FABD92165D6
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="556206" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Honda.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\Honda\Honda.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	841
Entropy (8bit):	5.351831766340675
Encrypted:	false
SSDEEP:	24:ML9E4KlKDE4KhKiKhPKIE4oKNzKoIvEE4xDqE4j:MxHKlYHKh3oPtHo6wvEHxDqHj
MD5:	98DCC730A3C77DCDCA7CD8717EB5D42A
SHA1:	639509210C17EB73F5DB581FA8CA46B1157D8806
SHA-256:	E3C80885BCC7FE4F349EFB0470D261E0DE273EE26D47AF09C79F1B4B2F891E49
SHA-512:	7D11C53167839D428DAE35BF759C73FC0C7C49F2DE35CC99E4F8B69CDD40DFBEEF6D355F15FAB1EED62A64AF94E7BA311C0F8E07C3DA6F3A63410CC3E9882B78
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\2192b0d5aa4aa14486ae08118d3b9fcc\System.Configuration.ni.dll",0..2,"Microsoft.Build.Framework, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..2,"Microsoft.Build, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\MSBuild.exe.log

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	636
Entropy (8bit):	5.363873409814957
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPTAOKbbDLI4MWuPJKAVKhadDLI4MNsf6cv:ML9E4KlKDE4KhKiKhwE4Tye
MD5:	43484EA7D5BD7DE47119BC063D65D7AF
SHA1:	FCE0A3922FB3E421F8EF74E9A94E60F8DE7F97F5
SHA-256:	C00C48279B0CCFF866BB59D1DD5B77C65594B86BD4D16DE0F2EFAD2778F57A23
SHA-512:	A56C0609179C003044AFEC26019EAEC0ECC772108327EB01F817B88780981289A61E795F6E8745FDEAE99D8543B57344F80A9542BDA2933787C5C8331C869820
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..3,"System.Net.Http, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Net.Http\bb5812ab3cec92427da8c5c696e5f731\System.Net.Http.ni.dll",0..

C:\Users\user\AppData\Local\Temp\Honda\Honda.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	262432
Entropy (8bit):	6.179415524830389
Encrypted:	false
SSDEEP:	3072:7a0t0yH5wCwie3NnQNLpj/Wnqvsw2XpFU4rwOeTubZSzf02RFihx2uzj:m0ny3nnKpqnZRXfw702birr/
MD5:	8FDF47E0FF70C40ED3A17014AEEA4232
SHA1:	E6256A0159688F0560B015DA4D967F41CBF8C9BD
SHA-256:	ED9884BAC608C06B7057037CC91D90E4AE5F74DD2DBCE2AF476699C6D4492D82
SHA-512:	BD69D092ED4F9C5E1F24EAF5EC79FB316469D53849DC798FAE0FCBA5E90869B77EE924C23CC6F692198FF25827AB60AD47BB46CADD6E0AADDE7731CBAFB013BE
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: qBtDOzhQnS.exe, Detection: malicious, Browse Filename: ufp4rvU3SP.exe, Detection: malicious, Browse Filename: igCCUqSW2T.exe, Detection: malicious, Browse Filename: tfduJDS9iM.exe, Detection: malicious, Browse Filename: otq9AG1EIk.exe, Detection: malicious, Browse Filename: KO8mPIAMHh.exe, Detection: malicious, Browse Filename: tfduJDS9iM.exe, Detection: malicious, Browse Filename: otq9AG1EIk.exe, Detection: malicious, Browse Filename: KO8mPIAMHh.exe, Detection: malicious, Browse Filename: 76Kobq8opu.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....?.].........."...0..\|...B......:.... ........@.. ...............................L....`....................................O........>.............. A........................................................... ............... ..H............text...Xz... ...\|.................. ..`.rsrc....>.......@...~..............@..@.reloc..............................@..B........................H........)...................\|...........................................{.......v.(=....r...p({...-..+..}........0..%........(....-......(z.....&..}..............................0..5........(....-...-.r+..ps>...z.....i(z.....&..}......................%......>....(?...(....N..(@....oA...(....:...(B...(....:...(C...(....*....(........0..G........(....,....(....-...}......r...p(x...&.(v.....}......&..}....................7.......0..f........-.r7..ps>...z .....

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleApp_d00173b1dd6d48babf9585781e66139c.lnk

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Oct 23 14:03:56 2024, mtime=Wed Oct 23 14:03:56 2024, atime=Sat Dec 7 08:10:48 2019, length=262432, window=hide
Category:	dropped
Size (bytes):	1125
Entropy (8bit):	4.943825957311493
Encrypted:	false
SSDEEP:	24:8awnDg+lXzhFXURngK+XiQE5rygERAD9EaMIK+E6E6Q2fmqygm:8awnDg+ltFkRm5w+gv/MIK+/nfjyg
MD5:	2E39BF586FEECAB4C16A8B3468EBE4E2
SHA1:	2C15410D562D3EC19E80EEB37CA2396B2FC1C82B
SHA-256:	B59B9C88BBC6F14AB0B62F4F1B4CE582A43C92A2E6FC4CF7E6F902CA693F0066
SHA-512:	120621704F8EBFB84D879DC6B09EAAD710E12DAF6E649A74EA87C974CD4434C00F1CB1F6A53A0CEE5D5B21B61649FA4EADC757F9EA8325C73990CDD1ABE3BA3B
Malicious:	false
Preview:	L..................F....".....a.\%....a.\%..{.#7... .........................:..DG..Yr?.D..U..k0.&...&.......$..S... ..\%....t.\%......t...CFSF..1.....EW<2..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......EW<2WY{x...........................^.A.p.p.D.a.t.a...B.P.1.....WYyx..Local.<......EW<2WY{x....[.....................0n..L.o.c.a.l.....N.1.....WY{x..Temp..:......EW<2WY{x....^.......................s.T.e.m.p.....P.1.....WY}x..Honda.<......WY}xWY}x..........................D...H.o.n.d.a.....\.2. ....OYI".Honda.exe.D......WY}xWY}x....!...........p.............H.o.n.d.a...e.x.e.......c...............-.......b...........y.@......C:\Users\user\AppData\Local\Temp\Honda\Honda.exe..,.....\.....\.....\.....\.....\.....\.L.o.c.a.l.\.T.e.m.p.\.H.o.n.d.a.\.H.o.n.d.a...e.x.e.........\|....I.J.H..K..:...`.......X.......899552...........hT..CrF.f4... ....Jc...-...-$..hT..CrF.f4... ....Jc...-...-$.............1SPS.XF.L8C....&.m.q............/...S.-.1.-.5.-.2.1.-.2.2.4.6.1.2.2.6.5.8.-.

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.468605420944838
Encrypted:	false
SSDEEP:	6144:9zZfpi6ceLPx9skLmb0fZZWSP3aJG8nAgeiJRMMhA2zX4WABluuNxjDH5S:VZHtZZWOKnMM6bFpzj4
MD5:	A3903274BBF8383FFA250EE5EBD1C6F9
SHA1:	D47A35CBB13CFB1B582944A5C977E023AB307184
SHA-256:	219A5074E652AF593D523C40349F4ED73C3A368FA9985B2F4F2D3DF284BE6E97
SHA-512:	1F74F2A0F3A701F9681DDC306C040CDC2C6D75B81C83C6297D895B14A7C22C5C86C1B49067841D0D6155433D6FFD8E50AEDA333C4AD7C59FD40CA13986F060BC
Malicious:	false
Preview:	regfH...H....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtmjS..\%..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

\Device\ConDrv

Download File

Process:	C:\Users\user\AppData\Local\Temp\Honda\Honda.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	298
Entropy (8bit):	4.924206445966445
Encrypted:	false
SSDEEP:	6:zx3M1tFAbQtASR30qyMstwYVoRRZBXVN+J0fFdCsq2UTiMdH8stCal+n:zK13P30ZMt9BFN+QdCT2UftCM+
MD5:	932782CF70ED00D22C0B08B5027B4E31
SHA1:	78F460A2155D9E819B8452C281285D7E0A7AC14F
SHA-256:	F2C2477FB3FD0A30F3D3D8637EF9C774B43E940043635DF90CDD804799A2ECE7
SHA-512:	C83E72797C03CABCAB066B95BAEEBB13944143846794061CF9482EA3B283979E470930047FDAE72A6F06F51F3127FF39DAAEFAAD7557E3AD49F590B9E7B78D24
Malicious:	false
Preview:	Microsoft (R) Build user version 4.8.4084.0..[Microsoft .NET Framework, version 4.0.30319.42000]..Copyright (C) Microsoft Corporation. All rights reserved.....MSBUILD : error MSB1003: Specify a project or solution file. The current working directory does not contain a project or solution file...

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.857144210115453
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	juwXcVX5AK.exe
File size:	294'016 bytes
MD5:	0bdab914290343e6ab408211372e1c1f
SHA1:	989b6da6765a24d553afb4045f3309515872f946
SHA256:	0a87f74121279e7b54007f092a1209b2424c69ed6242286dfb0159e453c5c9dc
SHA512:	d4607bce7549ec099bfa3651623ca813da786a525663bb67aabd7378e8c7ea24b8a9b82c3bcabbcd191dbd51131617ca0a68b8b561a8e902823cef58f1dbbe38
SSDEEP:	6144:NuADjUKQebn/EWGIezYFuJ1aIxND6eAJcZalr7v:gKUKQeb/E3JRgJcglr7v
TLSH:	AD54AE21B9C0C073D52325320AE4EBB56A7DF9704E655E8B67980FBE0F70681D731A6B
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........L..v...v...v...u...v...s.a.v...r...v...w...v...w.M.v...r...v...u...v...s...v.......v.......v...t...v.Rich..v................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x409922
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x67165FE4 [Mon Oct 21 14:06:28 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	31770ac6e89309fe8c99522fb04f055c

Authenticode Signature

Signature Valid:	false
Signature Issuer:	CN=Sectigo Public Code Signing CA R36, O=Sectigo Limited, C=GB
Signature Validation Error:	The digital signature of the object did not verify
Error Number:	-2146869232
Not Before, Not After	31/08/2023 02:00:00 31/08/2026 01:59:59
Subject Chain	CN=Privacy Technologies OU, O=Privacy Technologies OU, S=Harjumaa, C=EE
Version:	3
Thumbprint MD5:	AD1BCBF19AE2F91BB114D33B85359E56
Thumbprint SHA-1:	141D90A1BA8F61863FBEDDF7DD1D66C1D1E0B128
Thumbprint SHA-256:	A08EA2A7A257AD690B988446951E9DEF2986A2F3F546B6F0902805330F3B6B48
Serial:	00D0461B529F67189D43744E9CEFE172AE

Entrypoint Preview

Instruction
call 00007FA208B823F0h
jmp 00007FA208B8187Fh
mov ecx, dword ptr [ebp-0Ch]
mov dword ptr fs:[00000000h], ecx
pop ecx
pop edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
push ecx
ret
mov ecx, dword ptr [ebp-10h]
xor ecx, ebp
call 00007FA208B81422h
jmp 00007FA208B819E2h
push eax
push dword ptr fs:[00000000h]
lea eax, dword ptr [esp+0Ch]
sub esp, dword ptr [esp+0Ch]
push ebx
push esi
push edi
mov dword ptr [eax], ebp
mov ebp, eax
mov eax, dword ptr [00432180h]
xor eax, ebp
push eax
push dword ptr [ebp-04h]
mov dword ptr [ebp-04h], FFFFFFFFh
lea eax, dword ptr [ebp-0Ch]
mov dword ptr fs:[00000000h], eax
ret
push eax
push dword ptr fs:[00000000h]
lea eax, dword ptr [esp+0Ch]
sub esp, dword ptr [esp+0Ch]
push ebx
push esi
push edi
mov dword ptr [eax], ebp
mov ebp, eax
mov eax, dword ptr [00432180h]
xor eax, ebp
push eax
mov dword ptr [ebp-10h], eax
push dword ptr [ebp-04h]
mov dword ptr [ebp-04h], FFFFFFFFh
lea eax, dword ptr [ebp-0Ch]
mov dword ptr fs:[00000000h], eax
ret
push eax
push dword ptr fs:[00000000h]
lea eax, dword ptr [esp+0Ch]
sub esp, dword ptr [esp+0Ch]
push ebx
push esi
push edi
mov dword ptr [eax], ebp
mov ebp, eax
mov eax, dword ptr [00432180h]
xor eax, ebp
push eax
mov dword ptr [ebp-10h], esp
push dword ptr [ebp-04h]
mov dword ptr [ebp-04h], FFFFFFFFh
lea eax, dword ptr [ebp-0Ch]
mov dword ptr fs:[00000000h], eax

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x30bc0	0x28	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x43000	0x1e0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x44e00	0x2e80
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x44000	0x2104	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x2e088	0x1c	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x2e0c0	0x18	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x2dfc8	0x40	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x26000	0x158	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x247c5	0x24800	82bfba9b95b9deff0c720898a64ea2d8	False	0.5836298694349316	data	6.665283343828205	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x26000	0xb3c6	0xb400	a7613c442c6a6833f7beffa9b96b2375	False	0.4263671875	data	4.901037811960333	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x32000	0x106cc	0xf800	5fa94115b961761450ab4db52079ee1a	False	0.9154013356854839	data	7.83535486728973	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x43000	0x1e0	0x200	9866eeb93e80b773405f3d7936b83641	False	0.52734375	data	4.7074344725994175	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x44000	0x2104	0x2200	e9d30a199ea94952ee7fe91ca2531204	False	0.7348345588235294	data	6.455152148729285	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
.bsp	0x47000	0x3000	0x3000	c7faa7b5a62911205b4f3d22a4130467	False	0.028483072916666668	data	0.2988100012561705	IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x43060	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL

Import

KERNEL32.dll

GlobalFindAtomA, RaiseException, GetCurrentThreadId, IsProcessorFeaturePresent, GetLastError, FreeLibraryWhenCallbackReturns, CreateThreadpoolWork, SubmitThreadpoolWork, CloseThreadpoolWork, GetModuleHandleExW, WakeAllConditionVariable, SleepConditionVariableSRW, InitOnceComplete, InitOnceBeginInitialize, ReleaseSRWLockExclusive, AcquireSRWLockExclusive, TryAcquireSRWLockExclusive, WideCharToMultiByte, CloseHandle, QueryPerformanceCounter, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSectionEx, DeleteCriticalSection, EncodePointer, DecodePointer, MultiByteToWideChar, LCMapStringEx, GetSystemTimeAsFileTime, GetModuleHandleW, GetProcAddress, GetStringTypeW, GetCPInfo, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, IsDebuggerPresent, GetStartupInfoW, GetCurrentProcessId, InitializeSListHead, CreateFileW, RtlUnwind, SetLastError, InitializeCriticalSectionAndSpinCount, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, FreeLibrary, LoadLibraryExW, ExitProcess, GetModuleFileNameW, GetStdHandle, WriteFile, HeapAlloc, HeapFree, LCMapStringW, GetLocaleInfoW, IsValidLocale, GetUserDefaultLCID, EnumSystemLocalesW, GetFileType, FlushFileBuffers, GetConsoleOutputCP, GetConsoleMode, ReadFile, GetFileSizeEx, SetFilePointerEx, ReadConsoleW, HeapReAlloc, FindClose, FindFirstFileExW, FindNextFileW, IsValidCodePage, GetACP, GetOEMCP, GetCommandLineA, GetCommandLineW, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetProcessHeap, SetStdHandle, HeapSize, WriteConsoleW

