Edit tour

Windows Analysis Report
juwXcVX5AK.exe

Overview

General Information

Sample name:	juwXcVX5AK.exe renamed because original name is a hash value
Original sample name:	0bdab914290343e6ab408211372e1c1f.exe
Analysis ID:	1540305
MD5:	0bdab914290343e6ab408211372e1c1f
SHA1:	989b6da6765a24d553afb4045f3309515872f946
SHA256:	0a87f74121279e7b54007f092a1209b2424c69ed6242286dfb0159e453c5c9dc
Tags:	exeuser-abuse_ch
Infos:

Detection

Score:	80
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

AI detected suspicious sample

Allocates memory in foreign processes

Injects a PE file into a foreign processes

Machine Learning detection for sample

Sigma detected: New RUN Key Pointing to Suspicious Folder

Writes to foreign memory regions

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks if the current process is being debugged

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates a start menu entry (Start Menu\Programs\Startup)

Detected potential crypto function

Drops PE files

Found evasive API chain (date check)

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

One or more processes crash

PE / OLE file has an invalid certificate

PE file contains sections with non-standard names

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Startup Folder File Write

Stores files to the Windows start menu directory

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

juwXcVX5AK.exe (PID: 6036 cmdline: "C:\Users\user\Desktop\juwXcVX5AK.exe" MD5: 0BDAB914290343E6AB408211372E1C1F)

MSBuild.exe (PID: 2752 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

Honda.exe (PID: 5988 cmdline: "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

conhost.exe (PID: 5328 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

WerFault.exe (PID: 4176 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 6036 -s 272 MD5: C31336C1EFC2CCB44B4326EA793040F2)

Honda.exe (PID: 4256 cmdline: "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

conhost.exe (PID: 6448 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

Honda.exe (PID: 4892 cmdline: "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

conhost.exe (PID: 3172 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

Honda.exe (PID: 2444 cmdline: "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

conhost.exe (PID: 988 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Sigma Signatures

System Summary

Sigma detected: New RUN Key Pointing to Suspicious Folder

Source: Registry Key set

Author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing: Data: Details: "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe", EventID: 13, EventType: SetValue, Image: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe, ProcessId: 2752, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\GoogleApp_14c9854ea58d477badaee96b0c7755cc

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe", EventID: 13, EventType: SetValue, Image: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe, ProcessId: 2752, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\GoogleApp_14c9854ea58d477badaee96b0c7755cc

Sigma detected: Startup Folder File Write

Source: File created

Author: Roberto Rodriguez (Cyb3rWard0g), OTR (Open Threat Research): Data: EventID: 11, Image: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe, ProcessId: 2752, TargetFilename: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleApp_a8215e8c5ffe450d961f8808893dfacd.lnk

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: juwXcVX5AK.exe

Avira: detected

Multi AV Scanner detection for submitted file

Source: juwXcVX5AK.exe

ReversingLabs: Detection: 68%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.8% probability

Machine Learning detection for sample

Source: juwXcVX5AK.exe

Joe Sandbox ML: detected

Source: juwXcVX5AK.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49771 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.6:49730 version: TLS 1.2

Source: juwXcVX5AK.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source:

Binary string: f:\binaries\Intermediate\ndp_msbuild\xmakecommandline.csproj_1613737345\objr\x86\MSBuild.pdb source: Honda.exe, 00000006.00000000.2149499359.0000000000F02000.00000002.00000001.01000000.00000008.sdmp, Honda.exe.2.dr

Source: C:\Users\user\Desktop\juwXcVX5AK.exe

Code function: 0_2_0046D2FE FindFirstFileExW,

0_2_0046D2FE

Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49771 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.149.23
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.149.23
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.149.23
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.149.23
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.149.23
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.149.23

Source: juwXcVX5AK.exe	String found in binary or memory: http://crl.comodoca.com/AAACertificateServices.crl04
Source: juwXcVX5AK.exe	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y
Source: juwXcVX5AK.exe	String found in binary or memory: http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0
Source: juwXcVX5AK.exe	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z
Source: juwXcVX5AK.exe	String found in binary or memory: http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0
Source: juwXcVX5AK.exe	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#
Source: juwXcVX5AK.exe	String found in binary or memory: http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#
Source: juwXcVX5AK.exe	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#
Source: juwXcVX5AK.exe	String found in binary or memory: http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#
Source: juwXcVX5AK.exe	String found in binary or memory: http://ocsp.comodoca.com0
Source: juwXcVX5AK.exe	String found in binary or memory: http://ocsp.sectigo.com0
Source: Amcache.hve.5.dr	String found in binary or memory: http://upx.sf.net
Source: juwXcVX5AK.exe	String found in binary or memory: https://sectigo.com/CPS0

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443

Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.6:49730 version: TLS 1.2

Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_0046F840	0_2_0046F840
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00452805	0_2_00452805
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_004710A3	0_2_004710A3
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_0045F9EC	0_2_0045F9EC
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00452A0F	0_2_00452A0F
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00459B05	0_2_00459B05
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00467C32	0_2_00467C32
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_0046943C	0_2_0046943C
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_0045FD34	0_2_0045FD34
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00462D90	0_2_00462D90
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_00EE0848	2_2_00EE0848
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_00EE9A30	2_2_00EE9A30
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_00EE3108	2_2_00EE3108
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_00EE9A68	2_2_00EE9A68
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_00EE0847	2_2_00EE0847
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_00EE0DB3	2_2_00EE0DB3
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_00EE07B0	2_2_00EE07B0
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 6_2_01772788	6_2_01772788
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 6_2_01775A41	6_2_01775A41
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 6_2_01771E2F	6_2_01771E2F
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 8_2_02745A41	8_2_02745A41
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 8_2_02742788	8_2_02742788
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 8_2_02741E2F	8_2_02741E2F
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 13_2_010D1CC0	13_2_010D1CC0
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 13_2_010D2788	13_2_010D2788
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 13_2_010D5A41	13_2_010D5A41
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 15_2_01171CC0	15_2_01171CC0
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 15_2_01172788	15_2_01172788
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Code function: 15_2_01175A41	15_2_01175A41

Source: C:\Users\user\Desktop\juwXcVX5AK.exe

Code function: String function: 0045A280 appears 50 times

Source: C:\Users\user\Desktop\juwXcVX5AK.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 6036 -s 272

Source: juwXcVX5AK.exe

Static PE information: invalid certificate

Source: juwXcVX5AK.exe	Binary or memory string: OriginalFilename vs juwXcVX5AK.exe
Source: juwXcVX5AK.exe, 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameLKSM.exe< vs juwXcVX5AK.exe

Source: juwXcVX5AK.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: Honda.exe.2.dr, TaskParameter.cs	Task registration methods: 'CreateNewTaskItemFrom'
Source: Honda.exe.2.dr, OutOfProcTaskHostNode.cs	Task registration methods: 'RegisterTaskObject', 'UnregisterPacketHandler', 'RegisterPacketHandler', 'UnregisterTaskObject', 'GetRegisteredTaskObject'
Source: Honda.exe.2.dr, TaskLoader.cs	Task registration methods: 'CreateTask'
Source: Honda.exe.2.dr, RegisteredTaskObjectCacheBase.cs	Task registration methods: 'GetLazyCollectionForLifetime', 'RegisterTaskObject', 'DisposeObjects', 'IsCollectionEmptyOrUncreated', 'UnregisterTaskObject', 'DisposeCacheObjects', 'GetRegisteredTaskObject', 'GetCollectionForLifetime'

Source: Honda.exe.2.dr, NodeEndpointOutOfProcBase.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent(bool)
Source: Honda.exe.2.dr, NodeEndpointOutOfProcBase.cs	Security API names: System.IO.Pipes.PipeSecurity.AddAccessRule(System.IO.Pipes.PipeAccessRule)
Source: Honda.exe.2.dr, NodeEndpointOutOfProcBase.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: Honda.exe.2.dr, CommunicationsUtilities.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: Honda.exe.2.dr, CommunicationsUtilities.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()

Source: Honda.exe, 00000008.00000002.2250900108.0000000002911000.00000004.00000800.00020000.00000000.sdmp, Honda.exe, 0000000D.00000002.2333784174.0000000002D51000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: q0C:\Users\user\AppData\Local\Temp\Honda\*.sln
Source: Honda.exe, 00000008.00000002.2249947551.0000000000A82000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\C:\Users\user\AppData\Local\Temp\Honda\<.sln
Source: Honda.exe, 00000006.00000002.2163863536.0000000003161000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: C:\Users\user\Desktop\*.sln
Source: Honda.exe, 0000000F.00000002.2412901514.0000000002B31000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: qUC:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*.sln
Source: Honda.exe, 00000006.00000000.2149499359.0000000000F02000.00000002.00000001.01000000.00000008.sdmp, Honda.exe.2.dr	Binary or memory string: .configAMSBUILDDIRECTORYDELETERETRYCOUNTCMSBUILDDIRECTORYDELETRETRYTIMEOUT.sln
Source: Honda.exe, 00000006.00000000.2149499359.0000000000F02000.00000002.00000001.01000000.00000008.sdmp, Honda.exe.2.dr	Binary or memory string: MSBuild MyApp.sln /t:Rebuild /p:Configuration=Release
Source: Honda.exe, 00000006.00000000.2149499359.0000000000F02000.00000002.00000001.01000000.00000008.sdmp, Honda.exe.2.dr	Binary or memory string: f:\binaries\Intermediate\ndp_msbuild\xmakecommandline.csproj_1613737345\objr\x86\MSBuild.pdb
Source: Honda.exe, 00000006.00000002.2162115085.000000000161D000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: \??\C:\Users\user\Desktop\<.slnb
Source: Honda.exe, 00000006.00000002.2163863536.0000000003161000.00000004.00000800.00020000.00000000.sdmp, Honda.exe, 00000006.00000000.2149499359.0000000000F02000.00000002.00000001.01000000.00000008.sdmp, Honda.exe, 00000008.00000002.2250900108.0000000002911000.00000004.00000800.00020000.00000000.sdmp, Honda.exe, 0000000D.00000002.2333784174.0000000002D51000.00000004.00000800.00020000.00000000.sdmp, Honda.exe, 0000000F.00000002.2412901514.0000000002B31000.00000004.00000800.00020000.00000000.sdmp, Honda.exe.2.dr	Binary or memory string: *.sln
Source: Honda.exe, 00000006.00000000.2149499359.0000000000F02000.00000002.00000001.01000000.00000008.sdmp, Honda.exe.2.dr	Binary or memory string: MSBuild MyApp.csproj /t:Clean
Source: Honda.exe, 00000006.00000000.2149499359.0000000000F02000.00000002.00000001.01000000.00000008.sdmp, Honda.exe.2.dr	Binary or memory string: /ignoreprojectextensions:.sln
Source: Honda.exe, 00000006.00000000.2149499359.0000000000F02000.00000002.00000001.01000000.00000008.sdmp, Honda.exe.2.dr	Binary or memory string: MSBUILD : error MSB1048: Solution files cannot be debugged directly. Run MSBuild first with an environment variable MSBUILDEMITSOLUTION=1 to create a corresponding ".sln.metaproj" file. Then debug that.

Source: classification engine

Classification label: mal80.evad.winEXE@13/13@0/0

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleApp_a8215e8c5ffe450d961f8808893dfacd.lnk

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5328:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3172:120:WilError_03
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess6036
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6448:120:WilError_03

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

File created: C:\Users\user\AppData\Local\Temp\Honda

Jump to behavior

Source: juwXcVX5AK.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\juwXcVX5AK.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: juwXcVX5AK.exe

ReversingLabs: Detection: 68%

Source: unknown	Process created: C:\Users\user\Desktop\juwXcVX5AK.exe "C:\Users\user\Desktop\juwXcVX5AK.exe"
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 6036 -s 272
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process created: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process created: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"	Jump to behavior

Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: scrrun.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{72C24DD5-D70A-438B-8A42-98424B88AFB8}\InProcServer32

Jump to behavior

Source: GoogleApp_a8215e8c5ffe450d961f8808893dfacd.lnk.2.dr

LNK file: ..\..\..\..\..\..\Local\Temp\Honda\Honda.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: juwXcVX5AK.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: juwXcVX5AK.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: juwXcVX5AK.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: juwXcVX5AK.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: juwXcVX5AK.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: juwXcVX5AK.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: juwXcVX5AK.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source: juwXcVX5AK.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:

Source: juwXcVX5AK.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: juwXcVX5AK.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: juwXcVX5AK.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: juwXcVX5AK.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: juwXcVX5AK.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Source: juwXcVX5AK.exe

Static PE information: section name: .bsp

Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_0045992C push ecx; ret	0_2_0045993F
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00452F17 push eax; ret	0_2_00452F76
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 2_2_00EE7EDE pushad ; iretd	2_2_00EE7EDF

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

File created: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe

Jump to dropped file

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleApp_a8215e8c5ffe450d961f8808893dfacd.lnk

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleApp_a8215e8c5ffe450d961f8808893dfacd.lnk

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run GoogleApp_14c9854ea58d477badaee96b0c7755cc			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run GoogleApp_14c9854ea58d477badaee96b0c7755cc			Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: EE0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 2B80000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 1160000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 1770000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 3160000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 5160000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 2740000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 2910000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 4910000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 10D0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 2D50000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 4D50000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 1170000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 2B30000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Memory allocated: 1330000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Users\user\Desktop\juwXcVX5AK.exe

Evasive API call chain: GetSystemTimeAsFileTime,DecisionNodes

graph_0-19950

Source: C:\Users\user\Desktop\juwXcVX5AK.exe

API coverage: 3.8 %

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 4208	Thread sleep count: 232 > 30	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5720	Thread sleep count: 68 > 30	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 2976	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe TID: 4872	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe TID: 5260	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe TID: 5236	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe TID: 2032	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Users\user\Desktop\juwXcVX5AK.exe

Code function: 0_2_0046D2FE FindFirstFileExW,

0_2_0046D2FE

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Windows\System32\conhost.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior

Source: Amcache.hve.5.dr	Binary or memory string: VMware
Source: Amcache.hve.5.dr	Binary or memory string: VMware Virtual USB Mouse
Source: Amcache.hve.5.dr	Binary or memory string: vmci.syshbin
Source: Amcache.hve.5.dr	Binary or memory string: VMware, Inc.
Source: Amcache.hve.5.dr	Binary or memory string: VMware20,1hbin@
Source: Amcache.hve.5.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: Amcache.hve.5.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.5.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.5.dr	Binary or memory string: VMware-42 27 80 4d 99 30 0e 9c-c1 9b 2a 23 ea 1f c4 20
Source: Amcache.hve.5.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.5.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: Amcache.hve.5.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.5.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.5.dr	Binary or memory string: vmci.sys
Source: Amcache.hve.5.dr	Binary or memory string: vmci.syshbin`
Source: Amcache.hve.5.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: Amcache.hve.5.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.5.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.5.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.5.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.5.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: Amcache.hve.5.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: Amcache.hve.5.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.5.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.5.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.5.dr	Binary or memory string: VMware VMCI Bus Device
Source: Amcache.hve.5.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.5.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: Amcache.hve.5.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563

Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Process queried: DebugPort			Jump to behavior
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Process queried: DebugPort			Jump to behavior

Source: C:\Users\user\Desktop\juwXcVX5AK.exe

Code function: 0_2_00452F17 LdrInitializeThunk,

0_2_00452F17

Source: C:\Users\user\Desktop\juwXcVX5AK.exe

Code function: 0_2_0045A085 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

0_2_0045A085

Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00452F7C mov edi, dword ptr fs:[00000030h]	0_2_00452F7C
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00463BBE mov ecx, dword ptr fs:[00000030h]	0_2_00463BBE
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_0046CC6F mov eax, dword ptr fs:[00000030h]	0_2_0046CC6F

Source: C:\Users\user\Desktop\juwXcVX5AK.exe

Code function: 0_2_0046E177 GetProcessHeap,

0_2_0046E177

Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_0045A085 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_0045A085
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_0045A212 SetUnhandledExceptionFilter,	0_2_0045A212
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00460B69 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_00460B69
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: 0_2_00459E74 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_00459E74

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Allocates memory in foreign processes

Source: C:\Users\user\Desktop\juwXcVX5AK.exe

Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000 protect: page execute and read and write

Jump to behavior

Injects a PE file into a foreign processes

Source: C:\Users\user\Desktop\juwXcVX5AK.exe

Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000 value starts with: 4D5A

Jump to behavior

Writes to foreign memory regions

Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000	Jump to behavior
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 402000	Jump to behavior
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 410000	Jump to behavior
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 412000	Jump to behavior
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 998008	Jump to behavior

Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process created: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"			Jump to behavior

Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: EnumSystemLocalesW,	0_2_0047007C
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: EnumSystemLocalesW,	0_2_00467026
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: EnumSystemLocalesW,	0_2_00470031
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: EnumSystemLocalesW,	0_2_00470117
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,	0_2_004701A2
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: GetLocaleInfoW,	0_2_004703F5
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: GetLocaleInfoW,	0_2_004674EF
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	0_2_0047051E
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: GetACP,IsValidCodePage,GetLocaleInfoW,	0_2_0046FD8F
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: GetLocaleInfoW,	0_2_00470624
Source: C:\Users\user\Desktop\juwXcVX5AK.exe	Code function: GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	0_2_004706F3

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build.Framework\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Framework.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Build\v4.0_4.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.dll VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\juwXcVX5AK.exe

Code function: 0_2_0045A2C5 GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

0_2_0045A2C5

Source: Amcache.hve.5.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.5.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.5.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.5.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23090.2008-0\msmpeng.exe
Source: Amcache.hve.5.dr	Binary or memory string: MsMpEng.exe

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	311 Process Injection	1 Masquerading	OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 Native API	21 Registry Run Keys / Startup Folder	1 Scheduled Task/Job	1 Disable or Modify Tools	LSASS Memory	41 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	1 Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 DLL Side-Loading	21 Registry Run Keys / Startup Folder	41 Virtualization/Sandbox Evasion	Security Account Manager	41 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	Steganography	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 DLL Side-Loading	311 Process Injection	NTDS	3 File and Directory Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	22 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Obfuscated Files or Information	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label
juwXcVX5AK.exe	68%	ReversingLabs	Win32.Trojan.LummaC
juwXcVX5AK.exe	100%	Avira	TR/Kryptik.uxqhb
juwXcVX5AK.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	0%	ReversingLabs

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0	0%	URL Reputation	safe
http://upx.sf.net	0%	URL Reputation	safe
https://sectigo.com/CPS0	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0	0%	URL Reputation	safe
http://ocsp.sectigo.com0	0%	URL Reputation	safe
http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z	0%	URL Reputation	safe
http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://crt.sectigo.com/SectigoPublicCodeSigningCAR36.crt0#	juwXcVX5AK.exe	false	URL Reputation: safe	unknown
http://crl.sectigo.com/SectigoPublicTimeStampingRootR46.crl0	juwXcVX5AK.exe	false	URL Reputation: safe	unknown
http://upx.sf.net	Amcache.hve.5.dr	false	URL Reputation: safe	unknown
https://sectigo.com/CPS0	juwXcVX5AK.exe	false	URL Reputation: safe	unknown
http://crt.sectigo.com/SectigoPublicTimeStampingCAR36.crt0#	juwXcVX5AK.exe	false	URL Reputation: safe	unknown
http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#	juwXcVX5AK.exe	false	URL Reputation: safe	unknown
http://crl.sectigo.com/SectigoPublicCodeSigningCAR36.crl0y	juwXcVX5AK.exe	false	URL Reputation: safe	unknown
http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0	juwXcVX5AK.exe	false	URL Reputation: safe	unknown
http://ocsp.sectigo.com0	juwXcVX5AK.exe	false	URL Reputation: safe	unknown
http://crl.sectigo.com/SectigoPublicTimeStampingCAR36.crl0z	juwXcVX5AK.exe	false	URL Reputation: safe	unknown
http://crt.sectigo.com/SectigoPublicTimeStampingRootR46.p7c0#	juwXcVX5AK.exe	false	URL Reputation: safe	unknown

World Map of Contacted IPs

⊘No contacted IP infos

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540305
Start date and time:	2024-10-23 17:09:38 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 31s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run name:	Run with higher sleep bypass
Number of analysed new started processes analysed:	19
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	juwXcVX5AK.exe renamed because original name is a hash value
Original Sample Name:	0bdab914290343e6ab408211372e1c1f.exe
Detection:	MAL
Classification:	mal80.evad.winEXE@13/13@0/0
EGA Information:	Successful, ratio: 16.7%
HCA Information:	Successful, ratio: 93% Number of executed functions: 140 Number of non-executed functions: 55
Cookbook Comments:	Found application associated with file extension: .exe Sleeps bigger than 100000000ms are automatically reduced to 1000ms

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 40.126.31.73, 40.126.31.67, 40.126.31.71, 20.190.159.64, 20.190.159.0, 20.190.159.68, 20.190.159.71, 20.190.159.4, 40.115.3.253, 192.229.221.95, 20.42.65.92, 199.232.210.172, 172.202.163.200, 20.242.39.171, 20.12.23.50, 13.85.23.206, 20.109.210.53
Excluded domains from analysis (whitelisted): azurefd-t-fb-prod.trafficmanager.net, slscr.update.microsoft.com, otelrules.afd.azureedge.net, wns.notify.trafficmanager.net, ocsp.digicert.com, login.live.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, prdv4a.aadg.msidentity.com, client.wns.windows.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, www.tm.v4.a.prd.aadg.akadns.net, ctldl.windowsupdate.com, login.msa.msidentity.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, onedsblobprdeus17.eastus.cloudapp.azure.com, blobcollector.events.data.trafficmanager.net, azureedge-t-prod.trafficmanager.net, umwatson.events.data.microsoft.com, www.tm.lg.prod.aadmsa.trafficmanager.net
Execution Graph export aborted for target Honda.exe, PID 2444 because it is empty
Execution Graph export aborted for target Honda.exe, PID 4256 because it is empty
Execution Graph export aborted for target Honda.exe, PID 4892 because it is empty
Execution Graph export aborted for target Honda.exe, PID 5988 because it is empty
Execution Graph export aborted for target MSBuild.exe, PID 2752 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
VT rate limit hit for: juwXcVX5AK.exe

Simulations

Behavior and APIs

Time	Type	Description
17:10:32	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run GoogleApp_14c9854ea58d477badaee96b0c7755cc "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
17:10:40	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run GoogleApp_14c9854ea58d477badaee96b0c7755cc "C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
17:10:49	Autostart	Run: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleApp_a8215e8c5ffe450d961f8808893dfacd.lnk

Joe Sandbox View / Context

IPs

⊘No context

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
bg.microsoft.map.fastly.net	b157p9L0c1.exe	Get hash	malicious	Vidar	Browse	199.232.214.172
	igCCUqSW2T.exe	Get hash	malicious	Unknown	Browse	199.232.210.172
	roquette October.pdf	Get hash	malicious	HTMLPhisher	Browse	199.232.214.172
	http://wxqlb.ecobusinessegypt.com/4Upeae17759oIun1207nsacmhsouq29959VLTMIPDLABHITRZ3224VGST20749x12	Get hash	malicious	Unknown	Browse	199.232.214.172
	https://hnamedmr.ukremediatlon.co.uk/LVGwXwqP	Get hash	malicious	Unknown	Browse	199.232.210.172
	https://clinicaotoface1.websiteseguro.com/no/ai/	Get hash	malicious	Unknown	Browse	199.232.210.172
	file.exe	Get hash	malicious	Unknown	Browse	199.232.214.172
	Jwhite Pay Increase EFile997843.pdf	Get hash	malicious	Unknown	Browse	199.232.210.172
	https://get.massive.io/01JAV1F4JHAVFK2T933H9X3447?secret=XXfezwrLxDLZFdqU	Get hash	malicious	Unknown	Browse	199.232.210.172
s-part-0017.t-0009.fb-t-msedge.net	qBtDOzhQnS.exe	Get hash	malicious	Unknown	Browse	13.107.253.45
	044SqLy1H3.exe	Get hash	malicious	LummaC	Browse	13.107.253.45
	ufp4rvU3SP.exe	Get hash	malicious	Unknown	Browse	13.107.253.45
	igCCUqSW2T.exe	Get hash	malicious	Unknown	Browse	13.107.253.45
	otq9AG1EIk.exe	Get hash	malicious	Unknown	Browse	13.107.253.45
	SecuriteInfo.com.Win32.Trojan.PSE.1S437JY.21210.19567.exe	Get hash	malicious	Unknown	Browse	13.107.253.45
	tfduJDS9iM.exe	Get hash	malicious	Unknown	Browse	13.107.253.45
	https://1drv.ms/o/c/6c73e1f3356d6c81/EvfBo1LISVpEg8JGFA7u8GsBL0LmooIAfd5Q39ROhQ0Lhw?e=ZTugWV	Get hash	malicious	HtmlDropper	Browse	13.107.253.45
	roquette October.pdf	Get hash	malicious	HTMLPhisher	Browse	13.107.253.45
	https://mydomaincloud.page.link/FR	Get hash	malicious	Unknown	Browse	13.107.253.45
fp2e7a.wpc.phicdn.net	qBtDOzhQnS.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	ufp4rvU3SP.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	igCCUqSW2T.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	qBtDOzhQnS.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	https://email.email.pandadoc.net/c/eJxUkMtu2zoQhp9G3NkQhxQlLbRIjo8QpKjRS5qi3QTD4TCmZYuyRNm1nr4w0PSyGwzmG3z_7xprlPWVcJHmI_fpJbjmguOnLn78cm0vTw-4fw8_dttdENzIEmoji9oYsWsAtST2VKmiVOSoJqdyVNYa9pUnKUIDOWiZA0hTgDZrUNoXnphIopaly3TORwyH9YC9Qxdp3XMSYXpJIxKjPXCTxpnFodmlNEyZusugzaDFYfiDUDxm0L7pZ9CeIVNtih33mdpIlF4hGzaGIM8ta2mV83UNlbFYlJCbQhsoM9WKPqbgA2EKsb_VACXX1jKtlM9hpQHcqiKvVsZXuvB16WTBIo6v2IflN7T_8Ly_7-p6G_bz4wbM8n1Sp6MYG7ePPU-Zzu186Pg0H4abuhj5HKZfrF4mPLvT5vndMpR0h183E0MpUvOW7q9xlXB85X820-3i3IC4xLGbBiS-Pf3v-o2eUuge_l-21bG_2vt-fvz8MwAA__9XraZ6	Get hash	malicious	Unknown	Browse	192.229.221.95
	ufp4rvU3SP.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	igCCUqSW2T.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	tfduJDS9iM.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	otq9AG1EIk.exe	Get hash	malicious	Unknown	Browse	192.229.221.95

ASNs

⊘No context

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	qBtDOzhQnS.exe	Get hash	malicious	Unknown	Browse	173.222.162.64
	https://email.email.pandadoc.net/c/eJxUkMtu2zoQhp9G3NkQhxQlLbRIjo8QpKjRS5qi3QTD4TCmZYuyRNm1nr4w0PSyGwzmG3z_7xprlPWVcJHmI_fpJbjmguOnLn78cm0vTw-4fw8_dttdENzIEmoji9oYsWsAtST2VKmiVOSoJqdyVNYa9pUnKUIDOWiZA0hTgDZrUNoXnphIopaly3TORwyH9YC9Qxdp3XMSYXpJIxKjPXCTxpnFodmlNEyZusugzaDFYfiDUDxm0L7pZ9CeIVNtih33mdpIlF4hGzaGIM8ta2mV83UNlbFYlJCbQhsoM9WKPqbgA2EKsb_VACXX1jKtlM9hpQHcqiKvVsZXuvB16WTBIo6v2IflN7T_8Ly_7-p6G_bz4wbM8n1Sp6MYG7ePPU-Zzu186Pg0H4abuhj5HKZfrF4mPLvT5vndMpR0h183E0MpUvOW7q9xlXB85X820-3i3IC4xLGbBiS-Pf3v-o2eUuge_l-21bG_2vt-fvz8MwAA__9XraZ6	Get hash	malicious	Unknown	Browse	173.222.162.64
	otq9AG1EIk.exe	Get hash	malicious	Unknown	Browse	173.222.162.64
	KO8mPIAMHh.exe	Get hash	malicious	Unknown	Browse	173.222.162.64
	https://app.oneflow.com/api/agreements/8821185/assets/b81e65c04f5acdc6369b89fe6d9aba378483abd6.pdf?at=490c38a4784c740c75de3531f3291888226b3acd	Get hash	malicious	Unknown	Browse	173.222.162.64
	https://app.creatopy.com/share/d/qvnqyxdo8o7m	Get hash	malicious	Unknown	Browse	173.222.162.64
	Safe & Sound shared new proposal with you...eml	Get hash	malicious	Unknown	Browse	173.222.162.64
	https://link.edgepilot.com/s/c12cb3f0/yNbpJS7pykGhMMzxNnzxvw?u=https://hinproperty.com/	Get hash	malicious	Unknown	Browse	173.222.162.64
	https://email.email.pandadoc.net/c/eJxUkMtu2zoQhp9G3NkQhxQlLbRIjo8QpKjRS5qi3QTD4TCmZYuyRNm1nr4w0PSyGwzmG3z_7xprlPWVcJHmI_fpJbjmguOnLn78cm0vTw-4fw8_dttdENzIEmoji9oYsWsAtST2VKmiVOSoJqdyVNYa9pUnKUIDOWiZA0hTgDZrUNoXnphIopaly3TORwyH9YC9Qxdp3XMSYXpJIxKjPXCTxpnFodmlNEyZusugzaDFYfiDUDxm0L7pZ9CeIVNtih33mdpIlF4hGzaGIM8ta2mV83UNlbFYlJCbQhsoM9WKPqbgA2EKsb_VACXX1jKtlM9hpQHcqiKvVsZXuvB16WTBIo6v2IflN7T_8Ly_7-p6G_bz4wbM8n1Sp6MYG7ePPU-Zzu186Pg0H4abuhj5HKZfrF4mPLvT5vndMpR0h183E0MpUvOW7q9xlXB85X820-3i3IC4xLGbBiS-Pf3v-o2eUuge_l-21bG_2vt-fvz8MwAA__9XraZ6	Get hash	malicious	Unknown	Browse	173.222.162.64
	https://email.email.pandadoc.net/c/eJxUkMtu2zoQhp9G3NkQhxQlLbRIjo8QpKjRS5qi3QTD4TCmZYuyRNm1nr4w0PSyGwzmG3z_7xprlPWVcJHmI_fpJbjmguOnLn78cm0vTw-4fw8_dttdENzIEmoji9oYsWsAtST2VKmiVOSoJqdyVNYa9pUnKUIDOWiZA0hTgDZrUNoXnphIopaly3TORwyH9YC9Qxdp3XMSYXpJIxKjPXCTxpnFodmlNEyZusugzaDFYfiDUDxm0L7pZ9CeIVNtih33mdpIlF4hGzaGIM8ta2mV83UNlbFYlJCbQhsoM9WKPqbgA2EKsb_VACXX1jKtlM9hpQHcqiKvVsZXuvB16WTBIo6v2IflN7T_8Ly_7-p6G_bz4wbM8n1Sp6MYG7ePPU-Zzu186Pg0H4abuhj5HKZfrF4mPLvT5vndMpR0h183E0MpUvOW7q9xlXB85X820-3i3IC4xLGbBiS-Pf3v-o2eUuge_l-21bG_2vt-fvz8MwAA__9XraZ6&c=E,1,2gHcyudOM92A_NmE_JJ2Jf4eSYKpBTwM7ropHz3Ql6_j5lFXsyou3Z5LdPEawxCEoxgxUpv-_yWBnzkgF9WshW_jxAqyOX5modTBn9If&typo=1	Get hash	malicious	Unknown	Browse	173.222.162.64
28a2c9bd18a11de089ef85a160da29e4	qBtDOzhQnS.exe	Get hash	malicious	Unknown	Browse	13.107.253.45
	igCCUqSW2T.exe	Get hash	malicious	Unknown	Browse	13.107.253.45
	qBtDOzhQnS.exe	Get hash	malicious	Unknown	Browse	13.107.253.45
	sample.pdf	Get hash	malicious	HtmlDropper	Browse	13.107.253.45
	https://email.email.pandadoc.net/c/eJxUkMtu2zoQhp9G3NkQhxQlLbRIjo8QpKjRS5qi3QTD4TCmZYuyRNm1nr4w0PSyGwzmG3z_7xprlPWVcJHmI_fpJbjmguOnLn78cm0vTw-4fw8_dttdENzIEmoji9oYsWsAtST2VKmiVOSoJqdyVNYa9pUnKUIDOWiZA0hTgDZrUNoXnphIopaly3TORwyH9YC9Qxdp3XMSYXpJIxKjPXCTxpnFodmlNEyZusugzaDFYfiDUDxm0L7pZ9CeIVNtih33mdpIlF4hGzaGIM8ta2mV83UNlbFYlJCbQhsoM9WKPqbgA2EKsb_VACXX1jKtlM9hpQHcqiKvVsZXuvB16WTBIo6v2IflN7T_8Ly_7-p6G_bz4wbM8n1Sp6MYG7ePPU-Zzu186Pg0H4abuhj5HKZfrF4mPLvT5vndMpR0h183E0MpUvOW7q9xlXB85X820-3i3IC4xLGbBiS-Pf3v-o2eUuge_l-21bG_2vt-fvz8MwAA__9XraZ6	Get hash	malicious	Unknown	Browse	13.107.253.45
	ufp4rvU3SP.exe	Get hash	malicious	Unknown	Browse	13.107.253.45
	igCCUqSW2T.exe	Get hash	malicious	Unknown	Browse	13.107.253.45
	otq9AG1EIk.exe	Get hash	malicious	Unknown	Browse	13.107.253.45
	http://docusign.net	Get hash	malicious	Unknown	Browse	13.107.253.45

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\Honda\Honda.exe	qBtDOzhQnS.exe	Get hash	malicious	Unknown	Browse
	ufp4rvU3SP.exe	Get hash	malicious	Unknown	Browse
	igCCUqSW2T.exe	Get hash	malicious	Unknown	Browse
	qBtDOzhQnS.exe	Get hash	malicious	Unknown	Browse
	ufp4rvU3SP.exe	Get hash	malicious	Unknown	Browse
	igCCUqSW2T.exe	Get hash	malicious	Unknown	Browse
	tfduJDS9iM.exe	Get hash	malicious	Unknown	Browse
	otq9AG1EIk.exe	Get hash	malicious	Unknown	Browse
	KO8mPIAMHh.exe	Get hash	malicious	Unknown	Browse

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_juwXcVX5AK.exe_bfe27b7320ad53d947e34bb313186fe1a87ede_980bb77e_836babe6-b6a2-44ae-88f6-3ef52dbf32ed\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	0.6559103657678925
Encrypted:	false
SSDEEP:	192:Umfg6BlG/YS80BU/cQMjhzuiFWZ24IO8T1Ie:k6q/R3BU/wjhzuiFWY4IO8+e
MD5:	1150D4F09CA920B1BCF1426B869E75C8
SHA1:	17D902FB74AA7490EA42C8F52EB7298181267A3C
SHA-256:	1A4103B4C507A4E153F5D77853A9A65DCC8238A96405699253FE04A1A6F7CA16
SHA-512:	D4B2995A42714D3FAAE939F535C893C99DC4E569910B47C36F23B581F82EFEF6E60642F1D8B875D3ADB5EC74C4FA1BE5DED8AC4117BEAEBB3730678CCF20BBC7
Malicious:	true
Reputation:	low
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.B.E.X.....E.v.e.n.t.T.i.m.e.=.1.3.3.7.4.1.6.9.8.3.0.8.6.0.6.0.2.1.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.7.4.1.6.9.8.3.1.5.4.8.1.0.5.7.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.8.3.6.b.a.b.e.6.-.b.6.a.2.-.4.4.a.e.-.8.8.f.6.-.3.e.f.5.2.d.b.f.3.2.e.d.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.6.7.0.e.d.2.7.4.-.d.2.7.1.-.4.3.1.6.-.a.3.c.1.-.9.8.a.5.0.6.2.d.b.0.1.0.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.j.u.w.X.c.V.X.5.A.K...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.1.7.9.4.-.0.0.0.1.-.0.0.1.5.-.7.b.8.3.-.e.9.b.2.5.d.2.5.d.b.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.6.2.9.0.a.9.8.d.0.7.6.b.3.7.e.f.d.e.d.1.8.4.8.8.d.d.2.0.6.9.2.2.b.0.0.0.0.f.f.f.f.!.0.0.0.0.9.8.9.b.6.d.a.6.7.6.5.a.2.4.d.5.5.3.a.f.b.4.0.4.5.f.3.3.0.9.5.1.5.8.7.2.f.9.4.6.!.j.u.w.X.c.V.X.5.A.K...e.x.e.....T.a.r.g.e.t.A.p.p.V.e.r.=.2.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER239C.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 14 streams, Wed Oct 23 15:10:30 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	40420
Entropy (8bit):	1.6967384258411755
Encrypted:	false
SSDEEP:	96:568pzVPgTc6snngU68Iici77DsmT9622XGANo3aVakWyvrKVkjS68LWx4Wqx9ave:vrKQXcOv622OcJBgQ9hPlhu8Z
MD5:	E595F0AAD6C9E2EB92882F7709562018
SHA1:	488A164AA7DFD6E9ED152D28551B1148BE192034
SHA-256:	A24507EE6B690267802E9F47808DCD6C4949518A0B72400223CEA258BEC1A253
SHA-512:	ECEBECEA6A5463C1B9E95988FA15F2D968B7F4CD6FCD455FFC1F869A39EA2F1CEDAD4804E1C7480DC1CBDA77529F7C27BF17B4E4022CFA773AB1C7A143BEF3EB
Malicious:	false
Preview:	MDMP..a..... ..........g........................d...........t...............T.......8...........T...............4...........0...........................................................................................eJ..............GenuineIntel............T..............g.............................0..............,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6...................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WER240B.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	8372
Entropy (8bit):	3.6991655979865006
Encrypted:	false
SSDEEP:	192:R6l7wVeJarb6wb5tbe6Y2DBSUCgmfpu4QhLprr89bZ0sfWzm:R6lXJE6wdti6YMSUCgmfM4QhqZnfD
MD5:	0D598C283FF6809B5CBFFB707029EE6C
SHA1:	5713A3FF464E4778BF672F00DC8936FCE9F82BCB
SHA-256:	3C7D16242E07EE482FA6762A7D9B6AE25245C9B1213C09C3C5E2507F1F561421
SHA-512:	F2DDEADE1E27CD071E82F8B214D959A1A8D12EFBB754ABE381BB90AE908CC9B8549D1265A8A4819519A107C6CE6C53B5BDDCCEF2471A3E97B816C1EBDD1727FF
Malicious:	false
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.6.0.3.6.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER244A.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4696
Entropy (8bit):	4.481574846530732
Encrypted:	false
SSDEEP:	48:cvIwWl8zskJg77aI99qWpW8VYXYm8M4J7fUFJe+q8v+fn1c7Ld:uIjfiI7/L7VbJ7hK+Pe7Ld
MD5:	7BEF7D3CE07D2B00639E87B18AD47AB3
SHA1:	AEE347E3825AC11F83EC815DE85951AA88F0E577
SHA-256:	EAAA45F13168C633F45A3CB0129715AF828F44F4EFDAA4D20D7927B00BED8BDB
SHA-512:	5F303C4664901374486EE533BD62F5998CA0414074EF6B9A7DCF33EB4D7FEDEE95F3FC69DEA27DC3E8F6B0EC41BA94D0E4A30895557650B8754CFED9D4436E8D
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="556213" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Honda.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\Honda\Honda.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	841
Entropy (8bit):	5.351831766340675
Encrypted:	false
SSDEEP:	24:ML9E4KlKDE4KhKiKhPKIE4oKNzKoIvEE4xDqE4j:MxHKlYHKh3oPtHo6wvEHxDqHj
MD5:	98DCC730A3C77DCDCA7CD8717EB5D42A
SHA1:	639509210C17EB73F5DB581FA8CA46B1157D8806
SHA-256:	E3C80885BCC7FE4F349EFB0470D261E0DE273EE26D47AF09C79F1B4B2F891E49
SHA-512:	7D11C53167839D428DAE35BF759C73FC0C7C49F2DE35CC99E4F8B69CDD40DFBEEF6D355F15FAB1EED62A64AF94E7BA311C0F8E07C3DA6F3A63410CC3E9882B78
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\2192b0d5aa4aa14486ae08118d3b9fcc\System.Configuration.ni.dll",0..2,"Microsoft.Build.Framework, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..2,"Microsoft.Build, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a",0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\MSBuild.exe.log

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	636
Entropy (8bit):	5.363873409814957
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPTAOKbbDLI4MWuPJKAVKhadDLI4MNsf6cv:ML9E4KlKDE4KhKiKhwE4Tye
MD5:	43484EA7D5BD7DE47119BC063D65D7AF
SHA1:	FCE0A3922FB3E421F8EF74E9A94E60F8DE7F97F5
SHA-256:	C00C48279B0CCFF866BB59D1DD5B77C65594B86BD4D16DE0F2EFAD2778F57A23
SHA-512:	A56C0609179C003044AFEC26019EAEC0ECC772108327EB01F817B88780981289A61E795F6E8745FDEAE99D8543B57344F80A9542BDA2933787C5C8331C869820
Malicious:	false
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..3,"System.Net.Http, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Net.Http\bb5812ab3cec92427da8c5c696e5f731\System.Net.Http.ni.dll",0..