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 23, 2024 17:03:55.283253908 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 23, 2024 17:03:55.283483028 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 23, 2024 17:03:55.595819950 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 23, 2024 17:04:03.990137100 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:03.990170002 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:03.990238905 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:03.990613937 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:03.990641117 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:04.728497028 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:04.728730917 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:04.786393881 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:04.786432028 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:04.786722898 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:04.799510956 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:04.843327999 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:04.892644882 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 23, 2024 17:04:04.892656088 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 23, 2024 17:04:04.965616941 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:04.965641975 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:04.965656042 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:04.965749025 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:04.965779066 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:04.965828896 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.048763990 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.048791885 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.048979998 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.048991919 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.049037933 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.083199024 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.083225012 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.083292007 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.083316088 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.083348989 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.083364964 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.165493011 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.165519953 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.165602922 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.165622950 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.165703058 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.167143106 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.167166948 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.167207003 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.167216063 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.167249918 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.167267084 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.169147015 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.169172049 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.169223070 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.169229984 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.169258118 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.169282913 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.201008081 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.201036930 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.201103926 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.201126099 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.201165915 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.201193094 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.205158949 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 23, 2024 17:04:05.281934977 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.281961918 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.282044888 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.282063961 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.282135010 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.284070015 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.284090042 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.284154892 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.284162045 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.284198046 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.285598993 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.285621881 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.285664082 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.285669088 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.285706043 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.285726070 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.288136959 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.288161039 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.288217068 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.288222075 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.288259983 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.289767981 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.289788008 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.289849997 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.289855957 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.289906979 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.290769100 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.290786982 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.290863037 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.290868998 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.290942907 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.317284107 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.317372084 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.317378998 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.317437887 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.317552090 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.317569017 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.317583084 CEST	49718	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.317588091 CEST	443	49718	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.371033907 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.371077061 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.371221066 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.372373104 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.372414112 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.373162031 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.373172998 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.373209953 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.373259068 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.373651028 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.373667955 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.374886036 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.374896049 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.374979019 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.374979019 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.374993086 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.375104904 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.375119925 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.375148058 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.375163078 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.376121044 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.376137972 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:05.376246929 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.376435995 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:05.376451015 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.108464003 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.109786987 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.111331940 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.111380100 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.112201929 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.112216949 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.112658978 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.112674952 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.113069057 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.113074064 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.119147062 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.119636059 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.119667053 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.120074034 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.120085955 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.123608112 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.124176979 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.124213934 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.125255108 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.125268936 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.136334896 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.137048006 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.137067080 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.137414932 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.137419939 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.239370108 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.239443064 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.239671946 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.239857912 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.239905119 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.239938974 CEST	49723	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.239957094 CEST	443	49723	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.243386984 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.243418932 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.243592024 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.243920088 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.243931055 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.244041920 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.244066000 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.244116068 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.244127989 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.244177103 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.244334936 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.244352102 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.244362116 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.244366884 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.246823072 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.246859074 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.247221947 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.247704029 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.247719049 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.267452955 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.267642021 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.267709017 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.267862082 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.267862082 CEST	49720	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.267888069 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.267904997 CEST	443	49720	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.268950939 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.268980026 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.269038916 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.269042015 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.269131899 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.269293070 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.269293070 CEST	49721	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.269323111 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.269347906 CEST	443	49721	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.272305965 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.272326946 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.272521973 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.272521973 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.272543907 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.273160934 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.273184061 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.273452997 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.273591042 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.273602962 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.275289059 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.275320053 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.275373936 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.275394917 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.275438070 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.275734901 CEST	49722	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.275755882 CEST	443	49722	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.278574944 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.278594017 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.278659105 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.278856039 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.278872013 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.986119986 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.987660885 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.987674952 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:06.988234997 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:06.988239050 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.014091969 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.014763117 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.014779091 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.015331030 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.015347004 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.015779972 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.016283989 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.016294003 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.016693115 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.016700029 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.020554066 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.020976067 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.020982981 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.021636963 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.021641970 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.024121046 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.024569035 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.024580002 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.025219917 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.025224924 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.116094112 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.116159916 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.116233110 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.116709948 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.116728067 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.116739035 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.116744995 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.120620012 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.120645046 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.120732069 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.120960951 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.120974064 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.144300938 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.144373894 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.146642923 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.148659945 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.149382114 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.149487019 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.152853966 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.154295921 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.154517889 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.157754898 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.158073902 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.159209013 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.160048962 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.160048962 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.160078049 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.160085917 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.160371065 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.160384893 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.160397053 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.160403013 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.162446022 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.162446022 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.162452936 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.162460089 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.163433075 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.163433075 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.163439035 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.163446903 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.167165041 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.167191982 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.168073893 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.169028997 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.169043064 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.171446085 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.171468019 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.171523094 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.171674013 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.171685934 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.172775984 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.172801018 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.173533916 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.173541069 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.173564911 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.173640013 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.174020052 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.174034119 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.174138069 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.174149036 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.181394100 CEST	443	49709	173.222.162.64	192.168.2.6
Oct 23, 2024 17:04:07.183234930 CEST	49709	443	192.168.2.6	173.222.162.64
Oct 23, 2024 17:04:07.867367983 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.868232012 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.868242979 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.868791103 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.868796110 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.900286913 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.900755882 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.900777102 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.901165962 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.901173115 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.905725956 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.905998945 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.906008959 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.906352043 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.906358957 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.909414053 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.909672022 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.909687042 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.910367012 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.910372972 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.921802998 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.922352076 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.922377110 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.922683001 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.922688961 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.996689081 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.996795893 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.996886969 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.997087955 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.997106075 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:07.997122049 CEST	49729	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:07.997128010 CEST	443	49729	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.000705004 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.000768900 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.000874043 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.001044989 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.001059055 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.030596018 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.030833006 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.030903101 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.031126022 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.031141996 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.031153917 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.031158924 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.034353971 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.034379959 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.034457922 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.034625053 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.034636974 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.035657883 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.035729885 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.035779953 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.035907030 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.035929918 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.035938978 CEST	49731	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.035943985 CEST	443	49731	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.038099051 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.038139105 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.038208961 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.038351059 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.038367033 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.041400909 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.041589975 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.041647911 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.041697979 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.041697979 CEST	49730	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.041714907 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.041727066 CEST	443	49730	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.043839931 CEST	49737	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.043878078 CEST	443	49737	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.043956995 CEST	49737	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.044099092 CEST	49737	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.044112921 CEST	443	49737	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.055728912 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.056355953 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.056420088 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.056464911 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.056478024 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.056510925 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.056516886 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.058562994 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.058587074 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.058653116 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.058788061 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.058799982 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.750327110 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.751002073 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.751015902 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:08.751526117 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:08.751529932 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.120348930 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.121423960 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.121442080 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.121917009 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.121922016 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.123805046 CEST	443	49737	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.124130964 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.124161959 CEST	49737	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.124190092 CEST	443	49737	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.124239922 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.124538898 CEST	49737	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.124550104 CEST	443	49737	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.124833107 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.124860048 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.124867916 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.124871969 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.125200987 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.125212908 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.125602007 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.125606060 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.239346981 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.239438057 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.239507914 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.239850044 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.239867926 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.239880085 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.239886045 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.243067026 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.243114948 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.243191004 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.243341923 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.243360043 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.267527103 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.267591000 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.267704010 CEST	443	49737	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.267720938 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.267777920 CEST	443	49737	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.267795086 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.267826080 CEST	49737	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.267863989 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.267904043 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.268022060 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.268042088 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.268043041 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.268054008 CEST	49735	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.268055916 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.268059969 CEST	443	49735	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.268069983 CEST	49738	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.268075943 CEST	443	49738	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.268420935 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.268480062 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.268523932 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.268589973 CEST	49737	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.268613100 CEST	443	49737	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.268627882 CEST	49737	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.268635035 CEST	443	49737	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.269124985 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.269130945 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.269145012 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.269149065 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.272038937 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.272083044 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.272090912 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.272126913 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.272147894 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.272171021 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.272397041 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.272407055 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.272433996 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.272452116 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.272461891 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.272536039 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.272551060 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.272613049 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.272625923 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.273046970 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.273056984 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.273113012 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.273219109 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.273231030 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.981242895 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:09.983997107 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:09.984026909 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.009202003 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.014555931 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.017893076 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.043309927 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.051083088 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.051110029 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.051851034 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.051876068 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.052658081 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.052664042 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.053103924 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.053152084 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.053555965 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.053569078 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.064542055 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.064543009 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.095369101 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.095398903 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.106470108 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.106498003 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.110308886 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.110331059 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.114698887 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.114708900 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.179039001 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.179131985 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.179227114 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.180289984 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.180574894 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.180629969 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.183176041 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.183233976 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.183268070 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.183289051 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.191332102 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.191411018 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.191479921 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.206053972 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.206089973 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.316951036 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.316992044 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.323266029 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.323319912 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.323386908 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.324711084 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.324781895 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.324843884 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.329860926 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.329880953 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.330434084 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.330480099 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.331358910 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.331389904 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.331449032 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.331666946 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.331679106 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.479199886 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.479211092 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.479278088 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.479285002 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.479384899 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.479387999 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.479620934 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.479628086 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.479643106 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.479644060 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.479659081 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.479660034 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.479666948 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.479671955 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.482920885 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.482944965 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.482955933 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.482964993 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.483035088 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.483182907 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.483184099 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.483189106 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:10.483201981 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:10.483203888 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.202362061 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.203094006 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.203120947 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.203624010 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.203629971 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.213654995 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.213861942 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.214307070 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.214339018 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.214355946 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.214387894 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.214813948 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.214819908 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.214945078 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.214960098 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.221112013 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.223701000 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.223726988 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.224315882 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.224323034 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.335813999 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.337055922 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.337172985 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.337315083 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.337335110 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.337353945 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.337359905 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.340924025 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.340965033 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.341058969 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.341221094 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.341236115 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.344264984 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.344347954 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.344418049 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.344506979 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.344506979 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.344554901 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.344583988 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.345675945 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.345772982 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.345822096 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.346431971 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.346446037 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.346457005 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.346462011 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.354413033 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.354732990 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.354845047 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.354845047 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.357831001 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.357831001 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.357867002 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.357889891 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.357971907 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.358143091 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.358159065 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.380644083 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.380691051 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.380784035 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.390697002 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.390717983 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.392229080 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.392267942 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.392385960 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.392503023 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.392515898 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.427402973 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.428050041 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.428062916 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.428565979 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.428570986 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.561192989 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.561274052 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.561439991 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.561719894 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.561727047 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.561734915 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.561738968 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.566735983 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.566777945 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:11.566859961 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.567337990 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:11.567348957 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.063503027 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.064351082 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.064374924 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.065047979 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.065054893 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.089673996 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.090286016 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.090311050 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.090823889 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.090830088 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.122203112 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.122880936 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.122900009 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.123406887 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.123411894 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.137726068 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.139774084 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.139813900 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.140577078 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.140583992 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.195847988 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.195914984 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.196017981 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.196309090 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.196327925 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.196340084 CEST	49750	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.196346045 CEST	443	49750	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.200129032 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.200160027 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.200263023 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.200445890 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.200469971 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.221545935 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.221622944 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.221692085 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.222017050 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.222033978 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.222048044 CEST	49751	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.222054005 CEST	443	49751	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.225539923 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.225579977 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.225754023 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.225941896 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.225954056 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.606050014 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.606050968 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.606136084 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.606164932 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.606257915 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.606496096 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.606496096 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.606513977 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.606534004 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.606561899 CEST	49752	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.606571913 CEST	49753	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.606575012 CEST	443	49752	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.606580019 CEST	443	49753	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.609852076 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.609894991 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.609934092 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.609966993 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.609982014 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.610018969 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.610086918 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.610189915 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.610207081 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.610222101 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.610234976 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.610501051 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.610517025 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.611011028 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.611016035 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.744468927 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.744611025 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.744817019 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.746520996 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.746562958 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.746577024 CEST	49754	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.746583939 CEST	443	49754	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.880707026 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.880764961 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:12.881119967 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.908689022 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:12.908724070 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.197746992 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.198448896 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.198465109 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.198981047 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.198987961 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.329161882 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.329256058 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.329334021 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.329710960 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.329741001 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.329761028 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.329771042 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.333024025 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.335057020 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.335091114 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.335572004 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.335582972 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.344126940 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.344228029 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.344355106 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.344513893 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.344552040 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.344926119 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.346242905 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.346270084 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.346847057 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.346858978 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.349626064 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.350039959 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.350054979 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.350485086 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.350492001 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.477121115 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.477238894 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.477296114 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.477480888 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.477505922 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.477515936 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.477521896 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.481266975 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.481327057 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.481400013 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.481678009 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.481693029 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.517062902 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.517442942 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.517502069 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.517551899 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.517571926 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.517584085 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.517589092 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.521912098 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.521955013 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.522039890 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.522193909 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.522209883 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.639556885 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.639837980 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.639905930 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.639967918 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.639988899 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.640006065 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.640011072 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.647613049 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.647654057 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:13.647718906 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.647913933 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:13.647927999 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.077753067 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.078722000 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.078752041 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.079433918 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.079441071 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.089422941 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.090118885 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.090189934 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.090754032 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.090768099 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.211016893 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.211179018 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.211236954 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.211489916 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.211510897 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.211525917 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.211532116 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.211914062 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.213943005 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.213967085 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.214489937 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.214494944 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.216906071 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.216952085 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.217026949 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.217291117 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.217303991 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.231712103 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.232244968 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.232479095 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.232536077 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.232546091 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.232563019 CEST	49760	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.232567072 CEST	443	49760	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.236951113 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.236994982 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.237096071 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.237375021 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.237395048 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.273001909 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.273682117 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.273719072 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.274348974 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.274363995 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.343743086 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.344317913 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.344394922 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.344477892 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.344499111 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.344510078 CEST	49761	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.344517946 CEST	443	49761	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.348186970 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.348213911 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.348294020 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.348526955 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.348531008 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.399964094 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.400568962 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.400602102 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.401236057 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.401242971 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.416168928 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.416368008 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.416541100 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.416646004 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.416671991 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.416686058 CEST	49762	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.416692972 CEST	443	49762	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.420299053 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.420331001 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.420548916 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.420789957 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.420803070 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.531320095 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.531483889 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.531555891 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.531800032 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.531824112 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.531836987 CEST	49763	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.531843901 CEST	443	49763	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.535219908 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.535253048 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.535334110 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.535541058 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.535553932 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.961633921 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.962580919 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.962624073 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.963145971 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.963151932 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.994957924 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.995579958 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.995611906 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:14.996083021 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:14.996090889 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.083414078 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.084224939 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.084252119 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.084983110 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.084990025 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.092643976 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.092835903 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.092947006 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.093240976 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.093261957 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.093274117 CEST	49765	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.093280077 CEST	443	49765	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.097234011 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.097285986 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.099256992 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.100023031 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.100044966 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.127712011 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.127783060 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.127911091 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.128096104 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.128122091 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.128134966 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.128140926 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.131114960 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.131162882 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.135328054 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.139796972 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.139830112 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.539843082 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.539943933 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.540086985 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.541147947 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.596060991 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.609452963 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.609491110 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.609509945 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.609517097 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.611238003 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.611247063 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.611829996 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.611835003 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.619951010 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.619996071 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.620558023 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.620750904 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.620775938 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.672878027 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.673990011 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.674006939 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.674726963 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.674732924 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.738753080 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.738830090 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.739142895 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.739192963 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.739192963 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.739212036 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.739223003 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.742620945 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.742669106 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.742765903 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.742959023 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.742969990 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.829200983 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.829902887 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.829915047 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.830699921 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.830704927 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.880800009 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.881004095 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.881149054 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.881184101 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.881184101 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.881213903 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.881237030 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.884902954 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.884942055 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.885036945 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.885247946 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.885258913 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.959908009 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.960074902 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.960136890 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.960300922 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.960319996 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.960330963 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.960336924 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.963049889 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.963099003 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:15.963160038 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.963320017 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:15.963330030 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.285496950 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.286037922 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.286062956 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.286559105 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.286565065 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.414271116 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.414936066 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.414959908 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.415488005 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.415494919 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.416400909 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.416558981 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.416618109 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.416692972 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.416728020 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.416744947 CEST	49771	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.416750908 CEST	443	49771	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.419868946 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.419909000 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.419989109 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.420277119 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.420289040 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.464401960 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.465219021 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.465250969 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.465648890 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.465655088 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.556715965 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.557257891 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.557432890 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.562314034 CEST	49772	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.562340021 CEST	443	49772	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.565934896 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.565972090 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.566059113 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.566229105 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.566243887 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.610090017 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.610187054 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.610416889 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.610591888 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.610614061 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.610630989 CEST	49773	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.610636950 CEST	443	49773	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.616463900 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.616502047 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.616563082 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.616935968 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.616950035 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.649379015 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.650046110 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.650064945 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.650475025 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.650481939 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.704679966 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.705847979 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.705883026 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.706300974 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.706309080 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.779819965 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.779947042 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.780131102 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.780280113 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.780299902 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.780312061 CEST	49774	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.780318022 CEST	443	49774	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.783812046 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.783860922 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.783941031 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.784167051 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.784178019 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.839469910 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.839545965 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.839602947 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.839878082 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.839900970 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.839915037 CEST	49775	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.839920998 CEST	443	49775	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.843081951 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.843122005 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:16.843205929 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.843358994 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:16.843374968 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.155723095 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.156512022 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.156531096 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.157042980 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.157058001 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.303910017 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.304552078 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.304585934 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.305061102 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.305068016 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.333905935 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.333980083 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.334054947 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.334377050 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.334397078 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.334435940 CEST	49777	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.334444046 CEST	443	49777	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.338079929 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.338131905 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.338188887 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.338471889 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.338486910 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.365578890 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.367413044 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.367433071 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.367957115 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.367986917 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.435010910 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.435085058 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.435132980 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.435767889 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.435794115 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.435837984 CEST	49778	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.435844898 CEST	443	49778	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.441304922 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.441354990 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.441418886 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.442183971 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.442200899 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.526546955 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.527188063 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.527230024 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.528116941 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.528122902 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.558206081 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.558362961 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.558420897 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.580346107 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.580383062 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.580394983 CEST	49779	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.580408096 CEST	443	49779	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.582983017 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.584371090 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.584441900 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.584517956 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.584888935 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.584913015 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.585423946 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.585431099 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.585840940 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.585859060 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.659806013 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.660428047 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.660486937 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.728960037 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.728960037 CEST	49780	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.729003906 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.729021072 CEST	443	49780	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.858362913 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.858426094 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.858484983 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.859339952 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.859361887 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.931351900 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.931423903 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:17.931477070 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.961837053 CEST	49781	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:17.961859941 CEST	443	49781	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:18.000854015 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:18.000909090 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:18.000966072 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:18.004112005 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:18.004126072 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:18.068830013 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:18.111438990 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:18.201607943 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:18.201644897 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:18.206160069 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:18.206191063 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.172709942 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.173893929 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.173909903 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.176897049 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.176903963 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.295876980 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.295958996 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.296017885 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.296263933 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.296288967 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.296312094 CEST	49782	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.296318054 CEST	443	49782	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.302242041 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.302289963 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.302357912 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.302845955 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.302859068 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.303591967 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.304326057 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.304356098 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.304574966 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.305246115 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.305253983 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.305823088 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.305845976 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.306632042 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.306643963 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.307276011 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.307773113 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.307847977 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.308938980 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.308959007 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.308979034 CEST	49783	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.308985949 CEST	443	49783	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.314043045 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.314073086 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.314205885 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.314352989 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.314363003 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.434791088 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.434902906 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.435096025 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.435154915 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.435180902 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.435188055 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.435195923 CEST	49784	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.435200930 CEST	443	49784	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.435344934 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.435389042 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.436089993 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.436096907 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.436106920 CEST	49786	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.436111927 CEST	443	49786	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.438476086 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.438528061 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.438555956 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.438590050 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.438601017 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.438651085 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.438795090 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.438807011 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.438832998 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.438848972 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.662211895 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.663070917 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.663105011 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.664388895 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.664407969 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.795335054 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.795614004 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.795721054 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.795795918 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.795816898 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.795830011 CEST	49785	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.795835018 CEST	443	49785	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.799662113 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.799710989 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:19.799783945 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.800081015 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:19.800097942 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.035881042 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.036845922 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.036876917 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.037487030 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.037494898 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.044013977 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.044534922 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.044563055 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.045115948 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.045124054 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.166506052 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.166671991 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.166852951 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.167018890 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.167020082 CEST	49788	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.167043924 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.167054892 CEST	443	49788	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.170245886 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.170300007 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.170773029 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.171153069 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.171173096 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.175961971 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.176512003 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.176536083 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.177304983 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.177311897 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.181956053 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.182044029 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.182324886 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.182365894 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.182365894 CEST	49787	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.182387114 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.182399035 CEST	443	49787	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.185256004 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.185290098 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.185367107 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.185523033 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.185534000 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.194096088 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.194580078 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.194607973 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.195117950 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.195125103 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.307912111 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.308093071 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.308208942 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.308778048 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.308801889 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.308818102 CEST	49790	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.308823109 CEST	443	49790	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.325618029 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.325689077 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.325830936 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.327158928 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.327174902 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.327193022 CEST	49789	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.327198982 CEST	443	49789	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.331167936 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.331202984 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.331290007 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.332360029 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.332374096 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.333220005 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.333302021 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.335248947 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.335848093 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.335877895 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.530147076 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.531096935 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.531135082 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.531797886 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.531805992 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.661214113 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.661392927 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.663341045 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.723918915 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.723948956 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.723980904 CEST	49791	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.723989010 CEST	443	49791	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.789495945 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.789547920 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.789638996 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.794747114 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.794785023 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.906303883 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.917531967 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.921648026 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.921652079 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.921674013 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.921675920 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.922544956 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.922549963 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:20.922569036 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:20.922574043 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.049679041 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.049762011 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.049809933 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.050021887 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.050050974 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.050065041 CEST	49792	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.050071001 CEST	443	49792	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.053455114 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.053498983 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.053555012 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.053709984 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.053723097 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.062721014 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.063227892 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.063256979 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.063430071 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.063514948 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.063563108 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.063678980 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.063698053 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.063711882 CEST	49793	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.063718081 CEST	443	49793	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.064091921 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.064099073 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.066910028 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.066953897 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.067054033 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.067203999 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.067214966 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.069648981 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.070041895 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.070058107 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.070569992 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.070574045 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.196831942 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.198278904 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.198363066 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.198426962 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.198448896 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.198463917 CEST	49794	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.198470116 CEST	443	49794	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.201236963 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.201535940 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.201636076 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.202069998 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.202105045 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.202119112 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.202126026 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.202138901 CEST	49795	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.202143908 CEST	443	49795	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.202194929 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.202723980 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.202733994 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.204768896 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.204802036 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.204875946 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.205144882 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.205156088 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.552314997 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.552908897 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.552939892 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.553431034 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.553438902 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.684653044 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.684731007 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.684820890 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.685064077 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.685087919 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.685107946 CEST	49796	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.685113907 CEST	443	49796	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.688055992 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.688108921 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.688222885 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.688358068 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.688374996 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.795176029 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.795908928 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.795957088 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.796477079 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.796485901 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.800815105 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.801114082 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.801155090 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:21.801465988 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:21.801472902 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.156908035 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.156928062 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.156945944 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.156980991 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.157011032 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.157058954 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.157111883 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.157339096 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.157339096 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.157360077 CEST	49797	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.157377005 CEST	443	49797	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.157876968 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.157892942 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.157906055 CEST	49798	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.157912016 CEST	443	49798	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.159394026 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.159548044 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.160224915 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.160243988 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.160475016 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.160481930 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.160547972 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.160558939 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.160904884 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.160909891 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.163074017 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.163103104 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.163152933 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.163186073 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.163203955 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.163244963 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.163331985 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.163343906 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.163451910 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.163465023 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.291096926 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.291739941 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.291852951 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.291893005 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.291913986 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.291948080 CEST	49799	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.291954041 CEST	443	49799	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.292797089 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.292823076 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.292892933 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.292901039 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.293020964 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.293035984 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.293049097 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.293062925 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.293062925 CEST	49800	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.293071985 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.293085098 CEST	443	49800	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.295425892 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.295428038 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.295465946 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.295475006 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.295567989 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.295717001 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.295717001 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.295748949 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.295782089 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.295794964 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.433986902 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.434809923 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.434834957 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.435297966 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.435307980 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.567003965 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.567029953 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.567107916 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.567183018 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.567217112 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.567570925 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.567589045 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.567605019 CEST	49801	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.567610979 CEST	443	49801	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.571393013 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.571465969 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.571573019 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.571794987 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.571810961 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.898749113 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.899542093 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.899561882 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.900084972 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.900089979 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.906833887 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.907471895 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.907489061 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:22.907839060 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:22.907845020 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.025684118 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.026460886 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.026498079 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.026968956 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.026987076 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.034248114 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.035001040 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.035018921 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.035449028 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.035455942 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.037475109 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.037542105 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.037599087 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.037710905 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.037733078 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.037744999 CEST	49802	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.037750959 CEST	443	49802	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.040715933 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.040757895 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.040832996 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.040968895 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.040982962 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.063419104 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.063450098 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.063514948 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.063524961 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.063705921 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.063750982 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.063782930 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.063798904 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.063807964 CEST	49803	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.063813925 CEST	443	49803	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.066699982 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.066720963 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.066797972 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.066926003 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.066937923 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.158245087 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.158332109 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.158459902 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.161309958 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.161339045 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.161356926 CEST	49804	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.161364079 CEST	443	49804	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.165457010 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.165498972 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.165569067 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.165730000 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.165740967 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.167146921 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.167238951 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.167282104 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.167402983 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.167418957 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.167443991 CEST	49805	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.167449951 CEST	443	49805	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.170202971 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.170232058 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.170321941 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.170442104 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.170452118 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.311446905 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.338825941 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.338855028 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.350382090 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.350408077 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.478444099 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.478513002 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.478566885 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.485573053 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.485599041 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.485605955 CEST	49806	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.485613108 CEST	443	49806	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.490401030 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.490436077 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.490500927 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.490784883 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.490793943 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.766804934 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.767399073 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.767411947 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.768153906 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.768158913 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.796374083 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.798080921 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.798098087 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.799194098 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.799200058 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.896461964 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.896900892 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.897243977 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.897329092 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.897346020 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.897356987 CEST	49807	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.897361994 CEST	443	49807	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.900343895 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.900368929 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.900537968 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.900717020 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.900727034 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.902710915 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.903137922 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.903151989 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.903631926 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.903637886 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.920145988 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.920684099 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.920706034 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.921253920 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.921262026 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.929442883 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.929697990 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.929750919 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.929784060 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.929800034 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.929845095 CEST	49808	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.929851055 CEST	443	49808	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.932997942 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.933036089 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:23.933187008 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.933351994 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:23.933360100 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.033883095 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.035339117 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.035495043 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.035546064 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.035546064 CEST	49809	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.035562038 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.035572052 CEST	443	49809	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.038943052 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.038968086 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.039032936 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.039258003 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.039268017 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.055561066 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.055633068 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.055742979 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.055860996 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.055879116 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.055969954 CEST	49810	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.055977106 CEST	443	49810	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.058852911 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.058900118 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.058971882 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.059139967 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.059150934 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.218862057 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.219633102 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.219660997 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.220124006 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.220139027 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.350394964 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.350591898 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.350649118 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.350806952 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.350831985 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.351008892 CEST	49811	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.351016045 CEST	443	49811	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.354170084 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.354218960 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.354285955 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.354468107 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.354479074 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.649983883 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.650790930 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.650829077 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.651213884 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.651226997 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.684314013 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.684905052 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.684933901 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.685410976 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.685422897 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.776161909 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.776829958 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.776854992 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.777400970 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.777409077 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.783142090 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.783210993 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.783284903 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.784338951 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.784357071 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.784370899 CEST	49812	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.784377098 CEST	443	49812	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.788500071 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.788541079 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.788608074 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.788785934 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.788801908 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.805934906 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.810079098 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.810087919 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.811111927 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.811116934 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.818109035 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.818135023 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.818180084 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.818206072 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.818232059 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.818599939 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.818617105 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.818627119 CEST	49813	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.818633080 CEST	443	49813	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.830646992 CEST	49819	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.830701113 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.830780029 CEST	49819	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.830954075 CEST	49819	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.830970049 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.908817053 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.908889055 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.908947945 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.909210920 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.909229040 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.909245014 CEST	49814	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.909251928 CEST	443	49814	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.912556887 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.912591934 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.912669897 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.912832975 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.912847996 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.939218998 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.939246893 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.939300060 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.939351082 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.939388990 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.940007925 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.940030098 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.940042973 CEST	49815	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.940047979 CEST	443	49815	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.943860054 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.943897963 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:24.943980932 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.944188118 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:24.944199085 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.086998940 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.087682962 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.087707043 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.088332891 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.088341951 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.219664097 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.220014095 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.220058918 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.229165077 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.229196072 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.229214907 CEST	49817	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.229221106 CEST	443	49817	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.234564066 CEST	49822	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.234610081 CEST	443	49822	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.234679937 CEST	49822	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.234878063 CEST	49822	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.234889030 CEST	443	49822	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.518260956 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.518928051 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.518949986 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.519541979 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.519546986 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.571219921 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.572060108 CEST	49819	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.572093964 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.572575092 CEST	49819	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.572585106 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.645549059 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.646198988 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.646229982 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.646691084 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.646701097 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.657035112 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.657203913 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.657293081 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.657357931 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.657377958 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.657390118 CEST	49818	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.657396078 CEST	443	49818	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.661802053 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.661853075 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.661940098 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.662105083 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.662121058 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.682498932 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.683214903 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.683248043 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.683768034 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.683773994 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.702323914 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.702390909 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.702455044 CEST	49819	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.702672958 CEST	49819	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.702692032 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.702703953 CEST	49819	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.702708960 CEST	443	49819	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.705885887 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.705924988 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.705991030 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.706217051 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.706228971 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.776804924 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.776839972 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.776900053 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.776992083 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.777050018 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.777389050 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.777410984 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.777432919 CEST	49820	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.777439117 CEST	443	49820	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.780858040 CEST	49825	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.780894995 CEST	443	49825	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.781019926 CEST	49825	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.781184912 CEST	49825	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.781198978 CEST	443	49825	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.815634012 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.816051006 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.816150904 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.835172892 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.835207939 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.835226059 CEST	49821	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.835232019 CEST	443	49821	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.922879934 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.922919989 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:25.923048973 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:25.982603073 CEST	443	49822	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.019131899 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.019165039 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.033327103 CEST	49822	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.034123898 CEST	49822	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.034128904 CEST	443	49822	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.041687012 CEST	49822	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.041692972 CEST	443	49822	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.167752028 CEST	443	49822	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.168127060 CEST	443	49822	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.168189049 CEST	49822	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.168267012 CEST	49822	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.168276072 CEST	443	49822	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.172489882 CEST	49827	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.172523022 CEST	443	49827	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.172652006 CEST	49827	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.172959089 CEST	49827	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.172972918 CEST	443	49827	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.408931971 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.409498930 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.409537077 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.410573959 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.410578966 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.440838099 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.441690922 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.441713095 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.442368984 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.442374945 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.529623985 CEST	443	49825	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.530200958 CEST	49825	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.530240059 CEST	443	49825	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.531200886 CEST	49825	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.531207085 CEST	443	49825	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.539388895 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.539478064 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.539544106 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.539825916 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.539845943 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.539855957 CEST	49823	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.539860964 CEST	443	49823	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.543173075 CEST	49828	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.543214083 CEST	443	49828	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.543282986 CEST	49828	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.543479919 CEST	49828	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.543490887 CEST	443	49828	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.570799112 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.570836067 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.570899010 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.571046114 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.571046114 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.571310043 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.571310043 CEST	49824	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.571337938 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.571348906 CEST	443	49824	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.574919939 CEST	49829	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.574964046 CEST	443	49829	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.575059891 CEST	49829	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.575297117 CEST	49829	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.575309992 CEST	443	49829	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.662585974 CEST	443	49825	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.662678003 CEST	443	49825	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.662839890 CEST	49825	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.663131952 CEST	49825	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.663131952 CEST	49825	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.663156986 CEST	443	49825	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.663178921 CEST	443	49825	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.666785955 CEST	49830	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.666825056 CEST	443	49830	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.666928053 CEST	49830	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.667129993 CEST	49830	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.667140007 CEST	443	49830	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.760447979 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.761140108 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.761152029 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.761571884 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.761578083 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.891469002 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.891500950 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.891549110 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.891580105 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.891617060 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.897953987 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.897954941 CEST	49826	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.897979021 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.897994995 CEST	443	49826	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.901207924 CEST	49831	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.901281118 CEST	443	49831	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.901370049 CEST	49831	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.901542902 CEST	49831	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.901570082 CEST	443	49831	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.903383970 CEST	443	49827	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.907587051 CEST	49827	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.907608986 CEST	443	49827	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:26.908107996 CEST	49827	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:26.908112049 CEST	443	49827	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.037843943 CEST	443	49827	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.038173914 CEST	443	49827	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.038270950 CEST	49827	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.038573980 CEST	49827	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.038590908 CEST	443	49827	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.038602114 CEST	49827	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.038606882 CEST	443	49827	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.085249901 CEST	49832	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.085294008 CEST	443	49832	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.085367918 CEST	49832	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.085639000 CEST	49832	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.085654020 CEST	443	49832	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.291850090 CEST	443	49828	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.292407990 CEST	49828	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.292431116 CEST	443	49828	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.292979956 CEST	49828	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.292988062 CEST	443	49828	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.310674906 CEST	443	49829	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.312333107 CEST	49829	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.312354088 CEST	443	49829	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.312824011 CEST	49829	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.312829971 CEST	443	49829	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.412547112 CEST	443	49830	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.415761948 CEST	49830	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.415780067 CEST	443	49830	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.416270018 CEST	49830	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.416275024 CEST	443	49830	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.424839020 CEST	443	49828	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.424907923 CEST	443	49828	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.424994946 CEST	49828	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.425398111 CEST	49828	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.425417900 CEST	443	49828	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.425431013 CEST	49828	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.425437927 CEST	443	49828	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.429471970 CEST	49833	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.429516077 CEST	443	49833	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.429606915 CEST	49833	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.429919958 CEST	49833	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.429936886 CEST	443	49833	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.441840887 CEST	443	49829	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.442037106 CEST	443	49829	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.442127943 CEST	49829	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.442533016 CEST	49829	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.442550898 CEST	443	49829	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.442564011 CEST	49829	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.442569971 CEST	443	49829	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.445612907 CEST	49834	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.445692062 CEST	443	49834	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.445816040 CEST	49834	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.446017981 CEST	49834	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.446041107 CEST	443	49834	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.548253059 CEST	443	49830	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.548285961 CEST	443	49830	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.548333883 CEST	443	49830	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.548463106 CEST	49830	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.548463106 CEST	49830	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.548696041 CEST	49830	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.548723936 CEST	443	49830	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.548752069 CEST	49830	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.548758030 CEST	443	49830	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.551862001 CEST	49835	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.551903009 CEST	443	49835	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.551996946 CEST	49835	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.552189112 CEST	49835	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.552202940 CEST	443	49835	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.643121958 CEST	443	49831	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.644417048 CEST	49831	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.644432068 CEST	443	49831	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.644922018 CEST	49831	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.644926071 CEST	443	49831	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.774447918 CEST	443	49831	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.774837017 CEST	443	49831	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.774991035 CEST	49831	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.775238991 CEST	49831	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.775255919 CEST	443	49831	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.775268078 CEST	49831	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.775273085 CEST	443	49831	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.778707027 CEST	49836	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.778745890 CEST	443	49836	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.778837919 CEST	49836	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.779010057 CEST	49836	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.779026985 CEST	443	49836	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.834192038 CEST	443	49832	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.835155010 CEST	49832	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.835181952 CEST	443	49832	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.835829973 CEST	49832	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.835836887 CEST	443	49832	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.967900038 CEST	443	49832	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.967978001 CEST	443	49832	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.968223095 CEST	49832	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.969357967 CEST	49832	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.969381094 CEST	443	49832	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.969393015 CEST	49832	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.969398975 CEST	443	49832	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.983165979 CEST	49837	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.983213902 CEST	443	49837	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:27.983428001 CEST	49837	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.983716965 CEST	49837	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:27.983732939 CEST	443	49837	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.173876047 CEST	443	49833	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.174506903 CEST	49833	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.174545050 CEST	443	49833	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.175060034 CEST	49833	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.175067902 CEST	443	49833	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.181417942 CEST	443	49834	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.181852102 CEST	49834	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.181879997 CEST	443	49834	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.182274103 CEST	49834	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.182280064 CEST	443	49834	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.301626921 CEST	443	49835	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.302304029 CEST	49835	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.302333117 CEST	443	49835	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.303050041 CEST	49835	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.303055048 CEST	443	49835	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.313290119 CEST	443	49834	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.313330889 CEST	443	49834	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.313389063 CEST	443	49834	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.313455105 CEST	49834	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.313508034 CEST	443	49833	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.313585043 CEST	443	49833	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.313640118 CEST	49833	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.313746929 CEST	49834	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.313774109 CEST	49834	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.313780069 CEST	443	49834	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.313795090 CEST	443	49834	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.314076900 CEST	49833	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.314095974 CEST	443	49833	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.314109087 CEST	49833	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.314115047 CEST	443	49833	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.319518089 CEST	49838	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.319557905 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.319668055 CEST	49838	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.320204973 CEST	49838	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.320220947 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.321007967 CEST	49839	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.321047068 CEST	443	49839	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.321099997 CEST	49839	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.321501017 CEST	49839	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.321516991 CEST	443	49839	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.437959909 CEST	443	49835	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.438043118 CEST	443	49835	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.438160896 CEST	49835	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.498214006 CEST	49835	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.498246908 CEST	443	49835	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.498262882 CEST	49835	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.498270035 CEST	443	49835	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.501682043 CEST	49840	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.501717091 CEST	443	49840	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.501796961 CEST	49840	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.502343893 CEST	49840	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.502361059 CEST	443	49840	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.520466089 CEST	443	49836	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.523816109 CEST	49836	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.523838043 CEST	443	49836	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.529556036 CEST	49836	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.529561043 CEST	443	49836	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.657449007 CEST	443	49836	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.657558918 CEST	443	49836	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.657774925 CEST	49836	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.665735006 CEST	49836	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.665760040 CEST	443	49836	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.665788889 CEST	49836	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.665795088 CEST	443	49836	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.693489075 CEST	49841	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.693542957 CEST	443	49841	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.693651915 CEST	49841	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.712481976 CEST	49841	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.712506056 CEST	443	49841	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.725421906 CEST	443	49837	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.731329918 CEST	49837	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.731359959 CEST	443	49837	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.731718063 CEST	49837	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.731724024 CEST	443	49837	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.860817909 CEST	443	49837	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.860912085 CEST	443	49837	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.860994101 CEST	49837	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.861290932 CEST	49837	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.861313105 CEST	443	49837	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.861325979 CEST	49837	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.861331940 CEST	443	49837	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.864990950 CEST	49842	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.865034103 CEST	443	49842	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:28.865144014 CEST	49842	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.865348101 CEST	49842	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:28.865367889 CEST	443	49842	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.044882059 CEST	443	49839	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.045411110 CEST	49839	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.045439959 CEST	443	49839	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.046001911 CEST	49839	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.046010971 CEST	443	49839	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.048319101 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.048868895 CEST	49838	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.048892975 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.049590111 CEST	49838	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.049597979 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.176759005 CEST	443	49839	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.176961899 CEST	443	49839	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.177153111 CEST	49839	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.177202940 CEST	49839	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.177202940 CEST	49839	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.177222967 CEST	443	49839	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.177233934 CEST	443	49839	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.179191113 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.179229975 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.179280043 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.179316044 CEST	49838	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.179347038 CEST	49838	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.179470062 CEST	49838	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.179491043 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.179505110 CEST	49838	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.179510117 CEST	443	49838	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.180723906 CEST	49843	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.180758953 CEST	443	49843	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.181479931 CEST	49844	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.181504965 CEST	443	49844	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.181525946 CEST	49843	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.181682110 CEST	49844	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.181854010 CEST	49843	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.181854963 CEST	49844	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.181868076 CEST	443	49843	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.181869984 CEST	443	49844	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.241071939 CEST	443	49840	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.241923094 CEST	49840	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.241950989 CEST	443	49840	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.242420912 CEST	49840	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.242427111 CEST	443	49840	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.390171051 CEST	443	49840	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.390248060 CEST	443	49840	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.390321016 CEST	49840	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.390639067 CEST	49840	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.390665054 CEST	443	49840	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.390678883 CEST	49840	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.390686035 CEST	443	49840	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.393838882 CEST	49845	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.393883944 CEST	443	49845	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.394102097 CEST	49845	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.394300938 CEST	49845	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.394316912 CEST	443	49845	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.447346926 CEST	443	49841	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.450011969 CEST	49841	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.450042009 CEST	443	49841	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.450525999 CEST	49841	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.450531960 CEST	443	49841	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.582791090 CEST	443	49841	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.583137989 CEST	443	49841	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.583220005 CEST	49841	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.583496094 CEST	49841	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.583512068 CEST	443	49841	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.583522081 CEST	49841	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.583528042 CEST	443	49841	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.587152958 CEST	49846	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.587212086 CEST	443	49846	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.587308884 CEST	49846	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.587527037 CEST	49846	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.587543964 CEST	443	49846	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.589222908 CEST	443	49842	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.593839884 CEST	49842	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.593869925 CEST	443	49842	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.594321012 CEST	49842	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.594326019 CEST	443	49842	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.720145941 CEST	443	49842	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.720185995 CEST	443	49842	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.720238924 CEST	443	49842	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.720340014 CEST	49842	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.720383883 CEST	49842	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.720633984 CEST	49842	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.720644951 CEST	443	49842	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.720657110 CEST	49842	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.720662117 CEST	443	49842	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.723985910 CEST	49847	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.724035025 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.724111080 CEST	49847	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.724303961 CEST	49847	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.724319935 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.923270941 CEST	443	49843	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.923293114 CEST	443	49844	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.924074888 CEST	49844	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.924089909 CEST	443	49844	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.924112082 CEST	49843	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.924120903 CEST	443	49843	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.924551010 CEST	49844	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.924556017 CEST	443	49844	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:29.924580097 CEST	49843	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:29.924586058 CEST	443	49843	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.055666924 CEST	443	49843	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.055879116 CEST	443	49843	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.055932999 CEST	49843	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.056252003 CEST	49843	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.056267023 CEST	443	49843	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.064491034 CEST	443	49844	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.064827919 CEST	443	49844	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.064882994 CEST	443	49844	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.064898968 CEST	49844	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.064934969 CEST	49844	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.066121101 CEST	49844	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.066139936 CEST	443	49844	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.066152096 CEST	49844	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.066157103 CEST	443	49844	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.068196058 CEST	49848	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.068228006 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.068296909 CEST	49848	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.069449902 CEST	49849	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.069497108 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.069581985 CEST	49849	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.069686890 CEST	49848	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.069705009 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.069772005 CEST	49849	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.069787025 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.135222912 CEST	443	49845	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.135792971 CEST	49845	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.135819912 CEST	443	49845	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.136303902 CEST	49845	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.136308908 CEST	443	49845	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.269774914 CEST	443	49845	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.269855976 CEST	443	49845	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.269965887 CEST	49845	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.270236015 CEST	49845	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.270261049 CEST	443	49845	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.270277023 CEST	49845	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.270282984 CEST	443	49845	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.273746967 CEST	49850	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.273778915 CEST	443	49850	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.273866892 CEST	49850	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.274063110 CEST	49850	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.274074078 CEST	443	49850	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.329083920 CEST	443	49846	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.329819918 CEST	49846	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.329844952 CEST	443	49846	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.330506086 CEST	49846	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.330512047 CEST	443	49846	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.468955040 CEST	443	49846	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.468993902 CEST	443	49846	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.469043016 CEST	443	49846	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.469090939 CEST	49846	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.469127893 CEST	49846	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.469417095 CEST	49846	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.469436884 CEST	443	49846	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.469450951 CEST	49846	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.469456911 CEST	443	49846	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.469521046 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.469995022 CEST	49847	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.470022917 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.470544100 CEST	49847	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.470551968 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.472800016 CEST	49851	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.472857952 CEST	443	49851	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.472932100 CEST	49851	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.473061085 CEST	49851	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.473073006 CEST	443	49851	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.603499889 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.603598118 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.603661060 CEST	49847	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.603859901 CEST	49847	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.603878975 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.603889942 CEST	49847	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.603895903 CEST	443	49847	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.607325077 CEST	49852	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.607388973 CEST	443	49852	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.607475996 CEST	49852	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.607637882 CEST	49852	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.607671976 CEST	443	49852	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.802206039 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.802752972 CEST	49848	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.802767038 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.803267956 CEST	49848	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.803272963 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.820063114 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.820549011 CEST	49849	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.820570946 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.821121931 CEST	49849	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.821127892 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.935875893 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.935920954 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.935966969 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.936098099 CEST	49848	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.936367035 CEST	49848	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.936383963 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.936424017 CEST	49848	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.936429977 CEST	443	49848	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.939506054 CEST	49853	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.939558983 CEST	443	49853	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.939624071 CEST	49853	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.939894915 CEST	49853	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.939908981 CEST	443	49853	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.954905987 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.954977989 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.955034018 CEST	49849	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.955526114 CEST	49849	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.955538988 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.955553055 CEST	49849	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.955557108 CEST	443	49849	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.958228111 CEST	49854	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.958256960 CEST	443	49854	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:30.958333969 CEST	49854	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.958487988 CEST	49854	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:30.958498001 CEST	443	49854	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.007199049 CEST	443	49850	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.007807016 CEST	49850	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.007817030 CEST	443	49850	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.008415937 CEST	49850	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.008430958 CEST	443	49850	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.138617039 CEST	443	49850	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.138650894 CEST	443	49850	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.138705969 CEST	443	49850	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.138751030 CEST	49850	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.138751030 CEST	49850	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.138978004 CEST	49850	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.138978004 CEST	49850	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.138993979 CEST	443	49850	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.139002085 CEST	443	49850	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.142446041 CEST	49855	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.142483950 CEST	443	49855	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.142564058 CEST	49855	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.143115044 CEST	49855	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.143127918 CEST	443	49855	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.205415964 CEST	443	49851	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.252053022 CEST	49851	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.274075985 CEST	49851	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.274090052 CEST	443	49851	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.274715900 CEST	49851	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.274724007 CEST	443	49851	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.350526094 CEST	443	49852	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.351299047 CEST	49852	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.351306915 CEST	443	49852	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.351696014 CEST	49852	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.351700068 CEST	443	49852	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.399420023 CEST	443	49851	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.399765015 CEST	443	49851	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.399826050 CEST	49851	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.399918079 CEST	49851	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.399936914 CEST	443	49851	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.399970055 CEST	49851	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.399976969 CEST	443	49851	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.403204918 CEST	49856	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.403235912 CEST	443	49856	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.403301954 CEST	49856	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.403481007 CEST	49856	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.403496981 CEST	443	49856	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.483933926 CEST	443	49852	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.484167099 CEST	443	49852	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.484244108 CEST	49852	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.484354973 CEST	49852	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.484374046 CEST	443	49852	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.484388113 CEST	49852	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.484394073 CEST	443	49852	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.488018990 CEST	49857	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.488048077 CEST	443	49857	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.488106966 CEST	49857	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.488272905 CEST	49857	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.488285065 CEST	443	49857	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.663357019 CEST	443	49853	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.663957119 CEST	49853	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.663975000 CEST	443	49853	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.664485931 CEST	49853	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.664491892 CEST	443	49853	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.707914114 CEST	443	49854	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.708316088 CEST	49854	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.708333015 CEST	443	49854	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.708719015 CEST	49854	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.708724022 CEST	443	49854	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.792383909 CEST	443	49853	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.792453051 CEST	443	49853	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.792597055 CEST	49853	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.795810938 CEST	49853	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.795831919 CEST	443	49853	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.795842886 CEST	49853	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.795850039 CEST	443	49853	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.800076008 CEST	49858	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.800102949 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.800164938 CEST	49858	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.800327063 CEST	49858	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.800342083 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.851062059 CEST	443	49854	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.851102114 CEST	443	49854	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.851166964 CEST	443	49854	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.851269960 CEST	49854	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.851269960 CEST	49854	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.851500988 CEST	49854	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.851516962 CEST	443	49854	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.851532936 CEST	49854	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.851537943 CEST	443	49854	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.854818106 CEST	49859	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.854842901 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.854922056 CEST	49859	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.855068922 CEST	49859	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.855078936 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.892215967 CEST	443	49855	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.892786026 CEST	49855	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.892796993 CEST	443	49855	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:31.893289089 CEST	49855	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:31.893294096 CEST	443	49855	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.026081085 CEST	443	49855	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.026184082 CEST	443	49855	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.026238918 CEST	49855	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.026514053 CEST	49855	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.026530981 CEST	443	49855	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.026540995 CEST	49855	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.026546955 CEST	443	49855	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.029814005 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.029840946 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.029907942 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.030101061 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.030109882 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.151168108 CEST	443	49856	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.152323961 CEST	49856	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.152340889 CEST	443	49856	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.152882099 CEST	49856	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.152889013 CEST	443	49856	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.223932981 CEST	443	49857	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.224617958 CEST	49857	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.224700928 CEST	443	49857	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.225157022 CEST	49857	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.225172043 CEST	443	49857	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.284686089 CEST	443	49856	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.284751892 CEST	443	49856	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.284811020 CEST	443	49856	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.284888983 CEST	49856	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.284939051 CEST	49856	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.285233974 CEST	49856	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.285254955 CEST	443	49856	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.285265923 CEST	49856	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.285271883 CEST	443	49856	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.288372993 CEST	49861	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.288440943 CEST	443	49861	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.288671017 CEST	49861	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.288671017 CEST	49861	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.288712025 CEST	443	49861	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.353393078 CEST	443	49857	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.353576899 CEST	443	49857	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.353826046 CEST	49857	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.353998899 CEST	49857	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.354052067 CEST	443	49857	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.354084969 CEST	49857	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.354101896 CEST	443	49857	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.358053923 CEST	49862	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.358079910 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.358290911 CEST	49862	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.358781099 CEST	49862	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.358793974 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.549352884 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.550635099 CEST	49858	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.550673962 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.551177025 CEST	49858	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.551183939 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.595933914 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.596739054 CEST	49859	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.596780062 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.597141027 CEST	49859	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.597160101 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.685265064 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.685337067 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.685551882 CEST	49858	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.685972929 CEST	49858	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.685986996 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.685997009 CEST	49858	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.686002016 CEST	443	49858	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.689860106 CEST	49863	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.689888000 CEST	443	49863	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.690177917 CEST	49863	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.690177917 CEST	49863	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.690212965 CEST	443	49863	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.728317976 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.728487015 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.728600979 CEST	49859	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.728662014 CEST	49859	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.728662014 CEST	49859	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.728694916 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.728722095 CEST	443	49859	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.731025934 CEST	49864	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.731071949 CEST	443	49864	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.731146097 CEST	49864	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.731267929 CEST	49864	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.731277943 CEST	443	49864	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.773160934 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.773850918 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.773885965 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.774374008 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.774382114 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.905414104 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.905443907 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.905508995 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.905530930 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.905575037 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.905860901 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.905881882 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.905890942 CEST	49860	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.905896902 CEST	443	49860	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.909189939 CEST	49865	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.909246922 CEST	443	49865	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:32.910142899 CEST	49865	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.910278082 CEST	49865	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:32.910290003 CEST	443	49865	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.027483940 CEST	443	49861	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.028081894 CEST	49861	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.028095007 CEST	443	49861	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.028693914 CEST	49861	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.028698921 CEST	443	49861	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.100136995 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.100816965 CEST	49862	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.100836039 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.101331949 CEST	49862	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.101341009 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.163120031 CEST	443	49861	