C:\Users\user\AppData\Local\Temp\Honda\Honda.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	262432
Entropy (8bit):	6.179415524830389
Encrypted:	false
SSDEEP:	3072:7a0t0yH5wCwie3NnQNLpj/Wnqvsw2XpFU4rwOeTubZSzf02RFihx2uzj:m0ny3nnKpqnZRXfw702birr/
MD5:	8FDF47E0FF70C40ED3A17014AEEA4232
SHA1:	E6256A0159688F0560B015DA4D967F41CBF8C9BD
SHA-256:	ED9884BAC608C06B7057037CC91D90E4AE5F74DD2DBCE2AF476699C6D4492D82
SHA-512:	BD69D092ED4F9C5E1F24EAF5EC79FB316469D53849DC798FAE0FCBA5E90869B77EE924C23CC6F692198FF25827AB60AD47BB46CADD6E0AADDE7731CBAFB013BE
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: qBtDOzhQnS.exe, Detection: malicious, Browse Filename: ufp4rvU3SP.exe, Detection: malicious, Browse Filename: igCCUqSW2T.exe, Detection: malicious, Browse Filename: qBtDOzhQnS.exe, Detection: malicious, Browse Filename: ufp4rvU3SP.exe, Detection: malicious, Browse Filename: igCCUqSW2T.exe, Detection: malicious, Browse Filename: tfduJDS9iM.exe, Detection: malicious, Browse Filename: otq9AG1EIk.exe, Detection: malicious, Browse Filename: KO8mPIAMHh.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....?.].........."...0..\|...B......:.... ........@.. ...............................L....`....................................O........>.............. A........................................................... ............... ..H............text...Xz... ...\|.................. ..`.rsrc....>.......@...~..............@..@.reloc..............................@..B........................H........)...................\|...........................................{.......v.(=....r...p({...-..+..}........0..%........(....-......(z.....&..}..............................0..5........(....-...-.r+..ps>...z.....i(z.....&..}......................%......>....(?...(....N..(@....oA...(....:...(B...(....:...(C...(....*....(........0..G........(....,....(....-...}......r...p(x...&.(v.....}......&..}....................7.......0..f........-.r7..ps>...z .....

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleApp_a8215e8c5ffe450d961f8808893dfacd.lnk

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Hidden, Archive, ctime=Wed Oct 23 14:10:30 2024, mtime=Wed Oct 23 14:10:30 2024, atime=Sat Dec 7 08:10:48 2019, length=262432, window=hide
Category:	dropped
Size (bytes):	1125
Entropy (8bit):	4.962510766709563
Encrypted:	false
SSDEEP:	24:8DVDAvlXgyXNRugKuMseE5ry20yERAvaMIK+E6E6XXvqygm:8DVD8l39RYsew+20yvCMIK+/iyg
MD5:	C41F61D2A1E650F61661B2D086065811
SHA1:	B6511C328C0C5DECBA90AEE7D9F6B694C06D39BC
SHA-256:	C3E21E3B4F699E4ED14FDC413179E8976DDED80D75E2DBA304208AA4F5E9EBBD
SHA-512:	494D23BF3D6F11CB62CAE5116D15EAC3CA3E87447350AC1EA2BEEEC6C5E7A0356543BA5931A7405561963FAC9EA8CCA682134098F083F7BDC9A6251EB1FE94AA
Malicious:	false
Preview:	L..................F...."...L.!.]%....$.]%..{.#7... .........................:..DG..Yr?.D..U..k0.&...&.......$..S...y..]%..}./.]%......t...CFSF..1.....EW<2..AppData...t.Y^...H.g.3..(.....gVA.G..k...@......EW<2WYMy...........................^.A.p.p.D.a.t.a...B.P.1.....WYKy..Local.<......EW<2WYMy....[.....................FL3.L.o.c.a.l.....N.1.....WYMy..Temp..:......EW<2WYMy....^......................:..T.e.m.p.....P.1.....WYPy..Honda.<......WYPyWYPy..............................H.o.n.d.a.....\.2. ....OYI".Honda.exe.D......WYPyWYPy....a...........p.............H.o.n.d.a...e.x.e.......c...............-.......b............W.s.....C:\Users\user\AppData\Local\Temp\Honda\Honda.exe..,.....\.....\.....\.....\.....\.....\.L.o.c.a.l.\.T.e.m.p.\.H.o.n.d.a.\.H.o.n.d.a...e.x.e.........\|....I.J.H..K..:...`.......X.......760639...........hT..CrF.f4... ....Jc...-...-$..hT..CrF.f4... ....Jc...-...-$.............1SPS.XF.L8C....&.m.q............/...S.-.1.-.5.-.2.1.-.2.2.4.6.1.2.2.6.5.8.-.

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.4686262728220765
Encrypted:	false
SSDEEP:	6144:ozZfpi6ceLPx9skLmb0f2ZWSP3aJG8nAgeiJRMMhA2zX4WABluuNxjDH5S:+ZHt2ZWOKnMM6bFpzj4
MD5:	13BE8DCBE1E3499B050D8BB25CBA7913
SHA1:	07D019CA59EB16302A3E5597BD6BBA233D6EE847
SHA-256:	76879A4937DC51534781A76D6F410EE54DA103D6A5D9D8789620DFB5456B8DCF
SHA-512:	D77F0E75597405268221FC2274420DBAD983813AB92A9F906349BF50B2333C2B4219D3F86E69D6DF8DDEDD5CB6A7984BAD689334B2BB0D1B9BFEDD914378A556
Malicious:	false
Preview:	regfH...H....\.Z.................... ...........\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm..N.]%...............................................................................................................................................................................................................................................................................................................................................X.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

\Device\ConDrv

Download File

Process:	C:\Users\user\AppData\Local\Temp\Honda\Honda.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	298
Entropy (8bit):	4.924206445966445
Encrypted:	false
SSDEEP:	6:zx3M1tFAbQtASR30qyMstwYVoRRZBXVN+J0fFdCsq2UTiMdH8stCal+n:zK13P30ZMt9BFN+QdCT2UftCM+
MD5:	932782CF70ED00D22C0B08B5027B4E31
SHA1:	78F460A2155D9E819B8452C281285D7E0A7AC14F
SHA-256:	F2C2477FB3FD0A30F3D3D8637EF9C774B43E940043635DF90CDD804799A2ECE7
SHA-512:	C83E72797C03CABCAB066B95BAEEBB13944143846794061CF9482EA3B283979E470930047FDAE72A6F06F51F3127FF39DAAEFAAD7557E3AD49F590B9E7B78D24
Malicious:	false
Preview:	Microsoft (R) Build user version 4.8.4084.0..[Microsoft .NET Framework, version 4.0.30319.42000]..Copyright (C) Microsoft Corporation. All rights reserved.....MSBUILD : error MSB1003: Specify a project or solution file. The current working directory does not contain a project or solution file...

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.857144210115453
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	juwXcVX5AK.exe
File size:	294'016 bytes
MD5:	0bdab914290343e6ab408211372e1c1f
SHA1:	989b6da6765a24d553afb4045f3309515872f946
SHA256:	0a87f74121279e7b54007f092a1209b2424c69ed6242286dfb0159e453c5c9dc
SHA512:	d4607bce7549ec099bfa3651623ca813da786a525663bb67aabd7378e8c7ea24b8a9b82c3bcabbcd191dbd51131617ca0a68b8b561a8e902823cef58f1dbbe38
SSDEEP:	6144:NuADjUKQebn/EWGIezYFuJ1aIxND6eAJcZalr7v:gKUKQeb/E3JRgJcglr7v
TLSH:	AD54AE21B9C0C073D52325320AE4EBB56A7DF9704E655E8B67980FBE0F70681D731A6B
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........L..v...v...v...u...v...s.a.v...r...v...w...v...w.M.v...r...v...u...v...s...v.......v.......v...t...v.Rich..v................

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x409922
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x67165FE4 [Mon Oct 21 14:06:28 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	31770ac6e89309fe8c99522fb04f055c

Authenticode Signature

Signature Valid:	false
Signature Issuer:	CN=Sectigo Public Code Signing CA R36, O=Sectigo Limited, C=GB
Signature Validation Error:	The digital signature of the object did not verify
Error Number:	-2146869232
Not Before, Not After	31/08/2023 02:00:00 31/08/2026 01:59:59
Subject Chain	CN=Privacy Technologies OU, O=Privacy Technologies OU, S=Harjumaa, C=EE
Version:	3
Thumbprint MD5:	AD1BCBF19AE2F91BB114D33B85359E56
Thumbprint SHA-1:	141D90A1BA8F61863FBEDDF7DD1D66C1D1E0B128
Thumbprint SHA-256:	A08EA2A7A257AD690B988446951E9DEF2986A2F3F546B6F0902805330F3B6B48
Serial:	00D0461B529F67189D43744E9CEFE172AE

Entrypoint Preview

Instruction
call 00007F13087D79D0h
jmp 00007F13087D6E5Fh
mov ecx, dword ptr [ebp-0Ch]
mov dword ptr fs:[00000000h], ecx
pop ecx
pop edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
push ecx
ret
mov ecx, dword ptr [ebp-10h]
xor ecx, ebp
call 00007F13087D6A02h
jmp 00007F13087D6FC2h
push eax
push dword ptr fs:[00000000h]
lea eax, dword ptr [esp+0Ch]
sub esp, dword ptr [esp+0Ch]
push ebx
push esi
push edi
mov dword ptr [eax], ebp
mov ebp, eax
mov eax, dword ptr [00432180h]
xor eax, ebp
push eax
push dword ptr [ebp-04h]
mov dword ptr [ebp-04h], FFFFFFFFh
lea eax, dword ptr [ebp-0Ch]
mov dword ptr fs:[00000000h], eax
ret
push eax
push dword ptr fs:[00000000h]
lea eax, dword ptr [esp+0Ch]
sub esp, dword ptr [esp+0Ch]
push ebx
push esi
push edi
mov dword ptr [eax], ebp
mov ebp, eax
mov eax, dword ptr [00432180h]
xor eax, ebp
push eax
mov dword ptr [ebp-10h], eax
push dword ptr [ebp-04h]
mov dword ptr [ebp-04h], FFFFFFFFh
lea eax, dword ptr [ebp-0Ch]
mov dword ptr fs:[00000000h], eax
ret
push eax
push dword ptr fs:[00000000h]
lea eax, dword ptr [esp+0Ch]
sub esp, dword ptr [esp+0Ch]
push ebx
push esi
push edi
mov dword ptr [eax], ebp
mov ebp, eax
mov eax, dword ptr [00432180h]
xor eax, ebp
push eax
mov dword ptr [ebp-10h], esp
push dword ptr [ebp-04h]
mov dword ptr [ebp-04h], FFFFFFFFh
lea eax, dword ptr [ebp-0Ch]
mov dword ptr fs:[00000000h], eax

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x30bc0	0x28	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x43000	0x1e0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x44e00	0x2e80
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x44000	0x2104	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x2e088	0x1c	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x2e0c0	0x18	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x2dfc8	0x40	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x26000	0x158	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x247c5	0x24800	82bfba9b95b9deff0c720898a64ea2d8	False	0.5836298694349316	data	6.665283343828205	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x26000	0xb3c6	0xb400	a7613c442c6a6833f7beffa9b96b2375	False	0.4263671875	data	4.901037811960333	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x32000	0x106cc	0xf800	5fa94115b961761450ab4db52079ee1a	False	0.9154013356854839	data	7.83535486728973	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x43000	0x1e0	0x200	9866eeb93e80b773405f3d7936b83641	False	0.52734375	data	4.7074344725994175	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x44000	0x2104	0x2200	e9d30a199ea94952ee7fe91ca2531204	False	0.7348345588235294	data	6.455152148729285	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
.bsp	0x47000	0x3000	0x3000	c7faa7b5a62911205b4f3d22a4130467	False	0.028483072916666668	data	0.2988100012561705	IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x43060	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL

Import

KERNEL32.dll

GlobalFindAtomA, RaiseException, GetCurrentThreadId, IsProcessorFeaturePresent, GetLastError, FreeLibraryWhenCallbackReturns, CreateThreadpoolWork, SubmitThreadpoolWork, CloseThreadpoolWork, GetModuleHandleExW, WakeAllConditionVariable, SleepConditionVariableSRW, InitOnceComplete, InitOnceBeginInitialize, ReleaseSRWLockExclusive, AcquireSRWLockExclusive, TryAcquireSRWLockExclusive, WideCharToMultiByte, CloseHandle, QueryPerformanceCounter, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSectionEx, DeleteCriticalSection, EncodePointer, DecodePointer, MultiByteToWideChar, LCMapStringEx, GetSystemTimeAsFileTime, GetModuleHandleW, GetProcAddress, GetStringTypeW, GetCPInfo, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, IsDebuggerPresent, GetStartupInfoW, GetCurrentProcessId, InitializeSListHead, CreateFileW, RtlUnwind, SetLastError, InitializeCriticalSectionAndSpinCount, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, FreeLibrary, LoadLibraryExW, ExitProcess, GetModuleFileNameW, GetStdHandle, WriteFile, HeapAlloc, HeapFree, LCMapStringW, GetLocaleInfoW, IsValidLocale, GetUserDefaultLCID, EnumSystemLocalesW, GetFileType, FlushFileBuffers, GetConsoleOutputCP, GetConsoleMode, ReadFile, GetFileSizeEx, SetFilePointerEx, ReadConsoleW, HeapReAlloc, FindClose, FindFirstFileExW, FindNextFileW, IsValidCodePage, GetACP, GetOEMCP, GetCommandLineA, GetCommandLineW, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetProcessHeap, SetStdHandle, HeapSize, WriteConsoleW