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.163213968 CEST	443	49861	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.163276911 CEST	49861	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.164125919 CEST	49861	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.164139986 CEST	443	49861	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.180433989 CEST	49866	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.180493116 CEST	443	49866	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.180579901 CEST	49866	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.180726051 CEST	49866	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.180742025 CEST	443	49866	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.234113932 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.234549046 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.234603882 CEST	49862	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.234621048 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.234636068 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.234705925 CEST	49862	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.234729052 CEST	49862	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.234729052 CEST	49862	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.234745026 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.234751940 CEST	443	49862	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.238464117 CEST	49867	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.238557100 CEST	443	49867	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.238859892 CEST	49867	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.238859892 CEST	49867	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.238930941 CEST	443	49867	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.422682047 CEST	443	49863	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.423348904 CEST	49863	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.423366070 CEST	443	49863	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.423857927 CEST	49863	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.423862934 CEST	443	49863	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.466777086 CEST	443	49864	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.467390060 CEST	49864	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.467406034 CEST	443	49864	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.467921972 CEST	49864	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.467926025 CEST	443	49864	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.555438042 CEST	443	49863	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.555512905 CEST	443	49863	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.555567026 CEST	49863	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.555777073 CEST	49863	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.555798054 CEST	443	49863	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.555815935 CEST	49863	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.555820942 CEST	443	49863	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.558834076 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.558938026 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.559030056 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.559195042 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.559236050 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.598095894 CEST	443	49864	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.598634958 CEST	443	49864	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.598710060 CEST	49864	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.598794937 CEST	49864	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.598815918 CEST	443	49864	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.598853111 CEST	49864	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.598859072 CEST	443	49864	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.601838112 CEST	49869	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.601903915 CEST	443	49869	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.601998091 CEST	49869	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.602169037 CEST	49869	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.602186918 CEST	443	49869	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.644311905 CEST	443	49865	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.644923925 CEST	49865	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.644961119 CEST	443	49865	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.645462990 CEST	49865	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.645471096 CEST	443	49865	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.776726007 CEST	443	49865	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.776818037 CEST	443	49865	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.776886940 CEST	49865	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.777178049 CEST	49865	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.777198076 CEST	443	49865	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.777211905 CEST	49865	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.777219057 CEST	443	49865	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.780595064 CEST	49870	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.780693054 CEST	443	49870	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.780795097 CEST	49870	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.781022072 CEST	49870	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.781049967 CEST	443	49870	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.917413950 CEST	443	49866	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.918519974 CEST	49866	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.918529987 CEST	443	49866	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:33.919187069 CEST	49866	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:33.919190884 CEST	443	49866	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.016411066 CEST	443	49867	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.017110109 CEST	49867	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.017129898 CEST	443	49867	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.017627954 CEST	49867	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.017637014 CEST	443	49867	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.049885035 CEST	443	49866	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.049988031 CEST	443	49866	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.050095081 CEST	49866	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.050384045 CEST	49866	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.050395966 CEST	443	49866	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.050414085 CEST	49866	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.050419092 CEST	443	49866	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.056174994 CEST	49871	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.056224108 CEST	443	49871	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.056301117 CEST	49871	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.056513071 CEST	49871	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.056529045 CEST	443	49871	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.149547100 CEST	443	49867	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.149624109 CEST	443	49867	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.149964094 CEST	49867	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.150038004 CEST	49867	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.150038004 CEST	49867	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.150077105 CEST	443	49867	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.150101900 CEST	443	49867	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.153918028 CEST	49872	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.153949976 CEST	443	49872	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.154069901 CEST	49872	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.154258966 CEST	49872	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.154289961 CEST	443	49872	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.288659096 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.289350033 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.289423943 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.289863110 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.289877892 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.338273048 CEST	443	49869	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.341892958 CEST	49869	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.341933012 CEST	443	49869	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.342364073 CEST	49869	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.342374086 CEST	443	49869	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.418850899 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.418920040 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.419270992 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.419337988 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.419367075 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.419394970 CEST	49868	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.419409037 CEST	443	49868	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.422696114 CEST	49873	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.422746897 CEST	443	49873	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.422837973 CEST	49873	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.423055887 CEST	49873	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.423067093 CEST	443	49873	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.471616030 CEST	443	49869	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.472007990 CEST	443	49869	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.472106934 CEST	49869	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.472141981 CEST	49869	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.472162008 CEST	443	49869	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.472172976 CEST	49869	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.472179890 CEST	443	49869	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.476000071 CEST	49874	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.476042032 CEST	443	49874	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.476138115 CEST	49874	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.476320982 CEST	49874	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.476334095 CEST	443	49874	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.534776926 CEST	443	49870	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.535798073 CEST	49870	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.535856009 CEST	443	49870	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.536310911 CEST	49870	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.536317110 CEST	443	49870	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.667284012 CEST	443	49870	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.667334080 CEST	443	49870	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.667399883 CEST	443	49870	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.667412996 CEST	49870	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.667462111 CEST	49870	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.667725086 CEST	49870	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.667762041 CEST	443	49870	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.667789936 CEST	49870	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.667805910 CEST	443	49870	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.670665026 CEST	49875	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.670712948 CEST	443	49875	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.670790911 CEST	49875	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.671009064 CEST	49875	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.671024084 CEST	443	49875	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.802934885 CEST	443	49871	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.803637028 CEST	49871	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.803668022 CEST	443	49871	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.804173946 CEST	49871	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.804184914 CEST	443	49871	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.899696112 CEST	443	49872	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.911902905 CEST	49872	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.911931038 CEST	443	49872	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.912427902 CEST	49872	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.912431955 CEST	443	49872	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.935283899 CEST	443	49871	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.935626984 CEST	443	49871	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.935790062 CEST	49871	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.936057091 CEST	49871	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.936078072 CEST	443	49871	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.936090946 CEST	49871	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.936096907 CEST	443	49871	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.939342976 CEST	49876	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.939372063 CEST	443	49876	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:34.939452887 CEST	49876	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.940120935 CEST	49876	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:34.940131903 CEST	443	49876	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.049223900 CEST	443	49872	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.049314022 CEST	443	49872	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.049371004 CEST	49872	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.049719095 CEST	49872	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.049736023 CEST	443	49872	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.049746990 CEST	49872	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.049751997 CEST	443	49872	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.053261042 CEST	49877	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.053308964 CEST	443	49877	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.053497076 CEST	49877	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.053539991 CEST	49877	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.053550959 CEST	443	49877	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.153280973 CEST	443	49873	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.154037952 CEST	49873	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.154062033 CEST	443	49873	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.154613972 CEST	49873	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.154618979 CEST	443	49873	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.212937117 CEST	443	49874	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.213696003 CEST	49874	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.213715076 CEST	443	49874	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.214303017 CEST	49874	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.214308023 CEST	443	49874	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.283564091 CEST	443	49873	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.283659935 CEST	443	49873	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.283709049 CEST	49873	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.283925056 CEST	49873	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.283941031 CEST	443	49873	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.283955097 CEST	49873	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.283960104 CEST	443	49873	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.287518024 CEST	49878	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.287565947 CEST	443	49878	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.287646055 CEST	49878	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.287843943 CEST	49878	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.287858963 CEST	443	49878	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.346733093 CEST	443	49874	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.346761942 CEST	443	49874	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.346821070 CEST	443	49874	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.346852064 CEST	49874	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.346890926 CEST	49874	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.347198963 CEST	49874	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.347213984 CEST	443	49874	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.347246885 CEST	49874	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.347251892 CEST	443	49874	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.350538015 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.350570917 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.350646973 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.350799084 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.350810051 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.399154902 CEST	443	49875	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.399782896 CEST	49875	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.399811983 CEST	443	49875	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.400281906 CEST	49875	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.400289059 CEST	443	49875	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.530222893 CEST	443	49875	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.530256987 CEST	443	49875	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.530308008 CEST	443	49875	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.530358076 CEST	49875	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.530385017 CEST	49875	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.530677080 CEST	49875	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.530690908 CEST	443	49875	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.530704021 CEST	49875	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.530709028 CEST	443	49875	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.533894062 CEST	49880	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.533916950 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.533978939 CEST	49880	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.534207106 CEST	49880	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.534218073 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.688536882 CEST	443	49876	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.689467907 CEST	49876	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.689498901 CEST	443	49876	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.690030098 CEST	49876	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.690037966 CEST	443	49876	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.783515930 CEST	443	49877	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.784287930 CEST	49877	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.784317017 CEST	443	49877	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.784708023 CEST	49877	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.784713030 CEST	443	49877	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.823152065 CEST	443	49876	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.823183060 CEST	443	49876	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.823236942 CEST	443	49876	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.823246002 CEST	49876	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.823278904 CEST	49876	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.823499918 CEST	49876	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.823519945 CEST	443	49876	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.823537111 CEST	49876	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.823542118 CEST	443	49876	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.826546907 CEST	49881	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.826581001 CEST	443	49881	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.826670885 CEST	49881	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.826901913 CEST	49881	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.826916933 CEST	443	49881	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.911854982 CEST	443	49877	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.912030935 CEST	443	49877	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.912134886 CEST	49877	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.912807941 CEST	49877	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.912863970 CEST	443	49877	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.912906885 CEST	49877	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.912924051 CEST	443	49877	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.923507929 CEST	49882	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.923558950 CEST	443	49882	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:35.923646927 CEST	49882	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.923810959 CEST	49882	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:35.923841000 CEST	443	49882	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.038203001 CEST	443	49878	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.038835049 CEST	49878	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.038863897 CEST	443	49878	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.039385080 CEST	49878	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.039392948 CEST	443	49878	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.078708887 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.079441071 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.079518080 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.080012083 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.080038071 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.175177097 CEST	443	49878	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.175213099 CEST	443	49878	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.175260067 CEST	443	49878	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.175353050 CEST	49878	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.175388098 CEST	49878	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.175704956 CEST	49878	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.175723076 CEST	443	49878	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.175740004 CEST	49878	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.175745010 CEST	443	49878	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.179440975 CEST	49883	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.179505110 CEST	443	49883	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.179604053 CEST	49883	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.179836035 CEST	49883	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.179852009 CEST	443	49883	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.277436018 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.278099060 CEST	49880	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.278135061 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.278603077 CEST	49880	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.278609037 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.319010973 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.319099903 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.319205046 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.319437981 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.319462061 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.319477081 CEST	49879	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.319483042 CEST	443	49879	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.322642088 CEST	49884	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.322689056 CEST	443	49884	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.322777033 CEST	49884	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.322943926 CEST	49884	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.322956085 CEST	443	49884	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.410147905 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.410171032 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.410233021 CEST	49880	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.410259962 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.410279036 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.410330057 CEST	49880	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.410547018 CEST	49880	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.410564899 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.410578966 CEST	49880	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.410583973 CEST	443	49880	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.414053917 CEST	49885	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.414098024 CEST	443	49885	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.414163113 CEST	49885	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.414319992 CEST	49885	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.414330006 CEST	443	49885	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.560127020 CEST	443	49881	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.560839891 CEST	49881	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.560867071 CEST	443	49881	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.561392069 CEST	49881	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.561403990 CEST	443	49881	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.658797026 CEST	443	49882	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.659512043 CEST	49882	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.659528017 CEST	443	49882	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.660164118 CEST	49882	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.660168886 CEST	443	49882	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.691744089 CEST	443	49881	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.695327044 CEST	443	49881	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.695400953 CEST	443	49881	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.695416927 CEST	49881	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.695458889 CEST	49881	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.695552111 CEST	49881	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.695569992 CEST	443	49881	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.695585966 CEST	49881	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.695590973 CEST	443	49881	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.699223995 CEST	49886	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.699268103 CEST	443	49886	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.699510098 CEST	49886	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.699510098 CEST	49886	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.699544907 CEST	443	49886	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.793849945 CEST	443	49882	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.794059038 CEST	443	49882	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.794106007 CEST	443	49882	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.794142962 CEST	49882	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.794168949 CEST	49882	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.794353008 CEST	49882	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.794368029 CEST	443	49882	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.794383049 CEST	49882	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.794389009 CEST	443	49882	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.797550917 CEST	49887	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.797586918 CEST	443	49887	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.797668934 CEST	49887	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.797842026 CEST	49887	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.797849894 CEST	443	49887	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.909487009 CEST	443	49883	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.911966085 CEST	49883	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.912002087 CEST	443	49883	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:36.912455082 CEST	49883	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:36.912462950 CEST	443	49883	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.051848888 CEST	443	49883	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.051929951 CEST	443	49883	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.051980019 CEST	49883	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.063311100 CEST	443	49884	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.064004898 CEST	49883	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.064027071 CEST	443	49883	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.064038038 CEST	49883	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.064043045 CEST	443	49883	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.077619076 CEST	49884	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.077636957 CEST	443	49884	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.078670979 CEST	49884	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.078689098 CEST	443	49884	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.085526943 CEST	49888	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.085576057 CEST	443	49888	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.085647106 CEST	49888	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.085912943 CEST	49888	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.085927963 CEST	443	49888	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.147182941 CEST	443	49885	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.147790909 CEST	49885	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.147829056 CEST	443	49885	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.148297071 CEST	49885	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.148304939 CEST	443	49885	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.204282045 CEST	443	49884	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.204421043 CEST	443	49884	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.204500914 CEST	49884	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.204668045 CEST	49884	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.204688072 CEST	443	49884	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.204698086 CEST	49884	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.204704046 CEST	443	49884	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.208225965 CEST	49889	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.208266973 CEST	443	49889	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.208345890 CEST	49889	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.208486080 CEST	49889	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.208498001 CEST	443	49889	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.281030893 CEST	443	49885	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.281100988 CEST	443	49885	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.281225920 CEST	49885	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.281496048 CEST	49885	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.281536102 CEST	443	49885	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.281562090 CEST	49885	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.281579971 CEST	443	49885	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.353815079 CEST	49890	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.353856087 CEST	443	49890	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.353949070 CEST	49890	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.354104996 CEST	49890	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.354114056 CEST	443	49890	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.445904970 CEST	443	49886	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.486486912 CEST	49886	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.509784937 CEST	49886	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.509793043 CEST	443	49886	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.510369062 CEST	49886	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.510373116 CEST	443	49886	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.550251007 CEST	443	49887	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.565882921 CEST	49887	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.565905094 CEST	443	49887	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.566380978 CEST	49887	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.566390038 CEST	443	49887	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.639235020 CEST	443	49886	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.639271021 CEST	443	49886	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.639327049 CEST	443	49886	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.639513969 CEST	49886	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.645143986 CEST	49886	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.645159960 CEST	443	49886	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.645169973 CEST	49886	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.645176888 CEST	443	49886	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.648603916 CEST	49891	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.648648977 CEST	443	49891	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.648766994 CEST	49891	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.649035931 CEST	49891	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.649055958 CEST	443	49891	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.694858074 CEST	443	49887	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.694972038 CEST	443	49887	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.695024967 CEST	49887	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.695207119 CEST	49887	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.695230007 CEST	443	49887	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.695245028 CEST	49887	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.695251942 CEST	443	49887	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.698684931 CEST	49892	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.698743105 CEST	443	49892	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.698842049 CEST	49892	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.699043989 CEST	49892	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.699064016 CEST	443	49892	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.818502903 CEST	443	49888	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.819241047 CEST	49888	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.819259882 CEST	443	49888	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.819757938 CEST	49888	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.819762945 CEST	443	49888	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.950601101 CEST	443	49888	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.950706005 CEST	443	49888	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.950752020 CEST	443	49888	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.950788021 CEST	49888	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.950822115 CEST	49888	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.951122046 CEST	49888	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.951143980 CEST	443	49888	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.951159000 CEST	49888	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.951164961 CEST	443	49888	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.951304913 CEST	443	49889	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.951740026 CEST	49889	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.951776981 CEST	443	49889	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.952332020 CEST	49889	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.952337980 CEST	443	49889	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.954596996 CEST	49893	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.954643965 CEST	443	49893	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:37.954832077 CEST	49893	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.954883099 CEST	49893	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:37.954895020 CEST	443	49893	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.085228920 CEST	443	49889	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.085340977 CEST	443	49889	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.085403919 CEST	49889	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.085730076 CEST	49889	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.085752010 CEST	443	49889	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.085767984 CEST	49889	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.085773945 CEST	443	49889	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.089011908 CEST	49894	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.089067936 CEST	443	49894	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.089145899 CEST	49894	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.089343071 CEST	49894	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.089361906 CEST	443	49894	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.091512918 CEST	443	49890	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.092000961 CEST	49890	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.092034101 CEST	443	49890	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.092454910 CEST	49890	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.092473030 CEST	443	49890	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.224486113 CEST	443	49890	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.224539042 CEST	443	49890	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.224610090 CEST	443	49890	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.224612951 CEST	49890	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.224658012 CEST	49890	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.224978924 CEST	49890	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.225002050 CEST	443	49890	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.225023985 CEST	49890	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.225029945 CEST	443	49890	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.228344917 CEST	49895	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.228454113 CEST	443	49895	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.228548050 CEST	49895	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.228719950 CEST	49895	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.228758097 CEST	443	49895	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.396152973 CEST	443	49891	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.396847010 CEST	49891	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.396859884 CEST	443	49891	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.397478104 CEST	49891	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.397481918 CEST	443	49891	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.446449995 CEST	443	49892	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.446991920 CEST	49892	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.447026968 CEST	443	49892	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.447508097 CEST	49892	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.447515965 CEST	443	49892	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.525532007 CEST	443	49891	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.525594950 CEST	443	49891	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.525733948 CEST	49891	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.544763088 CEST	49891	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.544804096 CEST	443	49891	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.544845104 CEST	49891	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.544862032 CEST	443	49891	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.548819065 CEST	49896	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.548923969 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.549016953 CEST	49896	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.549248934 CEST	49896	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.549288034 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.583924055 CEST	443	49892	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.584080935 CEST	443	49892	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.584170103 CEST	49892	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.584381104 CEST	49892	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.584404945 CEST	443	49892	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.584420919 CEST	49892	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.584428072 CEST	443	49892	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.587564945 CEST	49897	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.587608099 CEST	443	49897	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.587837934 CEST	49897	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.588011026 CEST	49897	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.588023901 CEST	443	49897	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.759277105 CEST	443	49893	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.759845018 CEST	49893	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.759872913 CEST	443	49893	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.760448933 CEST	49893	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.760457039 CEST	443	49893	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.828422070 CEST	443	49894	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.829199076 CEST	49894	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.829224110 CEST	443	49894	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.829603910 CEST	49894	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.829612017 CEST	443	49894	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.892414093 CEST	443	49893	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.892477036 CEST	443	49893	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.892544985 CEST	49893	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.892869949 CEST	49893	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.892891884 CEST	443	49893	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.892901897 CEST	49893	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.892908096 CEST	443	49893	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.895971060 CEST	49898	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.896014929 CEST	443	49898	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.896094084 CEST	49898	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.896280050 CEST	49898	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.896294117 CEST	443	49898	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.960093021 CEST	443	49894	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.960272074 CEST	443	49894	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.960405111 CEST	49894	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.960808039 CEST	49894	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.960824013 CEST	443	49894	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.960834980 CEST	49894	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.960839987 CEST	443	49894	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.964870930 CEST	49899	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.964931011 CEST	443	49899	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.965029001 CEST	49899	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.965241909 CEST	49899	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.965260029 CEST	443	49899	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.973140001 CEST	443	49895	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.973789930 CEST	49895	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.973819017 CEST	443	49895	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:38.974510908 CEST	49895	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:38.974545002 CEST	443	49895	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.107826948 CEST	443	49895	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.108638048 CEST	443	49895	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.108707905 CEST	49895	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.108748913 CEST	49895	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.108748913 CEST	49895	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.108769894 CEST	443	49895	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.108783007 CEST	443	49895	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.112411022 CEST	49900	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.112440109 CEST	443	49900	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.112581968 CEST	49900	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.112755060 CEST	49900	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.112766981 CEST	443	49900	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.292610884 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.293200970 CEST	49896	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.293265104 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.293729067 CEST	49896	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.293741941 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.324790955 CEST	443	49897	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.327430964 CEST	49897	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.327440977 CEST	443	49897	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.327971935 CEST	49897	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.327979088 CEST	443	49897	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.430504084 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.431001902 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.431050062 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.431186914 CEST	49896	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.431477070 CEST	49896	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.431500912 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.431518078 CEST	49896	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.431524992 CEST	443	49896	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.434659958 CEST	49901	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.434699059 CEST	443	49901	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.434777021 CEST	49901	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.434932947 CEST	49901	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.434943914 CEST	443	49901	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.458200932 CEST	443	49897	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.458328009 CEST	443	49897	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.458405972 CEST	49897	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.458564043 CEST	49897	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.458581924 CEST	443	49897	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.458592892 CEST	49897	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.458597898 CEST	443	49897	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.461033106 CEST	49902	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.461061954 CEST	443	49902	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.461131096 CEST	49902	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.461422920 CEST	49902	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.461435080 CEST	443	49902	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.640374899 CEST	443	49898	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.640997887 CEST	49898	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.641021013 CEST	443	49898	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.641510010 CEST	49898	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.641519070 CEST	443	49898	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.700938940 CEST	443	49899	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.702330112 CEST	49899	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.702342033 CEST	443	49899	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.702838898 CEST	49899	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.702843904 CEST	443	49899	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.773637056 CEST	443	49898	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.773674965 CEST	443	49898	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.773731947 CEST	443	49898	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.773766994 CEST	49898	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.773823023 CEST	49898	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.774130106 CEST	49898	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.774163008 CEST	443	49898	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.774184942 CEST	49898	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.774194956 CEST	443	49898	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.777247906 CEST	49903	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.777321100 CEST	443	49903	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.777400017 CEST	49903	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.777587891 CEST	49903	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.777606964 CEST	443	49903	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.833122015 CEST	443	49899	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.833415031 CEST	443	49899	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.838779926 CEST	49899	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.838927031 CEST	49899	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.838946104 CEST	443	49899	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.838963032 CEST	49899	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.838969946 CEST	443	49899	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.842077971 CEST	49904	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.842102051 CEST	443	49904	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.842350006 CEST	49904	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.842350960 CEST	49904	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.842406034 CEST	443	49904	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.847656965 CEST	443	49900	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.850739002 CEST	49900	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.850754023 CEST	443	49900	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.851231098 CEST	49900	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.851236105 CEST	443	49900	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.978890896 CEST	443	49900	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.978928089 CEST	443	49900	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.978977919 CEST	443	49900	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.979043007 CEST	49900	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.979077101 CEST	49900	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.993347883 CEST	49900	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.993375063 CEST	443	49900	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:39.993390083 CEST	49900	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:39.993398905 CEST	443	49900	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:40.027491093 CEST	49905	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:40.027539015 CEST	443	49905	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:40.027621031 CEST	49905	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:40.027918100 CEST	49905	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:40.027932882 CEST	443	49905	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:40.176970005 CEST	443	49901	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:40.190121889 CEST	49901	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:40.190139055 CEST	443	49901	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:40.195324898 CEST	49901	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:40.195338011 CEST	443	49901	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:40.199393034 CEST	443	49902	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:40.200160027 CEST	49902	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:40.200171947 CEST	443	49902	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:40.201015949 CEST	49902	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:40.201020956 CEST	443	49902	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:40.325695038 CEST	443	49901	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:40.325758934 CEST	443	49901	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:40.325797081 CEST	49901	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:40.326102972 CEST	49901	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:40.326119900 CEST	443	49901	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:40.326132059 CEST	49901	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:40.326141119 CEST	443	49901	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:40.329298019 CEST	49907	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:40.329340935 CEST	443	49907	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:40.329411030 CEST	49907	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:40.329593897 CEST	49907	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:40.329611063 CEST	443	49907	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:40.347378016 CEST	443	49902	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:40.347405910 CEST	443	49902	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:40.347451925 CEST	443	49902	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:40.347605944 CEST	49902	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:40.347894907 CEST	49902	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:40.347903967 CEST	443	49902	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:40.347915888 CEST	49902	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:40.347920895 CEST	443	49902	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:40.351344109 CEST	49908	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:40.351382017 CEST	443	49908	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:40.351464033 CEST	49908	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:40.351638079 CEST	49908	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:40.351648092 CEST	443	49908	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:40.521168947 CEST	443	49903	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:40.521814108 CEST	49903	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:40.521832943 CEST	443	49903	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:40.522455931 CEST	49903	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:40.522464037 CEST	443	49903	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:40.567627907 CEST	443	49904	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:40.568094015 CEST	49904	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:40.568106890 CEST	443	49904	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:40.568563938 CEST	49904	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:40.568568945 CEST	443	49904	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.702250957 CEST	443	49903	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.702336073 CEST	443	49903	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.702392101 CEST	443	49904	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.702414989 CEST	443	49904	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.702440023 CEST	49903	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.702465057 CEST	49904	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.702470064 CEST	443	49904	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.702510118 CEST	49904	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.702773094 CEST	49904	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.702781916 CEST	49903	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.702791929 CEST	443	49904	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.702796936 CEST	443	49903	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.702820063 CEST	49904	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.702821016 CEST	49903	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.702826023 CEST	443	49903	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.702826023 CEST	443	49904	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.706346989 CEST	443	49905	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.706464052 CEST	49909	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.706494093 CEST	443	49909	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.706513882 CEST	49910	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.706540108 CEST	443	49910	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.706552982 CEST	49909	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.706584930 CEST	49910	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.706717968 CEST	49909	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.706733942 CEST	443	49909	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.706835985 CEST	49910	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.706850052 CEST	443	49910	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.706937075 CEST	49905	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.706957102 CEST	443	49905	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.707535982 CEST	49905	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.707542896 CEST	443	49905	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.831063032 CEST	443	49908	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.831820011 CEST	49908	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.831834078 CEST	443	49908	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.832117081 CEST	443	49907	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.832402945 CEST	49907	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.832422972 CEST	443	49907	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.832494974 CEST	49908	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.832499981 CEST	443	49908	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.832921982 CEST	49907	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.832926989 CEST	443	49907	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.841106892 CEST	443	49905	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.841128111 CEST	443	49905	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.841192007 CEST	49905	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.841207027 CEST	443	49905	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.841279984 CEST	443	49905	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.841325998 CEST	49905	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.841540098 CEST	49905	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.841552973 CEST	443	49905	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.841567993 CEST	49905	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.841573000 CEST	443	49905	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.845335960 CEST	49911	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.845362902 CEST	443	49911	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.845451117 CEST	49911	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.845660925 CEST	49911	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.845668077 CEST	443	49911	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.961152077 CEST	443	49908	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.961328030 CEST	443	49908	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.961383104 CEST	49908	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.961564064 CEST	49908	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.961587906 CEST	443	49908	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.961600065 CEST	49908	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.961607933 CEST	443	49908	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.961611986 CEST	443	49907	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.961684942 CEST	443	49907	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.961728096 CEST	49907	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.961740017 CEST	443	49907	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.961790085 CEST	49907	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.961911917 CEST	49907	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.961930990 CEST	443	49907	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.961949110 CEST	49907	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.961954117 CEST	443	49907	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.966026068 CEST	49912	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.966068983 CEST	443	49912	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.966125965 CEST	49912	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.966351032 CEST	49913	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.966389894 CEST	443	49913	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.966447115 CEST	49913	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.966610909 CEST	49913	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.966623068 CEST	443	49913	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:41.966633081 CEST	49912	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:41.966653109 CEST	443	49912	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.439014912 CEST	443	49909	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.439882040 CEST	49909	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.439907074 CEST	443	49909	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.440413952 CEST	49909	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.440419912 CEST	443	49909	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.451772928 CEST	443	49910	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.455662966 CEST	49910	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.455708981 CEST	443	49910	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.456137896 CEST	49910	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.456161976 CEST	443	49910	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.486794949 CEST	49702	80	192.168.2.6	104.18.38.233
Oct 23, 2024 17:04:42.486875057 CEST	49704	80	192.168.2.6	104.18.38.233
Oct 23, 2024 17:04:42.487268925 CEST	49700	80	192.168.2.6	104.18.38.233
Oct 23, 2024 17:04:42.492847919 CEST	80	49702	104.18.38.233	192.168.2.6
Oct 23, 2024 17:04:42.493485928 CEST	49702	80	192.168.2.6	104.18.38.233
Oct 23, 2024 17:04:42.494193077 CEST	80	49704	104.18.38.233	192.168.2.6
Oct 23, 2024 17:04:42.494259119 CEST	49704	80	192.168.2.6	104.18.38.233
Oct 23, 2024 17:04:42.495088100 CEST	80	49700	104.18.38.233	192.168.2.6
Oct 23, 2024 17:04:42.495151997 CEST	49700	80	192.168.2.6	104.18.38.233
Oct 23, 2024 17:04:42.569538116 CEST	443	49909	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.569590092 CEST	443	49909	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.569641113 CEST	443	49909	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.569645882 CEST	49909	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.569679022 CEST	49909	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.569967031 CEST	49909	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.569981098 CEST	443	49909	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.569993973 CEST	49909	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.569998980 CEST	443	49909	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.573260069 CEST	49914	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.573303938 CEST	443	49914	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.573385954 CEST	49914	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.573575020 CEST	49914	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.573590040 CEST	443	49914	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.584048986 CEST	443	49911	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.585297108 CEST	443	49910	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.585366011 CEST	443	49910	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.585735083 CEST	49911	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.585745096 CEST	443	49911	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.585755110 CEST	49910	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.586258888 CEST	49911	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.586262941 CEST	443	49911	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.586431026 CEST	49910	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.586455107 CEST	443	49910	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.586493015 CEST	49910	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.586499929 CEST	443	49910	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.589315891 CEST	49915	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.589409113 CEST	443	49915	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.589495897 CEST	49915	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.589660883 CEST	49915	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.589696884 CEST	443	49915	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.697350979 CEST	443	49912	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.699867010 CEST	49912	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.699899912 CEST	443	49912	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.700382948 CEST	49912	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.700396061 CEST	443	49912	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.706907034 CEST	443	49913	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.707566977 CEST	49913	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.707648039 CEST	443	49913	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.707956076 CEST	49913	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.707969904 CEST	443	49913	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.715842009 CEST	443	49911	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.715959072 CEST	443	49911	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.716011047 CEST	443	49911	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.716022968 CEST	49911	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.716061115 CEST	49911	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.716267109 CEST	49911	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.716279984 CEST	443	49911	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.716291904 CEST	49911	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.716296911 CEST	443	49911	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.719644070 CEST	49916	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.719692945 CEST	443	49916	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.719773054 CEST	49916	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.719949961 CEST	49916	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.719969034 CEST	443	49916	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.846827030 CEST	443	49913	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.846852064 CEST	443	49913	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.846892118 CEST	443	49913	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.846949100 CEST	49913	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.846997023 CEST	49913	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.847280979 CEST	49913	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.847305059 CEST	443	49913	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.847327948 CEST	49913	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.847335100 CEST	443	49913	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.850684881 CEST	49917	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.850733042 CEST	443	49917	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.850815058 CEST	49917	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.851008892 CEST	49917	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.851023912 CEST	443	49917	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.885432005 CEST	443	49912	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.885499954 CEST	443	49912	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.885812044 CEST	49912	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.885812044 CEST	49912	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.885812044 CEST	49912	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.888688087 CEST	49918	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.888727903 CEST	443	49918	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:42.888794899 CEST	49918	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.888940096 CEST	49918	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:42.888957024 CEST	443	49918	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.111469030 CEST	49912	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.111506939 CEST	443	49912	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.321043015 CEST	443	49914	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.321789980 CEST	49914	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.321809053 CEST	443	49914	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.322321892 CEST	49914	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.322326899 CEST	443	49914	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.455729008 CEST	443	49914	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.455802917 CEST	443	49914	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.455919981 CEST	49914	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.456255913 CEST	49914	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.456274033 CEST	443	49914	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.456286907 CEST	49914	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.456291914 CEST	443	49914	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.459600925 CEST	49919	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.459639072 CEST	443	49919	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.459718943 CEST	49919	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.459971905 CEST	49919	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.459980965 CEST	443	49919	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.462605000 CEST	443	49916	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.462999105 CEST	49916	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.463023901 CEST	443	49916	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.463510990 CEST	49916	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.463515997 CEST	443	49916	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.464592934 CEST	443	49915	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.464844942 CEST	49915	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.464870930 CEST	443	49915	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.465188980 CEST	49915	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.465194941 CEST	443	49915	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.594069004 CEST	443	49917	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.594930887 CEST	49917	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.594968081 CEST	443	49917	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.595458984 CEST	49917	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.595465899 CEST	443	49917	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.598417997 CEST	443	49916	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.598566055 CEST	443	49916	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.598629951 CEST	49916	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.598723888 CEST	49916	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.598742008 CEST	443	49916	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.598757982 CEST	49916	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.598763943 CEST	443	49916	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.601872921 CEST	49920	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.601912022 CEST	443	49920	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.602008104 CEST	49920	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.602161884 CEST	49920	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.602178097 CEST	443	49920	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.651582003 CEST	443	49918	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.652468920 CEST	49918	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.652545929 CEST	443	49918	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.652909040 CEST	49918	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.652924061 CEST	443	49918	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.718949080 CEST	443	49915	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.718997955 CEST	443	49915	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.719057083 CEST	443	49915	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.719171047 CEST	49915	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.719171047 CEST	49915	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.719482899 CEST	49915	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.719516993 CEST	443	49915	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.719532967 CEST	49915	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.719538927 CEST	443	49915	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.722817898 CEST	49921	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.722906113 CEST	443	49921	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.722992897 CEST	49921	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.723140955 CEST	49921	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.723175049 CEST	443	49921	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.726624012 CEST	443	49917	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.726718903 CEST	443	49917	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.726766109 CEST	49917	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.726963997 CEST	49917	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.726979017 CEST	443	49917	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.726990938 CEST	49917	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.726996899 CEST	443	49917	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.729327917 CEST	49922	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.729367018 CEST	443	49922	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.729427099 CEST	49922	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.729552031 CEST	49922	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.729566097 CEST	443	49922	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.784212112 CEST	443	49918	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.784241915 CEST	443	49918	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.784285069 CEST	443	49918	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.784336090 CEST	49918	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.784493923 CEST	49918	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.784646988 CEST	49918	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.784667969 CEST	443	49918	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.784678936 CEST	49918	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.784683943 CEST	443	49918	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.788003922 CEST	49923	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.788045883 CEST	443	49923	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:43.788153887 CEST	49923	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.788335085 CEST	49923	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:43.788362026 CEST	443	49923	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.180327892 CEST	443	49919	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.183849096 CEST	49919	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.183878899 CEST	443	49919	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.184364080 CEST	49919	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.184370041 CEST	443	49919	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.308274984 CEST	443	49919	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.308489084 CEST	443	49919	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.308562994 CEST	49919	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.308643103 CEST	49919	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.308659077 CEST	443	49919	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.308669090 CEST	49919	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.308674097 CEST	443	49919	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.311920881 CEST	49924	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.311963081 CEST	443	49924	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.312030077 CEST	49924	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.312175035 CEST	49924	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.312191963 CEST	443	49924	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.327414036 CEST	443	49920	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.327843904 CEST	49920	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.327860117 CEST	443	49920	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.328330994 CEST	49920	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.328336954 CEST	443	49920	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.454185009 CEST	443	49922	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.455005884 CEST	49922	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.455020905 CEST	443	49922	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.455614090 CEST	49922	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.455617905 CEST	443	49922	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.459686041 CEST	443	49920	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.459880114 CEST	443	49920	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.459975958 CEST	49920	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.460005045 CEST	49920	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.460017920 CEST	443	49920	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.460028887 CEST	49920	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.460033894 CEST	443	49920	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.460174084 CEST	443	49921	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.463196039 CEST	49925	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.463224888 CEST	443	49925	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.463613987 CEST	49921	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.463639021 CEST	49925	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.463682890 CEST	443	49921	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.463762045 CEST	49925	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.463768005 CEST	443	49925	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.464073896 CEST	49921	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.464090109 CEST	443	49921	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.543755054 CEST	443	49923	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.544723988 CEST	49923	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.544789076 CEST	443	49923	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.545249939 CEST	49923	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.545265913 CEST	443	49923	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.584388971 CEST	443	49922	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.584549904 CEST	443	49922	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.584630966 CEST	49922	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.584938049 CEST	49922	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.584956884 CEST	443	49922	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.584984064 CEST	49922	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.584990025 CEST	443	49922	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.588077068 CEST	49926	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.588114977 CEST	443	49926	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.588193893 CEST	49926	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.588359118 CEST	49926	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.588372946 CEST	443	49926	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.590060949 CEST	443	49921	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.590092897 CEST	443	49921	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.590143919 CEST	443	49921	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.590353012 CEST	49921	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.590353966 CEST	49921	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.590353966 CEST	49921	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.592884064 CEST	49927	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.592907906 CEST	443	49927	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.593192101 CEST	49927	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.593192101 CEST	49927	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.593219995 CEST	443	49927	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.679229975 CEST	443	49923	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.681063890 CEST	443	49923	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.681109905 CEST	443	49923	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.681168079 CEST	49923	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.681238890 CEST	49923	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.681282997 CEST	49923	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.681283951 CEST	49923	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.681329012 CEST	443	49923	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.681360006 CEST	443	49923	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.684411049 CEST	49928	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.684454918 CEST	443	49928	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.684545994 CEST	49928	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.684741020 CEST	49928	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.684753895 CEST	443	49928	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:44.892787933 CEST	49921	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:44.892857075 CEST	443	49921	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.050736904 CEST	443	49924	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.051417112 CEST	49924	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.051459074 CEST	443	49924	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.051965952 CEST	49924	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.051976919 CEST	443	49924	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.183446884 CEST	443	49924	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.183512926 CEST	443	49924	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.183722019 CEST	49924	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.183928967 CEST	49924	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.183928967 CEST	49924	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.183950901 CEST	443	49924	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.183962107 CEST	443	49924	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.186943054 CEST	49929	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.186985970 CEST	443	49929	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.187074900 CEST	49929	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.187242985 CEST	49929	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.187253952 CEST	443	49929	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.197999954 CEST	443	49925	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.198549032 CEST	49925	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.198555946 CEST	443	49925	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.199095011 CEST	49925	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.199100971 CEST	443	49925	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.327198982 CEST	443	49927	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.327809095 CEST	49927	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.327831030 CEST	443	49927	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.329263926 CEST	443	49925	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.329332113 CEST	443	49925	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.329376936 CEST	49927	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.329376936 CEST	49925	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.329385042 CEST	443	49927	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.329612017 CEST	49925	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.329612017 CEST	49925	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.329627037 CEST	443	49925	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.329634905 CEST	443	49925	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.330852032 CEST	443	49926	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.331264973 CEST	49926	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.331289053 CEST	443	49926	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.331690073 CEST	49926	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.331695080 CEST	443	49926	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.333302021 CEST	49930	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.333348989 CEST	443	49930	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.333415985 CEST	49930	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.333524942 CEST	49930	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.333534002 CEST	443	49930	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.415286064 CEST	443	49928	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.415916920 CEST	49928	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.415944099 CEST	443	49928	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.416424036 CEST	49928	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.416435003 CEST	443	49928	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.464756966 CEST	443	49926	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.464803934 CEST	443	49926	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.464855909 CEST	443	49926	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.464855909 CEST	49926	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.464900970 CEST	49926	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.465106964 CEST	49926	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.465126991 CEST	443	49926	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.465137959 CEST	49926	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.465143919 CEST	443	49926	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.466711044 CEST	443	49927	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.466777086 CEST	443	49927	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.466871023 CEST	49927	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.467108011 CEST	49927	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.467127085 CEST	443	49927	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.467156887 CEST	49927	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.467163086 CEST	443	49927	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.469366074 CEST	49931	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.469417095 CEST	443	49931	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.469480038 CEST	49931	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.470031977 CEST	49932	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.470118999 CEST	443	49932	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.470190048 CEST	49931	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.470197916 CEST	49932	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.470202923 CEST	443	49931	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.470284939 CEST	49932	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.470314980 CEST	443	49932	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.582412958 CEST	443	49928	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.582480907 CEST	443	49928	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.582638979 CEST	49928	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.582998037 CEST	49928	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.582998037 CEST	49928	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.583020926 CEST	443	49928	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.583031893 CEST	443	49928	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.586461067 CEST	49933	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.586502075 CEST	443	49933	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.586617947 CEST	49933	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.586817980 CEST	49933	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.586831093 CEST	443	49933	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.913877010 CEST	443	49929	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.914539099 CEST	49929	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.914566994 CEST	443	49929	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:45.915065050 CEST	49929	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:45.915070057 CEST	443	49929	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.048511028 CEST	443	49929	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.048547029 CEST	443	49929	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.048593044 CEST	443	49929	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.048624039 CEST	49929	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.048652887 CEST	49929	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.049006939 CEST	49929	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.049029112 CEST	443	49929	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.049041033 CEST	49929	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.049046993 CEST	443	49929	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.052536964 CEST	49934	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.052634001 CEST	443	49934	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.052742004 CEST	49934	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.052918911 CEST	49934	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.052956104 CEST	443	49934	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.059130907 CEST	443	49930	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.059540033 CEST	49930	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.059566975 CEST	443	49930	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.060009003 CEST	49930	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.060015917 CEST	443	49930	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.189425945 CEST	443	49930	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.189847946 CEST	443	49930	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.189914942 CEST	49930	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.190156937 CEST	49930	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.190156937 CEST	49930	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.190181017 CEST	443	49930	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.190192938 CEST	443	49930	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.193073034 CEST	49935	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.193119049 CEST	443	49935	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.193187952 CEST	49935	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.193341970 CEST	49935	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.193356037 CEST	443	49935	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.216056108 CEST	443	49931	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.216537952 CEST	49931	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.216557980 CEST	443	49931	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.216964006 CEST	443	49932	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.217030048 CEST	49931	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.217036963 CEST	443	49931	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.217266083 CEST	49932	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.217293978 CEST	443	49932	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.217643023 CEST	49932	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.217655897 CEST	443	49932	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.324361086 CEST	443	49933	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.325098038 CEST	49933	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.325118065 CEST	443	49933	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.325704098 CEST	49933	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.325709105 CEST	443	49933	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.345118046 CEST	443	49932	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.345354080 CEST	443	49932	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.345438957 CEST	49932	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.345556974 CEST	49932	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.345602989 CEST	443	49932	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.345633030 CEST	49932	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.345649958 CEST	443	49932	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.348762035 CEST	49936	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.348804951 CEST	443	49936	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.348895073 CEST	49936	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.349082947 CEST	49936	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.349097967 CEST	443	49936	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.349123955 CEST	443	49931	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.349168062 CEST	443	49931	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.349215984 CEST	49931	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.349224091 CEST	443	49931	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.349244118 CEST	443	49931	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.349298000 CEST	49931	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.349381924 CEST	49931	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.349391937 CEST	443	49931	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.349420071 CEST	49931	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.349425077 CEST	443	49931	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.351560116 CEST	49937	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.351598978 CEST	443	49937	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.351849079 CEST	49937	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.351849079 CEST	49937	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.351882935 CEST	443	49937	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.457227945 CEST	443	49933	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.457547903 CEST	443	49933	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.457758904 CEST	49933	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.457758904 CEST	49933	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.457758904 CEST	49933	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.460938931 CEST	49938	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.460980892 CEST	443	49938	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.461071968 CEST	49938	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.461261988 CEST	49938	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.461276054 CEST	443	49938	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.767847061 CEST	49933	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.767884016 CEST	443	49933	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.922137976 CEST	443	49934	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.922786951 CEST	49934	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.922816038 CEST	443	49934	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.923329115 CEST	49934	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.923352003 CEST	443	49934	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.927994013 CEST	443	49935	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.928453922 CEST	49935	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.928478956 CEST	443	49935	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:46.936650991 CEST	49935	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:46.936656952 CEST	443	49935	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.055670023 CEST	443	49934	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.055813074 CEST	443	49934	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.055917025 CEST	49934	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.056143045 CEST	49934	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.056163073 CEST	443	49934	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.056197882 CEST	49934	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.056204081 CEST	443	49934	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.059374094 CEST	49939	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.059422970 CEST	443	49939	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.059514046 CEST	49939	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.059818029 CEST	49939	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.059832096 CEST	443	49939	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.084009886 CEST	443	49936	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.084541082 CEST	443	49935	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.084625006 CEST	443	49935	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.084672928 CEST	49935	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.084676981 CEST	443	49935	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.084722042 CEST	49935	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.084847927 CEST	49935	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.084862947 CEST	443	49935	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.084875107 CEST	49935	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.084880114 CEST	443	49935	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.084892988 CEST	49936	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.084928989 CEST	443	49936	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.085370064 CEST	49936	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.085376024 CEST	443	49936	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.088254929 CEST	49940	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.088274002 CEST	443	49940	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.088337898 CEST	49940	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.088483095 CEST	49940	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.088494062 CEST	443	49940	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.099304914 CEST	443	49937	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.099884987 CEST	49937	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.099911928 CEST	443	49937	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.100332975 CEST	49937	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.100341082 CEST	443	49937	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.186494112 CEST	443	49938	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.187092066 CEST	49938	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.187128067 CEST	443	49938	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.187628984 CEST	49938	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.187635899 CEST	443	49938	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.214056969 CEST	443	49936	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.214240074 CEST	443	49936	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.214329958 CEST	49936	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.214462042 CEST	49936	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.214505911 CEST	443	49936	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.214551926 CEST	49936	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.214569092 CEST	443	49936	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.217550993 CEST	49941	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.217601061 CEST	443	49941	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.217678070 CEST	49941	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.217850924 CEST	49941	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.217865944 CEST	443	49941	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.234530926 CEST	443	49937	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.234558105 CEST	443	49937	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.234630108 CEST	443	49937	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.234654903 CEST	49937	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.234828949 CEST	49937	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.235076904 CEST	49937	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.235076904 CEST	49937	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.235097885 CEST	443	49937	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.235110044 CEST	443	49937	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.238509893 CEST	49942	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.238548994 CEST	443	49942	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.238634109 CEST	49942	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.239027023 CEST	49942	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.239041090 CEST	443	49942	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.317377090 CEST	443	49938	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.317545891 CEST	443	49938	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.317640066 CEST	49938	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.317832947 CEST	49938	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.317851067 CEST	443	49938	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.317862034 CEST	49938	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.317867041 CEST	443	49938	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.320939064 CEST	49943	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.320992947 CEST	443	49943	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.321079969 CEST	49943	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.321301937 CEST	49943	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.321321011 CEST	443	49943	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.792958021 CEST	443	49939	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.793709040 CEST	49939	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.793735027 CEST	443	49939	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.794222116 CEST	49939	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.794226885 CEST	443	49939	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.815465927 CEST	443	49940	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.816150904 CEST	49940	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.816174984 CEST	443	49940	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.816540956 CEST	49940	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.816545963 CEST	443	49940	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.926199913 CEST	443	49939	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.926233053 CEST	443	49939	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.926281929 CEST	443	49939	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.926337957 CEST	49939	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.926402092 CEST	49939	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.926616907 CEST	49939	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.926635981 CEST	443	49939	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.926651001 CEST	49939	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.926656961 CEST	443	49939	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.930007935 CEST	49944	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.930059910 CEST	443	49944	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.930150032 CEST	49944	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.930314064 CEST	49944	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.930325985 CEST	443	49944	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.945040941 CEST	443	49940	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.945099115 CEST	443	49940	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.945286989 CEST	49940	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.945395947 CEST	49940	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.945414066 CEST	443	49940	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.945425034 CEST	49940	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.945430040 CEST	443	49940	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.948244095 CEST	49945	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.948291063 CEST	443	49945	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.948473930 CEST	49945	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.948554993 CEST	49945	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.948570967 CEST	443	49945	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.953566074 CEST	443	49941	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.954000950 CEST	49941	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.954027891 CEST	443	49941	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:47.954641104 CEST	49941	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:47.954648018 CEST	443	49941	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.065162897 CEST	443	49943	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.065881014 CEST	49943	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.065926075 CEST	443	49943	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.066411972 CEST	49943	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.066427946 CEST	443	49943	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.085669041 CEST	443	49941	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.086004019 CEST	443	49941	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.086184978 CEST	49941	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.086184978 CEST	49941	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.086184978 CEST	49941	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.089179993 CEST	49946	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.089256048 CEST	443	49946	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.089363098 CEST	49946	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.089507103 CEST	49946	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.089540958 CEST	443	49946	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.198801041 CEST	443	49943	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.198934078 CEST	443	49943	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.198990107 CEST	443	49943	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.198998928 CEST	49943	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.199038982 CEST	49943	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.199242115 CEST	49943	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.199269056 CEST	443	49943	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.199281931 CEST	49943	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.199287891 CEST	443	49943	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.202240944 CEST	49947	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.202295065 CEST	443	49947	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.202378035 CEST	49947	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.202533960 CEST	49947	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.202550888 CEST	443	49947	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.392826080 CEST	49941	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.392898083 CEST	443	49941	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.401422977 CEST	443	49942	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.402106047 CEST	49942	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.402133942 CEST	443	49942	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.402647972 CEST	49942	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.402656078 CEST	443	49942	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.534960985 CEST	443	49942	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.535218954 CEST	443	49942	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.535345078 CEST	49942	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.535470963 CEST	49942	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.535494089 CEST	443	49942	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.535506010 CEST	49942	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.535511971 CEST	443	49942	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.538886070 CEST	49948	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.538918972 CEST	443	49948	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.539243937 CEST	49948	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.539243937 CEST	49948	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.539273977 CEST	443	49948	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.656872988 CEST	443	49944	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.657396078 CEST	49944	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.657427073 CEST	443	49944	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.657886028 CEST	49944	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.657891989 CEST	443	49944	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.678472996 CEST	443	49945	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.678947926 CEST	49945	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.678967953 CEST	443	49945	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.679429054 CEST	49945	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.679434061 CEST	443	49945	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.786196947 CEST	443	49944	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.786292076 CEST	443	49944	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.786356926 CEST	49944	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.786600113 CEST	49944	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.786653996 CEST	443	49944	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.786688089 CEST	49944	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.786706924 CEST	443	49944	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.789984941 CEST	49949	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.790030956 CEST	443	49949	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.790087938 CEST	49949	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.790293932 CEST	49949	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.790309906 CEST	443	49949	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.810244083 CEST	443	49945	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.810318947 CEST	443	49945	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.810379028 CEST	49945	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.810559988 CEST	49945	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.810579062 CEST	443	49945	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.810589075 CEST	49945	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.810594082 CEST	443	49945	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.813657999 CEST	49950	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.813685894 CEST	443	49950	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.813740969 CEST	49950	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.813875914 CEST	49950	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.813884020 CEST	443	49950	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.820118904 CEST	443	49946	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.820533037 CEST	49946	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.820597887 CEST	443	49946	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.821022034 CEST	49946	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.821038008 CEST	443	49946	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.932024956 CEST	443	49947	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.932775021 CEST	49947	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.932797909 CEST	443	49947	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.933238983 CEST	49947	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.933248997 CEST	443	49947	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.952893019 CEST	443	49946	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.952960968 CEST	443	49946	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.953033924 CEST	49946	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.953438997 CEST	49946	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.953458071 CEST	443	49946	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.953469992 CEST	49946	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.953475952 CEST	443	49946	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.956636906 CEST	49951	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.956701994 CEST	443	49951	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:48.956763983 CEST	49951	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.958509922 CEST	49951	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:48.958549023 CEST	443	49951	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.063582897 CEST	443	49947	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.063849926 CEST	443	49947	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.064001083 CEST	49947	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.064043045 CEST	49947	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.064066887 CEST	443	49947	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.064080954 CEST	49947	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.064086914 CEST	443	49947	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.067707062 CEST	49952	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.067754984 CEST	443	49952	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.067854881 CEST	49952	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.068031073 CEST	49952	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.068042040 CEST	443	49952	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.280021906 CEST	443	49948	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.280735016 CEST	49948	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.280746937 CEST	443	49948	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.281282902 CEST	49948	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.281287909 CEST	443	49948	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.413065910 CEST	443	49948	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.413288116 CEST	443	49948	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.413603067 CEST	49948	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.413714886 CEST	49948	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.413729906 CEST	443	49948	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.413772106 CEST	49948	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.413777113 CEST	443	49948	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.416754007 CEST	49953	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.416846991 CEST	443	49953	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.416954994 CEST	49953	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.417171955 CEST	49953	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.417203903 CEST	443	49953	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.530459881 CEST	443	49949	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.531042099 CEST	49949	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.531084061 CEST	443	49949	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.531486034 CEST	49949	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.531496048 CEST	443	49949	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.546811104 CEST	443	49950	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.547235966 CEST	49950	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.547255039 CEST	443	49950	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.547602892 CEST	49950	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.547609091 CEST	443	49950	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.667999983 CEST	443	49949	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.668878078 CEST	443	49949	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.668953896 CEST	49949	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.669020891 CEST	49949	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.669048071 CEST	443	49949	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.669063091 CEST	49949	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.669070005 CEST	443	49949	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.672117949 CEST	49954	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.672164917 CEST	443	49954	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.672262907 CEST	49954	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.672447920 CEST	49954	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.672461987 CEST	443	49954	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.679451942 CEST	443	49950	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.679673910 CEST	443	49950	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.679771900 CEST	49950	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.679956913 CEST	49950	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.679970980 CEST	443	49950	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.679981947 CEST	49950	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.679986954 CEST	443	49950	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.682658911 CEST	49955	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.682692051 CEST	443	49955	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.682765007 CEST	49955	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.682931900 CEST	49955	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.682945967 CEST	443	49955	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.703499079 CEST	443	49951	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.704049110 CEST	49951	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.704066992 CEST	443	49951	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.704513073 CEST	49951	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.704534054 CEST	443	49951	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.803942919 CEST	443	49952	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.804656982 CEST	49952	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.804677963 CEST	443	49952	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.805185080 CEST	49952	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.805190086 CEST	443	49952	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.837945938 CEST	443	49951	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.838195086 CEST	443	49951	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.838251114 CEST	443	49951	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.838346958 CEST	49951	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.838485003 CEST	49951	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.838509083 CEST	443	49951	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.838521957 CEST	49951	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.838531017 CEST	443	49951	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.841722012 CEST	49956	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.841762066 CEST	443	49956	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.841845989 CEST	49956	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.842073917 CEST	49956	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.842087030 CEST	443	49956	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.937786102 CEST	443	49952	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.937855005 CEST	443	49952	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.937958956 CEST	49952	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.938271999 CEST	49952	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.938290119 CEST	443	49952	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.938301086 CEST	49952	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.938306093 CEST	443	49952	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.941730976 CEST	49957	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.941778898 CEST	443	49957	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:49.941862106 CEST	49957	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.942039013 CEST	49957	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:49.942060947 CEST	443	49957	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.153584003 CEST	443	49953	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.154270887 CEST	49953	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.154301882 CEST	443	49953	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.154900074 CEST	49953	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.154906034 CEST	443	49953	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.284418106 CEST	443	49953	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.284624100 CEST	443	49953	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.284688950 CEST	443	49953	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.284769058 CEST	49953	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.284769058 CEST	49953	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.285012960 CEST	49953	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.285012960 CEST	49953	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.285028934 CEST	443	49953	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.285039902 CEST	443	49953	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.288554907 CEST	49958	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.288598061 CEST	443	49958	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.288687944 CEST	49958	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.288929939 CEST	49958	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.288944960 CEST	443	49958	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.404207945 CEST	443	49954	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.404989004 CEST	49954	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.405018091 CEST	443	49954	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.405551910 CEST	49954	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.405565023 CEST	443	49954	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.409347057 CEST	443	49955	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.409869909 CEST	49955	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.409888983 CEST	443	49955	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.410371065 CEST	49955	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.410376072 CEST	443	49955	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.536166906 CEST	443	49954	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.536302090 CEST	443	49954	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.536395073 CEST	49954	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.536576986 CEST	49954	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.536628962 CEST	443	49954	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.536659956 CEST	49954	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.536679029 CEST	443	49954	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.540258884 CEST	49959	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.540323973 CEST	443	49959	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.540436029 CEST	49959	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.540462017 CEST	443	49955	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.540507078 CEST	443	49955	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.540570021 CEST	443	49955	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.540618896 CEST	49955	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.540618896 CEST	49955	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.540771961 CEST	49959	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.540783882 CEST	49955	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.540783882 CEST	49955	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.540788889 CEST	443	49959	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.540800095 CEST	443	49955	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.540811062 CEST	443	49955	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.543560028 CEST	49960	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.543601990 CEST	443	49960	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.543699026 CEST	49960	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.543899059 CEST	49960	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.543915033 CEST	443	49960	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.583934069 CEST	443	49956	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.585042000 CEST	49956	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.585076094 CEST	443	49956	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.585572958 CEST	49956	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.585578918 CEST	443	49956	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.670607090 CEST	443	49957	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.671158075 CEST	49957	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.671210051 CEST	443	49957	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.671690941 CEST	49957	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.671698093 CEST	443	49957	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.718985081 CEST	443	49956	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.719067097 CEST	443	49956	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.719130993 CEST	49956	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.719352007 CEST	49956	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.719371080 CEST	443	49956	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.719382048 CEST	49956	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.719387054 CEST	443	49956	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.722569942 CEST	49961	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.722613096 CEST	443	49961	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.722688913 CEST	49961	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.722853899 CEST	49961	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.722867966 CEST	443	49961	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.800895929 CEST	443	49957	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.800967932 CEST	443	49957	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.801074982 CEST	49957	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.801361084 CEST	49957	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.801361084 CEST	49957	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.801414967 CEST	443	49957	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.801444054 CEST	443	49957	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.804408073 CEST	49962	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.804452896 CEST	443	49962	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:50.804548025 CEST	49962	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.804722071 CEST	49962	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:50.804734945 CEST	443	49962	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.022521019 CEST	443	49958	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.023117065 CEST	49958	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.023134947 CEST	443	49958	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.023621082 CEST	49958	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.023626089 CEST	443	49958	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.154525995 CEST	443	49958	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.155478954 CEST	443	49958	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.155550957 CEST	49958	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.155641079 CEST	49958	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.155657053 CEST	443	49958	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.159346104 CEST	49963	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.159395933 CEST	443	49963	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.159503937 CEST	49963	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.160012007 CEST	49963	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.160043001 CEST	443	49963	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.284643888 CEST	443	49960	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.284749031 CEST	443	49959	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.285337925 CEST	49960	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.285352945 CEST	49959	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.285356998 CEST	443	49960	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.285393953 CEST	443	49959	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.285839081 CEST	49959	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.285845041 CEST	443	49959	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.285872936 CEST	49960	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.285877943 CEST	443	49960	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.417902946 CEST	443	49960	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.418009996 CEST	443	49960	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.418116093 CEST	49960	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.418647051 CEST	443	49959	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.418725014 CEST	443	49959	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.418786049 CEST	49959	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.418817043 CEST	443	49959	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.418869019 CEST	49959	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.420773029 CEST	49960	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.420773983 CEST	49960	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.420825958 CEST	443	49960	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.420953989 CEST	443	49960	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.421168089 CEST	49959	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.421186924 CEST	443	49959	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.421221018 CEST	49959	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.421226978 CEST	443	49959	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.424648046 CEST	49965	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.424652100 CEST	49964	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.424685955 CEST	443	49964	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.424695969 CEST	443	49965	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.424765110 CEST	49965	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.424767971 CEST	49964	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.424917936 CEST	49964	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.424932003 CEST	443	49964	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.425054073 CEST	49965	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.425076962 CEST	443	49965	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.462012053 CEST	443	49961	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.462635040 CEST	49961	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.462663889 CEST	443	49961	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.463179111 CEST	49961	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.463184118 CEST	443	49961	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.551578999 CEST	443	49962	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.552244902 CEST	49962	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.552264929 CEST	443	49962	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.552779913 CEST	49962	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.552786112 CEST	443	49962	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.593190908 CEST	443	49961	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.593403101 CEST	443	49961	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.593503952 CEST	49961	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.593640089 CEST	49961	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.593667030 CEST	443	49961	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.593710899 CEST	49961	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.593720913 CEST	443	49961	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.597250938 CEST	49966	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.597296000 CEST	443	49966	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.597390890 CEST	49966	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.597577095 CEST	49966	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.597592115 CEST	443	49966	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.688873053 CEST	443	49962	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.688930035 CEST	443	49962	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.688996077 CEST	49962	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.689004898 CEST	443	49962	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.689043045 CEST	443	49962	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.689090014 CEST	49962	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.689362049 CEST	49962	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.689378023 CEST	443	49962	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.689389944 CEST	49962	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.689394951 CEST	443	49962	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.692941904 CEST	49967	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.692990065 CEST	443	49967	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.693087101 CEST	49967	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.693269968 CEST	49967	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.693288088 CEST	443	49967	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.909710884 CEST	443	49963	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.910403013 CEST	49963	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.910425901 CEST	443	49963	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:51.910939932 CEST	49963	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:51.910944939 CEST	443	49963	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.045141935 CEST	443	49963	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.045713902 CEST	443	49963	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.045859098 CEST	49963	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.045859098 CEST	49963	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.045912981 CEST	49963	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.045934916 CEST	443	49963	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.048954010 CEST	49968	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.048995018 CEST	443	49968	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.049129009 CEST	49968	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.049308062 CEST	49968	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.049325943 CEST	443	49968	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.169353962 CEST	443	49965	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.169967890 CEST	49965	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.169998884 CEST	443	49965	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.170630932 CEST	49965	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.170641899 CEST	443	49965	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.171261072 CEST	443	49964	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.171583891 CEST	49964	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.171612024 CEST	443	49964	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.172065020 CEST	49964	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.172072887 CEST	443	49964	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.310209990 CEST	443	49964	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.310234070 CEST	443	49964	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.310286999 CEST	443	49964	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.310307026 CEST	49964	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.310338974 CEST	49964	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.310534954 CEST	49964	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.310545921 CEST	443	49964	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.310559034 CEST	49964	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.310564041 CEST	443	49964	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.313286066 CEST	49970	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.313317060 CEST	443	49970	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.313373089 CEST	49970	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.313529968 CEST	49970	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.313545942 CEST	443	49970	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.328633070 CEST	443	49965	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.328663111 CEST	443	49965	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.328686953 CEST	443	49966	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.328735113 CEST	49965	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.328752995 CEST	443	49965	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.329202890 CEST	443	49965	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.329206944 CEST	49966	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.329216957 CEST	443	49966	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.329252958 CEST	49965	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.329679012 CEST	49966	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.329684973 CEST	443	49966	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.329713106 CEST	49965	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.329741001 CEST	443	49965	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.329750061 CEST	49965	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.329756021 CEST	443	49965	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.332287073 CEST	49971	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.332354069 CEST	443	49971	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.332413912 CEST	49971	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.332583904 CEST	49971	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.332597971 CEST	443	49971	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.442857981 CEST	443	49967	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.443425894 CEST	49967	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.443450928 CEST	443	49967	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.443928957 CEST	49967	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.443942070 CEST	443	49967	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.462264061 CEST	443	49966	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.462296009 CEST	443	49966	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.462366104 CEST	443	49966	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.462414026 CEST	49966	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.462470055 CEST	49966	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.468236923 CEST	49966	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.468236923 CEST	49966	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.468274117 CEST	443	49966	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.468290091 CEST	443	49966	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.472079039 CEST	49972	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.472112894 CEST	443	49972	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.472184896 CEST	49972	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.472342014 CEST	49972	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.472354889 CEST	443	49972	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.575031996 CEST	443	49967	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.575059891 CEST	443	49967	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.575115919 CEST	443	49967	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.575160027 CEST	49967	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.575206041 CEST	49967	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.575501919 CEST	49967	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.575525045 CEST	443	49967	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.575553894 CEST	49967	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.575560093 CEST	443	49967	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.578950882 CEST	49973	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.579013109 CEST	443	49973	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.579118967 CEST	49973	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.579308033 CEST	49973	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.579329014 CEST	443	49973	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.782041073 CEST	443	49968	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.782690048 CEST	49968	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.782708883 CEST	443	49968	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.783231974 CEST	49968	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.783241987 CEST	443	49968	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.921948910 CEST	443	49968	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.922045946 CEST	443	49968	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.922096968 CEST	49968	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.922317982 CEST	49968	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.922317982 CEST	49968	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.922338009 CEST	443	49968	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.922348976 CEST	443	49968	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.925787926 CEST	49974	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.925825119 CEST	443	49974	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:52.925890923 CEST	49974	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.926103115 CEST	49974	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:52.926115990 CEST	443	49974	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.055183887 CEST	443	49971	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.055917025 CEST	49971	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.055953026 CEST	443	49971	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.056468964 CEST	49971	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.056476116 CEST	443	49971	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.060820103 CEST	443	49970	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.061183929 CEST	49970	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.061207056 CEST	443	49970	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.061618090 CEST	49970	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.061625957 CEST	443	49970	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.185415030 CEST	443	49971	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.185574055 CEST	443	49971	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.185658932 CEST	49971	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.186296940 CEST	49971	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.186297894 CEST	49971	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.186347961 CEST	443	49971	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.186381102 CEST	443	49971	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.189841986 CEST	49975	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.189876080 CEST	443	49975	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.190011024 CEST	49975	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.190437078 CEST	49975	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.190449953 CEST	443	49975	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.193943977 CEST	443	49970	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.194263935 CEST	443	49970	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.194320917 CEST	49970	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.194365025 CEST	49970	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.194384098 CEST	443	49970	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.194400072 CEST	49970	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.194407940 CEST	443	49970	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.197036028 CEST	49976	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.197079897 CEST	443	49976	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.197144032 CEST	49976	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.197309017 CEST	49976	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.197320938 CEST	443	49976	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.212866068 CEST	443	49972	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.213541985 CEST	49972	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.213562012 CEST	443	49972	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.214092016 CEST	49972	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.214103937 CEST	443	49972	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.329232931 CEST	443	49973	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.329879999 CEST	49973	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.329899073 CEST	443	49973	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.330589056 CEST	49973	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.330594063 CEST	443	49973	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.342452049 CEST	443	49972	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.342520952 CEST	443	49972	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.342575073 CEST	49972	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.342890024 CEST	49972	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.342909098 CEST	443	49972	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.342920065 CEST	49972	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.342926979 CEST	443	49972	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.346128941 CEST	49977	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.346178055 CEST	443	49977	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.346255064 CEST	49977	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.346441984 CEST	49977	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.346458912 CEST	443	49977	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.463711023 CEST	443	49973	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.463741064 CEST	443	49973	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.463833094 CEST	49973	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.463851929 CEST	443	49973	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.463901043 CEST	49973	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.463917971 CEST	443	49973	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.463932991 CEST	443	49973	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.464019060 CEST	49973	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.464066982 CEST	49973	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.464066982 CEST	49973	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.464090109 CEST	443	49973	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.464103937 CEST	443	49973	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.467397928 CEST	49978	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.467499971 CEST	443	49978	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.467585087 CEST	49978	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.467727900 CEST	49978	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.467763901 CEST	443	49978	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.675270081 CEST	443	49974	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.675925016 CEST	49974	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.675946951 CEST	443	49974	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.676419973 CEST	49974	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.676424980 CEST	443	49974	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.808465958 CEST	443	49974	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.808514118 CEST	443	49974	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.808629036 CEST	443	49974	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.808630943 CEST	49974	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.808675051 CEST	49974	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.808981895 CEST	49974	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.809003115 CEST	443	49974	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.809012890 CEST	49974	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.809019089 CEST	443	49974	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.812052011 CEST	49979	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.812131882 CEST	443	49979	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.812201977 CEST	49979	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.812390089 CEST	49979	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.812410116 CEST	443	49979	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.917670965 CEST	443	49975	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.918381929 CEST	49975	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.918412924 CEST	443	49975	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.918925047 CEST	49975	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.918934107 CEST	443	49975	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.945488930 CEST	443	49976	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.946021080 CEST	49976	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.946046114 CEST	443	49976	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:53.946521044 CEST	49976	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:53.946527004 CEST	443	49976	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.078154087 CEST	443	49976	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.078183889 CEST	443	49976	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.078238010 CEST	49976	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.078255892 CEST	443	49976	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.078522921 CEST	49976	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.078530073 CEST	443	49976	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.078548908 CEST	443	49976	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.078550100 CEST	49976	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.078567028 CEST	443	49976	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.081655025 CEST	49980	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.081696033 CEST	443	49980	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.081767082 CEST	49980	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.081923962 CEST	49980	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.081943035 CEST	443	49980	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.086613894 CEST	443	49977	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.087048054 CEST	49977	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.087094069 CEST	443	49977	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.087589979 CEST	49977	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.087599039 CEST	443	49977	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.163738966 CEST	443	49975	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.163777113 CEST	443	49975	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.163793087 CEST	443	49975	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.163835049 CEST	49975	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.163858891 CEST	443	49975	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.163906097 CEST	49975	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.163906097 CEST	49975	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.164634943 CEST	443	49975	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.164710045 CEST	443	49975	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.164721966 CEST	49975	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.164829969 CEST	49975	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.166121960 CEST	49975	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.166146994 CEST	443	49975	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.166269064 CEST	49975	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.166275978 CEST	443	49975	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.177824020 CEST	49981	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.177865028 CEST	443	49981	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.177932024 CEST	49981	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.178090096 CEST	49981	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.178105116 CEST	443	49981	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.190948963 CEST	443	49978	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.191617012 CEST	49978	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.191651106 CEST	443	49978	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.192137957 CEST	49978	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.192145109 CEST	443	49978	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.320795059 CEST	443	49978	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.320822954 CEST	443	49978	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.320909977 CEST	49978	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.320938110 CEST	443	49978	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.321016073 CEST	49978	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.321199894 CEST	49978	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.321206093 CEST	443	49978	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.321223974 CEST	49978	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.321372986 CEST	443	49978	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.321403980 CEST	443	49978	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.321444988 CEST	49978	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.324009895 CEST	49982	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.324068069 CEST	443	49982	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.324141026 CEST	49982	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.324279070 CEST	49982	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.324290037 CEST	443	49982	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.338591099 CEST	443	49977	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.338618994 CEST	443	49977	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.338634968 CEST	443	49977	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.338685989 CEST	49977	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.338722944 CEST	443	49977	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.338741064 CEST	49977	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.338761091 CEST	49977	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.341043949 CEST	443	49977	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.341084003 CEST	443	49977	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.341108084 CEST	443	49977	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.341113091 CEST	49977	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.341142893 CEST	49977	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.341226101 CEST	49977	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.341249943 CEST	443	49977	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.341260910 CEST	49977	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.341269016 CEST	443	49977	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.343635082 CEST	49983	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.343676090 CEST	443	49983	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.343750000 CEST	49983	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.343909979 CEST	49983	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.343919992 CEST	443	49983	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.548172951 CEST	443	49979	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.548789978 CEST	49979	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.548831940 CEST	443	49979	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.549324036 CEST	49979	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.549331903 CEST	443	49979	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.680865049 CEST	443	49979	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.680895090 CEST	443	49979	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.681003094 CEST	443	49979	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.681003094 CEST	49979	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.681040049 CEST	49979	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.681220055 CEST	49979	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.681241989 CEST	443	49979	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.681253910 CEST	49979	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.681258917 CEST	443	49979	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.684151888 CEST	49984	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.684197903 CEST	443	49984	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.684278965 CEST	49984	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.684422016 CEST	49984	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.684436083 CEST	443	49984	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.816922903 CEST	443	49980	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.817523956 CEST	49980	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.817549944 CEST	443	49980	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.818110943 CEST	49980	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.818115950 CEST	443	49980	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.922552109 CEST	443	49981	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.923527956 CEST	49981	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.923553944 CEST	443	49981	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.924118042 CEST	49981	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.924124002 CEST	443	49981	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.947926998 CEST	443	49980	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.948028088 CEST	443	49980	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.948122025 CEST	49980	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.948369026 CEST	49980	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.948390961 CEST	443	49980	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.948402882 CEST	49980	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.948409081 CEST	443	49980	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.951750994 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.951773882 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:54.951868057 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.952050924 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:54.952065945 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.047133923 CEST	443	49982	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.047939062 CEST	49982	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.047967911 CEST	443	49982	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.048445940 CEST	49982	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.048451900 CEST	443	49982	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.054843903 CEST	443	49981	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.055471897 CEST	443	49981	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.055555105 CEST	49981	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.055597067 CEST	49981	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.055617094 CEST	443	49981	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.055629015 CEST	49981	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.055634975 CEST	443	49981	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.058870077 CEST	49986	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.058897972 CEST	443	49986	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.058991909 CEST	49986	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.059169054 CEST	49986	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.059181929 CEST	443	49986	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.077393055 CEST	443	49983	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.078155041 CEST	49983	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.078196049 CEST	443	49983	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.078726053 CEST	49983	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.078732967 CEST	443	49983	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.177612066 CEST	443	49982	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.177691936 CEST	443	49982	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.177747011 CEST	49982	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.178065062 CEST	49982	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.178065062 CEST	49982	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.178082943 CEST	443	49982	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.178107977 CEST	443	49982	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.181602001 CEST	49987	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.181632042 CEST	443	49987	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.181684017 CEST	49987	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.181950092 CEST	49987	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.181965113 CEST	443	49987	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.209593058 CEST	443	49983	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.209841013 CEST	443	49983	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.209903002 CEST	49983	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.210386038 CEST	49983	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.210407019 CEST	443	49983	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.210418940 CEST	49983	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.210427046 CEST	443	49983	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.225460052 CEST	49988	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.225528955 CEST	443	49988	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.225593090 CEST	49988	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.226278067 CEST	49988	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.226294994 CEST	443	49988	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.426912069 CEST	443	49984	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.427762985 CEST	49984	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.427791119 CEST	443	49984	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.428255081 CEST	49984	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.428261995 CEST	443	49984	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.829049110 CEST	443	49984	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.829071999 CEST	443	49984	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.829114914 CEST	443	49984	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.829128027 CEST	49984	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.829153061 CEST	49984	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.829432964 CEST	49984	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.829451084 CEST	443	49984	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.829482079 CEST	49984	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.829487085 CEST	443	49984	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.830542088 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.831412077 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.831440926 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.831902981 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.831911087 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.956046104 CEST	443	49986	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.956634998 CEST	49986	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.956660032 CEST	443	49986	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.957132101 CEST	49986	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.957139015 CEST	443	49986	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.965529919 CEST	443	49988	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.966217041 CEST	49988	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.966243029 CEST	443	49988	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.966409922 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.966661930 CEST	49988	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.966669083 CEST	443	49988	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.966918945 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.966986895 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.967031002 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.967053890 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:55.967067003 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:55.967073917 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:56.087220907 CEST	443	49986	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:56.087343931 CEST	443	49986	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:56.087438107 CEST	49986	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:56.087727070 CEST	49986	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:56.087749958 CEST	443	49986	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:56.087763071 CEST	49986	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:56.087769032 CEST	443	49986	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:56.096201897 CEST	443	49988	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:56.096271038 CEST	443	49988	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:56.096322060 CEST	49988	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:56.096512079 CEST	49988	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:56.096530914 CEST	443	49988	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:56.096544981 CEST	49988	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:56.096550941 CEST	443	49988	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:56.290781021 CEST	443	49987	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:56.291408062 CEST	49987	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:56.291435003 CEST	443	49987	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:56.291915894 CEST	49987	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:56.291922092 CEST	443	49987	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:56.423224926 CEST	443	49987	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:56.423443079 CEST	443	49987	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:56.423517942 CEST	49987	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:56.423614025 CEST	49987	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:56.423631907 CEST	443	49987	13.107.246.45	192.168.2.6
Oct 23, 2024 17:04:56.423644066 CEST	49987	443	192.168.2.6	13.107.246.45
Oct 23, 2024 17:04:56.423650026 CEST	443	49987	13.107.246.45	192.168.2.6