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 23, 2024 17:10:25.324266911 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 23, 2024 17:10:25.324269056 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 23, 2024 17:10:25.636689901 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 23, 2024 17:10:34.926515102 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 23, 2024 17:10:34.933454990 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 23, 2024 17:10:35.246059895 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 23, 2024 17:10:36.424565077 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:36.424634933 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:36.424863100 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:36.425192118 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:36.425228119 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:37.016222000 CEST	443	49708	173.222.162.64	192.168.2.6
Oct 23, 2024 17:10:37.016314030 CEST	49708	443	192.168.2.6	173.222.162.64
Oct 23, 2024 17:10:37.180485010 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:37.180583000 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:37.185669899 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:37.185683966 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:37.185956955 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:37.195779085 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:37.243335962 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:37.594260931 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:37.594289064 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:37.594305038 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:37.594372988 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:37.594400883 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:37.594455004 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:37.711970091 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:37.712003946 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:37.712097883 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:37.712120056 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:37.712208986 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:37.829265118 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:37.829294920 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:37.829366922 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:37.829404116 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:37.829428911 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:37.829958916 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:37.946887970 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:37.946914911 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:37.947010994 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:37.947055101 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:37.947123051 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.064811945 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.064845085 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.065123081 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.065160036 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.065260887 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.182388067 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.182452917 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.182497025 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.182528973 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.182543993 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.182580948 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.298907995 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.298935890 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.299020052 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.299060106 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.299180031 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.346345901 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.346394062 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.346503019 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.346533060 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.346579075 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.346621037 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.418174028 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.418196917 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.418303967 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.418343067 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.418420076 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.535267115 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.535351992 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.535398006 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.535420895 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.535449028 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.535490990 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.652323008 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.652386904 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.652434111 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.652458906 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.652525902 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.652564049 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.769524097 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.769552946 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.769639015 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.769665956 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.769723892 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.815839052 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.815865040 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.815923929 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.815953016 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.815968037 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.816010952 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.876558065 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.876655102 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.876709938 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.876760006 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.876771927 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.876807928 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.876851082 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.876851082 CEST	49718	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.876885891 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.876921892 CEST	443	49718	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.955437899 CEST	49719	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.955534935 CEST	443	49719	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.955621004 CEST	49719	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.956769943 CEST	49720	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.956808090 CEST	443	49720	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.956913948 CEST	49720	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.959686995 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.959729910 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.959786892 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.961505890 CEST	49722	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.961519957 CEST	443	49722	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.961788893 CEST	49722	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.962471008 CEST	49723	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.962482929 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.962533951 CEST	49723	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.962861061 CEST	49723	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.962878942 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.963103056 CEST	49720	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.963103056 CEST	49722	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.963119030 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.963119984 CEST	443	49720	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.963129997 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.963191032 CEST	443	49722	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:38.963198900 CEST	49719	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:38.963252068 CEST	443	49719	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.737080097 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.738420963 CEST	443	49719	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.738481998 CEST	49723	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.738493919 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.738645077 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.739456892 CEST	49719	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.739480972 CEST	49723	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.739491940 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.739525080 CEST	443	49719	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.740067005 CEST	49719	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.740073919 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.740081072 CEST	443	49719	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.740098953 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.742137909 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.742142916 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.742520094 CEST	443	49720	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.743360043 CEST	49720	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.743360043 CEST	49720	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.743376970 CEST	443	49720	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.743390083 CEST	443	49720	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.748430014 CEST	443	49722	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.751000881 CEST	49722	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.751000881 CEST	49722	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.751015902 CEST	443	49722	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.751025915 CEST	443	49722	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.871638060 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.871721983 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.875199080 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.875232935 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.875320911 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.875394106 CEST	49723	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.875394106 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.875610113 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.875611067 CEST	49723	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.875627041 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.875667095 CEST	49723	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.875674009 CEST	443	49723	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.876140118 CEST	443	49719	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.876688004 CEST	443	49719	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.877023935 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.877023935 CEST	49721	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.877029896 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.877038002 CEST	443	49721	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.877069950 CEST	49719	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.878262043 CEST	49719	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.878262043 CEST	49719	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.878278971 CEST	443	49719	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.878289938 CEST	443	49719	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.880865097 CEST	443	49720	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.880888939 CEST	443	49720	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.881225109 CEST	443	49720	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.881457090 CEST	49720	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.887825012 CEST	49720	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.889631033 CEST	443	49722	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.889655113 CEST	443	49722	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.889862061 CEST	443	49722	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.889955044 CEST	49724	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.889991999 CEST	443	49724	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.890021086 CEST	49722	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.890021086 CEST	49722	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.890273094 CEST	49720	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.890285969 CEST	443	49720	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.890319109 CEST	49724	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.890407085 CEST	49720	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.890414000 CEST	443	49720	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.890543938 CEST	49724	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.890558004 CEST	443	49724	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.891161919 CEST	49722	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.891161919 CEST	49722	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.891169071 CEST	49725	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.891170979 CEST	443	49722	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.891179085 CEST	443	49722	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.891208887 CEST	443	49725	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.892568111 CEST	49725	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.892568111 CEST	49725	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.892605066 CEST	443	49725	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.893799067 CEST	49726	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.893821001 CEST	443	49726	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.893838882 CEST	49727	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.893850088 CEST	443	49727	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.893984079 CEST	49726	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.894397974 CEST	49726	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.894412041 CEST	443	49726	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.894422054 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.894429922 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.894556046 CEST	49727	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.894556046 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.894556046 CEST	49727	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.894579887 CEST	443	49727	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:39.894674063 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:39.894681931 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:40.652195930 CEST	443	49724	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:40.652894020 CEST	443	49726	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:40.664546013 CEST	443	49725	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:40.665190935 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:40.669235945 CEST	443	49727	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:40.671704054 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:40.671736002 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:40.672508001 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:40.672513962 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:40.672522068 CEST	49724	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:40.672581911 CEST	443	49724	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:40.673216105 CEST	49727	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:40.673223972 CEST	49724	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:40.673233032 CEST	443	49727	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:40.673235893 CEST	443	49724	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:40.673954010 CEST	49726	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:40.673969030 CEST	443	49726	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:40.673998117 CEST	49727	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:40.674004078 CEST	443	49727	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:40.675869942 CEST	49726	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:40.675884962 CEST	443	49726	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:40.714863062 CEST	49725	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:40.734972954 CEST	49725	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:40.734987020 CEST	443	49725	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:40.735546112 CEST	49725	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:40.735553980 CEST	443	49725	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:40.809942961 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:40.810040951 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:40.810247898 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:40.811286926 CEST	443	49724	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:40.811343908 CEST	443	49726	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:40.811363935 CEST	443	49724	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:40.811419010 CEST	49724	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:40.811511993 CEST	443	49726	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:40.811561108 CEST	49726	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:40.820796967 CEST	443	49727	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:40.821001053 CEST	443	49727	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:40.821064949 CEST	49727	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:40.873764038 CEST	443	49725	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:40.873840094 CEST	443	49725	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:40.873980045 CEST	49725	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:40.986979961 CEST	49728	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:40.987013102 CEST	443	49728	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:40.992391109 CEST	49727	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:40.992402077 CEST	443	49727	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:40.992415905 CEST	49727	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:40.992424011 CEST	443	49727	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:41.031589985 CEST	49725	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:41.031589985 CEST	49725	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:41.031605959 CEST	443	49725	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:41.031616926 CEST	443	49725	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:41.042859077 CEST	49724	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:41.042901039 CEST	443	49724	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:41.067584991 CEST	49726	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:41.067585945 CEST	49726	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:41.067612886 CEST	443	49726	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:41.067624092 CEST	443	49726	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:41.282772064 CEST	49729	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:41.282821894 CEST	443	49729	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:41.282900095 CEST	49729	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:41.291841030 CEST	49729	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:41.291874886 CEST	443	49729	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:41.310537100 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:41.310585976 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:41.310667038 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:41.317886114 CEST	49731	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:41.317929983 CEST	443	49731	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:41.318000078 CEST	49731	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:41.318484068 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:41.318509102 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:41.319325924 CEST	49731	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:41.319343090 CEST	443	49731	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:41.321460962 CEST	49732	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:41.321490049 CEST	443	49732	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:41.321554899 CEST	49732	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:41.321816921 CEST	49732	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:41.321830988 CEST	443	49732	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:41.325289965 CEST	49733	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:41.325315952 CEST	443	49733	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:41.325440884 CEST	49733	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:41.326170921 CEST	49733	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:41.326184034 CEST	443	49733	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.055437088 CEST	443	49729	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.056790113 CEST	49729	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.056828022 CEST	443	49729	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.058417082 CEST	49729	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.058434963 CEST	443	49729	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.094685078 CEST	443	49731	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.101329088 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.104255915 CEST	443	49733	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.107881069 CEST	443	49732	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.119304895 CEST	49732	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.119323969 CEST	443	49732	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.119501114 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.119515896 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.119882107 CEST	49732	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.119889021 CEST	443	49732	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.120131016 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.120148897 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.120249033 CEST	49731	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.120280027 CEST	443	49731	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.120625973 CEST	49731	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.120640039 CEST	443	49731	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.120666981 CEST	49733	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.120676994 CEST	443	49733	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.121558905 CEST	49733	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.121565104 CEST	443	49733	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.194678068 CEST	443	49729	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.194751978 CEST	443	49729	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.194803953 CEST	49729	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.204763889 CEST	49729	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.204804897 CEST	443	49729	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.204821110 CEST	49729	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.204828024 CEST	443	49729	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.208761930 CEST	49734	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.208797932 CEST	443	49734	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.208858967 CEST	49734	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.209012032 CEST	49734	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.209023952 CEST	443	49734	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.253839970 CEST	443	49731	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.254015923 CEST	443	49731	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.254074097 CEST	49731	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.254087925 CEST	443	49733	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.254354000 CEST	443	49733	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.254409075 CEST	49733	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.254779100 CEST	443	49732	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.254996061 CEST	443	49732	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.255034924 CEST	49732	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.255289078 CEST	49731	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.255326033 CEST	443	49731	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.255346060 CEST	49731	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.255352974 CEST	443	49731	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.257039070 CEST	49733	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.257039070 CEST	49733	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.257052898 CEST	443	49733	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.257067919 CEST	443	49733	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.258505106 CEST	49732	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.258528948 CEST	443	49732	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.258542061 CEST	49732	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.258548975 CEST	443	49732	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.259670973 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.259743929 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.259783983 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.260801077 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.260823965 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.260838032 CEST	49730	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.260844946 CEST	443	49730	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.287417889 CEST	49735	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.287472010 CEST	443	49735	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.287529945 CEST	49735	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.287897110 CEST	49736	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.287941933 CEST	443	49736	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.288008928 CEST	49736	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.289019108 CEST	49737	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.289060116 CEST	443	49737	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.289110899 CEST	49737	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.290213108 CEST	49738	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.290246010 CEST	443	49738	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.290292025 CEST	49735	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.290302038 CEST	49738	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.290304899 CEST	443	49735	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.290368080 CEST	49738	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.290380955 CEST	443	49738	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.290539026 CEST	49736	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.290551901 CEST	443	49736	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.290808916 CEST	49737	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.290834904 CEST	443	49737	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.990353107 CEST	443	49734	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.991163015 CEST	49734	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.991183996 CEST	443	49734	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:42.991522074 CEST	49734	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:42.991527081 CEST	443	49734	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.046068907 CEST	443	49735	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.046277046 CEST	443	49738	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.046750069 CEST	443	49736	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.046757936 CEST	49735	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.046775103 CEST	443	49735	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.046992064 CEST	49738	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.047019005 CEST	443	49738	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.047326088 CEST	49735	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.047334909 CEST	443	49735	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.047442913 CEST	49736	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.047450066 CEST	443	49736	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.047467947 CEST	49738	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.047472000 CEST	443	49738	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.047810078 CEST	49736	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.047815084 CEST	443	49736	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.052336931 CEST	443	49737	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.052664995 CEST	49737	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.052692890 CEST	443	49737	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.053018093 CEST	49737	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.053024054 CEST	443	49737	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.131082058 CEST	443	49734	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.131299019 CEST	443	49734	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.131376028 CEST	49734	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.131513119 CEST	49734	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.131530046 CEST	443	49734	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.131556988 CEST	49734	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.131563902 CEST	443	49734	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.135138035 CEST	49740	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.135184050 CEST	443	49740	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.135263920 CEST	49740	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.135432005 CEST	49740	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.135442019 CEST	443	49740	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.181809902 CEST	443	49738	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.182187080 CEST	443	49738	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.182261944 CEST	49738	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.182391882 CEST	49738	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.182414055 CEST	443	49738	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.182425022 CEST	49738	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.182431936 CEST	443	49738	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.182859898 CEST	443	49736	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.182950974 CEST	443	49736	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.183032990 CEST	443	49735	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.183043957 CEST	49736	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.183103085 CEST	443	49735	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.183294058 CEST	49735	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.183593035 CEST	49736	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.183598042 CEST	443	49736	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.184741020 CEST	49735	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.184761047 CEST	443	49735	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.184818029 CEST	49735	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.184823990 CEST	443	49735	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.188062906 CEST	49741	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.188105106 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.188311100 CEST	49741	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.188863993 CEST	49742	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.188910007 CEST	443	49742	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.188971043 CEST	49742	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.189080000 CEST	49741	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.189096928 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.189491034 CEST	49742	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.189512014 CEST	443	49742	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.189614058 CEST	49743	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.189627886 CEST	443	49743	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.189683914 CEST	49743	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.189883947 CEST	49743	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.189899921 CEST	443	49743	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.191279888 CEST	443	49737	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.191355944 CEST	443	49737	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.191509008 CEST	49737	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.191554070 CEST	49737	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.191554070 CEST	49737	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.191575050 CEST	443	49737	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.191587925 CEST	443	49737	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.193646908 CEST	49744	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.193674088 CEST	443	49744	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.193736076 CEST	49744	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.193857908 CEST	49744	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.193875074 CEST	443	49744	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.878246069 CEST	443	49740	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.917820930 CEST	49740	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.928914070 CEST	49740	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.928934097 CEST	443	49740	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.930663109 CEST	49740	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.930675030 CEST	443	49740	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.948188066 CEST	443	49742	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.948651075 CEST	49742	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.948681116 CEST	443	49742	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.949780941 CEST	443	49744	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.949835062 CEST	49742	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.949841976 CEST	443	49742	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.951127052 CEST	49744	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.951158047 CEST	443	49744	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.951520920 CEST	49744	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.951529026 CEST	443	49744	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.952955961 CEST	443	49743	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.953569889 CEST	49743	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.953593969 CEST	443	49743	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.954207897 CEST	49743	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.954212904 CEST	443	49743	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.956465006 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.957155943 CEST	49741	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.957163095 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:43.957889080 CEST	49741	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:43.957892895 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.063258886 CEST	443	49740	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.063467026 CEST	443	49740	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.063544035 CEST	49740	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.080344915 CEST	49740	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.080377102 CEST	443	49740	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.080396891 CEST	49740	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.080404043 CEST	443	49740	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.084774017 CEST	443	49742	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.085123062 CEST	443	49742	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.085174084 CEST	49742	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.085656881 CEST	49742	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.085675001 CEST	443	49742	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.085685968 CEST	49742	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.085691929 CEST	443	49742	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.088093996 CEST	443	49744	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.088186026 CEST	443	49744	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.088260889 CEST	49744	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.088304043 CEST	49745	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.088359118 CEST	443	49745	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.088418961 CEST	49745	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.089159966 CEST	49744	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.089186907 CEST	443	49744	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.089204073 CEST	49744	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.089211941 CEST	443	49744	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.090879917 CEST	49745	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.090897083 CEST	443	49745	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.091789007 CEST	443	49743	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.091871977 CEST	443	49743	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.091919899 CEST	49743	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.092029095 CEST	49743	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.092046022 CEST	443	49743	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.092057943 CEST	49743	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.092063904 CEST	443	49743	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.092598915 CEST	49746	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.092629910 CEST	443	49746	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.092689037 CEST	49746	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.092784882 CEST	49746	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.092793941 CEST	443	49746	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.094527960 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.094578981 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.094630957 CEST	49741	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.094970942 CEST	49747	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.094994068 CEST	443	49747	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.095048904 CEST	49747	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.095520020 CEST	49748	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.095541954 CEST	443	49748	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.095601082 CEST	49748	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.095933914 CEST	49741	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.095940113 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.095963955 CEST	49741	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.095968008 CEST	443	49741	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.096781015 CEST	49747	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.096797943 CEST	443	49747	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.097367048 CEST	49748	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.097378969 CEST	443	49748	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.100250006 CEST	49749	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.100287914 CEST	443	49749	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.100341082 CEST	49749	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.100516081 CEST	49749	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.100527048 CEST	443	49749	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.843645096 CEST	443	49747	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.844384909 CEST	49747	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.844409943 CEST	443	49747	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.845014095 CEST	49747	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.845017910 CEST	443	49747	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.857836008 CEST	443	49749	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.860377073 CEST	49749	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.860411882 CEST	443	49749	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.860943079 CEST	49749	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.860954046 CEST	443	49749	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.862907887 CEST	443	49745	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.864232063 CEST	49745	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.864238024 CEST	443	49745	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.864801884 CEST	49745	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.864805937 CEST	443	49745	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.866636038 CEST	443	49746	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.868194103 CEST	49746	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.868216038 CEST	443	49748	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.868223906 CEST	443	49746	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.868565083 CEST	49748	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.868587971 CEST	443	49748	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.868747950 CEST	49746	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.868755102 CEST	443	49746	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.869168997 CEST	49748	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.869173050 CEST	443	49748	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.977745056 CEST	443	49747	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.977931976 CEST	443	49747	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.978076935 CEST	49747	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.978338957 CEST	49747	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.978394032 CEST	443	49747	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.978425980 CEST	49747	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.978442907 CEST	443	49747	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.981760025 CEST	49750	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.981810093 CEST	443	49750	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.981904030 CEST	49750	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.982227087 CEST	49750	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.982239008 CEST	443	49750	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.995083094 CEST	443	49749	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.995436907 CEST	443	49749	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.995517015 CEST	49749	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.995551109 CEST	49749	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.995567083 CEST	443	49749	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.995579004 CEST	49749	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.995584965 CEST	443	49749	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.998967886 CEST	49751	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.999000072 CEST	443	49751	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:44.999087095 CEST	49751	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.999286890 CEST	49751	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:44.999296904 CEST	443	49751	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.001876116 CEST	443	49745	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.002126932 CEST	443	49745	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.002202988 CEST	49745	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.002283096 CEST	49745	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.002283096 CEST	49745	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.002326965 CEST	443	49745	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.002353907 CEST	443	49745	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.004924059 CEST	49752	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.005014896 CEST	443	49752	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.005114079 CEST	49752	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.005321980 CEST	49752	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.005351067 CEST	443	49752	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.006681919 CEST	443	49746	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.006824970 CEST	443	49746	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.006917000 CEST	49746	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.006957054 CEST	49746	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.006978989 CEST	443	49746	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.006993055 CEST	49746	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.006999969 CEST	443	49746	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.009284973 CEST	49753	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.009318113 CEST	443	49753	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.009406090 CEST	49753	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.009562969 CEST	49753	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.009581089 CEST	443	49753	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.010803938 CEST	443	49748	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.010862112 CEST	443	49748	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.011019945 CEST	49748	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.011051893 CEST	49748	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.011060953 CEST	443	49748	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.011070967 CEST	49748	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.011075974 CEST	443	49748	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.013519049 CEST	49754	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.013544083 CEST	443	49754	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.013631105 CEST	49754	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.013801098 CEST	49754	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.013825893 CEST	443	49754	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.738104105 CEST	443	49750	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.739002943 CEST	49750	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.739032984 CEST	443	49750	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.739439964 CEST	49750	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.739449024 CEST	443	49750	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.740565062 CEST	443	49751	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.740843058 CEST	49751	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.740871906 CEST	443	49751	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.741173029 CEST	49751	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.741182089 CEST	443	49751	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.759742975 CEST	443	49754	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.760178089 CEST	49754	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.760201931 CEST	443	49754	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.760615110 CEST	49754	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.760620117 CEST	443	49754	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.770900011 CEST	443	49752	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.771446943 CEST	49752	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.771452904 CEST	443	49752	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.771857977 CEST	49752	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.771862030 CEST	443	49752	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.874965906 CEST	443	49751	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.875107050 CEST	443	49751	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.875200987 CEST	49751	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.875397921 CEST	49751	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.875421047 CEST	443	49751	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.875436068 CEST	49751	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.875442028 CEST	443	49751	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.876559019 CEST	443	49750	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.876796007 CEST	443	49750	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.876852989 CEST	49750	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.877008915 CEST	49750	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.877029896 CEST	443	49750	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.877041101 CEST	49750	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.877048016 CEST	443	49750	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.879273891 CEST	49756	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.879322052 CEST	443	49756	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.879410982 CEST	49756	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.879513025 CEST	49757	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.879543066 CEST	443	49757	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.879565001 CEST	49756	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.879574060 CEST	443	49756	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.879595041 CEST	49757	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.879678965 CEST	49757	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.879692078 CEST	443	49757	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.894228935 CEST	443	49754	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.894470930 CEST	443	49754	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.894534111 CEST	49754	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.894608021 CEST	49754	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.894608021 CEST	49754	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.894644022 CEST	443	49754	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.894686937 