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 23, 2024 17:04:01.302876949 CEST	1.1.1.1	192.168.2.6	0x9de8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 17:04:01.302876949 CEST	1.1.1.1	192.168.2.6	0x9de8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 23, 2024 17:04:02.656729937 CEST	1.1.1.1	192.168.2.6	0x489b	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 23, 2024 17:04:02.656729937 CEST	1.1.1.1	192.168.2.6	0x489b	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 23, 2024 17:04:03.986989975 CEST	1.1.1.1	192.168.2.6	0x33b5	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 17:04:03.986989975 CEST	1.1.1.1	192.168.2.6	0x33b5	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

Target ID:	0
Start time:	11:03:56
Start date:	23/10/2024
Path:	C:\Users\user\Desktop\juwXcVX5AK.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\juwXcVX5AK.exe"
Imagebase:	0xf40000
File size:	294'016 bytes
MD5 hash:	0BDAB914290343E6AB408211372E1C1F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	11:03:56
Start date:	23/10/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Imagebase:	0x2b0000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	11:03:56
Start date:	23/10/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Imagebase:	0x1b0000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	11:03:56
Start date:	23/10/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Imagebase:	0x6e0000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	11:03:56
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 6244 -s 276
Imagebase:	0x8d0000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	11:03:57
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\Honda\Honda.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Imagebase:	0x930000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, ReversingLabs
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	11:03:57
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	11:04:09
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\Honda\Honda.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Imagebase:	0xa90000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	11:04:09
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	11:04:17
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\Honda\Honda.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Imagebase:	0xdf0000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	11:04:17
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	11:04:25
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\Honda\Honda.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Imagebase:	0x110000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	11:04:25
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	1.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	2.9%
Total number of Nodes:	1391
Total number of Limit Nodes:	6

Executed Functions

Function 00F42F7C Relevance: 1.6, APIs: 1, Instructions: 55
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualProtect.KERNELBASE(00F80260,000004E4,00000040,?), ref: 00F42FD1

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: 9154edd7e8f5c5a6b2ddd753135a753013a5506d5d3b3312f2979e24c61c6a6d
Instruction ID: 37ae4633c46f4258994e88471ef10c59af0d85f8d9909ee73022c32ee1374aac
Opcode Fuzzy Hash: 9154edd7e8f5c5a6b2ddd753135a753013a5506d5d3b3312f2979e24c61c6a6d
Instruction Fuzzy Hash: C711E3716043059FE318EB28C801B5AB790EB84724F00491EFD54872D2DB75F901EB96

Function 00F5C9D4 Relevance: 7.7, APIs: 5, Instructions: 202
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__alloca_probe_16.LIBCMT ref: 00F5CA5B
__alloca_probe_16.LIBCMT ref: 00F5CB1C
__freea.LIBCMT ref: 00F5CB83

Part of subcall function 00F57A23: HeapAlloc.KERNEL32(00000000,00F5DBAE,?,?,00F5DBAE,00000220,?,?,?), ref: 00F57A55

__freea.LIBCMT ref: 00F5CB98
__freea.LIBCMT ref: 00F5CBA8

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: __freea$__alloca_probe_16$AllocHeap
String ID:
API String ID: 1096550386-0
Opcode ID: 15b546e921b9ef47017f4c46c3601e29b0b6f2da835804e09be80c14064d5c87
Instruction ID: 606cae192ada8515d48333d6f35af19d58be15d4a223425b91ca312427e5fea9
Opcode Fuzzy Hash: 15b546e921b9ef47017f4c46c3601e29b0b6f2da835804e09be80c14064d5c87
Instruction Fuzzy Hash: 6B51D772A0031A7FEF119F64DC42EBB7AA9EF44761B150128FE06E7101E678CD18A7D0

Function 00F5DDAA Relevance: 3.2, APIs: 2, Instructions: 177
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00F5D8DA: GetOEMCP.KERNEL32(00000000,?,?,?,?), ref: 00F5D905

IsValidCodePage.KERNEL32(-00000030,00000000,?,?,?,?,?,?,?,?,00F5DBF1,?,00000000,?,?,?), ref: 00F5DE0B
GetCPInfo.KERNEL32(00000000,?,?,?,?,?,?,?,?,00F5DBF1,?,00000000,?,?,?), ref: 00F5DE4D

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: CodeInfoPageValid
String ID:
API String ID: 546120528-0
Opcode ID: 6e957da4d04b1c5c783ebf64df7f535e34eb01d36b8d23224a11419a0e58badf
Instruction ID: 234c0633011eb14d4a3197902c1de3743c08c33ec40b9e59c6085a31a753b1c4
Opcode Fuzzy Hash: 6e957da4d04b1c5c783ebf64df7f535e34eb01d36b8d23224a11419a0e58badf
Instruction Fuzzy Hash: D2512371E022059FDB30CF35C8816AABBF4EF91325F18406EDA878B251E774994AEB51

Function 00F5762C Relevance: 3.0, APIs: 2, Instructions: 34
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LCMapStringEx.KERNELBASE(?,00F5CAC2,?,?,00000000,?,00000000,00000000,00000000,00000000,00000000), ref: 00F57660
LCMapStringW.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,?,00000000,?,?,00F5CAC2,?,?,00000000,?,00000000), ref: 00F5767E

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: String
String ID:
API String ID: 2568140703-0
Opcode ID: a2a8b5a4de6d490cc6e71fc0a003aa6b027b7c0d85302a20cc276cfd91bb4533
Instruction ID: 74aa3543a8aef16167d53f4253326d0900bdcf1ed9f9e21aef58d521dcfb8b7f
Opcode Fuzzy Hash: a2a8b5a4de6d490cc6e71fc0a003aa6b027b7c0d85302a20cc276cfd91bb4533
Instruction Fuzzy Hash: DDF07A3240461ABBCF126F94EC05DDE7F66EF48761F068110FE1965120C736C972BB94

Function 00F5D9AE Relevance: 1.6, APIs: 1, Instructions: 147
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCPInfo.KERNEL32(E8458D00,?,00F5DBFD,00F5DBF1,00000000), ref: 00F5D9E0

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: Info
String ID:
API String ID: 1807457897-0
Opcode ID: cfdb179a89ab50e16d2ad1269def3e6e247182ce7b7d365bb4b3b59657488a1f
Instruction ID: 3ecf0ceb34fd93da23d094e6c112e9a3112196b0804e4d976976906c503ab81a
Opcode Fuzzy Hash: cfdb179a89ab50e16d2ad1269def3e6e247182ce7b7d365bb4b3b59657488a1f
Instruction Fuzzy Hash: 9C514C719092589EDB318E28CC80BE67BBDEB55315F2405EDDA9AD7143C3389D4AEF20

Function 00F457E2 Relevance: 1.5, APIs: 1, Instructions: 17
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

KiUserExceptionDispatcher.NTDLL ref: 00F457EF

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: DispatcherExceptionUser
String ID:
API String ID: 6842923-0
Opcode ID: b0f914e0c74aacd7581afc381b6f22ef9c7c61add3619f2cc707489266087844
Instruction ID: f891414230cb6e9ca63998b9a1d3a1244d0f26f750ee381853cb63e542bf099a
Opcode Fuzzy Hash: b0f914e0c74aacd7581afc381b6f22ef9c7c61add3619f2cc707489266087844
Instruction Fuzzy Hash: 78D05E74D00308ABCB04FBB5C849C9E77BCAF04301B5080A8B8158B456DBB0E909EA42

Non-executed Functions

Function 00F610A3 Relevance: 10.2, APIs: 1, Strings: 4, Instructions: 1436COMMONLIBRARYCODE

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 00F61287

Strings

1#SNAN, xrefs: 00F611AF
1#QNAN, xrefs: 00F611B6
1#INF, xrefs: 00F611D9
1#IND, xrefs: 00F611A8

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: 0d0d1bc604ac2b265ff1d2e6a0146ac7375251c888295666fe47fc8ba418ffe7
Instruction ID: 7e82b0fdc6388fac809d384f2e717d29417d9d76d74cda8547b7339f8722eff8
Opcode Fuzzy Hash: 0d0d1bc604ac2b265ff1d2e6a0146ac7375251c888295666fe47fc8ba418ffe7
Instruction Fuzzy Hash: 5CD23B72E086298FDB65CE28CD407EAB7B5FB45315F1841EAD80DE7240D778AE85AF40

Function 00F6051E Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 85COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(?,2000000B,00F6083C,00000002,00000000,?,?,?,00F6083C,?,00000000), ref: 00F605B7
GetLocaleInfoW.KERNEL32(?,20001004,00F6083C,00000002,00000000,?,?,?,00F6083C,?,00000000), ref: 00F605E0
GetACP.KERNEL32(?,?,00F6083C,?,00000000), ref: 00F605F5

Strings

OCP, xrefs: 00F60572
ACP, xrefs: 00F6053C

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: InfoLocale
String ID: ACP$OCP
API String ID: 2299586839-711371036
Opcode ID: edfe66eb8d07425cff60e0d8668408d416f16c9ec0b6b6d5893b85b983f725e6
Instruction ID: 5aea222512eb53fd0911cbd1f9fe125bbdfcd494010fd9e65461103c41d1f215
Opcode Fuzzy Hash: edfe66eb8d07425cff60e0d8668408d416f16c9ec0b6b6d5893b85b983f725e6
Instruction Fuzzy Hash: BE21AF22E40101AAEB349F24C901B9773A6EB54B70B7E8464E94BD7111EF32DE80FB50

Function 00F606F3 Relevance: 7.7, APIs: 5, Instructions: 183COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00F58DB3: GetLastError.KERNEL32(?,00000008,00F569CC), ref: 00F58DB7
Part of subcall function 00F58DB3: SetLastError.KERNEL32(00000000,00F70710,00000024,00F4DDA3), ref: 00F58E59

GetUserDefaultLCID.KERNEL32(?,?,?,00000055,?), ref: 00F607FF
IsValidCodePage.KERNEL32(00000000), ref: 00F60848
IsValidLocale.KERNEL32(?,00000001), ref: 00F60857
GetLocaleInfoW.KERNEL32(?,00001001,-00000050,00000040,?,000000D0,00000055,00000000,?,?,00000055,00000000), ref: 00F6089F
GetLocaleInfoW.KERNEL32(?,00001002,00000030,00000040), ref: 00F608BE

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: Locale$ErrorInfoLastValid$CodeDefaultPageUser
String ID:
API String ID: 415426439-0
Opcode ID: d8ddab8704de8f5e84b60b059198cf141155a99bbcc41651f2495490f1d0cfc6
Instruction ID: c67ca6fbb5e353bec1c052ee7a07d82bd01a0d9b8d2e4e4b62e6f2ab373c95c7
Opcode Fuzzy Hash: d8ddab8704de8f5e84b60b059198cf141155a99bbcc41651f2495490f1d0cfc6
Instruction Fuzzy Hash: B3518071E0020AABDB10DFA5DC41BAB77B8BF04710F244469E911E7191EFB4AE44EBA1

Function 00F5FD8F Relevance: 7.3, APIs: 3, Strings: 1, Instructions: 251COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00F58DB3: GetLastError.KERNEL32(?,00000008,00F569CC), ref: 00F58DB7
Part of subcall function 00F58DB3: SetLastError.KERNEL32(00000000,00F70710,00000024,00F4DDA3), ref: 00F58E59

GetACP.KERNEL32(?,?,?,?,?,?,00F54F88,?,?,?,00000055,?,-00000050,?,?,00000004), ref: 00F5FE50
IsValidCodePage.KERNEL32(00000000,?,?,?,?,?,?,00F54F88,?,?,?,00000055,?,-00000050,?,?), ref: 00F5FE7B
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078,-00000050,00000000,000000D0), ref: 00F5FFDE

Strings

utf8, xrefs: 00F5FF4D

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: ErrorLast$CodeInfoLocalePageValid
String ID: utf8
API String ID: 607553120-905460609
Opcode ID: 014a231ce0bf6afb53ef653f3f5536a497b5e1c899bb4493d3587c19544c0215
Instruction ID: f7a2624872675d729b0696daf95fd11dd7e14884ff293d853d9e630c14a5cbc1
Opcode Fuzzy Hash: 014a231ce0bf6afb53ef653f3f5536a497b5e1c899bb4493d3587c19544c0215
Instruction Fuzzy Hash: FA71F731A00306ABDB24AB34DC42BA773E8EF45722F1441B9FF05D7591EA74E94CA651

Function 00F57C32 Relevance: 6.3, APIs: 4, Instructions: 337COMMONLIBRARYCODE

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00F57CBF

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: 345b19b73ae581e04342a76ae529d1a1f04ad07f21d6b651d60a02739456ec14
Instruction ID: e3fd0a6a5f477a09299a77eb7a6bd9b2c7b1b5db7aa353bc594aa33c09b059fb
Opcode Fuzzy Hash: 345b19b73ae581e04342a76ae529d1a1f04ad07f21d6b651d60a02739456ec14
Instruction Fuzzy Hash: 59B15832D083459FDB15EF28D881BFEBBE5EF55311F1441AAEE15AB241D2349C09EBA0

Function 00F4A085 Relevance: 6.1, APIs: 4, Instructions: 70COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017,?), ref: 00F4A091
IsDebuggerPresent.KERNEL32 ref: 00F4A15D
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 00F4A176
UnhandledExceptionFilter.KERNEL32(?), ref: 00F4A180

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: ExceptionFilterPresentUnhandled$DebuggerFeatureProcessor
String ID:
API String ID: 254469556-0
Opcode ID: 74686207b387c60d9cfe4968ad0db62339db83efc6c678580d20ef68b0681cae
Instruction ID: 37bfe5cf483b9895a52f7bc314822547f28962b4e5a276a23fb8716e429ee298
Opcode Fuzzy Hash: 74686207b387c60d9cfe4968ad0db62339db83efc6c678580d20ef68b0681cae
Instruction Fuzzy Hash: 6031E7B5D41218ABDF21DFA4D9497CDBBB8AF08300F1041AAE40DAB250E7759B84DF45

Function 00F601A2 Relevance: 4.7, APIs: 3, Instructions: 205COMMON

Download Yara Rule

APIs

Part of subcall function 00F58DB3: GetLastError.KERNEL32(?,00000008,00F569CC), ref: 00F58DB7
Part of subcall function 00F58DB3: SetLastError.KERNEL32(00000000,00F70710,00000024,00F4DDA3), ref: 00F58E59

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00F601F6
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00F60240
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00F60306

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: InfoLocale$ErrorLast
String ID:
API String ID: 661929714-0
Opcode ID: 84a95c58e49b2d15cfbbff48e9323a413edbb165da0794f8233cde1d7c48e3a0
Instruction ID: 1acb58346f423beb3e40f0fa2d40017957322faace91bc6d46060898ab2ff69a
Opcode Fuzzy Hash: 84a95c58e49b2d15cfbbff48e9323a413edbb165da0794f8233cde1d7c48e3a0
Instruction Fuzzy Hash: C461AF719002079FDB289F24CC96BAB77A9EF04321F204179ED05D6285EF78DD94EB50

Function 00F50B69 Relevance: 4.6, APIs: 3, Instructions: 77COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32(?,?,?,?,?,?), ref: 00F50C61
SetUnhandledExceptionFilter.KERNEL32(00000000,?,?,?,?,?,?), ref: 00F50C6B
UnhandledExceptionFilter.KERNEL32(?,?,?,?,?,?,?), ref: 00F50C78

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: 256f81ae99953234f01d98acc8ccb103de6d89af7a8803691bd2303515dd4bc6
Instruction ID: 77eb98e25b6b5d418459e7a7acb850ee9543af0666ec1f9a15c6f9b35b8fa08a
Opcode Fuzzy Hash: 256f81ae99953234f01d98acc8ccb103de6d89af7a8803691bd2303515dd4bc6
Instruction Fuzzy Hash: 4031C67490121CABCB21DF24DD8978DBBB8BF08310F5046EAE91DA6250EB749F859F45

Function 00F42805 Relevance: 4.0, APIs: 1, Strings: 1, Instructions: 477COMMON

Download Yara Rule

Strings

ios base: %i, xrefs: 00F4297D

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: H_prolog3_catch
String ID: ios base: %i
API String ID: 3886170330-1055636949
Opcode ID: c2e2bf57a05e855533e3c4a01164dc39e9ddaacfc48513324e8983560c2c5006
Instruction ID: e6f9f763bd8160cba533499d07eef624a423ff8fd07475ad552e1813812dcee8
Opcode Fuzzy Hash: c2e2bf57a05e855533e3c4a01164dc39e9ddaacfc48513324e8983560c2c5006
Instruction Fuzzy Hash: 46E16532D087164BD358DF3888812AEBFE1EF89320F94463EFD65972D1E3398901AB41

Function 00F52D90 Relevance: 3.4, APIs: 2, Instructions: 449COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5d6c2b0c2b7731d556a830f47680bcf32448849bf7266fb62c648a6abdd5fe24
Instruction ID: f328a2bb9ff1e958106ef6645224ac00e7098f2c7a6d6834c870e27f36fc80b4
Opcode Fuzzy Hash: 5d6c2b0c2b7731d556a830f47680bcf32448849bf7266fb62c648a6abdd5fe24
Instruction Fuzzy Hash: D2F14E71E002199FDF14CFA8D880AADFBB1FF89325F158269E915A7380D731AE45DB90

Function 00F42A0F Relevance: 1.9, APIs: 1, Instructions: 384COMMON

Download Yara Rule

APIs

Part of subcall function 00F4301A: __EH_prolog3_catch.LIBCMT ref: 00F43021

_Deallocate.LIBCONCRT ref: 00F42E06

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: DeallocateH_prolog3_catch
String ID:
API String ID: 20358830-0
Opcode ID: b205591d52042a80474cd02ee0ade2311398e6ed513a44da6cb67509e3884182
Instruction ID: 4768557a20c0292375dbb858e31330a9de4ec66278e5a6d32bc03b72fa968490
Opcode Fuzzy Hash: b205591d52042a80474cd02ee0ade2311398e6ed513a44da6cb67509e3884182
Instruction Fuzzy Hash: 1AB1A133D10A1A4BD748DA7889811DEBEA5EB9A330F954337FD25EB3D0D3398A029644

Function 00F5943C Relevance: 1.8, APIs: 1, Instructions: 274COMMONLIBRARYCODE

Download Yara Rule

APIs

RaiseException.KERNEL32(C000000D,00000000,00000001,?,?,00000008,?,?,00F59437,?,?,00000008,?,?,00F64915,00000000), ref: 00F59669

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: ExceptionRaise
String ID:
API String ID: 3997070919-0
Opcode ID: 424f4ee5222bc723021e9c6a65f8d6d5c01435146fae2f40ef72be4d0d243dfb
Instruction ID: e37be478c82f57a0716593fa0aeda16a2cbeb7b90e29cd159cbdd41415b6c4b4
Opcode Fuzzy Hash: 424f4ee5222bc723021e9c6a65f8d6d5c01435146fae2f40ef72be4d0d243dfb
Instruction Fuzzy Hash: 1AB1A032614608CFD719CF28C486B647BE0FF05366F298658ED9ACF2A1C375E956DB40

Function 00F49B05 Relevance: 1.7, APIs: 1, Instructions: 242COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(0000000A), ref: 00F49B1B

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: FeaturePresentProcessor
String ID:
API String ID: 2325560087-0
Opcode ID: 77d360b5f9e326d78ae3b50e477c2659cfbcf89ed554551460fec6d521f9a15d
Instruction ID: a9496beca2cbb88ede287ead275c0b2d8034158cb62ab621b3f41351c2eff2c4
Opcode Fuzzy Hash: 77d360b5f9e326d78ae3b50e477c2659cfbcf89ed554551460fec6d521f9a15d
Instruction Fuzzy Hash: 11A17F71E04609CFDB68CF54D8816AEBBF0FB48324F14862AD915EB390D7B49981DF51

Function 00F5D2FE Relevance: 1.6, APIs: 1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ccb3a7b340394237fffdaec4bba80b49da484f94c1e3e81efc3d1d2e3e0de52b
Instruction ID: 37a6a62cf3e44cc0a422423c43acff0a795fca55661afcb6360b8d5c067c8eb7
Opcode Fuzzy Hash: ccb3a7b340394237fffdaec4bba80b49da484f94c1e3e81efc3d1d2e3e0de52b
Instruction Fuzzy Hash: F441D3B5C0521DAFCB20DF68CC89AAEBBB8EF45311F5442D9E909D3201DA349E899F50

Function 00F4FD34 Relevance: 1.6, Strings: 1, Instructions: 344COMMONLIBRARYCODE

Download Yara Rule

Strings

0, xrefs: 00F4FEC2

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: dad4cf6ba297ed4ab0f4efea86d3d7ea97a74dd3f757434b859d43d096ef5adc
Instruction ID: eb4d788e8455d13f819b319f9728e34414a312942525066cb20c8447629ec18e
Opcode Fuzzy Hash: dad4cf6ba297ed4ab0f4efea86d3d7ea97a74dd3f757434b859d43d096ef5adc
Instruction Fuzzy Hash: 22C19130D006468FCB24CF68C494ABEBFB1AF45321F244629DD5A973A2C735AD4DEB51

Function 00F603F5 Relevance: 1.6, APIs: 1, Instructions: 83COMMON

Download Yara Rule

APIs

Part of subcall function 00F58DB3: GetLastError.KERNEL32(?,00000008,00F569CC), ref: 00F58DB7
Part of subcall function 00F58DB3: SetLastError.KERNEL32(00000000,00F70710,00000024,00F4DDA3), ref: 00F58E59

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00F60449

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: fa355cfd56bf16d840998e72f73a9b69f09e63ab0550c884e6460246ebd9fc05
Instruction ID: befd7e62106c84e6995d5f6fa9623c049c2d15e451eb2e3d127634b6dcf96c93
Opcode Fuzzy Hash: fa355cfd56bf16d840998e72f73a9b69f09e63ab0550c884e6460246ebd9fc05
Instruction Fuzzy Hash: B0218072A55206AFDB28DB64DC41ABB73E8EF44321F20407AFE06D6181EF79DD44AB50

Function 00F6007C Relevance: 1.6, APIs: 1, Instructions: 63COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00F58DB3: GetLastError.KERNEL32(?,00000008,00F569CC), ref: 00F58DB7
Part of subcall function 00F58DB3: SetLastError.KERNEL32(00000000,00F70710,00000024,00F4DDA3), ref: 00F58E59

EnumSystemLocalesW.KERNEL32(00F601A2,00000001,00000000,?,-00000050,?,00F607D3,00000000,?,?,?,00000055,?), ref: 00F600EE

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: 29d00b530c5698cb707221b470de16c9f1d5a8f00ce951f00a872cf3693f30e2
Instruction ID: bdf1cf3bc883066fcedccfcc038c3ec2ef5ba477f45931485a45d11691bd74e7
Opcode Fuzzy Hash: 29d00b530c5698cb707221b470de16c9f1d5a8f00ce951f00a872cf3693f30e2
Instruction Fuzzy Hash: B41129366003056FDB189F39C8916BBB792FF80369B24443DE98687B41DB71A802EB40

Function 00F60624 Relevance: 1.5, APIs: 1, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 00F58DB3: GetLastError.KERNEL32(?,00000008,00F569CC), ref: 00F58DB7
Part of subcall function 00F58DB3: SetLastError.KERNEL32(00000000,00F70710,00000024,00F4DDA3), ref: 00F58E59

GetLocaleInfoW.KERNEL32(?,20000001,?,00000002,?,00000000,?,?,00F603BE,00000000,00000000,?), ref: 00F60650

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: 9c7001103a372bd488f3a2629ab3eaae0a1e5fe47e64f7977dea8956d1b03236
Instruction ID: ee2eafa8beaad6cc7d257ed4940c275c124513ed7c356177fffba614e6381e0f
Opcode Fuzzy Hash: 9c7001103a372bd488f3a2629ab3eaae0a1e5fe47e64f7977dea8956d1b03236
Instruction Fuzzy Hash: 90F0A932A10115BBDB285764CC05FBB7764DB80764F254425ED06A3180EE75FE51E9E0

Function 00F60117 Relevance: 1.5, APIs: 1, Instructions: 41COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00F58DB3: GetLastError.KERNEL32(?,00000008,00F569CC), ref: 00F58DB7
Part of subcall function 00F58DB3: SetLastError.KERNEL32(00000000,00F70710,00000024,00F4DDA3), ref: 00F58E59

EnumSystemLocalesW.KERNEL32(00F603F5,00000001,?,?,-00000050,?,00F60797,-00000050,?,?,?,00000055,?,-00000050,?,?), ref: 00F60161

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: 4a74f44fc8c8c02a83073377ed82fe2c56f3a5772485232364ab89f4e1379d47
Instruction ID: 10da905f5b57d0f218493990070b76dbf44581c5c38db484d70352b5b11e0532
Opcode Fuzzy Hash: 4a74f44fc8c8c02a83073377ed82fe2c56f3a5772485232364ab89f4e1379d47
Instruction Fuzzy Hash: 54F0F6367043046FDB285F399C81A7B7BD1EF81368F25842DFE458B691DAB19C02EB50

Function 00F57026 Relevance: 1.5, APIs: 1, Instructions: 33COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00F50E12: EnterCriticalSection.KERNEL32(?,?,00F58A8B,?,00F707B0,00000008,00F58C4F,?,00F4EE66,?), ref: 00F50E21

EnumSystemLocalesW.KERNEL32(00F57019,00000001,00F70750,0000000C,00F573EB,00000000), ref: 00F5705E

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: CriticalEnterEnumLocalesSectionSystem
String ID:
API String ID: 1272433827-0
Opcode ID: 48d73b0c9dbbe11e08867954237496de7facfa97919c82453bfc6318e2ab2e30
Instruction ID: e6533dcf5dc69ca37309215d511c281c8d3b74cd6c7f15942a5e574987021833
Opcode Fuzzy Hash: 48d73b0c9dbbe11e08867954237496de7facfa97919c82453bfc6318e2ab2e30
Instruction Fuzzy Hash: D0F03772A04309EFDB00EF98ED42B9D77E0EB04722F10456AF910DB2A1DBB99944AB41

Function 00F60031 Relevance: 1.5, APIs: 1, Instructions: 31COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00F58DB3: GetLastError.KERNEL32(?,00000008,00F569CC), ref: 00F58DB7
Part of subcall function 00F58DB3: SetLastError.KERNEL32(00000000,00F70710,00000024,00F4DDA3), ref: 00F58E59

EnumSystemLocalesW.KERNEL32(00F5FF8A,00000001,?,?,?,00F607F5,-00000050,?,?,?,00000055,?,-00000050,?,?,00000004), ref: 00F60068

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: 56987da1db813ffbfb1dc9210cb039847d05e3f741ba5d61dce13770b10be2dd
Instruction ID: 109bc6bef480134bd1508227e506cc88271aa8ce9c63fa9b42be03f9fd574d84
Opcode Fuzzy Hash: 56987da1db813ffbfb1dc9210cb039847d05e3f741ba5d61dce13770b10be2dd
Instruction Fuzzy Hash: E2F0553A700205A7CB089F35C80576A7FD0EFC2761B06406CEF098B291CAB59847EB90

Function 00F574EF Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(00000000,?,00000000,?,-00000050,?,?,?,00F55AEE,?,20001004,00000000,00000002,?,?,00F550F0), ref: 00F57523

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: InfoLocale
String ID:
API String ID: 2299586839-0
Opcode ID: fd447359ab64f6386a19e2fe0343b4edcae5a81979ecc454275d2c2f9a142994
Instruction ID: 48aaf6543a6fd0011b0ef879325d1c450758a8e1c535c948f0a6475f3e2ae73c
Opcode Fuzzy Hash: fd447359ab64f6386a19e2fe0343b4edcae5a81979ecc454275d2c2f9a142994
Instruction Fuzzy Hash: F2E04F3650472DBBCF123F60EC08A9E7F15EF44762F054010FE15A5221CB758925BAD5

Function 00F4A212 Relevance: 1.5, APIs: 1, Instructions: 3COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32(Function_0000A21E,00F49799), ref: 00F4A217

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: 71c11b8943cfb57a1cbcc5bfb033c077b9d04b9fa7a46d6187fbb786fd0f7ec8
Instruction ID: d60e9d3abc597605b2666130a016be103bd2969c78e7416841498b4b253a2f0e
Opcode Fuzzy Hash: 71c11b8943cfb57a1cbcc5bfb033c077b9d04b9fa7a46d6187fbb786fd0f7ec8
Instruction Fuzzy Hash:

Function 00F5E177 Relevance: 1.3, APIs: 1, Instructions: 5memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32 ref: 00F5E177

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: HeapProcess
String ID:
API String ID: 54951025-0
Opcode ID: 497c9b343ffdbeedd213b5d12676591da86f79350d91355c52021d09cb2099ab
Instruction ID: c3bdb63d2fc9b2aa30bd72dc9ccf22928f6ec94030e5c3fca34183840d2992cb
Opcode Fuzzy Hash: 497c9b343ffdbeedd213b5d12676591da86f79350d91355c52021d09cb2099ab
Instruction Fuzzy Hash: 38A001706012098B97908F35AA096593AE9BB4AA91B054169E419C6161EB649450AB01

Function 00F5F840 Relevance: .3, Instructions: 327COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: ErrorLastProcess$CurrentFeatureInfoLocalePresentProcessorTerminate
String ID:
API String ID: 3471368781-0
Opcode ID: 92faaafc7e04b0bc693537b0004fd3515b3a716e76aea26fe176bfbf80e703b3
Instruction ID: 16e7aa724ff575609e3363b680a98526f0657532d77a2b7568b43f0703a63854
Opcode Fuzzy Hash: 92faaafc7e04b0bc693537b0004fd3515b3a716e76aea26fe176bfbf80e703b3
Instruction Fuzzy Hash: 52B1F7359007469BCB349B24CC92BB7B3E9EB4431AF5444BDEF47C6580EA78A98DE710

Function 00F4F9EC Relevance: .3, Instructions: 314COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1e446add3a56115955446b36c2f2db358691fea737cbad0e05432222989a720d
Instruction ID: b257842894cea41971e92159c1c9c851c2ff0a112c27a3f87782b194095baf02
Opcode Fuzzy Hash: 1e446add3a56115955446b36c2f2db358691fea737cbad0e05432222989a720d
Instruction Fuzzy Hash: 23B1C271D0060A8BCB24CF68C9A16BFBFB1EF45324F14062ADD5ED7281CA38994DEB51

Function 00F42F17 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fc2537378f5ba78f23245ce537cb3721f9e87589bbd5dcf331ec9e87cc625461
Instruction ID: 25700178189123cfd60674ad99827f599c2cb406e2e3279b1666a39ee4ece337
Opcode Fuzzy Hash: fc2537378f5ba78f23245ce537cb3721f9e87589bbd5dcf331ec9e87cc625461
Instruction Fuzzy Hash: 14E06D71609204A7F3899A54D45979B3AEAEBD5320F90803EF149DB3D4CFB89848A7D2

Function 00F5CC6F Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c9be6b6f35371869e062396f73cb3a676a20dd67872fdeac340a7b63f963c531
Instruction ID: 2f29a7b6387519d76646badb3cb7f6fdae5d305f1532e55730c9d92ea5874af2
Opcode Fuzzy Hash: c9be6b6f35371869e062396f73cb3a676a20dd67872fdeac340a7b63f963c531
Instruction Fuzzy Hash: 5DE08C72921378EBCB24DB88C90898AF3ECEB45B52F110496BA06D3100C274EE04EBD0

Function 00F53BBE Relevance: .0, Instructions: 12COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5235bc6f45b747b251e4dee57095da2f280f55043986cdd14d68c6e044f9f23d
Instruction ID: 82c3b42b27efc58a82a16a847bb7ef0cd603f353c47a816a136c473a22c30a24
Opcode Fuzzy Hash: 5235bc6f45b747b251e4dee57095da2f280f55043986cdd14d68c6e044f9f23d
Instruction Fuzzy Hash: BBC08C78600A885ACE2E891882B13A43354ABD1BD3F80088CCE970B642C92E9D8AF600

Function 00F492CD Relevance: 14.0, APIs: 4, Strings: 4, Instructions: 19
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleW.KERNEL32(kernel32.dll), ref: 00F492D3
GetProcAddress.KERNEL32(00000000,GetCurrentPackageId), ref: 00F492E1
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 00F492F2
GetProcAddress.KERNEL32(00000000,GetTempPath2W), ref: 00F49303

Strings

kernel32.dll, xrefs: 00F492CE
GetSystemTimePreciseAsFileTime, xrefs: 00F492E7
GetCurrentPackageId, xrefs: 00F492DB
GetTempPath2W, xrefs: 00F492F8

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: GetCurrentPackageId$GetSystemTimePreciseAsFileTime$GetTempPath2W$kernel32.dll
API String ID: 667068680-1247241052
Opcode ID: 3e03d6cb967f786acaaab63168311c82cfca79054589969c329cdef3b929209c
Instruction ID: 01b6dd2072618e9dbdda3c0a68f9ec31d99b106e332beb2a3a5148ead216cb1f
Opcode Fuzzy Hash: 3e03d6cb967f786acaaab63168311c82cfca79054589969c329cdef3b929209c
Instruction Fuzzy Hash: 7DE0EC75595318BBE7006F74BC0D8D53EB8BB467563004273F425D2260E6F48441FB51

Function 00F5B85E Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 298
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

, xrefs: 00F5BAD7

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID:
String ID:
API String ID: 0-3907804496
Opcode ID: 3ff127a0de1e874c999fe645e11699eaab88dae7cff82b784b243f1d962b8b1b
Instruction ID: 1e0003975fe6472ccaaabda8c7bbf8b8f8c2c13f8605936c66d3fbf1fe64335a
Opcode Fuzzy Hash: 3ff127a0de1e874c999fe645e11699eaab88dae7cff82b784b243f1d962b8b1b
Instruction Fuzzy Hash: A5B10770E04249AFDB11CF98CC80BBD7BB1BF85322F144154EE14A7292CB759D4AEB60

Function 00F490E3 Relevance: 12.2, APIs: 8, Instructions: 175
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

MultiByteToWideChar.KERNEL32(00000000,00000000,00000001,?,00000000,00000000,?,?,?,00000001), ref: 00F4912C
__alloca_probe_16.LIBCMT ref: 00F49158
MultiByteToWideChar.KERNEL32(00000001,00000001,00000000,?,00000000,00000000), ref: 00F49197
LCMapStringEx.KERNEL32(?,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00F491B4
LCMapStringEx.KERNEL32(?,?,00000000,00000000,00000000,?,00000000,00000000,00000000), ref: 00F491F3
__alloca_probe_16.LIBCMT ref: 00F49210
LCMapStringEx.KERNEL32(?,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00F49252
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,?,00000000,00000000), ref: 00F49275

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: ByteCharMultiStringWide$__alloca_probe_16
String ID:
API String ID: 2040435927-0
Opcode ID: c08f78bed38db4b920672423bcaff554e1758c188fe6e32463d77812d09e2ffe
Instruction ID: d5691c9a42fd7d615244f2afe4c94a3f1d31a94465507ab6f1015e683e29d127
Opcode Fuzzy Hash: c08f78bed38db4b920672423bcaff554e1758c188fe6e32463d77812d09e2ffe
Instruction Fuzzy Hash: CB519E72B0421ABBEF208FA4CC45FAB7FA9EB41760F144129FD14E6150DBF59E10AB60

Function 00F4CE02 Relevance: 10.8, APIs: 3, Strings: 3, Instructions: 303
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

type_info::operator==.LIBVCRUNTIME ref: 00F4CF21
___TypeMatch.LIBVCRUNTIME ref: 00F4D02F
CallUnexpected.LIBVCRUNTIME ref: 00F4D19C

Strings

csm, xrefs: 00F4CF58
csm, xrefs: 00F4CEAC
csm, xrefs: 00F4CE3F

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: CallMatchTypeUnexpectedtype_info::operator==
String ID: csm$csm$csm
API String ID: 1206542248-393685449
Opcode ID: 5afd034f768c3a513f30a9e9786745a10fc4404fa10d579c78141d898e3c8567
Instruction ID: 1778d8fb0ae247d20e047b13b3d6a223db363279b5a148e287184df041c28aca
Opcode Fuzzy Hash: 5afd034f768c3a513f30a9e9786745a10fc4404fa10d579c78141d898e3c8567
Instruction Fuzzy Hash: F2B18871C01209EFDF29EFA4C8819AEBFB5BF54320F14415AEC116B216D738DA51EBA1

Function 00F4C8D0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 00F4C907
___except_validate_context_record.LIBVCRUNTIME ref: 00F4C90F
_ValidateLocalCookies.LIBCMT ref: 00F4C998
__IsNonwritableInCurrentImage.LIBCMT ref: 00F4C9C3
_ValidateLocalCookies.LIBCMT ref: 00F4CA18

Strings

csm, xrefs: 00F4C9AD

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 1d9c026dad93ba75545e871d5bfb9250f12a176cc88732299d1309229bf8346f
Instruction ID: d34c90ae30fee48fedf989f957f88e43324b95f229f4575c0eee2c63dc610454
Opcode Fuzzy Hash: 1d9c026dad93ba75545e871d5bfb9250f12a176cc88732299d1309229bf8346f
Instruction Fuzzy Hash: E141B034E01209ABCF10DF68CC85AAEBFA5AF45324F148155EC19AB392D735EA11EBD1

Function 00F571EF Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 74COMMONLIBRARYCODE

Download Yara Rule

APIs

FreeLibrary.KERNEL32(00000000,?,00000000,00000800,00000000,F8250000,?,0657E4C6,?,00F572FC,00F4EE66,?,F8250000,00000000), ref: 00F572B0

Strings

ext-ms-, xrefs: 00F5725A
api-ms-, xrefs: 00F57246

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: FreeLibrary
String ID: api-ms-$ext-ms-
API String ID: 3664257935-537541572
Opcode ID: 33236ff8612d35a7f29b155baa5d1c11d76192cc082c4a197122ef4a1a69a3a4
Instruction ID: 84c60e84b88e97abd979f18b08bb20d014342b33c6a2fd74533a3bee23c82115
Opcode Fuzzy Hash: 33236ff8612d35a7f29b155baa5d1c11d76192cc082c4a197122ef4a1a69a3a4
Instruction Fuzzy Hash: E621EB32E09314ABDB21AB64AC44A5A7768EF42771F150124FE15E72D1D670ED08FAE0

Function 00F473C5 Relevance: 10.5, APIs: 7, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00F473CC
std::_Lockit::_Lockit.LIBCPMT ref: 00F473D6
int.LIBCPMT ref: 00F473ED

Part of subcall function 00F41830: std::_Lockit::_Lockit.LIBCPMT ref: 00F41841
Part of subcall function 00F41830: std::_Lockit::~_Lockit.LIBCPMT ref: 00F4185B

codecvt.LIBCPMT ref: 00F47410
std::_Facet_Register.LIBCPMT ref: 00F47427
std::_Lockit::~_Lockit.LIBCPMT ref: 00F47447
Concurrency::cancel_current_task.LIBCPMT ref: 00F47454