CEST	443	49754	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.897264004 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.897285938 CEST	443	49758	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.897361994 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.897502899 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.897516012 CEST	443	49758	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.967741966 CEST	443	49753	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.968275070 CEST	49753	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.968303919 CEST	443	49753	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:45.968823910 CEST	49753	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:45.968831062 CEST	443	49753	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.005043030 CEST	443	49752	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.005121946 CEST	443	49752	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.005229950 CEST	49752	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.005462885 CEST	49752	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.005527020 CEST	443	49752	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.005564928 CEST	49752	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.005580902 CEST	443	49752	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.008292913 CEST	49760	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.008383036 CEST	443	49760	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.008500099 CEST	49760	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.008655071 CEST	49760	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.008683920 CEST	443	49760	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.102874041 CEST	443	49753	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.102969885 CEST	443	49753	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.103070974 CEST	49753	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.103494883 CEST	49753	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.103523970 CEST	443	49753	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.103542089 CEST	49753	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.103550911 CEST	443	49753	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.107064009 CEST	49761	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.107117891 CEST	443	49761	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.107202053 CEST	49761	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.107378006 CEST	49761	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.107393980 CEST	443	49761	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.636466026 CEST	443	49757	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.641725063 CEST	443	49756	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.656234980 CEST	443	49758	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.683486938 CEST	49756	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.683490992 CEST	49757	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.699074030 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.714080095 CEST	49757	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.714087009 CEST	443	49757	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.714631081 CEST	49757	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.714637041 CEST	443	49757	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.718883038 CEST	49756	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.718904018 CEST	443	49756	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.720690966 CEST	49756	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.720698118 CEST	443	49756	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.756772995 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.756788015 CEST	443	49758	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.757814884 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.757822990 CEST	443	49758	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.770385981 CEST	443	49760	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.773417950 CEST	49760	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.773458958 CEST	443	49760	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.781222105 CEST	49760	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.781232119 CEST	443	49760	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.847343922 CEST	443	49757	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.847470045 CEST	443	49757	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.847546101 CEST	49757	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.848001003 CEST	49757	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.848016024 CEST	443	49757	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.848025084 CEST	49757	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.848031998 CEST	443	49757	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.852933884 CEST	49762	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.852993011 CEST	443	49762	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.853068113 CEST	49762	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.853409052 CEST	49762	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.853420973 CEST	443	49762	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.856739044 CEST	443	49756	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.856842041 CEST	443	49756	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.856918097 CEST	49756	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.857069969 CEST	49756	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.857091904 CEST	443	49756	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.857106924 CEST	49756	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.857111931 CEST	443	49756	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.861265898 CEST	49763	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.861314058 CEST	443	49763	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.861385107 CEST	49763	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.861617088 CEST	49763	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.861633062 CEST	443	49763	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.891911030 CEST	443	49758	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.891999960 CEST	443	49758	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.892047882 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.892294884 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.892307043 CEST	443	49758	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.892332077 CEST	49758	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.892337084 CEST	443	49758	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.896821976 CEST	49764	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.896863937 CEST	443	49764	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.896934986 CEST	49764	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.897126913 CEST	49764	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.897142887 CEST	443	49764	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.915014029 CEST	443	49760	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.915081978 CEST	443	49760	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.915139914 CEST	49760	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.915860891 CEST	49760	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.915884018 CEST	443	49760	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.926167965 CEST	49765	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.926213026 CEST	443	49765	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:46.926289082 CEST	49765	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.927140951 CEST	49765	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:46.927161932 CEST	443	49765	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.447633982 CEST	443	49761	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.448255062 CEST	49761	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.448308945 CEST	443	49761	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.448806047 CEST	49761	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.448817015 CEST	443	49761	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.584409952 CEST	443	49761	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.584547997 CEST	443	49761	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.584631920 CEST	49761	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.584810972 CEST	49761	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.584835052 CEST	443	49761	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.584850073 CEST	49761	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.584856033 CEST	443	49761	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.588100910 CEST	49766	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.588174105 CEST	443	49766	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.588249922 CEST	49766	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.588411093 CEST	49766	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.588427067 CEST	443	49766	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.609694004 CEST	443	49762	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.610363960 CEST	49762	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.610403061 CEST	443	49762	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.610946894 CEST	49762	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.610954046 CEST	443	49762	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.626455069 CEST	443	49763	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.627146006 CEST	49763	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.627165079 CEST	443	49763	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.627701044 CEST	49763	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.627706051 CEST	443	49763	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.657497883 CEST	443	49764	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.661022902 CEST	49764	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.661067963 CEST	443	49764	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.661576033 CEST	49764	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.661587000 CEST	443	49764	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.676026106 CEST	443	49765	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.686050892 CEST	49765	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.686074018 CEST	443	49765	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.687082052 CEST	49765	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.687088013 CEST	443	49765	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.746746063 CEST	443	49762	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.747119904 CEST	443	49762	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.747273922 CEST	49762	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.747967005 CEST	49762	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.747967005 CEST	49762	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.748003960 CEST	443	49762	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.748018026 CEST	443	49762	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.755880117 CEST	49767	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.755908012 CEST	443	49767	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.756185055 CEST	49767	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.756185055 CEST	49767	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.756211042 CEST	443	49767	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.766510010 CEST	443	49763	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.766608000 CEST	443	49763	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.766685963 CEST	49763	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.766966105 CEST	49763	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.766988039 CEST	443	49763	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.767016888 CEST	49763	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.767021894 CEST	443	49763	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.770152092 CEST	49768	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.770205975 CEST	443	49768	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.770646095 CEST	49768	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.770735979 CEST	49768	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.770745039 CEST	443	49768	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.795984983 CEST	443	49764	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.796180010 CEST	443	49764	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.796421051 CEST	49764	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.796421051 CEST	49764	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.798543930 CEST	49764	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.798580885 CEST	443	49764	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.801119089 CEST	49769	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.801145077 CEST	443	49769	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.801656008 CEST	49769	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.801862955 CEST	49769	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.801872969 CEST	443	49769	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.818294048 CEST	443	49765	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.818449974 CEST	443	49765	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.818773985 CEST	49765	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.818820953 CEST	49765	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.818820953 CEST	49765	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.818835020 CEST	443	49765	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.818844080 CEST	443	49765	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.822594881 CEST	49770	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.822618008 CEST	443	49770	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.824476004 CEST	49770	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.824476004 CEST	49770	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:47.824501038 CEST	443	49770	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:47.843846083 CEST	49708	443	192.168.2.6	173.222.162.64
Oct 23, 2024 17:10:47.843846083 CEST	49708	443	192.168.2.6	173.222.162.64
Oct 23, 2024 17:10:47.844202042 CEST	49771	443	192.168.2.6	173.222.162.64
Oct 23, 2024 17:10:47.844263077 CEST	443	49771	173.222.162.64	192.168.2.6
Oct 23, 2024 17:10:47.844487906 CEST	49771	443	192.168.2.6	173.222.162.64
Oct 23, 2024 17:10:47.844759941 CEST	49771	443	192.168.2.6	173.222.162.64
Oct 23, 2024 17:10:47.844773054 CEST	443	49771	173.222.162.64	192.168.2.6
Oct 23, 2024 17:10:47.849204063 CEST	443	49708	173.222.162.64	192.168.2.6
Oct 23, 2024 17:10:47.849215031 CEST	443	49708	173.222.162.64	192.168.2.6
Oct 23, 2024 17:10:48.360168934 CEST	443	49766	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.371104956 CEST	49766	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.371145010 CEST	443	49766	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.371665001 CEST	49766	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.371671915 CEST	443	49766	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.504477024 CEST	443	49767	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.504604101 CEST	443	49766	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.504683971 CEST	443	49766	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.504803896 CEST	49766	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.505073071 CEST	49766	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.505079031 CEST	49767	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.505091906 CEST	443	49766	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.505104065 CEST	443	49767	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.505125046 CEST	49766	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.505131960 CEST	443	49766	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.505903006 CEST	49767	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.505916119 CEST	443	49767	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.508196115 CEST	49772	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.508234978 CEST	443	49772	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.508471012 CEST	49772	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.508471012 CEST	49772	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.508498907 CEST	443	49772	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.516309023 CEST	443	49768	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.517143011 CEST	49768	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.517143011 CEST	49768	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.517159939 CEST	443	49768	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.517173052 CEST	443	49768	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.517935991 CEST	443	49771	173.222.162.64	192.168.2.6
Oct 23, 2024 17:10:48.518047094 CEST	49771	443	192.168.2.6	173.222.162.64
Oct 23, 2024 17:10:48.555622101 CEST	443	49769	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.559844971 CEST	49769	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.559845924 CEST	49769	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.559860945 CEST	443	49769	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.559871912 CEST	443	49769	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.591612101 CEST	443	49770	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.592806101 CEST	49770	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.592806101 CEST	49770	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.592835903 CEST	443	49770	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.592853069 CEST	443	49770	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.642357111 CEST	443	49767	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.642625093 CEST	443	49767	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.642865896 CEST	49767	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.642865896 CEST	49767	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.643306017 CEST	49767	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.643332005 CEST	443	49767	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.645955086 CEST	49773	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.645991087 CEST	443	49773	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.646754026 CEST	49773	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.646754026 CEST	49773	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.646794081 CEST	443	49773	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.651429892 CEST	443	49768	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.651643991 CEST	443	49768	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.651979923 CEST	49768	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.651981115 CEST	49768	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.652185917 CEST	49768	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.652210951 CEST	443	49768	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.654556990 CEST	49774	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.654592037 CEST	443	49774	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.654829025 CEST	49774	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.654829025 CEST	49774	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.654855013 CEST	443	49774	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.694331884 CEST	443	49769	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.694411993 CEST	443	49769	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.694747925 CEST	49769	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.694747925 CEST	49769	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.694747925 CEST	49769	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.698185921 CEST	49775	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.698214054 CEST	443	49775	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.698417902 CEST	49775	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.698549986 CEST	49775	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.698561907 CEST	443	49775	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.732004881 CEST	443	49770	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.732074976 CEST	443	49770	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.732141018 CEST	49770	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.732474089 CEST	49770	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.732500076 CEST	443	49770	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.732512951 CEST	49770	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.732517958 CEST	443	49770	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.736231089 CEST	49776	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.736268044 CEST	443	49776	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.736387014 CEST	49776	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.736797094 CEST	49776	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.736810923 CEST	443	49776	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:48.996619940 CEST	49769	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:48.996644020 CEST	443	49769	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.259053946 CEST	443	49772	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.260109901 CEST	49772	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.260154963 CEST	443	49772	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.260879040 CEST	49772	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.260895967 CEST	443	49772	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.396784067 CEST	443	49772	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.396950006 CEST	443	49772	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.397022009 CEST	49772	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.406872988 CEST	49772	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.406907082 CEST	443	49772	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.406923056 CEST	49772	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.406930923 CEST	443	49772	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.410998106 CEST	49777	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.411051035 CEST	443	49777	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.411124945 CEST	49777	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.411375999 CEST	49777	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.411390066 CEST	443	49777	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.414633989 CEST	443	49773	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.415273905 CEST	49773	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.415285110 CEST	443	49773	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.416042089 CEST	49773	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.416047096 CEST	443	49773	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.418859959 CEST	443	49774	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.419282913 CEST	49774	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.419300079 CEST	443	49774	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.419748068 CEST	49774	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.419754982 CEST	443	49774	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.450865030 CEST	443	49775	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.451443911 CEST	49775	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.451451063 CEST	443	49775	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.451960087 CEST	49775	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.451963902 CEST	443	49775	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.511390924 CEST	443	49776	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.512754917 CEST	49776	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.512764931 CEST	443	49776	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.514177084 CEST	49776	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.514180899 CEST	443	49776	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.555412054 CEST	443	49773	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.555577993 CEST	443	49773	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.555639029 CEST	49773	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.555792093 CEST	443	49774	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.555794954 CEST	49773	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.555810928 CEST	443	49773	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.555825949 CEST	49773	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.555830956 CEST	443	49773	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.555938005 CEST	443	49774	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.555993080 CEST	49774	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.556101084 CEST	49774	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.556129932 CEST	443	49774	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.556143045 CEST	49774	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.556152105 CEST	443	49774	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.560147047 CEST	49778	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.560184956 CEST	443	49778	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.560246944 CEST	49779	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.560297966 CEST	443	49779	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.560332060 CEST	49778	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.560375929 CEST	49779	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.560524940 CEST	49778	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.560544014 CEST	443	49778	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.560601950 CEST	49779	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.560617924 CEST	443	49779	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.587979078 CEST	443	49775	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.588047028 CEST	443	49775	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.588099003 CEST	49775	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.588324070 CEST	49775	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.588336945 CEST	443	49775	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.588349104 CEST	49775	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.588354111 CEST	443	49775	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.591960907 CEST	49780	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.591988087 CEST	443	49780	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.592055082 CEST	49780	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.592223883 CEST	49780	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.592235088 CEST	443	49780	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.648593903 CEST	443	49776	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.648678064 CEST	443	49776	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.648735046 CEST	49776	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.649128914 CEST	49776	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.649128914 CEST	49776	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.649142027 CEST	443	49776	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.649149895 CEST	443	49776	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.652761936 CEST	49781	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.652807951 CEST	443	49781	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:49.652884007 CEST	49781	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.653146029 CEST	49781	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:49.653162003 CEST	443	49781	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.165011883 CEST	443	49777	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.191773891 CEST	49777	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.191773891 CEST	49777	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.191816092 CEST	443	49777	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.191838980 CEST	443	49777	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.319756985 CEST	443	49778	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.320892096 CEST	49778	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.320921898 CEST	443	49778	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.323554039 CEST	49778	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.323560953 CEST	443	49778	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.324790001 CEST	443	49777	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.324862957 CEST	443	49777	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.327964067 CEST	49777	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.328012943 CEST	49777	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.328035116 CEST	443	49777	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.328073025 CEST	49777	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.328079939 CEST	443	49777	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.331208944 CEST	49782	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.331242085 CEST	443	49782	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.331331968 CEST	49782	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.331561089 CEST	49782	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.331573009 CEST	443	49782	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.351042032 CEST	443	49779	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.351588011 CEST	49779	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.351610899 CEST	443	49779	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.355871916 CEST	49779	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.355889082 CEST	443	49779	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.357173920 CEST	443	49780	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.362098932 CEST	49780	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.362114906 CEST	443	49780	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.363852978 CEST	49780	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.363859892 CEST	443	49780	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.404748917 CEST	443	49781	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.405483007 CEST	49781	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.405528069 CEST	443	49781	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.405981064 CEST	49781	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.405993938 CEST	443	49781	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.475461960 CEST	443	49778	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.475553989 CEST	443	49778	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.478781939 CEST	49778	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.490669966 CEST	443	49779	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.490845919 CEST	443	49779	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.490978956 CEST	49779	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.493864059 CEST	49778	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.493887901 CEST	443	49778	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.493983030 CEST	49778	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.493990898 CEST	443	49778	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.496563911 CEST	49779	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.496598005 CEST	443	49779	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.496629000 CEST	49779	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.496634960 CEST	443	49779	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.498929024 CEST	443	49780	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.499098063 CEST	443	49780	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.499330997 CEST	49780	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.500606060 CEST	49783	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.500611067 CEST	49784	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.500660896 CEST	443	49783	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.500662088 CEST	443	49784	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.500741959 CEST	49783	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.500751019 CEST	49784	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.500967026 CEST	49783	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.500971079 CEST	49784	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.500983000 CEST	443	49783	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.500983953 CEST	443	49784	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.501013041 CEST	49780	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.501013041 CEST	49780	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.501027107 CEST	443	49780	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.501034975 CEST	443	49780	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.503590107 CEST	49785	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.503624916 CEST	443	49785	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.504170895 CEST	49785	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.504483938 CEST	49785	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.504499912 CEST	443	49785	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.541244030 CEST	443	49781	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.541795969 CEST	443	49781	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.542061090 CEST	49781	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.542098999 CEST	49781	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.542098999 CEST	49781	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.542124987 CEST	443	49781	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.542136908 CEST	443	49781	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.546089888 CEST	49786	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.546205997 CEST	443	49786	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:50.546330929 CEST	49786	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.546570063 CEST	49786	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:50.546606064 CEST	443	49786	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.292233944 CEST	443	49782	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.339720011 CEST	49782	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.369235992 CEST	49782	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.369250059 CEST	443	49782	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.369852066 CEST	49782	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.369857073 CEST	443	49782	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.424981117 CEST	443	49784	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.430032015 CEST	443	49786	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.431066990 CEST	443	49785	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.437109947 CEST	443	49783	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.467495918 CEST	49784	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.480323076 CEST	49786	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.480335951 CEST	49783	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.480340004 CEST	49785	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.673022985 CEST	49784	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.673079967 CEST	443	49784	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.673532009 CEST	49784	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.673542976 CEST	443	49784	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.673832893 CEST	49786	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.673847914 CEST	443	49786	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.674283028 CEST	49786	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.674292088 CEST	443	49786	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.674581051 CEST	49785	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.674613953 CEST	443	49785	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.674989939 CEST	49785	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.675004005 CEST	443	49785	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.675504923 CEST	49783	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.675532103 CEST	443	49783	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.676155090 CEST	49783	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.676160097 CEST	443	49783	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.691963911 CEST	443	49782	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.692130089 CEST	443	49782	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.692184925 CEST	49782	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.692349911 CEST	49782	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.692363024 CEST	443	49782	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.692373037 CEST	49782	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.692378044 CEST	443	49782	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.696391106 CEST	49787	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.696445942 CEST	443	49787	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.696511030 CEST	49787	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.696808100 CEST	49787	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.696824074 CEST	443	49787	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.820461988 CEST	443	49784	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.821090937 CEST	443	49784	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.821157932 CEST	49784	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.821223021 CEST	49784	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.821223021 CEST	49784	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.821249962 CEST	443	49784	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.821264982 CEST	443	49784	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.823537111 CEST	443	49786	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.823641062 CEST	443	49786	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.823685884 CEST	49786	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.823847055 CEST	49786	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.823865891 CEST	443	49786	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.823878050 CEST	49786	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.823884964 CEST	443	49786	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.824310064 CEST	49788	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.824357986 CEST	443	49788	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.824449062 CEST	49788	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.826008081 CEST	443	49785	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.826193094 CEST	443	49785	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.826260090 CEST	49785	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.826793909 CEST	49789	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.826837063 CEST	443	49789	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.826915026 CEST	49789	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.827728987 CEST	49788	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.827747107 CEST	443	49788	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.827878952 CEST	49785	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.827904940 CEST	443	49785	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.828759909 CEST	49789	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.828785896 CEST	443	49789	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.831207037 CEST	49790	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.831219912 CEST	443	49790	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.831285954 CEST	49790	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.831429958 CEST	49790	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.831430912 CEST	443	49783	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.831437111 CEST	443	49790	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.833992004 CEST	443	49783	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.834059000 CEST	49783	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.834367037 CEST	49783	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.834392071 CEST	443	49783	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.834405899 CEST	49783	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.834414959 CEST	443	49783	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.837461948 CEST	49791	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.837502003 CEST	443	49791	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:51.837601900 CEST	49791	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.837737083 CEST	49791	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:51.837760925 CEST	443	49791	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.450115919 CEST	443	49787	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.450920105 CEST	49787	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.450948000 CEST	443	49787	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.451394081 CEST	49787	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.451407909 CEST	443	49787	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.773380995 CEST	443	49787	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.773449898 CEST	443	49787	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.773545980 CEST	49787	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.773777962 CEST	49787	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.773801088 CEST	443	49787	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.773813963 CEST	49787	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.773819923 CEST	443	49787	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.776916027 CEST	49792	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.776969910 CEST	443	49792	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.777317047 CEST	49792	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.777317047 CEST	49792	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.777357101 CEST	443	49792	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.781111002 CEST	443	49791	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.781156063 CEST	443	49788	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.781260014 CEST	443	49789	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.781580925 CEST	49791	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.781609058 CEST	443	49791	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.781616926 CEST	49788	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.781651020 CEST	443	49788	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.781965971 CEST	49791	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.781971931 CEST	443	49791	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.782042027 CEST	49788	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.782051086 CEST	443	49788	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.782243967 CEST	49789	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.782258034 CEST	443	49789	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.782393932 CEST	443	49790	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.782599926 CEST	49789	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.782604933 CEST	443	49789	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.782630920 CEST	49790	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.782645941 CEST	443	49790	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.783042908 CEST	49790	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.783054113 CEST	443	49790	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.916829109 CEST	443	49789	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.916966915 CEST	443	49789	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.917032003 CEST	49789	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.917237997 CEST	49789	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.917258978 CEST	443	49789	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.917273045 CEST	49789	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.917280912 CEST	443	49789	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.918863058 CEST	443	49791	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.919123888 CEST	443	49791	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.919184923 CEST	49791	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.919395924 CEST	49791	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.919400930 CEST	443	49791	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.919413090 CEST	49791	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.919415951 CEST	443	49791	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.920255899 CEST	49793	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.920295954 CEST	443	49793	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.920478106 CEST	49793	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.920628071 CEST	49793	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.920644045 CEST	443	49793	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.921591997 CEST	49794	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.921634912 CEST	443	49794	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.921744108 CEST	49794	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.921904087 CEST	49794	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.921919107 CEST	443	49794	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.922988892 CEST	443	49790	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.923062086 CEST	443	49790	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.923186064 CEST	49790	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.923217058 CEST	49790	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.923233032 CEST	443	49790	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.923244953 CEST	49790	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.923249960 CEST	443	49790	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.925391912 CEST	49795	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.925401926 CEST	443	49795	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.925478935 CEST	49795	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.925618887 CEST	49795	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.925632000 CEST	443	49795	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.983517885 CEST	443	49788	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.983675003 CEST	443	49788	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.983969927 CEST	49788	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.983969927 CEST	49788	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.983969927 CEST	49788	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.986772060 CEST	49796	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.986845970 CEST	443	49796	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:52.986938953 CEST	49796	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.987071037 CEST	49796	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:52.987091064 CEST	443	49796	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.292860985 CEST	49788	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.292895079 CEST	443	49788	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.542382956 CEST	443	49792	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.548726082 CEST	49792	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.548784018 CEST	443	49792	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.549180984 CEST	49792	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.549190044 CEST	443	49792	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.667335987 CEST	443	49794	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.670722961 CEST	49794	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.670761108 CEST	443	49794	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.671214104 CEST	49794	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.671219110 CEST	443	49794	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.673036098 CEST	443	49793	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.674530029 CEST	49793	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.674561977 CEST	443	49793	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.675007105 CEST	49793	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.675013065 CEST	443	49793	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.679215908 CEST	443	49795	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.682338953 CEST	49795	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.682348013 CEST	443	49795	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.682373047 CEST	443	49792	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.682444096 CEST	443	49792	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.682506084 CEST	49792	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.682671070 CEST	49792	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.682691097 CEST	443	49792	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.682699919 CEST	49792	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.682704926 CEST	443	49792	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.682806969 CEST	49795	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.682811975 CEST	443	49795	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.686996937 CEST	49797	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.687040091 CEST	443	49797	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.687129021 CEST	49797	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.687257051 CEST	49797	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.687269926 CEST	443	49797	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.741152048 CEST	443	49796	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.741645098 CEST	49796	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.741678953 CEST	443	49796	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.742108107 CEST	49796	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.742114067 CEST	443	49796	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.802481890 CEST	443	49794	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.803050995 CEST	443	49794	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.803121090 CEST	49794	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.803170919 CEST	49794	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.803170919 CEST	49794	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.803191900 CEST	443	49794	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.803201914 CEST	443	49794	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.805773020 CEST	49798	