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_H_prolog3Registercodecvt
String ID:
API String ID: 2133458128-0
Opcode ID: f90e3da1103ee4021c7422b5a8b0003fdf6ccdba0be7493a0f088ddd4f3d9ba1
Instruction ID: 85344aaf2cdfd18d53af1c36e26618d052eaa0f5ccda5761641d0cc8c8899f22
Opcode Fuzzy Hash: f90e3da1103ee4021c7422b5a8b0003fdf6ccdba0be7493a0f088ddd4f3d9ba1
Instruction Fuzzy Hash: 8C01AD3691421A9BCB05FBA4DC456BE7F65BF80720F280509EC11AB292DF789D46BB81

Function 00F4CA94 Relevance: 9.1, APIs: 6, Instructions: 60COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,00F4CA8B,00F4AD89,00F469F4,0657E4C6,?,?,?,?,00F652D0,000000FF), ref: 00F4CAA2
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 00F4CAB0
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 00F4CAC9
SetLastError.KERNEL32(00000000,?,00F4CA8B,00F4AD89,00F469F4,0657E4C6,?,?,?,?,00F652D0,000000FF), ref: 00F4CB1B

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: 5ed30bf4dd41a06a93cfbaefd7a55bb3d7d1a79a22b8273dbccff6f1fed6316d
Instruction ID: abc543b4626051aaccd59cf3e0522e3e1c08b503e4267f49876681da426d39d8
Opcode Fuzzy Hash: 5ed30bf4dd41a06a93cfbaefd7a55bb3d7d1a79a22b8273dbccff6f1fed6316d
Instruction Fuzzy Hash: E801D43260A71A6EFAA42B746C869663F54EB417B93200239FE35910E2EF958D40F2C1

Function 00F53BE0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 42libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,0657E4C6,?,?,00000000,00F654C3,000000FF,?,00F53B70,00F53CA0,?,00F53B44,00000000), ref: 00F53C15
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 00F53C27
FreeLibrary.KERNEL32(00000000,?,?,00000000,00F654C3,000000FF,?,00F53B70,00F53CA0,?,00F53B44,00000000), ref: 00F53C49

Strings

CorExitProcess, xrefs: 00F53C1F
mscoree.dll, xrefs: 00F53C0E

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: beee76dea8363f72d7e91a1730fdd571f764f8941f407aa0838f5d0275bf6992
Instruction ID: de572f762b62303f4b5ac13c88859ae32c8fc3d3c986f29b77898f3bfafda83c
Opcode Fuzzy Hash: beee76dea8363f72d7e91a1730fdd571f764f8941f407aa0838f5d0275bf6992
Instruction Fuzzy Hash: B401A231944669BBDB158B54DC09FAEBBFCFB04B26F000525E921E22D0DBB49904EA90

Function 00F48BAA Relevance: 7.6, APIs: 5, Instructions: 116threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 00F48BBE
AcquireSRWLockExclusive.KERNEL32(00000003,?,00000002,?,00F434CC,?,?), ref: 00F48BDD
AcquireSRWLockExclusive.KERNEL32(00000003,00000000,00000000,?,00000002,?,00F434CC,?,?), ref: 00F48C0B
TryAcquireSRWLockExclusive.KERNEL32(00000003,00000000,00000000,?,00000002,?,00F434CC,?,?), ref: 00F48C66
TryAcquireSRWLockExclusive.KERNEL32(00000003,00000000,00000000,?,00000002,?,00F434CC,?,?), ref: 00F48C7D

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: AcquireExclusiveLock$CurrentThread
String ID:
API String ID: 66001078-0
Opcode ID: 26fe7c19c9c432686cb4e06c492e19c1ee86372f0cd1ce46eba447e10ebb423a
Instruction ID: 80ef2e4e600173711543ae38e5143b51ee6e01f8fd503bec7c444dcb2073d759
Opcode Fuzzy Hash: 26fe7c19c9c432686cb4e06c492e19c1ee86372f0cd1ce46eba447e10ebb423a
Instruction Fuzzy Hash: 1B414D31901606DFCB20DF65C8C0AAEBBF4FF043A1B504929DA56D7640DB30E986EB60

Function 00F448F7 Relevance: 7.5, APIs: 5, Instructions: 48COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00F44903
int.LIBCPMT ref: 00F44916

Part of subcall function 00F41830: std::_Lockit::_Lockit.LIBCPMT ref: 00F41841
Part of subcall function 00F41830: std::_Lockit::~_Lockit.LIBCPMT ref: 00F4185B

std::_Facet_Register.LIBCPMT ref: 00F44949
std::_Lockit::~_Lockit.LIBCPMT ref: 00F4495F
Concurrency::cancel_current_task.LIBCPMT ref: 00F4496A

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_Register
String ID:
API String ID: 2081738530-0
Opcode ID: 957370ee3050da3c5a439abc6e3096a71f571b305905596dfda74a901360615b
Instruction ID: f96a123b7fdb8b15a754244ca212c2794e7ea073874ba7c5f29233ccfbf8f4e8
Opcode Fuzzy Hash: 957370ee3050da3c5a439abc6e3096a71f571b305905596dfda74a901360615b
Instruction Fuzzy Hash: 0F01D632900118ABCB14BB94DC159EF7FA8EF81770B240158FD19A7291EF38AE42B790

Function 00F44A2F Relevance: 7.5, APIs: 5, Instructions: 48COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00F44A3B
int.LIBCPMT ref: 00F44A4E

Part of subcall function 00F41830: std::_Lockit::_Lockit.LIBCPMT ref: 00F41841
Part of subcall function 00F41830: std::_Lockit::~_Lockit.LIBCPMT ref: 00F4185B

std::_Facet_Register.LIBCPMT ref: 00F44A81
std::_Lockit::~_Lockit.LIBCPMT ref: 00F44A97
Concurrency::cancel_current_task.LIBCPMT ref: 00F44AA2

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_Register
String ID:
API String ID: 2081738530-0
Opcode ID: 462048a70eec89f52945d0c9fd79484d5a8d42e17f163afa0a025b747f7fa9ce
Instruction ID: 3d78372705fe04843d1df8190fe7dd83ca7c3055c492c9e42d161f916b95cb32
Opcode Fuzzy Hash: 462048a70eec89f52945d0c9fd79484d5a8d42e17f163afa0a025b747f7fa9ce
Instruction Fuzzy Hash: 2B01A232910118ABCB14AF54DC169EE7FA8EF80760B240558FD05A7291EF38AE42A790

Function 00F44F6E Relevance: 7.5, APIs: 5, Instructions: 48COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00F44F7A
int.LIBCPMT ref: 00F44F8D

Part of subcall function 00F41830: std::_Lockit::_Lockit.LIBCPMT ref: 00F41841
Part of subcall function 00F41830: std::_Lockit::~_Lockit.LIBCPMT ref: 00F4185B

std::_Facet_Register.LIBCPMT ref: 00F44FC0
std::_Lockit::~_Lockit.LIBCPMT ref: 00F44FD6
Concurrency::cancel_current_task.LIBCPMT ref: 00F44FE1

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_Register
String ID:
API String ID: 2081738530-0
Opcode ID: 98afd7343117d21d7efb5dddc22f4e4ee64414399086f3f4ab203f6af8a999d4
Instruction ID: 3ed3b6422ce6be45708636fcf2f7aa4a30a62ec1ffc33290833353a9641f778f
Opcode Fuzzy Hash: 98afd7343117d21d7efb5dddc22f4e4ee64414399086f3f4ab203f6af8a999d4
Instruction Fuzzy Hash: 4501A272910118ABCB14BF54EC059EE7FA8EF80770B240559FD05A7291EF38AE45E7D0

Function 00F487C2 Relevance: 7.5, APIs: 5, Instructions: 44COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00F487C9
std::_Lockit::_Lockit.LIBCPMT ref: 00F487D4
std::_Lockit::~_Lockit.LIBCPMT ref: 00F48842

Part of subcall function 00F48925: std::locale::_Locimp::_Locimp.LIBCPMT ref: 00F4893D

std::locale::_Setgloballocale.LIBCPMT ref: 00F487EF
_Yarn.LIBCPMT ref: 00F48805

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: Lockitstd::_std::locale::_$H_prolog3LocimpLocimp::_Lockit::_Lockit::~_SetgloballocaleYarn
String ID:
API String ID: 1088826258-0
Opcode ID: 76ba4bf6a9d5b7867f40a91834778374b517098375ae767044bc3eb2db135550
Instruction ID: 02dd9e1699277283dd8b93b3394a03afadccd3208b556596f916cd7ae3aa46b8
Opcode Fuzzy Hash: 76ba4bf6a9d5b7867f40a91834778374b517098375ae767044bc3eb2db135550
Instruction Fuzzy Hash: 6A015A75A016259BCB0AEF20DC555BD7F65FB85BA0B180009EC1197392CF78AA46FB82

Function 00F4DB97 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 27libraryCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(?,00000000,00000800,?,00F4DB48,?,?,00000000,?,?,?,00F4DC72,00000002,FlsGetValue,00F67CF0,FlsGetValue), ref: 00F4DBA4
GetLastError.KERNEL32(?,00F4DB48,?,?,00000000,?,?,?,00F4DC72,00000002,FlsGetValue,00F67CF0,FlsGetValue,?,?,00F4CAB5), ref: 00F4DBAE
LoadLibraryExW.KERNEL32(?,00000000,00000000), ref: 00F4DBD6

Strings

api-ms-, xrefs: 00F4DBBB

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: LibraryLoad$ErrorLast
String ID: api-ms-
API String ID: 3177248105-2084034818
Opcode ID: 372611c222b837fe16324df47d8305410e8f21622eb4697651b054c993f3bbd2
Instruction ID: b8f68797f2eb67f4b6a5d3712330e3415edb7d00f3b6b016ca6dffba172c60af
Opcode Fuzzy Hash: 372611c222b837fe16324df47d8305410e8f21622eb4697651b054c993f3bbd2
Instruction Fuzzy Hash: D6E01A30684208B6EB202B61EC06F593E65EF40B61F100430FD5DE94E1EBA1D854B584

Function 00F59DB0 Relevance: 6.3, APIs: 4, Instructions: 338fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32(0657E4C6,00000000,00000000,7622F550), ref: 00F59E13

Part of subcall function 00F5CDFB: WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,00000000,?,0000FDE9,00000000,-00000008,00000000,?,00F5CB79,?,00000000,-00000008), ref: 00F5CEA7

WriteFile.KERNEL32(?,?,00000000,?,00000000), ref: 00F5A06E
WriteFile.KERNEL32(?,?,00000001,?,00000000), ref: 00F5A0B6
GetLastError.KERNEL32 ref: 00F5A159

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: FileWrite$ByteCharConsoleErrorLastMultiOutputWide
String ID:
API String ID: 2112829910-0
Opcode ID: e83a0f500b346aa0594b924324192f03cf53c4fd600dfa3d7ae5dec87a4581e5
Instruction ID: bbc87e00fd22fb413508e4ce7f2a8e08dfad02dad8fc5fc5f01dac443988f458
Opcode Fuzzy Hash: e83a0f500b346aa0594b924324192f03cf53c4fd600dfa3d7ae5dec87a4581e5
Instruction Fuzzy Hash: 56D16875E046489FCF15CFA8C880AADBBB5FF48311F18422AE956EB351D630A85ADF50

Function 00F4CBAB Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 00F4CC72
___AdjustPointer.LIBCMT ref: 00F4CC95
___AdjustPointer.LIBCMT ref: 00F4CD31

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: 8a9fafe8e8aff046879c732b04280157c45f01b8e5afc71d134795bb1a2914e4
Instruction ID: fb219c1f0f381a5b7917c503a8a6a6c846444dde30702dacc44a4eb5185ddab5
Opcode Fuzzy Hash: 8a9fafe8e8aff046879c732b04280157c45f01b8e5afc71d134795bb1a2914e4
Instruction Fuzzy Hash: 6A51C176A066469FDB688F50D881BBA7FA4FF00720F14412DEE0997691E735AC80FBD1

Function 00F5D0BB Relevance: 6.1, APIs: 4, Instructions: 82COMMON

Download Yara Rule

APIs

Part of subcall function 00F5CDFB: WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,00000000,?,0000FDE9,00000000,-00000008,00000000,?,00F5CB79,?,00000000,-00000008), ref: 00F5CEA7

GetLastError.KERNEL32 ref: 00F5D11F
__dosmaperr.LIBCMT ref: 00F5D126
GetLastError.KERNEL32(?,?,?,?), ref: 00F5D160
__dosmaperr.LIBCMT ref: 00F5D167

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: ErrorLast__dosmaperr$ByteCharMultiWide
String ID:
API String ID: 1913693674-0
Opcode ID: c4b4bf1ffbc83e49b630a48e98e65ff3a41b7325d883813d5231401ad6994f05
Instruction ID: 9e4173709040688c9af4c47159d194aca86efbc683b16308e41570dc2195ffbe
Opcode Fuzzy Hash: c4b4bf1ffbc83e49b630a48e98e65ff3a41b7325d883813d5231401ad6994f05
Instruction Fuzzy Hash: 8721C571601609AFAB30AF65CC8092BB7A9FF053B67008918FE25D7651DB34EC58FB90

Function 00F532F6 Relevance: 6.1, APIs: 4, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 19afc54b4a2fd554bfb24e0d63cd4b5d1d8167580d1bff9618c7208391b6d810
Instruction ID: e56c1c66927d0f252591e5d0334cfb7a6d34bfa21f9e6be23c7e98d012101b4b
Opcode Fuzzy Hash: 19afc54b4a2fd554bfb24e0d63cd4b5d1d8167580d1bff9618c7208391b6d810
Instruction Fuzzy Hash: 1A21A132A00205AFDB21AFA9CC4096AB7A9BF013F67104524FE65D7151DF34EE18F7A0

Function 00F5E06A Relevance: 6.1, APIs: 4, Instructions: 74COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32 ref: 00F5E072

Part of subcall function 00F5CDFB: WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,00000000,?,0000FDE9,00000000,-00000008,00000000,?,00F5CB79,?,00000000,-00000008), ref: 00F5CEA7

FreeEnvironmentStringsW.KERNEL32(00000000), ref: 00F5E0AA
FreeEnvironmentStringsW.KERNEL32(00000000), ref: 00F5E0CA

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: EnvironmentStrings$Free$ByteCharMultiWide
String ID:
API String ID: 158306478-0
Opcode ID: 2ba758b871d57c10b47c24b59a5b6d5e3e359e2ea6f6ab7957460564901aec7f
Instruction ID: 5e6d0a99b6f2411abf838ed573963fd9b7327091511d49cba124c7d5579cbe14
Opcode Fuzzy Hash: 2ba758b871d57c10b47c24b59a5b6d5e3e359e2ea6f6ab7957460564901aec7f
Instruction Fuzzy Hash: 6511C4B29056297F662527766C8DCAF7D6CEF453A67100024FE12D2241FEB89E0872F1

Function 00F63966 Relevance: 6.0, APIs: 4, Instructions: 29COMMONLIBRARYCODE

Download Yara Rule

APIs

WriteConsoleW.KERNEL32(00000000,0000000C,00000000,00000000,00000000,?,00F62877,00000000,00000001,00000000,7622F550,?,00F5A1AD,7622F550,00000000,00000000), ref: 00F6397D
GetLastError.KERNEL32(?,00F62877,00000000,00000001,00000000,7622F550,?,00F5A1AD,7622F550,00000000,00000000,7622F550,7622F550,?,00F5A734,00000000), ref: 00F63989

Part of subcall function 00F6394F: CloseHandle.KERNEL32(FFFFFFFE,00F63999,?,00F62877,00000000,00000001,00000000,7622F550,?,00F5A1AD,7622F550,00000000,00000000,7622F550,7622F550), ref: 00F6395F

___initconout.LIBCMT ref: 00F63999

Part of subcall function 00F63911: CreateFileW.KERNEL32(CONOUT$,40000000,00000003,00000000,00000003,00000000,00000000,00F63940,00F62864,7622F550,?,00F5A1AD,7622F550,00000000,00000000,7622F550), ref: 00F63924

WriteConsoleW.KERNEL32(00000000,0000000C,00000000,00000000,?,00F62877,00000000,00000001,00000000,7622F550,?,00F5A1AD,7622F550,00000000,00000000,7622F550), ref: 00F639AE

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast___initconout
String ID:
API String ID: 2744216297-0
Opcode ID: 21cb194b3ae4348e8df3402ebe83a5e37f4f27d0cd0e86ec6db374de4c36a27b
Instruction ID: aecf0955c8c1ada48dfcfa57297df0c76f9f82fce58f2d1bed3b8667b562f5b6
Opcode Fuzzy Hash: 21cb194b3ae4348e8df3402ebe83a5e37f4f27d0cd0e86ec6db374de4c36a27b
Instruction Fuzzy Hash: CEF01C3640012CBBCF221FD5DC08A8A7F66FB197B1B004410FA2995231CA728920FB91

Function 00F4D1A7 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 112COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32(00000000,?), ref: 00F4D1CC

Strings

RCC, xrefs: 00F4D1E6
MOC, xrefs: 00F4D1DE

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: EncodePointer
String ID: MOC$RCC
API String ID: 2118026453-2084237596
Opcode ID: 0ef695aff70cb337079d55eb77d91465159fa06af81cd4dfa8fccd9dee08805e
Instruction ID: 8ae6631896e39b087b25b463bd4db099ebd21eaef41326a0237680f25cffe777
Opcode Fuzzy Hash: 0ef695aff70cb337079d55eb77d91465159fa06af81cd4dfa8fccd9dee08805e
Instruction Fuzzy Hash: A1414671900209AFDF16DF94CC81AEEBBB5BF48314F188059FD15A6221D379DA50EBA1

Function 00F46AB5 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 73COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00F46B3D
RaiseException.KERNEL32(?,?,?,?,?), ref: 00F46B62

Part of subcall function 00F4AD9B: RaiseException.KERNEL32(E06D7363,00000001,00000003,00F41365,?,?,?,?,00F41365,?,00F70B30), ref: 00F4ADFB

Part of subcall function 00F4DD93: IsProcessorFeaturePresent.KERNEL32(00000017,00F4F12B,?,?,?,?,00000000,00F508D9,?,?,?), ref: 00F4DDAF

Strings

csm, xrefs: 00F46AF1

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: ExceptionRaise$FeaturePresentProcessor__alloca_probe_16
String ID: csm
API String ID: 1924019822-1018135373
Opcode ID: 26381022cf7ba5de6dc118354e17e2e928af31adb8750a07511dd03d39869708
Instruction ID: cafe7f77cbd2ecedf0e1fac9c163f48a1377bea9455f3e8893c11d0d3eab8e8e
Opcode Fuzzy Hash: 26381022cf7ba5de6dc118354e17e2e928af31adb8750a07511dd03d39869708
Instruction Fuzzy Hash: F8219031E00218ABCF24DF95DD459EEBBB8EF41725F140419EC05EB261CB74AD45EB82

Function 00F4175B Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 33COMMONLIBRARYCODE

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00F41762
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 00F4179A

Part of subcall function 00F488C0: _Yarn.LIBCPMT ref: 00F488DF
Part of subcall function 00F488C0: _Yarn.LIBCPMT ref: 00F48903

Strings

bad locale name, xrefs: 00F417A8

Memory Dump Source

Source File: 00000000.00000002.2182141814.0000000000F41000.00000020.00000001.01000000.00000003.sdmp, Offset: 00F40000, based on PE: true

Associated: 00000000.00000002.2182128936.0000000000F40000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182162761.0000000000F66000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182178837.0000000000F72000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182195232.0000000000F80000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182209033.0000000000F81000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182233900.0000000000F83000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2182248216.0000000000F87000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_f40000_juwXcVX5AK.jbxd

Similarity

API ID: Yarnstd::_$Locinfo::_Locinfo_ctorLockitLockit::_
String ID: bad locale name
API String ID: 1908188788-1405518554
Opcode ID: ab7d5421077ec47166c882215cb96ba8e8d06205f8466139a86f8dfc32783eb8
Instruction ID: 514b91485a8590bac09cef3786c2c5d994adf3297d73ad8083721e4a20ada610
Opcode Fuzzy Hash: ab7d5421077ec47166c882215cb96ba8e8d06205f8466139a86f8dfc32783eb8
Instruction Fuzzy Hash: 21F01D71949B409E83319F6A9881447FFE4BE292613908A2EE5DEC3A11D774E404DB6A

Analysis Process: MSBuild.exePID: 6812, Parent PID: 6244COMMON

Executed Functions

Function 01060848 Relevance: 11.3, Strings: 7, Instructions: 2508COMMON

Download Yara Rule

Strings

b6K, xrefs: 010608C4
Pa, xrefs: 01060DE3
K$S , xrefs: 01060A78
;(:, xrefs: 01060959
K(:, xrefs: 0106099F
tmB, xrefs: 01062F70
>%kl, xrefs: 0106192D

Memory Dump Source

Source File: 00000004.00000002.2153229959.0000000001060000.00000040.00000800.00020000.00000000.sdmp, Offset: 01060000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_1060000_MSBuild.jbxd

Similarity

API ID:
String ID: ;(:$>%kl$K$S $K(:$Pa$b6K$tmB
API String ID: 0-2931068315
Opcode ID: d5b601b57710fd17b529664352e3e721bbccc56d18cc3790c794dd371b23c04e
Instruction ID: 6e907dc299a68ce76b28b61b9f04f2a7ca010e4fdb2f232d0fcd59932597d4ae
Opcode Fuzzy Hash: d5b601b57710fd17b529664352e3e721bbccc56d18cc3790c794dd371b23c04e
Instruction Fuzzy Hash: 85538F78E012198FCB65CF69C984A9DBBF5EB48304F1481EAE859E7355E730AE85CF40

Function 010642E8 Relevance: 10.7, Strings: 6, Instructions: 3155COMMON

Download Yara Rule

Strings

H, xrefs: 01065716
4p, xrefs: 0106431B
6I(k, xrefs: 01064484
uZD, xrefs: 010653E5
qul}, xrefs: 010644D1
7qs, xrefs: 01064D3C

Memory Dump Source

Source File: 00000004.00000002.2153229959.0000000001060000.00000040.00000800.00020000.00000000.sdmp, Offset: 01060000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_1060000_MSBuild.jbxd

Similarity

API ID:
String ID: 4p$6I(k$7qs$qul}$uZD$H
API String ID: 0-287120464
Opcode ID: bf0327336e0522b7baa5cc3ee66a5904a8b0099fddb62a268dc2e762b463aa27
Instruction ID: c0e14820dbcf3d0ece0d7a97ca63f0409736e10f814bc9bae8e0ae894821c909
Opcode Fuzzy Hash: bf0327336e0522b7baa5cc3ee66a5904a8b0099fddb62a268dc2e762b463aa27
Instruction Fuzzy Hash: 87739178E012198FCB64CF68C984A9DBBF5BB49304F1481EAE959E7355E730AE85CF40

Function 01069A30 Relevance: 7.1, Strings: 5, Instructions: 888COMMON

Download Yara Rule

Strings

(jgA, xrefs: 01069C51
lv, xrefs: 01069AA4
(x, xrefs: 0106A517
g2%, xrefs: 01069FA7
E"W, xrefs: 0106A327

Memory Dump Source

Source File: 00000004.00000002.2153229959.0000000001060000.00000040.00000800.00020000.00000000.sdmp, Offset: 01060000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_1060000_MSBuild.jbxd

Similarity

API ID:
String ID: (jgA$(x$E"W$lv$g2%
API String ID: 0-1174055530
Opcode ID: 5eb6568a1843e1ef67016a56523a29417f28c460064e73b1c426b5b74ae469cc
Instruction ID: 62af460a69c99a4544640df8d91cf5785d6a8825614d5b352480b42ef3dff263
Opcode Fuzzy Hash: 5eb6568a1843e1ef67016a56523a29417f28c460064e73b1c426b5b74ae469cc
Instruction Fuzzy Hash: AA92E274E00219CFCB54DFA9C980B9DBBF5BF89304F1485AAE459E7355E730AA828F50

Function 010606FF Relevance: 5.4, Strings: 4, Instructions: 445COMMON

Download Yara Rule

Strings

b6K, xrefs: 010608C4
K$S , xrefs: 01060A78
;(:, xrefs: 01060959
K(:, xrefs: 0106099F

Memory Dump Source

Source File: 00000004.00000002.2153229959.0000000001060000.00000040.00000800.00020000.00000000.sdmp, Offset: 01060000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_1060000_MSBuild.jbxd

Similarity

API ID:
String ID: ;(:$K$S $K(:$b6K
API String ID: 0-896138553
Opcode ID: 869c4d65bbaa69dbd7ed41350909d248b7cb304eabb1d7807a1d7141cab49f83
Instruction ID: 8f675fcdc03e7acbc6fd3b6973754bd3f59636454a67eba8fd3f99320b4c7b27
Opcode Fuzzy Hash: 869c4d65bbaa69dbd7ed41350909d248b7cb304eabb1d7807a1d7141cab49f83
Instruction Fuzzy Hash: A2124934E052488FCB45DFA8C49099DBFF5EF89304B1581AAD545DB366EB30ED46CB90

Function 01063108 Relevance: 1.6, Strings: 1, Instructions: 307COMMON

Download Yara Rule

Strings

-x, xrefs: 010631A5

Memory Dump Source

Source File: 00000004.00000002.2153229959.0000000001060000.00000040.00000800.00020000.00000000.sdmp, Offset: 01060000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_1060000_MSBuild.jbxd

Similarity

API ID:
String ID: -x
API String ID: 0-1059959070
Opcode ID: fcae5e8d32c9138320ba609d1f676396cb9b41e5d82d30753c2667ae135dc3a1
Instruction ID: bf6100aac87b69ac7b0e49cdca878834eddceb831fb33bd04e96a0b949281934
Opcode Fuzzy Hash: fcae5e8d32c9138320ba609d1f676396cb9b41e5d82d30753c2667ae135dc3a1
Instruction Fuzzy Hash: CAD1C178A00209CFDB54CFA8D984A9DBBF6FB48304F14856AE459EB395D734E942CF80

Function 01068488 Relevance: 1.7, Strings: 1, Instructions: 458COMMON

Download Yara Rule

Strings

Ds, xrefs: 010686F9

Memory Dump Source

Source File: 00000004.00000002.2153229959.0000000001060000.00000040.00000800.00020000.00000000.sdmp, Offset: 01060000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_1060000_MSBuild.jbxd

Similarity

API ID:
String ID: Ds
API String ID: 0-1726540861
Opcode ID: 3549703b4dd7f8a43df59a06ae544c033a2a8f47cae2e1b8c447baeac1b507d8
Instruction ID: 6774ef0562bf54f1f05311ca1b355571418894f04da9681a5ef81f000db9f980
Opcode Fuzzy Hash: 3549703b4dd7f8a43df59a06ae544c033a2a8f47cae2e1b8c447baeac1b507d8
Instruction Fuzzy Hash: 03715C30A006068FCB15DF6CD880999BBB1FF85314B19C75AD155EB3A6CB31ED86CB94

Function 0106A424 Relevance: 1.4, Strings: 1, Instructions: 106COMMON

Download Yara Rule

Strings

(x, xrefs: 0106A517

Memory Dump Source

Source File: 00000004.00000002.2153229959.0000000001060000.00000040.00000800.00020000.00000000.sdmp, Offset: 01060000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_1060000_MSBuild.jbxd

Similarity

API ID:
String ID: (x
API String ID: 0-3979080048
Opcode ID: 02b3375831e907ddb83515d56f24acbc0f29cd3b89bdbc60f9fcb8793f54ccde
Instruction ID: 406a4fad9860e75c2399b4eb42608ad632927010a77e1f6af054d0a6b4f5f1c5
Opcode Fuzzy Hash: 02b3375831e907ddb83515d56f24acbc0f29cd3b89bdbc60f9fcb8793f54ccde
Instruction Fuzzy Hash: 3F411A30B043458FC702EF78D8949AABBF5EFC5300B15C6A6D445DB2A6EB34E846CB51

Function 01068A3C Relevance: .4, Instructions: 444COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2153229959.0000000001060000.00000040.00000800.00020000.00000000.sdmp, Offset: 01060000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_1060000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed209d57ce7adeab99469825174fd30921ac7b7b84f85ecd1a8dc6f7817a4dc8
Instruction ID: 04e3c4ca34d028135a6862e9754636b41888f8cb713d692342699282c739106c
Opcode Fuzzy Hash: ed209d57ce7adeab99469825174fd30921ac7b7b84f85ecd1a8dc6f7817a4dc8
Instruction Fuzzy Hash: 72218631D05288DFCF06EBB8D9805DDBFF6AF9A310F5481ABD541AB252C6311D05CB61

Function 01069078 Relevance: .4, Instructions: 376COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2153229959.0000000001060000.00000040.00000800.00020000.00000000.sdmp, Offset: 01060000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_1060000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa40e52904c77c1e102f51f9862acab28ca3e201267104f2ed7f2f7932794861
Instruction ID: 94dcd54a0bd0210de20172798d63cb9f831aa31321b360ef7526fd2f631262f3
Opcode Fuzzy Hash: aa40e52904c77c1e102f51f9862acab28ca3e201267104f2ed7f2f7932794861
Instruction Fuzzy Hash: 1BE17C74A002058FDB14CF98D894A9ABBF5FF89308F15856AD449EB396DB34ED46CF80

Function 010695B9 Relevance: .2, Instructions: 250COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2153229959.0000000001060000.00000040.00000800.00020000.00000000.sdmp, Offset: 01060000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_1060000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c4319ae2243a3826e0d3f6c038f974f24d0642ab5d9d6a8110a9e0bec16731a0
Instruction ID: 46e234aac5362cba9fca77065a6f5393fe4501e10798dd6fbdd501fb9c42c703
Opcode Fuzzy Hash: c4319ae2243a3826e0d3f6c038f974f24d0642ab5d9d6a8110a9e0bec16731a0
Instruction Fuzzy Hash: 50A19070A00606CFCB15DFACD88099DB7B1FF85314B198669E159DB7A6DB31EC82CB84

Function 01063680 Relevance: .2, Instructions: 187COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2153229959.0000000001060000.00000040.00000800.00020000.00000000.sdmp, Offset: 01060000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_1060000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b35906811c07716b2b8352696946c9c15fe7d2e1f11d60549cc78f32bad9184f
Instruction ID: 461a69c47f9d150fa4e005219a5b683be2b96de937717e658080a5149ea3aa5b
Opcode Fuzzy Hash: b35906811c07716b2b8352696946c9c15fe7d2e1f11d60549cc78f32bad9184f
Instruction Fuzzy Hash: 0E818F71A006068FDB26DF6CD94499DBBF1FF883047148659D096EB2A6D730ED86CF90

Function 0106A770 Relevance: .1, Instructions: 128COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2153229959.0000000001060000.00000040.00000800.00020000.00000000.sdmp, Offset: 01060000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_1060000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b4b2a55d987427dff6b857390cd527cc93505fb82fc216bca698ff3f58adcc30
Instruction ID: d8b75158b45ac5b42ab3947be38381b79df9179d7995725a196f39a87ea3a28f
Opcode Fuzzy Hash: b4b2a55d987427dff6b857390cd527cc93505fb82fc216bca698ff3f58adcc30
Instruction Fuzzy Hash: 4A514571E00319CFDB14EFA9D98079EBBF9BF88710F14812AD459BB240DB74A946CB91

Function 01063938 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2153229959.0000000001060000.00000040.00000800.00020000.00000000.sdmp, Offset: 01060000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_1060000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5ca1bdf867d2a638815bd8584675afeacfc34ec99938f9587e9cc76a685391f6
Instruction ID: a62682575e0e473b7d99451fb5f452b02e9b44d7a9bbdf45df0e451071577473
Opcode Fuzzy Hash: 5ca1bdf867d2a638815bd8584675afeacfc34ec99938f9587e9cc76a685391f6
Instruction Fuzzy Hash: E231F731D00209CFCF05CBA8D8849DEFBB5AF44310F14826AD452BB291DF70690ACB91

Function 0106A920 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2153229959.0000000001060000.00000040.00000800.00020000.00000000.sdmp, Offset: 01060000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_1060000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a1b0419f081de7ef169bddd2a301e6f1025d7c308786db7eae63c8eb6812e5ed
Instruction ID: 6d71bd0d6013dcbdc52575559db43eedde1ddc486f9e0703793de6de5dd3deb1
Opcode Fuzzy Hash: a1b0419f081de7ef169bddd2a301e6f1025d7c308786db7eae63c8eb6812e5ed
Instruction Fuzzy Hash: 593128B5E01259DFDB14DFAAD940ADEBBF9BF88310F24802AE545B7240DB746845CB60

Function 0106A915 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2153229959.0000000001060000.00000040.00000800.00020000.00000000.sdmp, Offset: 01060000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_1060000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbb4982cbc99893e676c6e283ec606cb9143b53d33d331415ff602f5c5f4ea88
Instruction ID: 95f75efe611124e86d4884a9c04e17d484495c3d2d94781b3cb4f7f84ef63471
Opcode Fuzzy Hash: dbb4982cbc99893e676c6e283ec606cb9143b53d33d331415ff602f5c5f4ea88
Instruction Fuzzy Hash: C82124B4E01249DFDB14DFAAC984B9EBFF9AF48310F24805AE585B7240DB74A845CB60

Function 01062FD3 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2153229959.0000000001060000.00000040.00000800.00020000.00000000.sdmp, Offset: 01060000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_1060000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0853f1aaaf64825af3a0c6bfba75f0b5a5a5b62d419a15d7964183753888d28b
Instruction ID: f4432739892d6460bb22507b01601c734160a1e9212eee22fd1712cdd3ef31a9
Opcode Fuzzy Hash: 0853f1aaaf64825af3a0c6bfba75f0b5a5a5b62d419a15d7964183753888d28b
Instruction Fuzzy Hash: C7110335A0425A8FCF02DB68C8545DCBB75FF82324F1541EAD055AB1E2DB31A95FCB90

Function 01068D38 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2153229959.0000000001060000.00000040.00000800.00020000.00000000.sdmp, Offset: 01060000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_1060000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fca19697a1ce4d2ad38101c8e956d32ae6cd7adab46c80ba80e0464db61ebcf7
Instruction ID: 8a57b0c7e762be20275ef4d80ff7d6becc4e2742551997a9610f0dd4c667410f
Opcode Fuzzy Hash: fca19697a1ce4d2ad38101c8e956d32ae6cd7adab46c80ba80e0464db61ebcf7
Instruction Fuzzy Hash: 01215C31E01208EFCF05EFB9D9809DEBFF6AF99700F548566D502B7252DA316D448B61

Function 0106949A Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2153229959.0000000001060000.00000040.00000800.00020000.00000000.sdmp, Offset: 01060000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_1060000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 935e9aefde5c05b34db2fb7e0677a68cd8fdefa9e7f1d6fd1d8038e683002915
Instruction ID: c5b0b8bc238d45e6914ec513e410d7c175b2f3c272d39ea7abfa7793b491eaa1
Opcode Fuzzy Hash: 935e9aefde5c05b34db2fb7e0677a68cd8fdefa9e7f1d6fd1d8038e683002915
Instruction Fuzzy Hash: B411E331D043458FCB02CFA8D8D08DDBBB4EF46324B1946A6D150EB2E2DB34AD0ACB50

Function 01063930 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2153229959.0000000001060000.00000040.00000800.00020000.00000000.sdmp, Offset: 01060000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_1060000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 41c7c24c1290c507114f959edd1c653610749264dac25751c74e5d3ec7b0f7e0
Instruction ID: 77a83b24d24799e153568f495319aa15d6202864f9d831da0beaf3a6805a8af7
Opcode Fuzzy Hash: 41c7c24c1290c507114f959edd1c653610749264dac25751c74e5d3ec7b0f7e0
Instruction Fuzzy Hash: 3D118231D002098FCB15CF99E8C09DEF7B5FB48310F15C266D565A7291D770A94ACFA4

Function 00DFD035 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2144692755.0000000000DFD000.00000040.00000800.00020000.00000000.sdmp, Offset: 00DFD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_dfd000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dd2df5ca6eac3ffbf33f2eefce7c3b03b5fe642688d83804b148dae53d48aae8
Instruction ID: dd0faa70a22be02eef6c078c9828e21bbca1e6d55186bc88c1a6f4134df776c1
Opcode Fuzzy Hash: dd2df5ca6eac3ffbf33f2eefce7c3b03b5fe642688d83804b148dae53d48aae8
Instruction Fuzzy Hash: 4001F7714043489AE7105E25C984737BF9ADF81364F18C41AEF080E282CA79D845C672