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.805845976 CEST	443	49798	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.805911064 CEST	49798	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.806041956 CEST	49798	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.806072950 CEST	443	49798	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.809947968 CEST	443	49793	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.810374022 CEST	443	49793	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.810451031 CEST	49793	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.810487032 CEST	49793	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.810487032 CEST	49793	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.810508966 CEST	443	49793	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.810519934 CEST	443	49793	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.812551022 CEST	49799	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.812596083 CEST	443	49799	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.812660933 CEST	49799	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.812803030 CEST	49799	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.812817097 CEST	443	49799	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.819608927 CEST	443	49795	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.819786072 CEST	443	49795	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.819865942 CEST	49795	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.819888115 CEST	49795	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.819900990 CEST	443	49795	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.819911957 CEST	49795	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.819916964 CEST	443	49795	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.822125912 CEST	49800	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.822168112 CEST	443	49800	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.822232008 CEST	49800	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.822340965 CEST	49800	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.822355986 CEST	443	49800	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.878170967 CEST	443	49796	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.878400087 CEST	443	49796	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.878688097 CEST	49796	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.878688097 CEST	49796	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.878688097 CEST	49796	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.883734941 CEST	49801	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.883805990 CEST	443	49801	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:53.883887053 CEST	49801	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.884392023 CEST	49801	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:53.884406090 CEST	443	49801	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.183501959 CEST	49796	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.183573008 CEST	443	49796	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.448399067 CEST	443	49797	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.449284077 CEST	49797	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.449311018 CEST	443	49797	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.449794054 CEST	49797	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.449800968 CEST	443	49797	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.557806969 CEST	443	49799	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.558464050 CEST	49799	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.558494091 CEST	443	49799	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.558975935 CEST	49799	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.558989048 CEST	443	49799	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.559353113 CEST	443	49798	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.559636116 CEST	49798	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.559662104 CEST	443	49798	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.560005903 CEST	49798	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.560013056 CEST	443	49798	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.577241898 CEST	443	49800	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.577691078 CEST	49800	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.577718973 CEST	443	49800	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.578139067 CEST	49800	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.578147888 CEST	443	49800	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.587011099 CEST	443	49797	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.587104082 CEST	443	49797	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.587188005 CEST	49797	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.587286949 CEST	49797	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.587308884 CEST	443	49797	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.587330103 CEST	49797	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.587337017 CEST	443	49797	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.590008974 CEST	49802	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.590056896 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.590132952 CEST	49802	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.590315104 CEST	49802	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.590328932 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.655832052 CEST	443	49801	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.656493902 CEST	49801	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.656563997 CEST	443	49801	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.656934023 CEST	49801	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.656948090 CEST	443	49801	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.694228888 CEST	443	49799	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.694315910 CEST	443	49799	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.694403887 CEST	49799	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.694591999 CEST	49799	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.694613934 CEST	443	49799	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.694627047 CEST	49799	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.694632053 CEST	443	49799	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.696455956 CEST	443	49798	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.696477890 CEST	443	49798	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.696533918 CEST	443	49798	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.696552992 CEST	49798	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.696595907 CEST	49798	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.696716070 CEST	49798	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.696739912 CEST	443	49798	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.696758986 CEST	49798	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.696764946 CEST	443	49798	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.697832108 CEST	49803	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.697880030 CEST	443	49803	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.697945118 CEST	49803	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.698115110 CEST	49803	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.698127031 CEST	443	49803	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.698652029 CEST	49804	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.698679924 CEST	443	49804	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.698736906 CEST	49804	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.698878050 CEST	49804	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.698887110 CEST	443	49804	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.718516111 CEST	443	49800	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.718666077 CEST	443	49800	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.718899012 CEST	49800	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.718964100 CEST	49800	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.718981028 CEST	443	49800	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.719017029 CEST	49800	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.719022989 CEST	443	49800	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.721462011 CEST	49805	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.721499920 CEST	443	49805	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.721580982 CEST	49805	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.721726894 CEST	49805	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.721745014 CEST	443	49805	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.792418003 CEST	443	49801	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.792440891 CEST	443	49801	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.792514086 CEST	443	49801	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.792686939 CEST	49801	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.793131113 CEST	49801	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.793154001 CEST	443	49801	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.793165922 CEST	49801	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.793170929 CEST	443	49801	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.796073914 CEST	49806	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.796101093 CEST	443	49806	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:54.796354055 CEST	49806	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.796354055 CEST	49806	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:54.796380043 CEST	443	49806	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.350399971 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.351190090 CEST	49802	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.351214886 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.351735115 CEST	49802	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.351743937 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.451630116 CEST	443	49803	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.452406883 CEST	49803	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.452481985 CEST	443	49803	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.452996016 CEST	49803	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.453011036 CEST	443	49803	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.455749989 CEST	443	49804	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.456139088 CEST	49804	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.456151962 CEST	443	49804	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.456561089 CEST	49804	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.456564903 CEST	443	49804	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.484536886 CEST	443	49805	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.485064983 CEST	49805	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.485107899 CEST	443	49805	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.485729933 CEST	49805	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.485738993 CEST	443	49805	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.487556934 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.487582922 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.487658978 CEST	49802	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.487682104 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.487695932 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.487729073 CEST	49802	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.487759113 CEST	49802	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.487855911 CEST	49802	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.487868071 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.487878084 CEST	49802	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.487884045 CEST	443	49802	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.491086006 CEST	49807	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.491132021 CEST	443	49807	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.491203070 CEST	49807	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.491343021 CEST	49807	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.491357088 CEST	443	49807	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.563919067 CEST	443	49806	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.564744949 CEST	49806	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.564760923 CEST	443	49806	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.565262079 CEST	49806	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.565268993 CEST	443	49806	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.588979959 CEST	443	49803	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.589004040 CEST	443	49803	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.589101076 CEST	443	49803	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.589118958 CEST	49803	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.589195967 CEST	49803	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.589521885 CEST	49803	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.589557886 CEST	443	49803	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.589571953 CEST	49803	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.589577913 CEST	443	49803	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.592847109 CEST	443	49804	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.592922926 CEST	443	49804	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.593008995 CEST	49804	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.593139887 CEST	49804	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.593156099 CEST	443	49804	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.593178034 CEST	49804	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.593183994 CEST	443	49804	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.593604088 CEST	49808	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.593641996 CEST	443	49808	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.593713045 CEST	49808	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.593933105 CEST	49808	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.593949080 CEST	443	49808	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.595463037 CEST	49809	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.595499992 CEST	443	49809	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.595576048 CEST	49809	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.595714092 CEST	49809	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.595729113 CEST	443	49809	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.621988058 CEST	443	49805	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.622117996 CEST	443	49805	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.622205019 CEST	49805	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.622522116 CEST	49805	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.622541904 CEST	443	49805	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.622555971 CEST	49805	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.622561932 CEST	443	49805	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.625791073 CEST	49810	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.625859022 CEST	443	49810	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.625950098 CEST	49810	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.626125097 CEST	49810	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.626154900 CEST	443	49810	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.702382088 CEST	443	49806	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.702452898 CEST	443	49806	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.702543020 CEST	49806	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.702893972 CEST	49806	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.702904940 CEST	443	49806	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.702917099 CEST	49806	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.702923059 CEST	443	49806	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.706788063 CEST	49811	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.706828117 CEST	443	49811	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:55.706938982 CEST	49811	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.707125902 CEST	49811	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:55.707135916 CEST	443	49811	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.241400957 CEST	443	49807	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.242393970 CEST	49807	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.242424011 CEST	443	49807	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.243033886 CEST	49807	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.243040085 CEST	443	49807	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.350591898 CEST	443	49809	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.351418018 CEST	49809	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.351447105 CEST	443	49809	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.352030993 CEST	49809	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.352036953 CEST	443	49809	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.357481956 CEST	443	49808	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.357919931 CEST	49808	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.357964039 CEST	443	49808	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.358294964 CEST	49808	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.358304024 CEST	443	49808	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.368123055 CEST	443	49810	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.368602991 CEST	49810	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.368630886 CEST	443	49810	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.368988991 CEST	49810	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.368993998 CEST	443	49810	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.375129938 CEST	443	49807	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.375233889 CEST	443	49807	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.375346899 CEST	49807	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.375560999 CEST	49807	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.375587940 CEST	443	49807	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.375602961 CEST	49807	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.375617981 CEST	443	49807	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.379129887 CEST	49812	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.379167080 CEST	443	49812	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.379338026 CEST	49812	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.379551888 CEST	49812	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.379568100 CEST	443	49812	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.481559992 CEST	443	49811	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.482250929 CEST	49811	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.482281923 CEST	443	49811	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.482769012 CEST	49811	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.482774019 CEST	443	49811	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.488287926 CEST	443	49809	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.488462925 CEST	443	49809	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.488516092 CEST	49809	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.488601923 CEST	49809	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.488614082 CEST	443	49809	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.488624096 CEST	49809	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.488629103 CEST	443	49809	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.491655111 CEST	49813	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.491681099 CEST	443	49813	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.491755009 CEST	49813	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.491894960 CEST	49813	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.491904974 CEST	443	49813	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.496886969 CEST	443	49808	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.496954918 CEST	443	49808	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.497005939 CEST	49808	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.497126102 CEST	49808	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.497148037 CEST	443	49808	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.497159958 CEST	49808	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.497165918 CEST	443	49808	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.499640942 CEST	49814	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.499733925 CEST	443	49814	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.499829054 CEST	49814	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.499933958 CEST	49814	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.499978065 CEST	443	49814	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.505044937 CEST	443	49810	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.505104065 CEST	443	49810	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.505176067 CEST	49810	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.505306005 CEST	49810	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.505315065 CEST	443	49810	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.505327940 CEST	49810	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.505331993 CEST	443	49810	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.507546902 CEST	49815	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.507559061 CEST	443	49815	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.507631063 CEST	49815	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.507742882 CEST	49815	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.507752895 CEST	443	49815	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.618503094 CEST	443	49811	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.618591070 CEST	443	49811	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.618649006 CEST	49811	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.618839025 CEST	49811	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.618858099 CEST	443	49811	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.618891001 CEST	49811	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.618896961 CEST	443	49811	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.623420954 CEST	49816	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.623496056 CEST	443	49816	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:56.623711109 CEST	49816	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.623903990 CEST	49816	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:56.623919010 CEST	443	49816	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.119936943 CEST	443	49812	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.155725956 CEST	49812	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.155747890 CEST	443	49812	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.156234026 CEST	49812	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.156241894 CEST	443	49812	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.245507956 CEST	443	49815	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.246778965 CEST	49815	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.246793032 CEST	443	49815	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.247349977 CEST	49815	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.247363091 CEST	443	49815	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.248847961 CEST	443	49813	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.249255896 CEST	49813	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.249270916 CEST	443	49813	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.249754906 CEST	49813	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.249761105 CEST	443	49813	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.266750097 CEST	443	49814	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.267226934 CEST	49814	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.267261982 CEST	443	49814	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.267748117 CEST	49814	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.267756939 CEST	443	49814	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.292646885 CEST	443	49812	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.293375015 CEST	443	49812	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.293431997 CEST	49812	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.293467999 CEST	49812	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.293494940 CEST	443	49812	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.293508053 CEST	49812	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.293513060 CEST	443	49812	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.296777010 CEST	49817	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.296824932 CEST	443	49817	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.296921968 CEST	49817	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.297039032 CEST	49817	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.297051907 CEST	443	49817	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.378587961 CEST	443	49816	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.379264116 CEST	443	49815	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.379271984 CEST	49816	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.379328966 CEST	443	49816	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.379522085 CEST	443	49815	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.379609108 CEST	49815	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.379659891 CEST	49815	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.379673958 CEST	443	49815	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.379689932 CEST	49815	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.379697084 CEST	443	49815	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.379957914 CEST	49816	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.379965067 CEST	443	49816	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.382908106 CEST	49818	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.382946968 CEST	443	49818	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.383032084 CEST	49818	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.383184910 CEST	49818	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.383193016 CEST	443	49818	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.386640072 CEST	443	49813	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.386923075 CEST	443	49813	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.386976004 CEST	49813	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.387012005 CEST	49813	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.387018919 CEST	443	49813	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.387032032 CEST	49813	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.387037039 CEST	443	49813	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.389523983 CEST	49819	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.389622927 CEST	443	49819	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.389739037 CEST	49819	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.389854908 CEST	49819	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.389883995 CEST	443	49819	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.407156944 CEST	443	49814	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.407206059 CEST	443	49814	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.407257080 CEST	443	49814	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.407330036 CEST	49814	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.407516956 CEST	49814	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.407660961 CEST	49814	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.407685041 CEST	443	49814	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.407697916 CEST	49814	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.407704115 CEST	443	49814	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.410727024 CEST	49820	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.410788059 CEST	443	49820	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.410865068 CEST	49820	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.411012888 CEST	49820	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.411027908 CEST	443	49820	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.516730070 CEST	443	49816	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.516807079 CEST	443	49816	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.516922951 CEST	443	49816	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.517018080 CEST	49816	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.517018080 CEST	49816	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.517204046 CEST	49816	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.517227888 CEST	443	49816	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.517239094 CEST	49816	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.517244101 CEST	443	49816	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.520410061 CEST	49821	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.520482063 CEST	443	49821	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:57.520586014 CEST	49821	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.520755053 CEST	49821	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:57.520785093 CEST	443	49821	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.049535036 CEST	443	49817	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.050323963 CEST	49817	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.050359964 CEST	443	49817	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.050854921 CEST	49817	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.050860882 CEST	443	49817	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.142436028 CEST	443	49818	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.143322945 CEST	49818	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.143352032 CEST	443	49818	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.143862009 CEST	49818	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.143867970 CEST	443	49818	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.148941040 CEST	443	49819	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.149271965 CEST	49819	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.149291992 CEST	443	49819	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.149609089 CEST	49819	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.149615049 CEST	443	49819	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.172288895 CEST	443	49820	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.173086882 CEST	49820	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.173125029 CEST	443	49820	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.173540115 CEST	49820	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.173547983 CEST	443	49820	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.186830997 CEST	443	49817	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.186888933 CEST	443	49817	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.187093019 CEST	49817	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.187442064 CEST	49817	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.187442064 CEST	49817	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.187463045 CEST	443	49817	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.187474966 CEST	443	49817	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.191037893 CEST	49822	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.191078901 CEST	443	49822	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.191167116 CEST	49822	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.191370964 CEST	49822	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.191385031 CEST	443	49822	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.261651993 CEST	443	49821	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.265235901 CEST	49821	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.265304089 CEST	443	49821	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.265877962 CEST	49821	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.265888929 CEST	443	49821	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.281120062 CEST	443	49818	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.281188965 CEST	443	49818	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.281244040 CEST	49818	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.281667948 CEST	49818	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.281697035 CEST	443	49818	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.281709909 CEST	49818	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.281716108 CEST	443	49818	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.286658049 CEST	49823	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.286696911 CEST	443	49823	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.286766052 CEST	49823	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.287146091 CEST	49823	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.287158966 CEST	443	49823	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.290019989 CEST	443	49819	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.290092945 CEST	443	49819	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.290158033 CEST	49819	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.290437937 CEST	49819	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.290483952 CEST	443	49819	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.290513039 CEST	49819	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.290544987 CEST	443	49819	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.297029018 CEST	49824	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.297075033 CEST	443	49824	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.297142029 CEST	49824	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.297540903 CEST	49824	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.297558069 CEST	443	49824	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.347084999 CEST	443	49820	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.347116947 CEST	443	49820	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.347161055 CEST	49820	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.347172976 CEST	443	49820	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.347218990 CEST	49820	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.349917889 CEST	49820	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.349951029 CEST	443	49820	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.349967003 CEST	49820	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.349976063 CEST	443	49820	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.353243113 CEST	49825	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.353287935 CEST	443	49825	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.353359938 CEST	49825	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.353665113 CEST	49825	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.353681087 CEST	443	49825	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.394740105 CEST	443	49821	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.394817114 CEST	443	49821	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.394882917 CEST	49821	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.396873951 CEST	49821	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.396899939 CEST	443	49821	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.396917105 CEST	49821	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.396924019 CEST	443	49821	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.401715040 CEST	49826	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.401762962 CEST	443	49826	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.401849985 CEST	49826	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.401998997 CEST	49826	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.402013063 CEST	443	49826	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.950663090 CEST	443	49822	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.951309919 CEST	49822	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.951366901 CEST	443	49822	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:58.951828003 CEST	49822	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:58.951838017 CEST	443	49822	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.054764986 CEST	443	49824	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.055591106 CEST	49824	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.055669069 CEST	443	49824	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.056140900 CEST	49824	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.056155920 CEST	443	49824	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.059231043 CEST	443	49823	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.060444117 CEST	49823	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.060540915 CEST	443	49823	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.060909033 CEST	49823	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.060925007 CEST	443	49823	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.087671041 CEST	443	49822	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.087958097 CEST	443	49822	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.088092089 CEST	49822	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.088362932 CEST	49822	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.088398933 CEST	443	49822	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.088417053 CEST	49822	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.088426113 CEST	443	49822	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.092515945 CEST	49828	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.092561960 CEST	443	49828	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.092673063 CEST	49828	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.092852116 CEST	49828	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.092869997 CEST	443	49828	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.109061003 CEST	443	49825	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.109605074 CEST	49825	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.109627008 CEST	443	49825	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.110222101 CEST	49825	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.110232115 CEST	443	49825	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.154922009 CEST	443	49826	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.155476093 CEST	49826	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.155515909 CEST	443	49826	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.156063080 CEST	49826	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.156075954 CEST	443	49826	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.191901922 CEST	443	49824	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.192065954 CEST	443	49824	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.192117929 CEST	443	49824	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.192281008 CEST	49824	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.192487001 CEST	49824	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.192538023 CEST	443	49824	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.192574978 CEST	49824	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.192594051 CEST	443	49824	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.195765972 CEST	49829	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.195810080 CEST	443	49829	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.195911884 CEST	49829	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.196072102 CEST	49829	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.196082115 CEST	443	49829	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.201649904 CEST	443	49823	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.201745987 CEST	443	49823	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.201837063 CEST	49823	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.202430010 CEST	49823	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.202481031 CEST	443	49823	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.202512026 CEST	49823	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.202529907 CEST	443	49823	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.212228060 CEST	49830	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.212268114 CEST	443	49830	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.212338924 CEST	49830	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.212660074 CEST	49830	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.212672949 CEST	443	49830	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.247220993 CEST	443	49825	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.247323990 CEST	443	49825	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.247385979 CEST	49825	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.247812986 CEST	49825	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.247826099 CEST	443	49825	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.247840881 CEST	49825	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.247848034 CEST	443	49825	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.252091885 CEST	49831	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.252129078 CEST	443	49831	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.252310991 CEST	49831	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.252906084 CEST	49831	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.252919912 CEST	443	49831	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.290220976 CEST	443	49826	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.290297031 CEST	443	49826	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.290417910 CEST	443	49826	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.290414095 CEST	49826	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.290649891 CEST	49826	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.290858030 CEST	49826	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.290908098 CEST	443	49826	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.290941954 CEST	49826	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.290960073 CEST	443	49826	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.294591904 CEST	49832	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.294641972 CEST	443	49832	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.294719934 CEST	49832	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.295171976 CEST	49832	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.295182943 CEST	443	49832	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.850944042 CEST	443	49828	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.859035015 CEST	49828	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.859055042 CEST	443	49828	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.861160994 CEST	49828	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.861177921 CEST	443	49828	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.972125053 CEST	443	49830	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.974162102 CEST	443	49829	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.980951071 CEST	49830	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.980966091 CEST	443	49830	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.982659101 CEST	49830	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.982664108 CEST	443	49830	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.983247042 CEST	49829	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.983257055 CEST	443	49829	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.984289885 CEST	49829	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.984296083 CEST	443	49829	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.991966963 CEST	443	49828	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.992044926 CEST	443	49828	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.992111921 CEST	49828	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.992388010 CEST	49828	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.992388010 CEST	49828	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.992405891 CEST	443	49828	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.992413998 CEST	443	49828	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.997837067 CEST	49833	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.997893095 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 23, 2024 17:10:59.997947931 CEST	49833	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.998095989 CEST	49833	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:10:59.998111010 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.011382103 CEST	443	49831	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.012013912 CEST	49831	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.012021065 CEST	443	49831	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.012696028 CEST	49831	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.012700081 CEST	443	49831	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.060956001 CEST	443	49832	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.061491966 CEST	49832	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.061541080 CEST	443	49832	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.062062979 CEST	49832	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.062068939 CEST	443	49832	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.115483046 CEST	443	49830	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.115547895 CEST	443	49830	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.115597010 CEST	49830	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.115837097 CEST	49830	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.115837097 CEST	49830	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.115855932 CEST	443	49830	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.115864038 CEST	443	49830	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.116453886 CEST	443	49829	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.116559029 CEST	443	49829	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.116600990 CEST	49829	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.116961956 CEST	49829	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.116975069 CEST	443	49829	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.116986036 CEST	49829	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.116991997 CEST	443	49829	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.119782925 CEST	49834	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.119827032 CEST	443	49834	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.119889975 CEST	49834	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.119982004 CEST	49835	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.120063066 CEST	49834	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.120069027 CEST	443	49835	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.120078087 CEST	443	49834	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.120153904 CEST	49835	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.120332003 CEST	49835	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.120373011 CEST	443	49835	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.150228024 CEST	443	49831	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.150259972 CEST	443	49831	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.150319099 CEST	49831	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.150325060 CEST	443	49831	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.150365114 CEST	49831	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.152923107 CEST	49831	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.152935028 CEST	443	49831	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.159748077 CEST	49836	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.159815073 CEST	443	49836	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.159882069 CEST	49836	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.160237074 CEST	49836	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.160259962 CEST	443	49836	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.197426081 CEST	443	49832	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.197592974 CEST	443	49832	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.197844028 CEST	49832	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.197992086 CEST	49832	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.198013067 CEST	443	49832	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.198026896 CEST	49832	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.198033094 CEST	443	49832	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.205792904 CEST	49837	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.205826998 CEST	443	49837	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.205894947 CEST	49837	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.206053019 CEST	49837	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.206064939 CEST	443	49837	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.742624044 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.743381023 CEST	49833	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.743416071 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.743880033 CEST	49833	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.743885994 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.871917963 CEST	443	49835	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.872504950 CEST	49835	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.872544050 CEST	443	49835	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.872973919 CEST	49835	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.872987986 CEST	443	49835	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.876743078 CEST	443	49834	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.877018929 CEST	49834	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.877048969 CEST	443	49834	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.877343893 CEST	49834	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.877351999 CEST	443	49834	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.878282070 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.878351927 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.878434896 CEST	49833	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.878689051 CEST	49833	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.878720045 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.878767014 CEST	49833	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.878781080 CEST	443	49833	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.881494045 CEST	49838	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.881535053 CEST	443	49838	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.881623030 CEST	49838	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.881777048 CEST	49838	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.881792068 CEST	443	49838	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.926879883 CEST	443	49836	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.927423954 CEST	49836	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.927462101 CEST	443	49836	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.927875042 CEST	49836	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.927881002 CEST	443	49836	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.978967905 CEST	443	49837	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.979583025 CEST	49837	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.979604006 CEST	443	49837	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:00.980046034 CEST	49837	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:00.980051041 CEST	443	49837	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.010170937 CEST	443	49835	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.010215044 CEST	443	49835	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.010266066 CEST	443	49835	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.010289907 CEST	49835	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.010319948 CEST	49835	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.010535955 CEST	49835	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.010559082 CEST	443	49835	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.010569096 CEST	49835	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.010575056 CEST	443	49835	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.013489962 CEST	49839	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.013534069 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.013637066 CEST	49839	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.013817072 CEST	49839	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.013830900 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.014177084 CEST	443	49834	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.014230967 CEST	443	49834	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.014395952 CEST	49834	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.014460087 CEST	49834	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.014482021 CEST	443	49834	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.014497995 CEST	49834	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.014506102 CEST	443	49834	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.016560078 CEST	49840	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.016585112 CEST	443	49840	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.016649008 CEST	49840	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.016772985 CEST	49840	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.016787052 CEST	443	49840	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.066730022 CEST	443	49836	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.066865921 CEST	443	49836	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.066926003 CEST	49836	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.067056894 CEST	49836	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.067079067 CEST	443	49836	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.067090034 CEST	49836	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.067095995 CEST	443	49836	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.069632053 CEST	49841	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.069684029 CEST	443	49841	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.069763899 CEST	49841	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.069910049 CEST	49841	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.069931030 CEST	443	49841	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.115560055 CEST	443	49837	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.115655899 CEST	443	49837	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.115897894 CEST	49837	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.115961075 CEST	49837	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.115978003 CEST	443	49837	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.115988016 CEST	49837	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.115995884 CEST	443	49837	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.118993044 CEST	49842	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.119057894 CEST	443	49842	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.119152069 CEST	49842	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.119338036 CEST	49842	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.119380951 CEST	443	49842	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.636368036 CEST	443	49838	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.637058973 CEST	49838	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.637099981 CEST	443	49838	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.637552023 CEST	49838	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.637557983 CEST	443	49838	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.758871078 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.759572983 CEST	49839	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.759601116 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.760023117 CEST	49839	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.760029078 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.772453070 CEST	443	49838	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.772792101 CEST	443	49838	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.772977114 CEST	49838	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.772977114 CEST	49838	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.772977114 CEST	49838	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.775712013 CEST	49843	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.775775909 CEST	443	49843	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.775866032 CEST	49843	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.776006937 CEST	49843	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.776024103 CEST	443	49843	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.786062002 CEST	443	49840	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.786628962 CEST	49840	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.786664963 CEST	443	49840	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.787074089 CEST	49840	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.787080050 CEST	443	49840	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.824553967 CEST	443	49841	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.825027943 CEST	49841	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.825073957 CEST	443	49841	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.825429916 CEST	49841	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.825436115 CEST	443	49841	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.874921083 CEST	443	49842	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.882188082 CEST	49842	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.882215977 CEST	443	49842	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.882682085 CEST	49842	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.882687092 CEST	443	49842	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.894540071 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.894563913 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.894615889 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.894730091 CEST	49839	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.895145893 CEST	49839	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.895164967 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.895176888 CEST	49839	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.895184040 CEST	443	49839	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.897938967 CEST	49844	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.897964001 CEST	443	49844	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.898056030 CEST	49844	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.898226023 CEST	49844	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.898236990 CEST	443	49844	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.926206112 CEST	443	49840	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.926368952 CEST	443	49840	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.926464081 CEST	49840	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.926599979 CEST	49840	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.926621914 CEST	443	49840	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.926631927 CEST	49840	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.926637888 CEST	443	49840	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.929513931 CEST	49845	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.929560900 CEST	443	49845	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.929649115 CEST	49845	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.929814100 CEST	49845	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.929825068 CEST	443	49845	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.963195086 CEST	443	49841	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.963278055 CEST	443	49841	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.963361979 CEST	49841	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.963591099 CEST	49841	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.963614941 CEST	443	49841	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.963627100 CEST	49841	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.963633060 CEST	443	49841	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.966542959 CEST	49846	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.966593027 CEST	443	49846	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:01.966692924 CEST	49846	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.966845036 CEST	49846	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:01.966857910 CEST	443	49846	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.014813900 CEST	443	49842	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.014970064 CEST	443	49842	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.015062094 CEST	49842	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.015158892 CEST	49842	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.015177965 CEST	443	49842	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.015187025 CEST	49842	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.015192986 CEST	443	49842	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.017874956 CEST	49847	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.017919064 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.017997026 CEST	49847	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.018141031 CEST	49847	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.018158913 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.074130058 CEST	49838	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.074189901 CEST	443	49838	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.553524017 CEST	443	49843	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.595520973 CEST	49843	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.595556974 CEST	443	49843	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.597032070 CEST	49843	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.597042084 CEST	443	49843	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.654643059 CEST	443	49844	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.660912037 CEST	49844	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.660929918 CEST	443	49844	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.661366940 CEST	49844	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.661374092 CEST	443	49844	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.703079939 CEST	443	49845	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.706046104 CEST	49845	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.706073046 CEST	443	49845	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.708116055 CEST	49845	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.708125114 CEST	443	49845	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.733742952 CEST	443	49843	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.733783960 CEST	443	49843	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.733836889 CEST	49843	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.733859062 CEST	443	49843	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.733905077 CEST	49843	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.734036922 CEST	49843	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.734061956 CEST	443	49843	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.734078884 CEST	49843	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.734085083 CEST	443	49843	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.737514019 CEST	49848	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.737555027 CEST	443	49848	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.737613916 CEST	49848	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.737915039 CEST	49848	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.737926006 CEST	443	49848	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.738055944 CEST	443	49846	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.738374949 CEST	49846	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.738395929 CEST	443	49846	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.738816023 CEST	49846	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.738822937 CEST	443	49846	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.774847984 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.775998116 CEST	49847	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.776030064 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.776492119 CEST	49847	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.776498079 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.796566963 CEST	443	49844	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.797283888 CEST	443	49844	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.797344923 CEST	49844	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.797465086 CEST	49844	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.797486067 CEST	443	49844	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.797501087 CEST	49844	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.797507048 CEST	443	49844	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.800307989 CEST	49849	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.800410986 CEST	443	49849	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.800581932 CEST	49849	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.800765038 CEST	49849	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.800781965 CEST	443	49849	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.844157934 CEST	443	49845	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.844197035 CEST	443	49845	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.844244003 CEST	443	49845	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.844294071 CEST	49845	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.844321966 CEST	49845	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.844558954 CEST	49845	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.844579935 CEST	443	49845	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.844613075 CEST	49845	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.844618082 CEST	443	49845	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.847121954 CEST	49850	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.847174883 CEST	443	49850	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.847238064 CEST	49850	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.847368956 CEST	49850	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.847377062 CEST	443	49850	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.874685049 CEST	443	49846	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.874955893 CEST	443	49846	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.875036955 CEST	49846	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.897443056 CEST	49846	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.897475958 CEST	443	49846	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.897531986 CEST	49846	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.897538900 CEST	443	49846	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.900405884 CEST	49851	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.900458097 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.900526047 CEST	49851	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.900662899 CEST	49851	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.900675058 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.911081076 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.911149025 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.911235094 CEST	49847	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.911261082 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.911283016 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.911336899 CEST	49847	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.911489010 CEST	49847	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.911503077 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.911510944 CEST	49847	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.911515951 CEST	443	49847	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.913925886 CEST	49852	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.913958073 CEST	443	49852	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:02.914027929 CEST	49852	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.914146900 CEST	49852	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:02.914155006 CEST	443	49852	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.490005970 CEST	443	49848	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.490587950 CEST	49848	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.490606070 CEST	443	49848	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.491141081 CEST	49848	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.491144896 CEST	443	49848	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.550079107 CEST	443	49849	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.550679922 CEST	49849	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.550734043 CEST	443	49849	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.551192045 CEST	49849	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.551198959 CEST	443	49849	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.609338999 CEST	443	49850	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.610008001 CEST	49850	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.610029936 CEST	443	49850	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.610558033 CEST	49850	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.610562086 CEST	443	49850	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.624608994 CEST	443	49848	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.624682903 CEST	443	49848	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.624756098 CEST	49848	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.624953985 CEST	49848	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.624969006 CEST	443	49848	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.624979973 CEST	49848	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.624986887 CEST	443	49848	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.628331900 CEST	49853	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.628381968 CEST	443	49853	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.628483057 CEST	49853	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.628765106 CEST	49853	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.628777981 CEST	443	49853	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.644664049 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.645250082 CEST	49851	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.645281076 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.645771980 CEST	49851	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.645782948 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.668896914 CEST	443	49852	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.669414043 CEST	49852	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.669440031 CEST	443	49852	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.669914961 CEST	49852	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.669919968 CEST	443	49852	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.688587904 CEST	443	49849	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.688618898 CEST	443	49849	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.688671112 CEST	443	49849	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.688750029 CEST	49849	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.688824892 CEST	49849	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.689090014 CEST	49849	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.689090014 CEST	49849	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.689142942 CEST	443	49849	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.689172983 CEST	443	49849	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.692207098 CEST	49854	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.692238092 CEST	443	49854	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.692327976 CEST	49854	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.692476034 CEST	49854	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.692481995 CEST	443	49854	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.746786118 CEST	443	49850	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.746988058 CEST	443	49850	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.747086048 CEST	49850	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.747271061 CEST	49850	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.747289896 CEST	443	49850	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.747301102 CEST	49850	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.747307062 CEST	443	49850	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.750734091 CEST	49855	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.750787973 CEST	443	49855	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.750875950 CEST	49855	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.751050949 CEST	49855	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.751069069 CEST	443	49855	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.779680014 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.779751062 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.779884100 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.779906988 CEST	49851	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.779947996 CEST	49851	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.780232906 CEST	49851	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.780257940 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.780268908 CEST	49851	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.780276060 CEST	443	49851	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.783658981 CEST	49856	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.783694983 CEST	443	49856	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.783797026 CEST	49856	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.783987999 CEST	49856	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.784002066 CEST	443	49856	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.804908037 CEST	443	49852	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.805001020 CEST	443	49852	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.805119038 CEST	49852	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.805377007 CEST	49852	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.805387974 CEST	443	49852	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.805398941 CEST	49852	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.805404902 CEST	443	49852	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.808937073 CEST	49857	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.808959007 CEST	443	49857	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:03.809052944 CEST	49857	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.809221029 CEST	49857	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:03.809231043 CEST	443	49857	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.389177084 CEST	443	49853	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.389925957 CEST	49853	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.389942884 CEST	443	49853	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.390467882 CEST	49853	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.390475035 CEST	443	49853	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.430838108 CEST	443	49854	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.431504011 CEST	49854	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.431514025 CEST	443	49854	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.432262897 CEST	49854	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.432269096 CEST	443	49854	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.503573895 CEST	443	49855	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.504247904 CEST	49855	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.504259109 CEST	443	49855	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.505008936 CEST	49855	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.505012989 CEST	443	49855	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.526983976 CEST	443	49853	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.527045965 CEST	443	49853	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.527101040 CEST	49853	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.527533054 CEST	49853	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.527550936 CEST	443	49853	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.527561903 CEST	49853	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.527570009 CEST	443	49853	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.531459093 CEST	49858	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.531487942 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.531560898 CEST	49858	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.531732082 CEST	49858	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.531742096 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.535279036 CEST	443	49856	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.535763979 CEST	49856	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.535780907 CEST	443	49856	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.536315918 CEST	49856	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.536320925 CEST	443	49856	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.564763069 CEST	443	49854	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.564857960 CEST	443	49854	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.564908028 CEST	49854	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.565112114 CEST	49854	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.565129042 CEST	443	49854	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.565140963 CEST	49854	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.565149069 CEST	443	49854	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.568566084 CEST	49859	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.568602085 CEST	443	49859	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.568671942 CEST	49859	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.568939924 CEST	49859	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.568950891 CEST	443	49859	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.579202890 CEST	443	49857	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.579694986 CEST	49857	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.579715967 CEST	443	49857	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.580274105 CEST	49857	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.580280066 CEST	443	49857	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.640985012 CEST	443	49855	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.641010046 CEST	443	49855	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.641057968 CEST	443	49855	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.641077042 CEST	49855	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.641128063 CEST	49855	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.641469002 CEST	49855	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.641491890 CEST	443	49855	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.641510963 CEST	49855	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.641520023 CEST	443	49855	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.645363092 CEST	49860	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.645411015 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.645498991 CEST	49860	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.645689011 CEST	49860	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.645700932 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.673017025 CEST	443	49856	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.673197985 CEST	443	49856	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.673258066 CEST	49856	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.673465967 CEST	49856	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.673487902 CEST	443	49856	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.673502922 CEST	49856	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.673513889 CEST	443	49856	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.677313089 CEST	49861	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.677360058 CEST	443	49861	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.677436113 CEST	49861	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.677654982 CEST	49861	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.677669048 CEST	443	49861	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.717566967 CEST	443	49857	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.717653990 CEST	443	49857	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.717708111 CEST	49857	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.717725039 CEST	443	49857	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.717791080 CEST	443	49857	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.717848063 CEST	49857	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.718183994 CEST	49857	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.718204021 CEST	443	49857	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.718214989 CEST	49857	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.718221903 CEST	443	49857	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.722074032 CEST	49862	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.722129107 CEST	443	49862	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:04.722203970 CEST	49862	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.722414017 CEST	49862	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:04.722429037 CEST	443	49862	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.417073965 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.417681932 CEST	49858	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.417697906 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.418324947 CEST	49858	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.418332100 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.547864914 CEST	443	49859	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.548799038 CEST	49859	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.548820019 CEST	443	49859	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.549226999 CEST	49859	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.549237013 CEST	443	49859	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.550457001 CEST	443	49862	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.550739050 CEST	49862	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.550770044 CEST	443	49862	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.551084042 CEST	49862	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.551088095 CEST	443	49862	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.553406954 CEST	443	49861	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.553673983 CEST	49861	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.553702116 CEST	443	49861	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.553927898 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.554028034 CEST	49861	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.554032087 CEST	443	49861	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.554234028 CEST	49860	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.554239988 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.554559946 CEST	49860	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.554563046 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.556407928 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.556483030 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.556700945 CEST	49858	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.556735992 CEST	49858	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.556757927 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.556770086 CEST	49858	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.556776047 CEST	443	49858	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.560560942 CEST	49863	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.560589075 CEST	443	49863	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.560681105 CEST	49863	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.560807943 CEST	49863	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.560817003 CEST	443	49863	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.682683945 CEST	443	49859	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.682770014 CEST	443	49859	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.682912111 CEST	49859	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.683295965 CEST	49859	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.683309078 CEST	443	49859	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.683336020 CEST	49859	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.683341026 CEST	443	49859	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.686981916 CEST	49864	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.687030077 CEST	443	49864	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.687128067 CEST	49864	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.687272072 CEST	443	49862	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.687325954 CEST	49864	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.687336922 CEST	443	49864	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.687381029 CEST	443	49862	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.687490940 CEST	49862	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.687522888 CEST	49862	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.687537909 CEST	443	49862	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.687551022 CEST	49862	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.687556982 CEST	443	49862	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.689879894 CEST	49865	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.689910889 CEST	443	49865	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.689974070 CEST	49865	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.690093994 CEST	49865	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.690103054 CEST	443	49865	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.692039967 CEST	443	49861	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.692127943 CEST	443	49861	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.692173004 CEST	443	49861	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.692228079 CEST	49861	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.692291021 CEST	49861	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.692301989 CEST	443	49861	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.692313910 CEST	49861	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.692318916 CEST	443	49861	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.694443941 CEST	49866	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.694453955 CEST	443	49866	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.694550037 CEST	49866	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.694683075 CEST	49866	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.694690943 CEST	443	49866	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.695471048 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.695848942 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.695899963 CEST	49860	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.695935965 CEST	49860	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.695940018 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.695964098 CEST	49860	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.695966959 CEST	443	49860	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.697849989 CEST	49867	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.697858095 CEST	443	49867	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:05.697909117 CEST	49867	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.698020935 CEST	49867	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:05.698028088 CEST	443	49867	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.318862915 CEST	443	49863	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.320033073 CEST	49863	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.320058107 CEST	443	49863	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.320621014 CEST	49863	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.320627928 CEST	443	49863	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.452080011 CEST	443	49864	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.452649117 CEST	49864	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.452677965 CEST	443	49864	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.453219891 CEST	49864	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.453227043 CEST	443	49864	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.453828096 CEST	443	49865	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.454183102 CEST	49865	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.454207897 CEST	443	49865	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.454592943 CEST	49865	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.454598904 CEST	443	49865	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.455852032 CEST	443	49867	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.456156015 CEST	49867	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.456161976 CEST	443	49867	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.456583023 CEST	49867	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.456588030 CEST	443	49867	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.473588943 CEST	443	49863	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.473614931 CEST	443	49863	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.473659039 CEST	443	49863	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.473717928 CEST	49863	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.473759890 CEST	49863	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.473936081 CEST	49863	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.473953962 CEST	443	49863	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.473968029 CEST	49863	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.473973989 CEST	443	49863	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.477133036 CEST	49868	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.477174044 CEST	443	49868	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.477315903 CEST	49868	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.477459908 CEST	443	49866	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.477494001 CEST	49868	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.477507114 CEST	443	49868	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.477821112 CEST	49866	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.477844000 CEST	443	49866	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.478301048 CEST	49866	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.478307009 CEST	443	49866	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.591995955 CEST	443	49864	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.592076063 CEST	443	49864	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.592184067 CEST	49864	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.592582941 CEST	49864	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.592603922 CEST	443	49864	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.592614889 CEST	49864	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.592622042 CEST	443	49864	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.593991041 CEST	443	49867	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.594104052 CEST	443	49867	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.594188929 CEST	49867	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.594319105 CEST	49867	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.594338894 CEST	443	49867	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.594352007 CEST	49867	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.594357967 CEST	443	49867	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.595978022 CEST	49869	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.596014977 CEST	443	49869	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.596096992 CEST	49869	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.596270084 CEST	49869	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.596282959 CEST	443	49869	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.596441031 CEST	49870	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.596467972 CEST	443	49870	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.599188089 CEST	443	49865	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.599250078 CEST	443	49865	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.599261999 CEST	49870	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.599294901 CEST	49865	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.599390984 CEST	49870	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.599404097 CEST	443	49870	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.599486113 CEST	49865	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.599493980 CEST	443	49865	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.599507093 CEST	49865	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.599510908 CEST	443	49865	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.601696968 CEST	49871	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.601721048 CEST	443	49871	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.601795912 CEST	49871	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.601947069 CEST	49871	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.601958036 CEST	443	49871	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.616204977 CEST	443	49866	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.616280079 CEST	443	49866	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.616374969 CEST	49866	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.616621017 CEST	49866	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.616645098 CEST	443	49866	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.616657019 CEST	49866	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.616662979 CEST	443	49866	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.619401932 CEST	49872	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.619437933 CEST	443	49872	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:06.619527102 CEST	49872	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.619674921 CEST	49872	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:06.619683981 CEST	443	49872	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.241854906 CEST	443	49868	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.242629051 CEST	49868	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.242652893 CEST	443	49868	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.243087053 CEST	49868	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.243092060 CEST	443	49868	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.371665955 CEST	443	49871	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.372106075 CEST	49871	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.372128010 CEST	443	49871	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.372594118 CEST	49871	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.372603893 CEST	443	49871	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.372659922 CEST	443	49869	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.372875929 CEST	443	49870	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.372991085 CEST	49869	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.372997999 CEST	443	49869	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.373390913 CEST	49869	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.373395920 CEST	443	49869	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.373946905 CEST	49870	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.373965025 CEST	443	49870	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.374705076 CEST	49870	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.374710083 CEST	443	49870	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.385608912 CEST	443	49868	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.385685921 CEST	443	49868	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.385751009 CEST	49868	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.386003017 CEST	49868	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.386003971 CEST	49868	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.386037111 CEST	443	49868	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.386059046 CEST	443	49868	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.389504910 CEST	49873	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.389554024 CEST	443	49873	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.389617920 CEST	49873	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.389765978 CEST	49873	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.389777899 CEST	443	49873	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.400190115 CEST	443	49872	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.400691032 CEST	49872	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.400751114 CEST	443	49872	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.401051044 CEST	49872	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.401065111 CEST	443	49872	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.511938095 CEST	443	49871	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.512041092 CEST	443	49871	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.512114048 CEST	49871	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.512147903 CEST	443	49871	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.512172937 CEST	443	49871	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.512224913 CEST	49871	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.512336969 CEST	49871	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.512353897 CEST	443	49871	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.512363911 CEST	49871	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.512368917 CEST	443	49871	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.512837887 CEST	443	49869	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.513226986 CEST	443	49869	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.513252020 CEST	443	49870	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.513283968 CEST	49869	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.513320923 CEST	443	49870	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.513391972 CEST	49870	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.513406038 CEST	49869	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.513411999 CEST	443	49869	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.513422012 CEST	49869	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.513426065 CEST	443	49869	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.513684034 CEST	49870	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.513684034 CEST	49870	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.513715982 CEST	443	49870	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.513739109 CEST	443	49870	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.516005993 CEST	49874	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.516026020 CEST	49875	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.516041994 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.516112089 CEST	49874	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.516133070 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.516205072 CEST	49875	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.516284943 CEST	49874	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.516299009 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.516388893 CEST	49875	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.516424894 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.516901970 CEST	49876	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.516927004 CEST	443	49876	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.516982079 CEST	49876	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.517077923 CEST	49876	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.517092943 CEST	443	49876	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.542027950 CEST	443	49872	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.542365074 CEST	443	49872	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.542433977 CEST	49872	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.542460918 CEST	49872	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.542481899 CEST	443	49872	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.542493105 CEST	49872	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.542499065 CEST	443	49872	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.545108080 CEST	49877	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.545164108 CEST	443	49877	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.545264006 CEST	49877	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.545413971 CEST	49877	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:07.545444012 CEST	443	49877	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:07.682573080 CEST	443	49771	173.222.162.64	192.168.2.6