Function 00DFD034 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2144692755.0000000000DFD000.00000040.00000800.00020000.00000000.sdmp, Offset: 00DFD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_dfd000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d390ae93e6c0f6d6f68438b8ed1bbb63cae57c177a04255793567d65ebd307d0
Instruction ID: 596e6f827b52f9a1c0c87091f729de9b59fbe0b05850cf6e3367873a8e72a231
Opcode Fuzzy Hash: d390ae93e6c0f6d6f68438b8ed1bbb63cae57c177a04255793567d65ebd307d0
Instruction Fuzzy Hash: 90F0C2714053449EE7108E15C884B62FF99EB91724F18C45AEE080E286C779A845CB71

Function 01068E18 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2153229959.0000000001060000.00000040.00000800.00020000.00000000.sdmp, Offset: 01060000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_1060000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f0798bde5a41a0ce5fce01ce941799820149c0a9abaebe342ba2a6ea9ab66fec
Instruction ID: 09489b7babf744f53b794767812edda3a919cce40dd81b311033bd8b29d01c5d
Opcode Fuzzy Hash: f0798bde5a41a0ce5fce01ce941799820149c0a9abaebe342ba2a6ea9ab66fec
Instruction Fuzzy Hash: 63F0273280E3E02FC7039778EC0098ABF649F03220B1A459BE5D5976F3C621A886C382

Function 01069468 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2153229959.0000000001060000.00000040.00000800.00020000.00000000.sdmp, Offset: 01060000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_1060000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 48390cb6473c9b627834c2d9c27ae3d811bf142b96d595cbf08db4a20f0bdd1c
Instruction ID: 96a18cee38e23cd5bf83982e9d190b7b37ff6b04050ef4b797794a05811e7217
Opcode Fuzzy Hash: 48390cb6473c9b627834c2d9c27ae3d811bf142b96d595cbf08db4a20f0bdd1c
Instruction Fuzzy Hash: 66C04C30544164CFF7359B65E928F9D7671BB44205F109995C185E2570CFB089C6DF31

Analysis Process: Honda.exePID: 4040, Parent PID: 6812COMMON

Executed Functions

Function 01192788 Relevance: 2.0, Instructions: 2015COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2154371280.0000000001190000.00000040.00000800.00020000.00000000.sdmp, Offset: 01190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1190000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0f71084ed517ffd848578daac22b2428372362452aaf6899262e20f189abcebf
Instruction ID: d75eb49a9db85b6409a688fbed883d1045f67bac568297d009793365be0d9d54
Opcode Fuzzy Hash: 0f71084ed517ffd848578daac22b2428372362452aaf6899262e20f189abcebf
Instruction Fuzzy Hash: D903BF31A00719DFDB2ADF64CC44B99BBB6FFC9700F518695E6086B295DBB06E81CB40

Function 01195A41 Relevance: .4, Instructions: 437COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2154371280.0000000001190000.00000040.00000800.00020000.00000000.sdmp, Offset: 01190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1190000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1bffc09228ee7470a8cded691d5e47855fa411c5cbbd15a43acc420d33e5551d
Instruction ID: 8b3286d9349596442882aabe27dd2903edc0b97d2cb6af609b4c66506ace2205
Opcode Fuzzy Hash: 1bffc09228ee7470a8cded691d5e47855fa411c5cbbd15a43acc420d33e5551d
Instruction Fuzzy Hash: CCF1A130A00205DFDB69DF68D994B6EBBF3BF89304F14842AD525AB395DB71AC41CB50

Function 01194C69 Relevance: 1.7, Strings: 1, Instructions: 420COMMON

Download Yara Rule

Strings

(!, xrefs: 01194F5C

Memory Dump Source

Source File: 00000008.00000002.2154371280.0000000001190000.00000040.00000800.00020000.00000000.sdmp, Offset: 01190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1190000_Honda.jbxd

Similarity

API ID:
String ID: (!
API String ID: 0-1529786712
Opcode ID: 26941edcc1a702275df8c25ff3c1189f6827a52ef1af77cc5bc01b92ab73d725
Instruction ID: 7c642ce4d18670931665728bb221a146915be9f766631884bfa2b42c0d150f88
Opcode Fuzzy Hash: 26941edcc1a702275df8c25ff3c1189f6827a52ef1af77cc5bc01b92ab73d725
Instruction Fuzzy Hash: 0D21C071A082598FDF09DBB9C5586AEBFF2FF89300F1540A9C451BB384DB345815CBA2

Function 01194F48 Relevance: 1.3, Strings: 1, Instructions: 56COMMON

Download Yara Rule

Strings

(!, xrefs: 01194F5C

Memory Dump Source

Source File: 00000008.00000002.2154371280.0000000001190000.00000040.00000800.00020000.00000000.sdmp, Offset: 01190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1190000_Honda.jbxd

Similarity

API ID:
String ID: (!
API String ID: 0-1529786712
Opcode ID: 9e322fd3c61716627268de3a0c30551ca3975a610095682016c0d34b52510e42
Instruction ID: 5e7500800aa5f6faa145b3783830ddbd04064398e1e2f2c68c9e439db7275af6
Opcode Fuzzy Hash: 9e322fd3c61716627268de3a0c30551ca3975a610095682016c0d34b52510e42
Instruction Fuzzy Hash: 62119071A042598FEF08EBBAC5587AE7BF2BF88300F544029D511B7384DF3999018BA2

Function 01194868 Relevance: .2, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2154371280.0000000001190000.00000040.00000800.00020000.00000000.sdmp, Offset: 01190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1190000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1c9b1bac836badf8834ca01f2e12f5c60778b592edc36869f5b5010e24dbb879
Instruction ID: 5724b03d4d7cbd87f8a5bfe636e8946244a72082acf89404f39fad40b54ab331
Opcode Fuzzy Hash: 1c9b1bac836badf8834ca01f2e12f5c60778b592edc36869f5b5010e24dbb879
Instruction Fuzzy Hash: B9A15B34200A05CFCB19DF18C594A69BBF2FF85300F46C5A9D05A9BA22E774FD89CB84

Function 01191063 Relevance: .2, Instructions: 219COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2154371280.0000000001190000.00000040.00000800.00020000.00000000.sdmp, Offset: 01190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1190000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b3c950bd2d0f763071566b400c5864b2f40a95fa62a25d81779c57c947188b17
Instruction ID: b197d8910317d1de16f44ac6f890927155da43485e3d87bb12530c53a01db2bc
Opcode Fuzzy Hash: b3c950bd2d0f763071566b400c5864b2f40a95fa62a25d81779c57c947188b17
Instruction Fuzzy Hash: E4916CB5E002099FDF19DFE5D8849EEBBFAFF88300F14802AE515A7258DB359945CB50

Function 01195E28 Relevance: .2, Instructions: 182COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2154371280.0000000001190000.00000040.00000800.00020000.00000000.sdmp, Offset: 01190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1190000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 706fbc12ac2f1395b3040056640272529930c832d0d28eea4995c4a2113ef465
Instruction ID: 055703759e53f4a3f1f89cc94def87c9e80e92c6b9a498b1d3f2f132125a791b
Opcode Fuzzy Hash: 706fbc12ac2f1395b3040056640272529930c832d0d28eea4995c4a2113ef465
Instruction Fuzzy Hash: 52618F31B002199FDB19DF68D894BAEBBF2BF88710F148066E515EB395DB319C41CBA0

Function 011917C8 Relevance: .2, Instructions: 154COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2154371280.0000000001190000.00000040.00000800.00020000.00000000.sdmp, Offset: 01190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1190000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3d10e0aca217abd0f910525d98aaa59de9b7f03e10771e44eaf3eb7aef6d1956
Instruction ID: 4e2d48b186ceb5af1ac93c8a3ea421da46419a86a0043a74d3b3e14f877d4bbe
Opcode Fuzzy Hash: 3d10e0aca217abd0f910525d98aaa59de9b7f03e10771e44eaf3eb7aef6d1956
Instruction Fuzzy Hash: 0551AE71E0020A9FDF09DFA9A8146EEBFB2FFC5210F1480BAD469E7255EB344945CB91

Function 01191CC0 Relevance: .1, Instructions: 119COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2154371280.0000000001190000.00000040.00000800.00020000.00000000.sdmp, Offset: 01190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1190000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 760ad5edc0d833017e925cfd751ac301b5b131f175aa31e7d2ce592c7e373448
Instruction ID: 0c2f941fb305011b49324de43e3deffb55175f4d76c1781efabbe515a1573f8e
Opcode Fuzzy Hash: 760ad5edc0d833017e925cfd751ac301b5b131f175aa31e7d2ce592c7e373448
Instruction Fuzzy Hash: 3B41C134A002069FCB1DEF68E8849AE7BF2FFC9310B118169E419DB369DB349D45CB50

Function 01190848 Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2154371280.0000000001190000.00000040.00000800.00020000.00000000.sdmp, Offset: 01190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1190000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 457667f470390d13205feb622452ef6bafd344b20f389ffbc03fbd62e0db9206
Instruction ID: 8686afd8ab309719202d0f702db7d1846363e7640d69f72c499c0e2de2c0955f
Opcode Fuzzy Hash: 457667f470390d13205feb622452ef6bafd344b20f389ffbc03fbd62e0db9206
Instruction Fuzzy Hash: 7F419030A00209DFDB09EBBCE45479DBBB2FF88304F118169E215AB354EB759D45CB91

Function 01191CBB Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2154371280.0000000001190000.00000040.00000800.00020000.00000000.sdmp, Offset: 01190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1190000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 06034b01a611996fdfa81ceb8b905fe6e31c11ccb3f7c7d30540822743524056
Instruction ID: b388e9b4cbeb68b85f4de134d5093dfa23b0727bc08caecb954d52e1bf8ccf9f
Opcode Fuzzy Hash: 06034b01a611996fdfa81ceb8b905fe6e31c11ccb3f7c7d30540822743524056
Instruction Fuzzy Hash: 9D315C35A00105DFDB1DEF28E8889AE77F6FF88311B118569E425DB368DB30AD45CB50

Function 01192777 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2154371280.0000000001190000.00000040.00000800.00020000.00000000.sdmp, Offset: 01190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1190000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1017f8f70d43b3c1562ba7273f33e121708369b90bf68728148e13fe2372118b
Instruction ID: 0849903f7cb0135a0319f8e5e2f885269992f860810a4fb254644347eef537a5
Opcode Fuzzy Hash: 1017f8f70d43b3c1562ba7273f33e121708369b90bf68728148e13fe2372118b
Instruction Fuzzy Hash: 3F31F131A01244EFDB2CCFA9D944BA97BF6EF49311F0984B9E425CB295D738D884CB60

Function 01191B68 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2154371280.0000000001190000.00000040.00000800.00020000.00000000.sdmp, Offset: 01190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1190000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8928aca5cc6dd8c41ab5ad68c609c9786342b13c8dc9111531a14a7ae62eed9c
Instruction ID: f96eeec4c6638f6c5ae0da5ad72e7c359bb027902c99deabd1f0b1943dbf45a8
Opcode Fuzzy Hash: 8928aca5cc6dd8c41ab5ad68c609c9786342b13c8dc9111531a14a7ae62eed9c
Instruction Fuzzy Hash: 02317C71B01116CFCB48EB78D49886DBBB2EF4971171004A9D91ADF361DB36EC42CB80

Function 01190838 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2154371280.0000000001190000.00000040.00000800.00020000.00000000.sdmp, Offset: 01190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1190000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ba87b62cdbd2b4844ecbbfa4d7fbe0eb69fa5ebec7d8e219acb0ab6df53c4926
Instruction ID: d254f2f3547e1dacf53b6543d937f14523008fdae4218cdd86bff61951987ab4
Opcode Fuzzy Hash: ba87b62cdbd2b4844ecbbfa4d7fbe0eb69fa5ebec7d8e219acb0ab6df53c4926
Instruction Fuzzy Hash: 83315E70A00249DFDB09EBACE484A9DBFB2FF88304F549129E114AB355DB759C8ACB51

Function 01191B78 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2154371280.0000000001190000.00000040.00000800.00020000.00000000.sdmp, Offset: 01190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1190000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7719c6d59fae3f8135f349bb981424fb678faa41ec57c33628ccfdf94b3e3bf2
Instruction ID: c4f1144d4fa3d9621079f0a633f50f7374345e49c643fde46ba6bef3d0262d42
Opcode Fuzzy Hash: 7719c6d59fae3f8135f349bb981424fb678faa41ec57c33628ccfdf94b3e3bf2
Instruction Fuzzy Hash: 5C211A74B00116CFCB48EF79C49896DBBF2AF48711B6144A9D91ADB361DB36DC42CB80

Function 01196060 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2154371280.0000000001190000.00000040.00000800.00020000.00000000.sdmp, Offset: 01190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1190000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 888f4c5a5b566a26a9e523d5f90aa5915c0af641bc2a022b6579cdd2c414cf6c
Instruction ID: 468561d3183fe1960749db8ffb3c6a25a98e801a2478e6b1cf6d3ee984f090e2
Opcode Fuzzy Hash: 888f4c5a5b566a26a9e523d5f90aa5915c0af641bc2a022b6579cdd2c414cf6c
Instruction Fuzzy Hash: 4F11E0719042499FCB29DF38A4487AE7FB6EFCA314F0545AED0549B282CB710815C760

Function 01195218 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2154371280.0000000001190000.00000040.00000800.00020000.00000000.sdmp, Offset: 01190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1190000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 40b559605bd979db73aa4ebc2c0e3b9aa0500b558834f34f50f4b9d468b76aab
Instruction ID: 71b188c6beeade2ef3bd3d0bad9cbede2eae7d16f11f360ad85642132ff04357
Opcode Fuzzy Hash: 40b559605bd979db73aa4ebc2c0e3b9aa0500b558834f34f50f4b9d468b76aab
Instruction Fuzzy Hash: 6201A772700221CFC7199B3DE84881ABBBAEF8A75531641F6E405DB375CE31EC018B90

Function 01190A98 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2154371280.0000000001190000.00000040.00000800.00020000.00000000.sdmp, Offset: 01190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1190000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0adee2db258c4a7e48912d9c492cc6b1c5c8f28bb8dbf3a36c6dfc736a5e2575
Instruction ID: f384a234b003567a2062a83021b22f840855789ff646b85c09dd3826865ab5b6
Opcode Fuzzy Hash: 0adee2db258c4a7e48912d9c492cc6b1c5c8f28bb8dbf3a36c6dfc736a5e2575
Instruction Fuzzy Hash: FC01A7347043408FEB186B79E8586593BAAFB49714F0405BCE615C7398DF699884C790

Function 01195228 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2154371280.0000000001190000.00000040.00000800.00020000.00000000.sdmp, Offset: 01190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1190000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9859c9613b6173f8768c7611b85decd53d3d05c3d54eb5efa66b3e9d812b947d
Instruction ID: 6d3eb6f8021ce4699157ce0b9549773468a8fb174d3cd36742e9af79130d2e43
Opcode Fuzzy Hash: 9859c9613b6173f8768c7611b85decd53d3d05c3d54eb5efa66b3e9d812b947d
Instruction Fuzzy Hash: 3AF06876710131CFC719AB3DE84491A77EADF8966131601B9E905DB365CE71EC018B90

Function 01190AA8 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2154371280.0000000001190000.00000040.00000800.00020000.00000000.sdmp, Offset: 01190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1190000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 781bfa1e968096e53a4be5888d449286b3f1099b31a2786086db23da0e6d29c5
Instruction ID: 45f5d2df269075a9b26aa24523742f0bd0970b11fbca0edd6336933c12deee0d
Opcode Fuzzy Hash: 781bfa1e968096e53a4be5888d449286b3f1099b31a2786086db23da0e6d29c5
Instruction Fuzzy Hash: 1FF0BB35B042148BEB1C6779E45836A3A9AF748750F04057CEA16C33C8DF65CC80C7D0

Function 01194B34 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2154371280.0000000001190000.00000040.00000800.00020000.00000000.sdmp, Offset: 01190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1190000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4c2374dfce26f6b18c1285462c6a7cf3301f7351346c581c719efaee0b905196
Instruction ID: 26010e24f2428ad3943419df8648375f15125042b5eb1738137be29511c0ea51
Opcode Fuzzy Hash: 4c2374dfce26f6b18c1285462c6a7cf3301f7351346c581c719efaee0b905196
Instruction Fuzzy Hash: CBF02472D09344EFCB09DBF5A8580ECBFB1EF81204B44C0DAD0A697626EBB44606CB41

Function 01190ED7 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2154371280.0000000001190000.00000040.00000800.00020000.00000000.sdmp, Offset: 01190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1190000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0109e313d8a65fbe36374f816f02ec26eb92eaa908b56f9d0c786c278895d06e
Instruction ID: f7c3b9740925acba7e32e747bd634ae9b7f3501898b5c3ef2a4046661f32a645
Opcode Fuzzy Hash: 0109e313d8a65fbe36374f816f02ec26eb92eaa908b56f9d0c786c278895d06e
Instruction Fuzzy Hash: CDF020B3A1A20ACFCB09CBA4E9860D83FB0EBA521431040AEC018AB309FBB04F01C711

Function 01195148 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2154371280.0000000001190000.00000040.00000800.00020000.00000000.sdmp, Offset: 01190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1190000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 636c5961f5a25bc8a514329e4945986147c9b25b24f9e735c4e8ede3a60d3db8
Instruction ID: e73d8471b2880f5f342ae6decaafb0671a7aba6e2d379442ca1a6bf41105c075
Opcode Fuzzy Hash: 636c5961f5a25bc8a514329e4945986147c9b25b24f9e735c4e8ede3a60d3db8
Instruction Fuzzy Hash: 23E092363011049FC718EE29F89885ABBBAEFC93617508539E55AC335DDE369C058BA0

Function 011913B0 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2154371280.0000000001190000.00000040.00000800.00020000.00000000.sdmp, Offset: 01190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1190000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a2ac74c06165f5282bc50466f47deae73616d8f7ff6287b618ca598fedaafb2f
Instruction ID: 49e6a82a22cce0b3f9f4b30175e2940a8f565ddfa1bea193f0f31e685dbf2cf4
Opcode Fuzzy Hash: a2ac74c06165f5282bc50466f47deae73616d8f7ff6287b618ca598fedaafb2f
Instruction Fuzzy Hash: 65F01778600206CFDB18EF64D198A6C7BB1EF88314F1144A8E4169F3A5CB759845CF00

Function 01190F28 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2154371280.0000000001190000.00000040.00000800.00020000.00000000.sdmp, Offset: 01190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1190000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f49e49dc8250b0661ceae2d8778ebb1cde2e86f97624048f95a2c52f1789192c
Instruction ID: 8c60999d3768de3a4abed92f3ecf9c1064e0d468fdba5ce48b2810e750c51b24
Opcode Fuzzy Hash: f49e49dc8250b0661ceae2d8778ebb1cde2e86f97624048f95a2c52f1789192c
Instruction Fuzzy Hash: 9AE0923190564EDFC705DF64E91046CBFB0EF8B30471586EAC004EB215DB701E488721

Function 01190F70 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2154371280.0000000001190000.00000040.00000800.00020000.00000000.sdmp, Offset: 01190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1190000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 64643d489188359d0aef1a744509f57101dcfd7a8941e7e83ff85cc78095795e
Instruction ID: 83ae350d99bbed35789a6a12eab2522dafd740ea46a5bc4c23308acdae991800
Opcode Fuzzy Hash: 64643d489188359d0aef1a744509f57101dcfd7a8941e7e83ff85cc78095795e
Instruction Fuzzy Hash: B7E02E3290E3508FC76A9A79FC006523BEC8B1B214B1104FBF8A9C7322E380DE0083D6

Function 01190F38 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2154371280.0000000001190000.00000040.00000800.00020000.00000000.sdmp, Offset: 01190000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_1190000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 14b87e5a4321f06685a0ce0e551c8b92a19406c325560fa9ab2c864a29153775
Instruction ID: 6fe83775d151870ad522bf73b965b9c60a7abcb6d1df95af0480dbb0edb5f487
Opcode Fuzzy Hash: 14b87e5a4321f06685a0ce0e551c8b92a19406c325560fa9ab2c864a29153775
Instruction Fuzzy Hash: B4D01271A0410DEF8B04DFA4E94155D7BF5EB84204B1045A9D408E7304EB715E009B54

Analysis Process: Honda.exePID: 2448, Parent PID: 4004COMMON

Executed Functions

Function 01432788 Relevance: 2.0, Instructions: 2000COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2265538538.0000000001430000.00000040.00000800.00020000.00000000.sdmp, Offset: 01430000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1430000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2a90f226aaaf63970d9de538e01473441ba3c62d282d116eed87d3c47202be5d
Instruction ID: 1264f3aba895cc3286d486d03c7195834486f08c497ff52d0bb4a71f0d8ab856
Opcode Fuzzy Hash: 2a90f226aaaf63970d9de538e01473441ba3c62d282d116eed87d3c47202be5d
Instruction Fuzzy Hash: 5E038130A10319DBDB26DF64CC44B9ABBB6FFC9700F518695E6086B295DBB06E81CF41

Function 01435A41 Relevance: .4, Instructions: 434COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2265538538.0000000001430000.00000040.00000800.00020000.00000000.sdmp, Offset: 01430000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1430000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 30fb50cd7eeedb2e0cc189598b33288efe99ea727652abecf1bdbe4c02577e61
Instruction ID: 06e3492a01b1250502e6336ff347d4b039dc11bf8c101c8c8f2b4500504da3e9
Opcode Fuzzy Hash: 30fb50cd7eeedb2e0cc189598b33288efe99ea727652abecf1bdbe4c02577e61
Instruction Fuzzy Hash: BEF1AD30A01205CFDB29DF69D954B6FBBB2BFC8311F14852AD5169F3A5DB31A842CB90

Function 01434C68 Relevance: .4, Instructions: 421COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2265538538.0000000001430000.00000040.00000800.00020000.00000000.sdmp, Offset: 01430000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1430000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6054bf37e836e8a265525471ee2f1f5646d36113bf38be86c814d8da055e79eb
Instruction ID: bd3d69c6af3c2c31c05fa30a57b6041466a23420259137ad9adf6a0a16fad010
Opcode Fuzzy Hash: 6054bf37e836e8a265525471ee2f1f5646d36113bf38be86c814d8da055e79eb
Instruction Fuzzy Hash: 51210575A042558FDB0AEBA9C4586EE7FF2BFCC300F5C416AC501B73A5DB3589008BA0

Function 01434868 Relevance: .2, Instructions: 225COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2265538538.0000000001430000.00000040.00000800.00020000.00000000.sdmp, Offset: 01430000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1430000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 989c4c3682049bcad8e6111e5862e59511b9a64ff991801aaa1ae68b4a0195a3
Instruction ID: e3271567dc8710e1fab90bd07d27cac044502c0cfa67c74051e0075b6dc98019
Opcode Fuzzy Hash: 989c4c3682049bcad8e6111e5862e59511b9a64ff991801aaa1ae68b4a0195a3
Instruction Fuzzy Hash: 2BA14D30600605CFCB16DF58C584AA9BBF2EF89310F4AC5AAD5459B672E770FD85CB84

Function 01431063 Relevance: .2, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2265538538.0000000001430000.00000040.00000800.00020000.00000000.sdmp, Offset: 01430000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1430000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d35f71cf1218674a5046da7b4fcbcbf0d56fbdb7d017574d1916171b70965278
Instruction ID: eb7648b0451634659bd67d45609527aaebd37bc02258bc13c6fafc479b407267
Opcode Fuzzy Hash: d35f71cf1218674a5046da7b4fcbcbf0d56fbdb7d017574d1916171b70965278
Instruction Fuzzy Hash: EB918071E00218DFDB1ADFE5D8449EEBBBABF88700F14812AE516E7254DB319946CF50

Function 01435E28 Relevance: .2, Instructions: 180COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2265538538.0000000001430000.00000040.00000800.00020000.00000000.sdmp, Offset: 01430000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1430000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d5c077f7d9a761cac3be98c7dcb681a4d4f8a0b900ed6b2c5ff21b8309b4304f
Instruction ID: cd7f330432b2feeb7288e030fd1df7f1230a5ce9de93a59f3135a855777cf83f
Opcode Fuzzy Hash: d5c077f7d9a761cac3be98c7dcb681a4d4f8a0b900ed6b2c5ff21b8309b4304f
Instruction Fuzzy Hash: FF616B34A00219DFDB15DF69D854BAEBBB2BF88711F148166E905AB3A5DB309C41CBA0

Function 014317C8 Relevance: .2, Instructions: 158COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2265538538.0000000001430000.00000040.00000800.00020000.00000000.sdmp, Offset: 01430000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1430000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b6aaad64f7d81bd2c36a78519d9ac58a4ec8fac8e5a68b252bfc075041a308ce
Instruction ID: af6ee9bde3d41c86cbc7bb6473cf61e558896ae7ec40ab1d1ea6c38e60b3319a
Opcode Fuzzy Hash: b6aaad64f7d81bd2c36a78519d9ac58a4ec8fac8e5a68b252bfc075041a308ce
Instruction Fuzzy Hash: 7251B031E003599FDB09DFA998106EEBFB2EFC9610F1484BBD519E7261EB344906CB91

Function 01431CC0 Relevance: .1, Instructions: 119COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2265538538.0000000001430000.00000040.00000800.00020000.00000000.sdmp, Offset: 01430000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1430000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 327ebd3bbaff27794c00f850a58dcac9b09016811921d501ac915e007d993de8
Instruction ID: 296b76ffd034e33658f0d53f77b0f76a16ccbf2b59ba43bba5b91714953cceb3
Opcode Fuzzy Hash: 327ebd3bbaff27794c00f850a58dcac9b09016811921d501ac915e007d993de8
Instruction Fuzzy Hash: 3941C434600205CFDB1AEF69E44899E7BB2FFC9300B10826AD515DB365EB70AD06CB90

Function 01431CB3 Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2265538538.0000000001430000.00000040.00000800.00020000.00000000.sdmp, Offset: 01430000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1430000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1b0ca33f18031a8e4d2a5f5371c9434ef1f825a2b9a53773aed9e4f98edadd80
Instruction ID: fcb69313364e5007e92ce73a376991dfe8b6b0fb67c0e7910d510ff78c6646ef
Opcode Fuzzy Hash: 1b0ca33f18031a8e4d2a5f5371c9434ef1f825a2b9a53773aed9e4f98edadd80
Instruction Fuzzy Hash: 5B41A234600205CFDB19EF29E84499A7BF2FF89311B108269D5159B375EB30AD05CF90

Function 01432777 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2265538538.0000000001430000.00000040.00000800.00020000.00000000.sdmp, Offset: 01430000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1430000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4f47d58121319ec61ab1cc32000fe32961d84093af8864267c7c40b31f7bf723
Instruction ID: 8621d598f9e9f641eade9898c81ac3ba7a78759c8f0ad589f62624b53dbc298f
Opcode Fuzzy Hash: 4f47d58121319ec61ab1cc32000fe32961d84093af8864267c7c40b31f7bf723
Instruction Fuzzy Hash: FA21D331A04304CFE729CFA9D954BAA7BF6BF89311F0885ABE415C72A1D774D944CB60

Function 01431B68 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2265538538.0000000001430000.00000040.00000800.00020000.00000000.sdmp, Offset: 01430000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1430000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 55b4e51cab90220160bf8420a1950756d0a366fda9be026a1b0c9d75caa056ed
Instruction ID: 5bafb2cf41f90fb292ea29ebdd13577a459d265d6d289a7872fc1ada09128eb9
Opcode Fuzzy Hash: 55b4e51cab90220160bf8420a1950756d0a366fda9be026a1b0c9d75caa056ed
Instruction Fuzzy Hash: EC214D71B00115CFCB48EF79D59896EB7B2AF8871171445A9D90ADB371DA36DC02CB80

Function 01430848 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2265538538.0000000001430000.00000040.00000800.00020000.00000000.sdmp, Offset: 01430000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1430000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a87cdc715f4cd603cab9a00e29841830b46a66ffa0aae45ab9f47076076fe39c
Instruction ID: 1e1a1d25e10b339d4d06b33eb8c5da55d1a138eb3b213e795b2ab6f59e6f9058
Opcode Fuzzy Hash: a87cdc715f4cd603cab9a00e29841830b46a66ffa0aae45ab9f47076076fe39c
Instruction Fuzzy Hash: AE31B630900209DFDB0AEFA9E444B8EBFB2FFC4304F509219E1156B355EB71988ACB51

Function 0143083F Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2265538538.0000000001430000.00000040.00000800.00020000.00000000.sdmp, Offset: 01430000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1430000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 732cc00f4e6f6146a7718e7579534b7c4a89116594dae4b2859e752013ace7a6
Instruction ID: f1acdd9b6840ccc84b64f039bad443b87f09b21ed368cd7c4cc35806867e1f16
Opcode Fuzzy Hash: 732cc00f4e6f6146a7718e7579534b7c4a89116594dae4b2859e752013ace7a6
Instruction Fuzzy Hash: 0C319530A01209DFDF0AEFA9E484A9DBFB2FFC4304F449219E1156B355EB719889CB51

Function 01431B78 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2265538538.0000000001430000.00000040.00000800.00020000.00000000.sdmp, Offset: 01430000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1430000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2e09f28687c3a930b01bc127a4f7bcba305645c3aaecc783a9e37f2be9a06509
Instruction ID: 870632af1ed90edfce4d802e52ad497c9293e92590faf4fa9bd7fdc3746d4a26
Opcode Fuzzy Hash: 2e09f28687c3a930b01bc127a4f7bcba305645c3aaecc783a9e37f2be9a06509
Instruction Fuzzy Hash: 61211D70B00116CFCB58EF79C49896EB7B2AF49B11B6045A9D906DB371DB35DC02CB80

Function 01436060 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2265538538.0000000001430000.00000040.00000800.00020000.00000000.sdmp, Offset: 01430000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1430000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8c897eef0d331d6b53823ccb18290d6406dcf38bc89c54e45d22d602088c28e5
Instruction ID: 21dabfd2d4c58c7753a8c7ca8b211eebdbe931ecf1531b932fb872e5c14d31f8
Opcode Fuzzy Hash: 8c897eef0d331d6b53823ccb18290d6406dcf38bc89c54e45d22d602088c28e5
Instruction Fuzzy Hash: 631102B1D04349AFCB69DB3898187AF7FB6EBC6214F1541BFD018AB292DB7109058751

Function 01434F48 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2265538538.0000000001430000.00000040.00000800.00020000.00000000.sdmp, Offset: 01430000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1430000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2eef28b9cb4e3094f43ea2058d97e2128eec856a83a28608b3aa8d651cce14c2
Instruction ID: da1d36eb93096f92be161bd89b523798e86fa7151d4fe1e512a3d83bbb393116
Opcode Fuzzy Hash: 2eef28b9cb4e3094f43ea2058d97e2128eec856a83a28608b3aa8d651cce14c2
Instruction Fuzzy Hash: 46116370A04265CFEB19EBBAC4546EE7BF2AFC8300F584129D511B7395DF3599009BA1

Function 01435218 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2265538538.0000000001430000.00000040.00000800.00020000.00000000.sdmp, Offset: 01430000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1430000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5915ca220f2bd82e627ffa0ab2ac204ff0cf88ed3955fc3cb40a4045f5307a3e
Instruction ID: b27bc33b8961f04aa26e01cf8440412bd7ae8997eb7365074e6623bf383c68d7
Opcode Fuzzy Hash: 5915ca220f2bd82e627ffa0ab2ac204ff0cf88ed3955fc3cb40a4045f5307a3e
Instruction Fuzzy Hash: 45016276B11231CFC71A9B3DE85881B7BA6AF9961131941BAE805DB379DA31DC018B90

Function 01435228 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2265538538.0000000001430000.00000040.00000800.00020000.00000000.sdmp, Offset: 01430000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1430000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 16b6244b99f50c23134c87beffebd5feabd3b4990ef8e7e49b168a11046349af
Instruction ID: 247f92f6eda2f932103cc006c5d17394b6692a888da4e997225bb5bfab2fd483
Opcode Fuzzy Hash: 16b6244b99f50c23134c87beffebd5feabd3b4990ef8e7e49b168a11046349af
Instruction Fuzzy Hash: F4F06876710131CFC715AB3EE84581B77EA9F8966131501B9E905DB375DE71EC018B90

Function 01430F07 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2265538538.0000000001430000.00000040.00000800.00020000.00000000.sdmp, Offset: 01430000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1430000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4eca7cf8d4f2e6d11494e4c3b0cae240262b9d57e83d354fa05d3044810e5119
Instruction ID: 8be267923eee74ad4ca4a64ea8ff4ef5ce7ab4a35c04fae9cdc9f6b5ea3d6b04
Opcode Fuzzy Hash: 4eca7cf8d4f2e6d11494e4c3b0cae240262b9d57e83d354fa05d3044810e5119
Instruction Fuzzy Hash: 1FF0F63590E385CFC717CB74AE210D97F70EE9310831902EBD584DB263E1310E069762

Function 01430A0B Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2265538538.0000000001430000.00000040.00000800.00020000.00000000.sdmp, Offset: 01430000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1430000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4c736f57cda6d49ba50d68d2f1d542028b8987bb804a1cea0f769e1d0a0ffac3
Instruction ID: 32c4b8dd8f2c45a849d25b71ede64f000f230492462f19dc9b863b2a9ae9ad2c
Opcode Fuzzy Hash: 4c736f57cda6d49ba50d68d2f1d542028b8987bb804a1cea0f769e1d0a0ffac3
Instruction Fuzzy Hash: F1F03071F00119CFCB54EBB899147AE76E2AF88610F14456AD50AEB394EA358E0587D1

Function 01435139 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2265538538.0000000001430000.00000040.00000800.00020000.00000000.sdmp, Offset: 01430000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1430000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6dadf7aa702730ff8fd742327b0adc299c0f14ce09249b8c4b7df1ffa99dee5b
Instruction ID: 3f7f9c9ed5e723c9616ce5efd485785e4329cd17f6a82a4d0812ed0ca1a812ca
Opcode Fuzzy Hash: 6dadf7aa702730ff8fd742327b0adc299c0f14ce09249b8c4b7df1ffa99dee5b
Instruction Fuzzy Hash: 5CF0E9363422408FCB169B24EDA444E7F76EFC9211754457BD50AC7366DA318C058760

Function 01430AA3 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2265538538.0000000001430000.00000040.00000800.00020000.00000000.sdmp, Offset: 01430000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1430000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 84f9f1b39a18a8374ccb013addbb52b453ace833a5fe715de8ff297039ee162e
Instruction ID: 360a093e6891488a2fff57ab9d443ebd3edaa12229fb9810325e29ab6b19029d
Opcode Fuzzy Hash: 84f9f1b39a18a8374ccb013addbb52b453ace833a5fe715de8ff297039ee162e
Instruction Fuzzy Hash: 4BF0A430B0435187EB596B79A42876B3B62AB88300F0406B9AA16C33A5EA759881C750

Function 01430AA8 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2265538538.0000000001430000.00000040.00000800.00020000.00000000.sdmp, Offset: 01430000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1430000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f29dc85cc5f357d71decbe9e67467eeee87135288afd731cd1ef2be64822a93c
Instruction ID: 650e49d819f4e1a82d2883524b7e6a8fc398becaefa6af17de618c35fccf926a
Opcode Fuzzy Hash: f29dc85cc5f357d71decbe9e67467eeee87135288afd731cd1ef2be64822a93c
Instruction Fuzzy Hash: 02F09C3070431187E7597779F42832B3A567B88741F040779AB16C33E4EE75D881C790

Function 01434B34 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2265538538.0000000001430000.00000040.00000800.00020000.00000000.sdmp, Offset: 01430000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1430000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dd9c3102cc1c78cb4f6819e4e27495c82c64c2cd6a8e42e4c1b474fbc0d52282
Instruction ID: 5a23b2527f0da84afc3999cfae8996abc431fafb842d020f3d4263f25eff3821
Opcode Fuzzy Hash: dd9c3102cc1c78cb4f6819e4e27495c82c64c2cd6a8e42e4c1b474fbc0d52282
Instruction Fuzzy Hash: 6BF0F071D09244EECB06DBF5A8540EC7FB1EF85204B0880DAD16697666EBB446068B50

Function 01435148 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2265538538.0000000001430000.00000040.00000800.00020000.00000000.sdmp, Offset: 01430000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1430000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3d984f0b194ec133cd39497ccd946043f09262f382f6dced829781ec8d7a28bc
Instruction ID: ec6ff3028cff3544dc10998c4e227a92056da307b44deb9d4a4bb517d174795c
Opcode Fuzzy Hash: 3d984f0b194ec133cd39497ccd946043f09262f382f6dced829781ec8d7a28bc
Instruction Fuzzy Hash: 30E09B35301204DBC714DA29F85885EBBAAEFC93517504639E61AC3359DE355C058760

Function 014313B0 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2265538538.0000000001430000.00000040.00000800.00020000.00000000.sdmp, Offset: 01430000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1430000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 85d80a201ced910e3fadf86fd484194063d77b6a928979586a1c785f2b53a81a
Instruction ID: 975c7187dceee948bc1ceb44dc172669aa8a3fb94451dd5d4482dc2589776422
Opcode Fuzzy Hash: 85d80a201ced910e3fadf86fd484194063d77b6a928979586a1c785f2b53a81a
Instruction Fuzzy Hash: 60F0FF78641215CFCB19EFA5D199A29BBB2EB88704F2045A9E4069B3A1DB799806CF00

Function 01430F70 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2265538538.0000000001430000.00000040.00000800.00020000.00000000.sdmp, Offset: 01430000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1430000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 68c7c498f4309498b493b1a1010be191254c6e2b722459b73ab88d8715de3dae
Instruction ID: 4ba09959f963fb03ca02768491c2d34742d9572faca48b1b5dd2660a90a87d3a
Opcode Fuzzy Hash: 68c7c498f4309498b493b1a1010be191254c6e2b722459b73ab88d8715de3dae
Instruction Fuzzy Hash: AAD02E3151A2504FC302AA79AE10283379A5B6B209B0806ABE888C3332E1A0C8108391

Function 01430F38 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.2265538538.0000000001430000.00000040.00000800.00020000.00000000.sdmp, Offset: 01430000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_1430000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 26191042da80852b1f501262657f23d3a7c288126f6d9fca6c3642ffff1d1de4
Instruction ID: 6cb7c45fc0634f05f3722a78bb71da0460a408e7f3205f5483b73d7a977d4380
Opcode Fuzzy Hash: 26191042da80852b1f501262657f23d3a7c288126f6d9fca6c3642ffff1d1de4
Instruction Fuzzy Hash: 20D05B30A0121DEFCB48DFB4E90155D7BF5FB44204B1051ADD518E7200FB715F009B41

Analysis Process: Honda.exePID: 5584, Parent PID: 4004COMMON

Executed Functions

Function 02F12788 Relevance: 2.0, Instructions: 2019COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0c75e9532e81a43ccc48384e2269fed9057765a6160c5d2aa163273391f829f0
Instruction ID: 2a29a42b0bd750e02899977ec1e8d5525913087cd256aa1eaa786c4c6c98c8e4
Opcode Fuzzy Hash: 0c75e9532e81a43ccc48384e2269fed9057765a6160c5d2aa163273391f829f0
Instruction Fuzzy Hash: 42039E30E40619DBDB12DFA4CC44B99B7B6FF89700F9186A5E6087B291CBB46E81CF51

Function 02F11CC0 Relevance: 1.6, Strings: 1, Instructions: 359COMMON

Download Yara Rule

Strings

", xrefs: 02F11F97

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID: "
API String ID: 0-123907689
Opcode ID: 8436de1a243900cd7fcf238b64ee74fbfefb0236675d36773254f82ed61da3bb
Instruction ID: 913aa41c84069e3c4b64be1739a57d040348c0f7b1f5f0b73481ab53d8c88d9c
Opcode Fuzzy Hash: 8436de1a243900cd7fcf238b64ee74fbfefb0236675d36773254f82ed61da3bb
Instruction Fuzzy Hash: E7D1C031B002168FDB08DF68D8846AEBBB2FF88340F54C169E615EB295DB74ED45CB91

Function 02F15A41 Relevance: .4, Instructions: 433COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 11b5e646a78b985bf02c78e198b482281ec3d1b40fb0b2705904e3d328074594
Instruction ID: 7f6dcb2f1c7b99ad10a4a3094ef20f7203617812e706c50be10ac57d697db35e
Opcode Fuzzy Hash: 11b5e646a78b985bf02c78e198b482281ec3d1b40fb0b2705904e3d328074594
Instruction Fuzzy Hash: FAF18A30F00205DFDB24DF64D994BAEB7B2EFC8345F948429E606AB291DB75AC41CB90

Function 02F14C68 Relevance: .4, Instructions: 419COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00e10ad3edbccfc876adf45f1026f19251680b8ae4227e3038ada832bb710e9e
Instruction ID: 83d8afeb1aa826b5f7bebd1f3b2bd091be993c96254b28c5b896e44b02b30838
Opcode Fuzzy Hash: 00e10ad3edbccfc876adf45f1026f19251680b8ae4227e3038ada832bb710e9e
Instruction Fuzzy Hash: 4F119A71E042598FDB05DBA9C8A57EE7BB2AF88340F944069D901BB381DB399904CBA1

Function 02F14868 Relevance: .2, Instructions: 238COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 35f0037054fbb4f864d2c60cf03d8bcba18d82267e3e8445b5b02fa932e2480f
Instruction ID: 9f1e551ee904c67196adcd36d24f6a3dc6a320a08feb9ba4914c5e878452d1a0
Opcode Fuzzy Hash: 35f0037054fbb4f864d2c60cf03d8bcba18d82267e3e8445b5b02fa932e2480f
Instruction Fuzzy Hash: B4A14930600605CFCB15DF28C4A4EA9BBF6EF85390F86D5A9D1499B662E730FD84CB94

Function 02F11062 Relevance: .2, Instructions: 219COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 268d6614f81b1ea989a5ffbbacda8fa3e89c6a012ec39a8ce4d27887d66d462f
Instruction ID: d1081864f6265212e2e5d663e3294f119982e41a326bff8907c6d9f726a3789b
Opcode Fuzzy Hash: 268d6614f81b1ea989a5ffbbacda8fa3e89c6a012ec39a8ce4d27887d66d462f
Instruction Fuzzy Hash: 9D913A71E002489FDB09DFE5D8549EEBBBAFF88300F54806AE606B7250DB399945CF51

Function 02F15E28 Relevance: .2, Instructions: 180COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b4218ed52eb70493b4f2141940c788fbfb765eb2d48fc56c0c0db4e6315927c3
Instruction ID: fa089f7f79c3062c1a52daac41c0d540b4b1aec357241c258c9a67c288fbbec2
Opcode Fuzzy Hash: b4218ed52eb70493b4f2141940c788fbfb765eb2d48fc56c0c0db4e6315927c3
Instruction Fuzzy Hash: B9615B35F002159FDB14DF65D894BAEBBB2FF88750F948065EA05EB291DB349C41CBA0

Function 02F15AB1 Relevance: .2, Instructions: 170COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 776ea511a05fa0c00e2e734bf16d8fdbb5b3b79c9f4c4cd8a8f0ab48d966976a
Instruction ID: 3b02efe0814e5d6baac2130021e2aadce91a77f6af7fa1a2bfb6cfa32cdd8a80
Opcode Fuzzy Hash: 776ea511a05fa0c00e2e734bf16d8fdbb5b3b79c9f4c4cd8a8f0ab48d966976a
Instruction Fuzzy Hash: C9514970E01205DFDB24DF28C99476EB3B2EFC4355F948429D916AB290DB3AEC41CB90

Function 02F10848 Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0531760c3829ae6ced267652576c5acb21886f9f4f80d194e4e0099d20b04982
Instruction ID: bc707aa2d2a8dfc3dd2b9cfe9eb5e01218817a07840a6e8a98eceaa852a1c45d
Opcode Fuzzy Hash: 0531760c3829ae6ced267652576c5acb21886f9f4f80d194e4e0099d20b04982
Instruction Fuzzy Hash: AF419D70E00109DFDB04EBA8E86479EBBB2FF84300F509569D605AB350DF759D86CB91

Function 02F11CB0 Relevance: .1, Instructions: 107COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5154227c514c93505f2a518eab899958a2572722faf8ac4252aface79f82f664
Instruction ID: 42ed83ed01349feb4731a18e67cc16078cf68e0d997685f2dc40511c14ef17d5
Opcode Fuzzy Hash: 5154227c514c93505f2a518eab899958a2572722faf8ac4252aface79f82f664
Instruction Fuzzy Hash: 2341E130E00105DFDB09DF29D85499BBBB6EF88301B90C179EA169B360DB34AD05CF90

Function 02F11B68 Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: af7a36329276119c608c88d554f98395877cff8d187ca68840cce585ed42c4bb
Instruction ID: 9b65003aa4bb8c9ca1de11a4d042ee8e08fbf5d7dca54fc14bd2c1a961908cbe
Opcode Fuzzy Hash: af7a36329276119c608c88d554f98395877cff8d187ca68840cce585ed42c4bb
Instruction Fuzzy Hash: ED312C31B00115CFC748EF79D4959AE77B2EF48715B6044A9D90AEF361DA36DC02CB81

Function 02F12777 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4af0faadce646b4648fe26dcfc08bedb1456292294cf3e21dce3491c645f511f
Instruction ID: ab6a73201e2bdd407a215100097c323291a96c277ab78c92fee1026762a0a99d
Opcode Fuzzy Hash: 4af0faadce646b4648fe26dcfc08bedb1456292294cf3e21dce3491c645f511f
Instruction Fuzzy Hash: 2F21B131E00224CFDB15CFA5D944BAA7BF6EF443A1F8584AADA05C7290D339D980CB60

Function 02F10838 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5924747f9262cffe3478cac56584b6c8754ccf7993e54f5afee81904805f15b4
Instruction ID: bcd4eb4e5ce14fd65b7db2d32bcf39dd4e88f7f249556ac9fd9cc16ac3513579
Opcode Fuzzy Hash: 5924747f9262cffe3478cac56584b6c8754ccf7993e54f5afee81904805f15b4
Instruction Fuzzy Hash: 44316170E40109DFDB05DFA8E4A4A9DBFB2FF84300F509529D5057B251DF79988ACB51

Function 02F11B78 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d625ddedb12183ff0b1e8ee6925c6b51e55788ccb3f18960f2c1fd7244b9fa43
Instruction ID: 08801fce78495c172d428bb9ca06fddafed1515234edf0af65161d8f21e81809
Opcode Fuzzy Hash: d625ddedb12183ff0b1e8ee6925c6b51e55788ccb3f18960f2c1fd7244b9fa43
Instruction Fuzzy Hash: 5B211D70B00116CFCB48EF79C4989AEB7B2AF48715B6044A9D90ADB361DB35DC01CB80

Function 02F14F48 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 10817aa0caf6aa0bc8f354a589008337a5ce042eea8a5f9efd5f377241404998
Instruction ID: ac37399236e52df6641b66954f327905b88a4a3a4fd79a2125170da4339279b7
Opcode Fuzzy Hash: 10817aa0caf6aa0bc8f354a589008337a5ce042eea8a5f9efd5f377241404998
Instruction Fuzzy Hash: F3115B31E042598FEB04DBA5C4557AE7BB2AFC8340F948469DA01BB385DB399D00CBA1

Function 02F16060 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d35b3e2df8f2320c61e64ab0a815115486fa2e0e438922b5d5a5fd1aead9f2a7
Instruction ID: 1fd06f1cb2a015abd2d7142b4c833e676d66e084fc79f43c4ab708364d230a99
Opcode Fuzzy Hash: d35b3e2df8f2320c61e64ab0a815115486fa2e0e438922b5d5a5fd1aead9f2a7
Instruction Fuzzy Hash: 56010472E003086BCB19EB29E8597DF7BBADBC0214F00407DE11497241EF7159018B90

Function 02F152ED Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 595cfac800fc9980023117d42ba60ed1ad3ead6f2ae9033f58d87d54a98badce
Instruction ID: 3ccaf452f965334f6ec559601ae528c4a67da1c440ec1cb9a4e08a97a0f130c4
Opcode Fuzzy Hash: 595cfac800fc9980023117d42ba60ed1ad3ead6f2ae9033f58d87d54a98badce
Instruction Fuzzy Hash: 5801D633B00121CFC3099B68F5648AA77A5EF9966135141A6E945DB735CB24DC018B90

Function 02F15218 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 784cd2586d5e409b8185f7bbb642e885a760b6afc08d234cb9f22e825f9c3dc1
Instruction ID: f8253174ddaddb0af780670579df85ba34bc0dd83fa5b3711cc37697db910ef8
Opcode Fuzzy Hash: 784cd2586d5e409b8185f7bbb642e885a760b6afc08d234cb9f22e825f9c3dc1
Instruction Fuzzy Hash: B9016D72B10131CFC7189B3DE85896AB7A6EFC976131541B9E905EB360CA75EC018B90

Function 02F118F8 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e896d09b352a603bb438b525d1e1d8ad3d060a64dc7cc170f9869cc641fe21d3
Instruction ID: 971a8c21bf0c0a3b8273965b8177af02538c5a61e651e324c3a0ea5750807bc6
Opcode Fuzzy Hash: e896d09b352a603bb438b525d1e1d8ad3d060a64dc7cc170f9869cc641fe21d3
Instruction Fuzzy Hash: EF015E32E001088FCB40EFA9E8106EEBBB5EB84361F80803AD65DE3200EB356955CB91

Function 02F15228 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eea33d50cfc3f65ebbec6138407057f4a35606cb4109c31a0e49937030d98097
Instruction ID: 6568a535831a8d611935e3186d6d7d265103b4621b4b378f50850006df02162d
Opcode Fuzzy Hash: eea33d50cfc3f65ebbec6138407057f4a35606cb4109c31a0e49937030d98097
Instruction Fuzzy Hash: DAF06272B10131CFC718AB3EE84481A77EAEF89A6131541B9E905EB320CE75EC01CBA0

Function 02F10A98 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ec2d491692684c467f4b352ff68ff6c5bd0737d15fac7711d52296fe4d13c489
Instruction ID: 52628bac57d6513b8a6c7358fc314d30f8feaa2d85fd719b6305edfa2246653b
Opcode Fuzzy Hash: ec2d491692684c467f4b352ff68ff6c5bd0737d15fac7711d52296fe4d13c489
Instruction Fuzzy Hash: 7CF08C35B8024087EB096A75E86936A3755EB84394F84047DDE06E33C0DE6ED894C391

Function 02F10F07 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d97be39d7d974f3a08a254da0093dde58f041935df651862805586ff9cb84a52
Instruction ID: 55674288ec933387f0f5ae4874cb2b626bd33e865a2df26f05a7a4a259e0d8b4
Opcode Fuzzy Hash: d97be39d7d974f3a08a254da0093dde58f041935df651862805586ff9cb84a52
Instruction Fuzzy Hash: FBF0F6329493848FC303CB789D622CA7FB0DF83100B0540DBC984D7253E5341D04DBA2

Function 02F15FC1 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0918b1c341a124a0e368d242101961d889cff7b22066a22290bcef3a8e7b1522
Instruction ID: b7c49dc58e1f8aaa107b56ea6bd0504b61f3662d3a0e6acf7d2f28965531c180
Opcode Fuzzy Hash: 0918b1c341a124a0e368d242101961d889cff7b22066a22290bcef3a8e7b1522
Instruction Fuzzy Hash: 07F0B436B401105BC315AB36E898A6B37AAEBC96A17854025EA09DB250CF35CC01DB90

Function 02F10AA8 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 793571dec681a233fbf249c3466bc28e883e2f59ab0199307c898a858efafe1f
Instruction ID: a3bab1e515ca38b68ae1254fae81d15941a492d89d40ebe82bcf11fb612c4da7
Opcode Fuzzy Hash: 793571dec681a233fbf249c3466bc28e883e2f59ab0199307c898a858efafe1f
Instruction Fuzzy Hash: 1FF06D30F4425187E7096BB6E82832A3656BB44784F8404BD9E06E33C0DFA9CC90C782

Function 02F10A11 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 89ca3c45f2d847d016b22de1a36a810488ab1c6b0d5e9a2d7118f53ec08aca58
Instruction ID: ce2a76f82d40ce30b4f3c94292d202845caa84b50de93ab1ab6dda000a4b4f35
Opcode Fuzzy Hash: 89ca3c45f2d847d016b22de1a36a810488ab1c6b0d5e9a2d7118f53ec08aca58
Instruction Fuzzy Hash: 23F05E71F001199FCB84EBB898157BE76E1EF88610F10446ADA0AEB384EE358E018BD1

Function 02F14B34 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8f335d1ff28283866bd5b68c0e9e388ce44e2df7a6ea3ac434bba96d68e7f829
Instruction ID: 43195779f5a8aa3dc10e9ada9403698b57b26f99d1876fce5395b8ae8eff6c31
Opcode Fuzzy Hash: 8f335d1ff28283866bd5b68c0e9e388ce44e2df7a6ea3ac434bba96d68e7f829
Instruction Fuzzy Hash: 38F02476D09284EFCB02DBF59C650ED7F70EF81304B4480DAD19597A62E6784605CB40

Function 02F113B0 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 86636bfb0670c60d2d6c128bb10ab3a073db3de06ec78907e84907a1594790a0
Instruction ID: 2d9fd1b8806f37a2a273535611154e4f1e5411807ae890a0f985df558e92bd8c
Opcode Fuzzy Hash: 86636bfb0670c60d2d6c128bb10ab3a073db3de06ec78907e84907a1594790a0
Instruction Fuzzy Hash: C6F01D74640205CFDB14EF64D158A29B7B2EF88304F1044ACD506AB361CF79DC45CF01

Function 02F15148 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cf00e11100aac5c1ac24fbd0b338a566bbd795d39101e7892cfa816137a31078
Instruction ID: 8ea89376f6ddbe92fc6925141c768e2edfb7a73a79f8fb47e724596059e274ac
Opcode Fuzzy Hash: cf00e11100aac5c1ac24fbd0b338a566bbd795d39101e7892cfa816137a31078
Instruction Fuzzy Hash: 86E09B357411049BCB04DE2AE8A885BB7EAEBC83517904539E50EC3315DE355C0587A0

Function 02F10F70 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3cfa63e3e270ff595682b6a6fbaade94a4a3a68a6a72597fb6bb9f5634057397
Instruction ID: 4313507466d3c071271d3c1009bb4dcfaff497f3dd0ddda06ac0cdf0f53d40b5
Opcode Fuzzy Hash: 3cfa63e3e270ff595682b6a6fbaade94a4a3a68a6a72597fb6bb9f5634057397
Instruction Fuzzy Hash: 02D05B7261D2504ED34555647D216B13795C7563D075504FFED49C7251F9044D848791

Function 02F10F38 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 79100edfb6fac031bedb610c246e1e8d760558cdbde6627075acee9cd5108370
Instruction ID: 2813f401fd060cd0fc685404ce7b7f5e8fc4439e2b87bae34dcdd37730c81ed7
Opcode Fuzzy Hash: 79100edfb6fac031bedb610c246e1e8d760558cdbde6627075acee9cd5108370
Instruction Fuzzy Hash: 4AD01730E40109EF8B41EFA8EA5259EBBF9EB84200B1095A99908E7201EA756E009F91

Function 02F10F81 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2346507204.0000000002F10000.00000040.00000800.00020000.00000000.sdmp, Offset: 02F10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2f10000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d763b307fc973b224178e8171071f9f8232c54f762eb0e1720c8db5e74c32265
Instruction ID: 95139778e8684c93df6946d178a15872edf926edf32adfeebfb1c225e9693fb3
Opcode Fuzzy Hash: d763b307fc973b224178e8171071f9f8232c54f762eb0e1720c8db5e74c32265
Instruction Fuzzy Hash: 36C08C32A0A2145BD320AAA8F9113A133C8CB003E4F4048BFFE0DD3204EE95CCC087C2

Analysis Process: Honda.exePID: 5100, Parent PID: 4004COMMON

Executed Functions

Function 023B2788 Relevance: 2.0, Instructions: 2013COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2427343669.00000000023B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 023B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_23b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 00eed342911b8634d4a4b639e07ed48a217d2b7b0a9d89dbeb8448d8d13b5da6
Instruction ID: 3d0b8445d3af92be880444a139e35e196ef69d1aacd84096fdb345c80601985f
Opcode Fuzzy Hash: 00eed342911b8634d4a4b639e07ed48a217d2b7b0a9d89dbeb8448d8d13b5da6
Instruction Fuzzy Hash: 89038D30A00719DFDB22DF64CC44B99BBB6FF89700F518695E6087B296DBB16A85CF40

Function 023B5A41 Relevance: .4, Instructions: 447COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2427343669.00000000023B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 023B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_23b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 56febd7d7a9eb92641edaadfb350293061901a42d18a672ebf934b709aef3648
Instruction ID: 1e2e8611e6c036e525905a0cbd35a9fd8b534f5e9732631aeb9778b4125c1d69
Opcode Fuzzy Hash: 56febd7d7a9eb92641edaadfb350293061901a42d18a672ebf934b709aef3648
Instruction Fuzzy Hash: 8EF1BD30A01705CFDB25DF64C984BEEB7F2BF89701F948429D606AB695DB71E842CB90

Function 023B17C8 Relevance: 1.4, Strings: 1, Instructions: 154COMMON

Download Yara Rule

Strings

D@r, xrefs: 023B182E

Memory Dump Source

Source File: 0000000F.00000002.2427343669.00000000023B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 023B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_23b0000_Honda.jbxd

Similarity

API ID:
String ID: D@r
API String ID: 0-3332416283
Opcode ID: f8af3abdf2386aca0ee828e35644a0b57929b4a7349bb59bbbac9b956b53e209
Instruction ID: 033dde4d4e41aa7e175d85ea455595d65926e7ba2201ad0d8084cb81e791fe71
Opcode Fuzzy Hash: f8af3abdf2386aca0ee828e35644a0b57929b4a7349bb59bbbac9b956b53e209
Instruction Fuzzy Hash: A451C031E002189FDB19EFB998206EEBBB2EFC5310F14C07AD159E7251EB344A06CB91

Function 023B1993 Relevance: 1.4, Strings: 1, Instructions: 133COMMON

Download Yara Rule

Strings

D@r, xrefs: 023B1AE4

Memory Dump Source

Source File: 0000000F.00000002.2427343669.00000000023B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 023B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_23b0000_Honda.jbxd

Similarity

API ID:
String ID: D@r
API String ID: 0-3332416283
Opcode ID: 20f2faa8a92cc16cd9044fb474929797f84dece3f8b019b97d804334e395bc3a
Instruction ID: 83f2052e78e6091507439df3808812c40d82686703e875dd59a44f1e0293c4a9
Opcode Fuzzy Hash: 20f2faa8a92cc16cd9044fb474929797f84dece3f8b019b97d804334e395bc3a
Instruction Fuzzy Hash: 86414731A00204CFEB2ADF64C428BEEB7F1AF85304F144069C24AEB791DB799945CBA1

Function 023B4868 Relevance: .2, Instructions: 223COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2427343669.00000000023B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 023B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_23b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f0f8ea6680da5e352fe9fdb37113cebe9c723154e972365e08c075b41dc2f535
Instruction ID: 0db7184c448ba482970dff39c560c9e9ea8d3315a6848c159edc1b7a606e9939
Opcode Fuzzy Hash: f0f8ea6680da5e352fe9fdb37113cebe9c723154e972365e08c075b41dc2f535
Instruction Fuzzy Hash: 37A13830600605CFCB16DF68C594AA9BBF2FF85340F46C5A9D2499BA66D770FD84CB88

Function 023B1068 Relevance: .2, Instructions: 219COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2427343669.00000000023B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 023B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_23b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e93044ce0cde26e0b5e7144bf754b4f0bc578a4f73111714434dacfc6499b3a7
Instruction ID: 0bc1b4bde22d9a43ccda6e635a1cb49f52f10dc168249d1cdf1aa39d57a6bbcd
Opcode Fuzzy Hash: e93044ce0cde26e0b5e7144bf754b4f0bc578a4f73111714434dacfc6499b3a7
Instruction Fuzzy Hash: B7915871E006089FCB15EFE5D8549EEBBFABF88300F14812AE506EB254DB759906CF94

Function 023B5E28 Relevance: .2, Instructions: 186COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2427343669.00000000023B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 023B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_23b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c5f3287c17aa30aa51ba5eeefcba0133b26632443b750fb11a312d8fda9073e
Instruction ID: dcdb5228381185782945b7cf072b4b8952894d06416157655a12c8d221b54fa7
Opcode Fuzzy Hash: 6c5f3287c17aa30aa51ba5eeefcba0133b26632443b750fb11a312d8fda9073e
Instruction Fuzzy Hash: 6A618A34A002189FDB15DF65D888BEEBBF6FF88710F548065EA05AB295CB349C42CB90

Function 023B1CC0 Relevance: .1, Instructions: 121COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2427343669.00000000023B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 023B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_23b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0dce5dbec86ca19cd5c6e0b6273391e635842f8260babf7bcc174e1fd5281879
Instruction ID: 24fc62fcdee4ea9717cccc3fb51741ee82f8602a72ad74c575d0f0e89370610c
Opcode Fuzzy Hash: 0dce5dbec86ca19cd5c6e0b6273391e635842f8260babf7bcc174e1fd5281879
Instruction Fuzzy Hash: A841B334A00109DFDB5AEF28D8549AE7BF6EF84300B10826EE509DB369DB749D06CB95

Function 023B0848 Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2427343669.00000000023B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 023B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_23b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f4cceb26a8de929080ba96d434712ab07ffa0cd40bb9a741130075704180d2a9
Instruction ID: 4480508e7c4a297c2e4aeedcfef2ff82fdd4f805297348dc8cb77697c0efd45d
Opcode Fuzzy Hash: f4cceb26a8de929080ba96d434712ab07ffa0cd40bb9a741130075704180d2a9
Instruction Fuzzy Hash: A141AC30A00209DFDB09EFB8E854B9EBBF2FF84700F109169E205AB355DB759946CB94

Function 023B1B68 Relevance: .1, Instructions: 112COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2427343669.00000000023B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 023B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_23b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d635ad4ef61afd02986d8f4526616f47cfa65f71a11b3744117595d66d16cd7
Instruction ID: 17731b0f5bbc6a50abaa4de78bd337d6820de48cda2ed19c41ae28c1f961a1f2
Opcode Fuzzy Hash: 2d635ad4ef61afd02986d8f4526616f47cfa65f71a11b3744117595d66d16cd7
Instruction Fuzzy Hash: 7941AE71B00205CFCB19EF78C4A8AADB7F2AF45705B1144A8D64ADB762DB36DC02DB80

Function 023B1B78 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2427343669.00000000023B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 023B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_23b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e5ae9773f87762c229bc6950aa994ecec6e91b383602f31d6d789dbe48892d36
Instruction ID: 8c9c8e55178138a88c90732645bdb74f8df44f4e77562c1db8657d1be8a8621d
Opcode Fuzzy Hash: e5ae9773f87762c229bc6950aa994ecec6e91b383602f31d6d789dbe48892d36
Instruction Fuzzy Hash: F0211A70B00116CFCB48EF79C49896DB7F2AF48715B6045A9D90ADB361DB36DD02CB80

Function 023B6060 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2427343669.00000000023B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 023B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_23b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ce844bb5d1589e88b4f6741f2ecdc30bb4efd2d81c9ef29c4ab12b6b87309de1
Instruction ID: 508b06059dec179f9285b26e8e1cc044548a37cd68b2f46ff72b45dbbf8ef6e7
Opcode Fuzzy Hash: ce844bb5d1589e88b4f6741f2ecdc30bb4efd2d81c9ef29c4ab12b6b87309de1
Instruction Fuzzy Hash: 4E1188B1D083086FC725DF3AA80978E3FBADFC2214F1041BDD10897242DB3209078790

Function 023B4F48 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2427343669.00000000023B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 023B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_23b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6a69f20c915ff33d0d41bdb6a804056e70f75ae132528805d24b45fe626df384
Instruction ID: adf5ccd7189d777df31503fef25f6636ae9e6552f2f397ce7f83010b2c690d38
Opcode Fuzzy Hash: 6a69f20c915ff33d0d41bdb6a804056e70f75ae132528805d24b45fe626df384
Instruction Fuzzy Hash: D2119430A042588FEB05EFB5D4587EE7BF6AF88300F544129D601BB785DF359900CBA5

Function 023B4F43 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2427343669.00000000023B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 023B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_23b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8bef35acd34d5e3b1bc8e2c42f4e35e100d54d488771733f195326b530625dcc
Instruction ID: 32ca1efa3e39775a8c85e603c80e4136cf29fe81780cf9f50aba7b170d486a48
Opcode Fuzzy Hash: 8bef35acd34d5e3b1bc8e2c42f4e35e100d54d488771733f195326b530625dcc
Instruction Fuzzy Hash: 9A11B230A042548FEB15EFB9D4587EE7BF2AF88300F544129D601BB786DB349901CBA5

Function 023B1C73 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2427343669.00000000023B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 023B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_23b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1d687a28fbb18767c3b589903596885b4fa105bcc8e99935a029094964050acc
Instruction ID: 0172a6cd412ee1e00b773193681406b092b1cb413568c57c7e98ecfea7d84943
Opcode Fuzzy Hash: 1d687a28fbb18767c3b589903596885b4fa105bcc8e99935a029094964050acc
Instruction Fuzzy Hash: 80119E743000118FC749EF38D8949AC7BB2EF89B05B114198E54ACF3A6CB31EC028B90

Function 023B5218 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2427343669.00000000023B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 023B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_23b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 476da18cf637c7b7daa9a5d0463f7657098114f8b40f362ca7230c792ce25997
Instruction ID: 9920add71ee3bbf3dd5999d6ba304a00996ae22233af54927ab0f05f0c50842d
Opcode Fuzzy Hash: 476da18cf637c7b7daa9a5d0463f7657098114f8b40f362ca7230c792ce25997
Instruction Fuzzy Hash: B8014236B10120CFC3299B39E84495A7BE69FA971032541BAE805EF336CA31DC038B90

Function 023B5228 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2427343669.00000000023B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 023B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_23b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 39a1dff820da4fa57adfa8af2f3b9079a25845538fefa53bef56855ae5902c9b
Instruction ID: 1818de09ca864f5bfb7afdd7ded3156d1528fc0fdd554d9e48ca09e5f5d6baea
Opcode Fuzzy Hash: 39a1dff820da4fa57adfa8af2f3b9079a25845538fefa53bef56855ae5902c9b
Instruction Fuzzy Hash: 5DF04F76B10521CFC718AB3EE84491A77EAAF89A6131541B9E905EB334CA71EC018BA0

Function 023B5139 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2427343669.00000000023B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 023B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_23b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 29f0aa0639ef1ccd55814c35a42960c8f9e33ddfe18ffd82079572fec41d1f86
Instruction ID: a4681bacd7c13a7fb7dc7d7b41ccee15c9456693794892c2513eda0331fe1483
Opcode Fuzzy Hash: 29f0aa0639ef1ccd55814c35a42960c8f9e33ddfe18ffd82079572fec41d1f86
Instruction Fuzzy Hash: 2EF0E2363052046FC7109B35EC9888EBBBAEBDA311750D07AE509C7366CA354C078765

Function 023B0AA8 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2427343669.00000000023B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 023B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_23b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 560ebdf0b57ae6fd7f4a9b90ef6adcdf3f3a3893186683a101b05b1b9a584438
Instruction ID: 1f4ab12dbc7d02b7bdbe5779d84361c2af2d91a7e10d61bfa05bea52678f9322
Opcode Fuzzy Hash: 560ebdf0b57ae6fd7f4a9b90ef6adcdf3f3a3893186683a101b05b1b9a584438
Instruction Fuzzy Hash: AEF0B430700A5887D719BBB5E81837B3796BF45648F044978DA06D77D1DFB9D841C784

Function 023B4B34 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2427343669.00000000023B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 023B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_23b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fc7ddcab1905c601ea6163c8924065be616e6b86981bf03057a6ebf3bc2e85b8
Instruction ID: fdaf9f1a574c52bc9bbe003d6a80692f1d277d20a7cfd9d8424198ec60d7006e
Opcode Fuzzy Hash: fc7ddcab1905c601ea6163c8924065be616e6b86981bf03057a6ebf3bc2e85b8
Instruction Fuzzy Hash: 21F02471D09284EFCB02DBF5AC640EC7FB0EF82304B08C0DAD29597A26E6784605CB41

Function 023B13B0 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2427343669.00000000023B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 023B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_23b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 99a2232a538b2454c3d1ced9d2325236246af0aa8430888fba320ecb7958e198
Instruction ID: 0093916f15ce1d40201c7e526c4e367000d13d0e25381c9cf87ace52b84b43ec
Opcode Fuzzy Hash: 99a2232a538b2454c3d1ced9d2325236246af0aa8430888fba320ecb7958e198
Instruction Fuzzy Hash: 26F01774600205CFDB19EF74D168A68BBB2FF88704F1044A8E506AF7A5CB799806CF04

Function 023B5148 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2427343669.00000000023B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 023B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_23b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b6181c87e114962292ff4020f7a69c153fa3c6429c97de2112d3679c44d05c90
Instruction ID: 2bf816d1db95a77efde26533dfd91209561970a268376df8c8140cb3c57b1b39
Opcode Fuzzy Hash: b6181c87e114962292ff4020f7a69c153fa3c6429c97de2112d3679c44d05c90
Instruction Fuzzy Hash: 01E09B35701104ABC714DB29EC5895AB7EAFBC93517508539E50AC3325DE355C068764

Function 023B0F28 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2427343669.00000000023B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 023B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_23b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7374b04234237e61f426d1e60a47c5bf0d8befb250ce7c0baac0c4f23beceaab
Instruction ID: f299f6a6391d2877f6f70d4148f7c3bcf6f625c29f566ba83413096dfab8645e
Opcode Fuzzy Hash: 7374b04234237e61f426d1e60a47c5bf0d8befb250ce7c0baac0c4f23beceaab
Instruction Fuzzy Hash: EEE0D831A4524CAFCB41DFB4E94109CBBB5EF56200B1041A9D508E7212EA351F078744

Function 023B0F70 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2427343669.00000000023B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 023B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_23b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 141ffae8dea44f2eb23e5e7f526771f69ef4d53d850799617cc8b47f30c66325
Instruction ID: f2d8c76f9ddf67cbb38f6d8ea5b8d8faca76bffb55d2aee61de1b3f5b217d3f9
Opcode Fuzzy Hash: 141ffae8dea44f2eb23e5e7f526771f69ef4d53d850799617cc8b47f30c66325
Instruction Fuzzy Hash: 8BE0C73222E3901FC36A9A68AC003C33BDD8F02210F0004B7EA8AC7A22E241EC1083D9

Function 023B0F38 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2427343669.00000000023B0000.00000040.00000800.00020000.00000000.sdmp, Offset: 023B0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_23b0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9caf8e6ffd78e11194c81978afb5e7e3e62e4fe764fc335b6433a5af85a01d45
Instruction ID: 175e8e476578305c0cc5e3f7d9eea9c46e4189e53239bb758b91151638f61326
Opcode Fuzzy Hash: 9caf8e6ffd78e11194c81978afb5e7e3e62e4fe764fc335b6433a5af85a01d45
Instruction Fuzzy Hash: CCD01731E00109EF8B40EFB8E90155DBBF9EB84300F1081AD9508E7210EA756F009B94

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report juwXcVX5AK.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_juwXcVX5AK.exe_bfe27b7320ad53d947e34bb313186fe1a87ede_980bb77e_75f5b610-552d-4915-9cc3-ff29b87733dc\Report.wer

C:\ProgramData\Microsoft\Windows\WER\Temp\WER7A4E.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WER7AEC.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WER7B0C.tmp.xml

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Honda.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\MSBuild.exe.log

C:\Users\user\AppData\Local\Temp\Honda\Honda.exe

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleApp_d00173b1dd6d48babf9585781e66139c.lnk

C:\Windows\appcompat\Programs\Amcache.hve

\Device\ConDrv

Static File Info

General

File Icon

Static PE Info

General

Authenticode Signature

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Windows Analysis Report
juwXcVX5AK.exe

Function 00F42F7C Relevance: 1.6, APIs: 1, Instructions: 55
memoryCOMMON

Function 00F5C9D4 Relevance: 7.7, APIs: 5, Instructions: 202
COMMON

Function 00F5DDAA Relevance: 3.2, APIs: 2, Instructions: 177
COMMON

Function 00F5762C Relevance: 3.0, APIs: 2, Instructions: 34
COMMONLIBRARYCODE

Function 00F5D9AE Relevance: 1.6, APIs: 1, Instructions: 147
COMMON

Function 00F457E2 Relevance: 1.5, APIs: 1, Instructions: 17
COMMON