Oct 23, 2024 17:11:07.682833910 CEST	49771	443	192.168.2.6	173.222.162.64
Oct 23, 2024 17:11:08.166975021 CEST	443	49873	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.167783022 CEST	49873	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.167817116 CEST	443	49873	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.168297052 CEST	49873	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.168306112 CEST	443	49873	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.269455910 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.270051956 CEST	49874	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.270113945 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.270565033 CEST	49874	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.270584106 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.280333042 CEST	443	49876	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.280787945 CEST	49876	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.280813932 CEST	443	49876	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.281255960 CEST	49876	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.281275034 CEST	443	49876	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.282773972 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.283108950 CEST	49875	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.283133984 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.283499956 CEST	49875	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.283504963 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.305731058 CEST	443	49877	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.306278944 CEST	49877	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.306338072 CEST	443	49877	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.306720972 CEST	49877	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.306740999 CEST	443	49877	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.309009075 CEST	443	49873	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.309128046 CEST	443	49873	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.309190035 CEST	49873	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.309344053 CEST	49873	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.309361935 CEST	443	49873	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.309371948 CEST	49873	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.309376955 CEST	443	49873	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.312108994 CEST	49878	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.312197924 CEST	443	49878	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.312273026 CEST	49878	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.312400103 CEST	49878	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.312436104 CEST	443	49878	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.417218924 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.417294979 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.417361021 CEST	49874	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.417571068 CEST	49874	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.417598009 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.417613983 CEST	49874	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.417620897 CEST	443	49874	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.419938087 CEST	443	49876	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.420085907 CEST	443	49876	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.420150995 CEST	49876	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.420180082 CEST	443	49876	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.420207977 CEST	443	49876	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.420257092 CEST	49876	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.420295000 CEST	49876	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.420308113 CEST	443	49876	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.420320988 CEST	49876	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.420325994 CEST	443	49876	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.420361042 CEST	49879	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.420403957 CEST	443	49879	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.420461893 CEST	49879	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.420604944 CEST	49879	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.420614958 CEST	443	49879	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.422283888 CEST	49880	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.422318935 CEST	443	49880	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.422389030 CEST	49880	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.422534943 CEST	49880	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.422547102 CEST	443	49880	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.422852039 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.422873020 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.422914028 CEST	49875	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.422930002 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.422979116 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.423017979 CEST	49875	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.423032999 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.423053980 CEST	49875	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.423059940 CEST	443	49875	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.424799919 CEST	49881	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.424828053 CEST	443	49881	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.424977064 CEST	49881	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.425040007 CEST	49881	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.425045013 CEST	443	49881	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.445477962 CEST	443	49877	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.445508003 CEST	443	49877	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.445555925 CEST	443	49877	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.445611000 CEST	49877	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.445653915 CEST	49877	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.445895910 CEST	49877	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.445924997 CEST	443	49877	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.445952892 CEST	49877	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.445966005 CEST	443	49877	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.448339939 CEST	49882	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.448365927 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:08.448438883 CEST	49882	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.448592901 CEST	49882	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:08.448605061 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.065329075 CEST	443	49878	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.066818953 CEST	49878	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.066848040 CEST	443	49878	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.067257881 CEST	49878	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.067265987 CEST	443	49878	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.169301987 CEST	443	49881	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.170017004 CEST	49881	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.170028925 CEST	443	49881	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.170520067 CEST	49881	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.170522928 CEST	443	49881	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.175977945 CEST	443	49879	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.176301956 CEST	49879	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.176322937 CEST	443	49879	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.176666021 CEST	49879	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.176675081 CEST	443	49879	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.183697939 CEST	443	49880	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.184186935 CEST	49880	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.184200048 CEST	443	49880	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.184670925 CEST	49880	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.184675932 CEST	443	49880	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.203654051 CEST	443	49878	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.204042912 CEST	443	49878	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.204149961 CEST	49878	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.204189062 CEST	49878	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.204212904 CEST	443	49878	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.204225063 CEST	49878	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.204233885 CEST	443	49878	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.206583977 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.206986904 CEST	49882	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.207003117 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.207418919 CEST	49882	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.207425117 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.207782984 CEST	49883	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.207813978 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.207881927 CEST	49883	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.208005905 CEST	49883	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.208018064 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.306422949 CEST	443	49881	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.306447983 CEST	443	49881	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.306508064 CEST	443	49881	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.306580067 CEST	49881	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.306688070 CEST	49881	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.306838989 CEST	49881	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.306855917 CEST	443	49881	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.306868076 CEST	49881	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.306873083 CEST	443	49881	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.310292006 CEST	49884	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.310338020 CEST	443	49884	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.310444117 CEST	49884	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.310617924 CEST	49884	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.310631990 CEST	443	49884	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.314332008 CEST	443	49879	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.314376116 CEST	443	49879	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.314455986 CEST	49879	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.314474106 CEST	443	49879	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.314548016 CEST	49879	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.314675093 CEST	49879	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.314693928 CEST	443	49879	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.314709902 CEST	49879	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.314718962 CEST	443	49879	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.317019939 CEST	49885	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.317054987 CEST	443	49885	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.317141056 CEST	49885	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.317264080 CEST	49885	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.317274094 CEST	443	49885	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.323467016 CEST	443	49880	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.323532104 CEST	443	49880	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.323600054 CEST	49880	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.323679924 CEST	49880	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.323697090 CEST	443	49880	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.323708057 CEST	49880	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.323713064 CEST	443	49880	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.326386929 CEST	49886	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.326416016 CEST	443	49886	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.326483965 CEST	49886	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.326585054 CEST	49886	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.326595068 CEST	443	49886	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.356620073 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.356657982 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.356693983 CEST	49882	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.356707096 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.356750965 CEST	49882	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.357031107 CEST	49882	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.357037067 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.357059002 CEST	49882	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.357064009 CEST	443	49882	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.360063076 CEST	49887	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.360097885 CEST	443	49887	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:09.360161066 CEST	49887	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.360307932 CEST	49887	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:09.360321999 CEST	443	49887	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.016397953 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.017297983 CEST	49883	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.017318010 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.017780066 CEST	49883	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.017782927 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.069905043 CEST	443	49884	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.070924044 CEST	49884	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.070951939 CEST	443	49884	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.071559906 CEST	49884	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.071568966 CEST	443	49884	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.086447954 CEST	443	49885	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.087239981 CEST	49885	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.087275028 CEST	443	49885	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.087743998 CEST	49885	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.087748051 CEST	443	49885	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.097491026 CEST	443	49886	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.097963095 CEST	49886	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.097981930 CEST	443	49886	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.098463058 CEST	49886	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.098469973 CEST	443	49886	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.144412994 CEST	443	49887	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.145387888 CEST	49887	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.145425081 CEST	443	49887	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.145905972 CEST	49887	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.145910978 CEST	443	49887	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.156071901 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.156137943 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.156189919 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.156208992 CEST	49883	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.156317949 CEST	49883	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.156424999 CEST	49883	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.156451941 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.156470060 CEST	49883	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.156476974 CEST	443	49883	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.159630060 CEST	49888	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.159667015 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.159746885 CEST	49888	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.159868956 CEST	49888	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.159878969 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.208295107 CEST	443	49884	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.208508968 CEST	443	49884	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.208653927 CEST	49884	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.212337017 CEST	49884	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.212337017 CEST	49884	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.212363005 CEST	443	49884	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.212376118 CEST	443	49884	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.215890884 CEST	49889	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.215954065 CEST	443	49889	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.216048956 CEST	49889	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.216308117 CEST	49889	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.216324091 CEST	443	49889	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.222183943 CEST	443	49885	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.222295046 CEST	443	49885	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.222383976 CEST	49885	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.222512007 CEST	49885	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.222533941 CEST	443	49885	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.222541094 CEST	49885	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.222547054 CEST	443	49885	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.225297928 CEST	49890	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.225363016 CEST	443	49890	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.225452900 CEST	49890	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.225637913 CEST	49890	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.225667000 CEST	443	49890	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.233799934 CEST	443	49886	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.234203100 CEST	443	49886	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.234273911 CEST	49886	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.234371901 CEST	49886	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.234371901 CEST	49886	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.234386921 CEST	443	49886	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.234395981 CEST	443	49886	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.238687038 CEST	49891	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.238729954 CEST	443	49891	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.239031076 CEST	49891	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.239031076 CEST	49891	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.239067078 CEST	443	49891	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.281977892 CEST	443	49887	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.282017946 CEST	443	49887	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.282078981 CEST	443	49887	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.282108068 CEST	49887	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.282161951 CEST	49887	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.282470942 CEST	49887	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.282495975 CEST	443	49887	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.282509089 CEST	49887	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.282515049 CEST	443	49887	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.286112070 CEST	49892	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.286149025 CEST	443	49892	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.286253929 CEST	49892	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.286446095 CEST	49892	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.286458969 CEST	443	49892	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.912657976 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.913371086 CEST	49888	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.913388014 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.913881063 CEST	49888	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.913886070 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.980679989 CEST	443	49890	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.981532097 CEST	49890	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.981559992 CEST	443	49890	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.982079983 CEST	49890	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.982090950 CEST	443	49890	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.987987995 CEST	443	49891	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.988373995 CEST	49891	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.988385916 CEST	443	49891	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.988760948 CEST	49891	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.988765955 CEST	443	49891	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.989562035 CEST	443	49889	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.989801884 CEST	49889	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.989809036 CEST	443	49889	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:10.990149021 CEST	49889	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:10.990153074 CEST	443	49889	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.042200089 CEST	443	49892	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.042957067 CEST	49892	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.042995930 CEST	443	49892	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.043507099 CEST	49892	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.043512106 CEST	443	49892	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.049316883 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.049387932 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.049457073 CEST	49888	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.049712896 CEST	49888	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.049729109 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.049747944 CEST	49888	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.049756050 CEST	443	49888	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.053428888 CEST	49893	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.053513050 CEST	443	49893	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.053642988 CEST	49893	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.053842068 CEST	49893	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.053878069 CEST	443	49893	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.117760897 CEST	443	49890	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.117944956 CEST	443	49890	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.118046999 CEST	49890	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.118298054 CEST	49890	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.118309021 CEST	443	49890	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.118347883 CEST	49890	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.118354082 CEST	443	49890	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.122277975 CEST	49894	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.122344017 CEST	443	49894	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.122464895 CEST	49894	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.122637033 CEST	49894	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.122653961 CEST	443	49894	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.125634909 CEST	443	49891	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.126190901 CEST	443	49891	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.126247883 CEST	49891	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.126261950 CEST	443	49891	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.126318932 CEST	49891	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.126369953 CEST	49891	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.126383066 CEST	443	49891	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.126393080 CEST	49891	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.126398087 CEST	443	49891	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.128551006 CEST	443	49889	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.128575087 CEST	443	49889	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.128612041 CEST	443	49889	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.128652096 CEST	49889	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.128719091 CEST	49889	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.128868103 CEST	49889	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.128878117 CEST	443	49889	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.128890991 CEST	49889	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.128895044 CEST	443	49889	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.129355907 CEST	49895	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.129420996 CEST	443	49895	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.129509926 CEST	49895	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.129688025 CEST	49895	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.129722118 CEST	443	49895	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.131128073 CEST	49896	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.131165981 CEST	443	49896	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.131231070 CEST	49896	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.131371975 CEST	49896	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.131383896 CEST	443	49896	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.178997993 CEST	443	49892	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.179138899 CEST	443	49892	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.179243088 CEST	49892	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.179517031 CEST	49892	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.179542065 CEST	443	49892	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.179558039 CEST	49892	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.179563999 CEST	443	49892	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.183254004 CEST	49897	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.183290958 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.183393955 CEST	49897	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.183684111 CEST	49897	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.183700085 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.808255911 CEST	443	49893	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.809104919 CEST	49893	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.809139013 CEST	443	49893	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.809678078 CEST	49893	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.809690952 CEST	443	49893	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.866911888 CEST	443	49895	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.867541075 CEST	49895	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.867584944 CEST	443	49895	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.868094921 CEST	49895	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.868103981 CEST	443	49895	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.879404068 CEST	443	49896	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.879870892 CEST	49896	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.879887104 CEST	443	49896	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.880326986 CEST	49896	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.880331993 CEST	443	49896	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.881337881 CEST	443	49894	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.881691933 CEST	49894	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.881721973 CEST	443	49894	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.882087946 CEST	49894	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.882093906 CEST	443	49894	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.946492910 CEST	443	49893	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.946564913 CEST	443	49893	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.946628094 CEST	49893	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.946819067 CEST	49893	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.946844101 CEST	443	49893	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.946860075 CEST	49893	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.946866989 CEST	443	49893	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.950371981 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.950719118 CEST	49898	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.950751066 CEST	443	49898	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.950815916 CEST	49898	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.951070070 CEST	49897	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.951092005 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.951545000 CEST	49897	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.951550007 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:11.951692104 CEST	49898	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:11.951703072 CEST	443	49898	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.000181913 CEST	443	49895	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.000253916 CEST	443	49895	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.000364065 CEST	49895	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.000633001 CEST	49895	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.000650883 CEST	443	49895	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.000709057 CEST	49895	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.000715971 CEST	443	49895	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.004036903 CEST	49899	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.004081011 CEST	443	49899	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.004165888 CEST	49899	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.004462957 CEST	49899	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.004478931 CEST	443	49899	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.016644955 CEST	443	49896	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.016740084 CEST	443	49896	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.016807079 CEST	49896	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.016928911 CEST	49896	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.016946077 CEST	443	49896	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.016961098 CEST	49896	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.016967058 CEST	443	49896	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.018614054 CEST	443	49894	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.018836021 CEST	443	49894	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.018893003 CEST	49894	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.018929958 CEST	49894	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.018944979 CEST	443	49894	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.018955946 CEST	49894	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.018961906 CEST	443	49894	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.020113945 CEST	49900	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.020145893 CEST	443	49900	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.020211935 CEST	49900	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.020345926 CEST	49900	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.020356894 CEST	443	49900	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.020879984 CEST	49901	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.020919085 CEST	443	49901	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.020987034 CEST	49901	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.021107912 CEST	49901	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.021122932 CEST	443	49901	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.087331057 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.087368011 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.087416887 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.087500095 CEST	49897	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.087832928 CEST	49897	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.087848902 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.087858915 CEST	49897	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.087863922 CEST	443	49897	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.091110945 CEST	49902	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.091125011 CEST	443	49902	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.091207981 CEST	49902	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.091401100 CEST	49902	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.091408014 CEST	443	49902	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.698112965 CEST	443	49898	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.698929071 CEST	49898	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.698954105 CEST	443	49898	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.699429035 CEST	49898	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.699434042 CEST	443	49898	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.756951094 CEST	443	49900	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.757812977 CEST	49900	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.757838964 CEST	443	49900	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.758333921 CEST	49900	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.758339882 CEST	443	49900	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.764605045 CEST	443	49899	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.764970064 CEST	49899	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.764986992 CEST	443	49899	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.765337944 CEST	49899	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.765345097 CEST	443	49899	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.778893948 CEST	443	49901	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.779462099 CEST	49901	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.779489994 CEST	443	49901	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.779714108 CEST	49901	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.779721022 CEST	443	49901	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.833884001 CEST	443	49898	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.834054947 CEST	443	49898	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.834148884 CEST	49898	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.834391117 CEST	49898	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.834407091 CEST	443	49898	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.834420919 CEST	49898	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.834428072 CEST	443	49898	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.838175058 CEST	49903	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.838236094 CEST	443	49903	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.838337898 CEST	49903	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.838547945 CEST	49903	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.838566065 CEST	443	49903	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.868573904 CEST	443	49902	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.869652033 CEST	49902	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.869700909 CEST	443	49902	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.870342016 CEST	49902	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.870352030 CEST	443	49902	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.891516924 CEST	443	49900	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.891587019 CEST	443	49900	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.891652107 CEST	49900	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.891892910 CEST	49900	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.891913891 CEST	443	49900	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.891925097 CEST	49900	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.891932011 CEST	443	49900	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.895524025 CEST	49904	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.895576954 CEST	443	49904	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.895667076 CEST	49904	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.895872116 CEST	49904	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.895890951 CEST	443	49904	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.902508974 CEST	443	49899	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.902576923 CEST	443	49899	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.902657032 CEST	49899	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.902667999 CEST	443	49899	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.902694941 CEST	443	49899	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.902751923 CEST	49899	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.902868986 CEST	49899	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.902879953 CEST	443	49899	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.902915001 CEST	49899	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.902920008 CEST	443	49899	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.905143976 CEST	49905	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.905174971 CEST	443	49905	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.905249119 CEST	49905	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.905385017 CEST	49905	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.905396938 CEST	443	49905	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.918061972 CEST	443	49901	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.918114901 CEST	443	49901	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.918154955 CEST	443	49901	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.918271065 CEST	49901	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.918271065 CEST	49901	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.918271065 CEST	49901	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.918313980 CEST	49901	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.918333054 CEST	443	49901	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.920270920 CEST	49906	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.920284986 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:12.920382977 CEST	49906	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.920557976 CEST	49906	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:12.920571089 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.006860018 CEST	443	49902	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.007029057 CEST	443	49902	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.007113934 CEST	49902	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.007330894 CEST	49902	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.007348061 CEST	443	49902	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.007358074 CEST	49902	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.007364035 CEST	443	49902	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.010432005 CEST	49907	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.010462046 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.010560036 CEST	49907	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.010742903 CEST	49907	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.010751009 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.627161026 CEST	443	49903	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.627839088 CEST	49903	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.627890110 CEST	443	49903	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.628457069 CEST	49903	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.628463030 CEST	443	49903	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.655922890 CEST	443	49904	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.656430960 CEST	49904	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.656447887 CEST	443	49904	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.656924963 CEST	49904	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.656930923 CEST	443	49904	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.662457943 CEST	443	49905	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.662902117 CEST	49905	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.662918091 CEST	443	49905	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.663336039 CEST	49905	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.663341999 CEST	443	49905	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.685728073 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.686361074 CEST	49906	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.686386108 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.686836958 CEST	49906	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.686842918 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.761538029 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.762595892 CEST	49907	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.762610912 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.763127089 CEST	49907	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.763133049 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.764975071 CEST	443	49903	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.765047073 CEST	443	49903	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.765111923 CEST	49903	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.765140057 CEST	443	49903	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.765166998 CEST	443	49903	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.765223026 CEST	49903	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.765383005 CEST	49903	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.765403032 CEST	443	49903	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.765414000 CEST	49903	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.765419960 CEST	443	49903	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.768790007 CEST	49908	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.768815994 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.768907070 CEST	49908	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.769072056 CEST	49908	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.769084930 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.792571068 CEST	443	49904	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.792743921 CEST	443	49904	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.793145895 CEST	49904	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.793358088 CEST	49904	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.793358088 CEST	49904	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.793378115 CEST	443	49904	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.793386936 CEST	443	49904	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.796154976 CEST	49909	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.796195030 CEST	443	49909	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.796308994 CEST	49909	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.796483040 CEST	49909	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.796497107 CEST	443	49909	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.801501989 CEST	443	49905	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.801559925 CEST	443	49905	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.801716089 CEST	443	49905	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.801733971 CEST	49905	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.801788092 CEST	49905	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.801831007 CEST	49905	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.801845074 CEST	443	49905	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.801856995 CEST	49905	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.801862955 CEST	443	49905	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.804322958 CEST	49910	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.804375887 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.804450989 CEST	49910	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.804565907 CEST	49910	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.804579973 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.820013046 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.820060015 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.820207119 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.820245028 CEST	49906	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.820350885 CEST	49906	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.820456982 CEST	49906	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.820456982 CEST	49906	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.820472002 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.820481062 CEST	443	49906	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.823113918 CEST	49911	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.823154926 CEST	443	49911	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.823235035 CEST	49911	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.823374033 CEST	49911	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.823385000 CEST	443	49911	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.840003014 CEST	49701	80	192.168.2.6	172.64.149.23
Oct 23, 2024 17:11:13.840076923 CEST	49703	80	192.168.2.6	172.64.149.23
Oct 23, 2024 17:11:13.840151072 CEST	49700	80	192.168.2.6	172.64.149.23
Oct 23, 2024 17:11:13.846575022 CEST	80	49701	172.64.149.23	192.168.2.6
Oct 23, 2024 17:11:13.846594095 CEST	80	49703	172.64.149.23	192.168.2.6
Oct 23, 2024 17:11:13.846709013 CEST	49701	80	192.168.2.6	172.64.149.23
Oct 23, 2024 17:11:13.846723080 CEST	49703	80	192.168.2.6	172.64.149.23
Oct 23, 2024 17:11:13.846754074 CEST	80	49700	172.64.149.23	192.168.2.6
Oct 23, 2024 17:11:13.846858025 CEST	49700	80	192.168.2.6	172.64.149.23
Oct 23, 2024 17:11:13.898397923 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.898471117 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.898588896 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.898664951 CEST	49907	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.898727894 CEST	49907	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.900759935 CEST	49907	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.900778055 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.900810957 CEST	49907	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.900820017 CEST	443	49907	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.905154943 CEST	49912	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.905211926 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:13.905286074 CEST	49912	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.905488014 CEST	49912	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:13.905500889 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.540705919 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.541457891 CEST	49908	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.541486025 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.542002916 CEST	49908	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.542010069 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.550080061 CEST	443	49909	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.550484896 CEST	49909	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.550508022 CEST	443	49909	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.550879955 CEST	49909	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.550885916 CEST	443	49909	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.565265894 CEST	443	49911	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.568423986 CEST	49911	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.568430901 CEST	443	49911	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.568970919 CEST	49911	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.568974972 CEST	443	49911	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.590975046 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.591600895 CEST	49910	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.591672897 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.592132092 CEST	49910	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.592148066 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.666801929 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.667427063 CEST	49912	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.667462111 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.668103933 CEST	49912	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.668121099 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.681086063 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.681246996 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.681391001 CEST	49908	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.681669950 CEST	49908	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.681714058 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.681745052 CEST	49908	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.681761026 CEST	443	49908	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.685920954 CEST	49913	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.686022043 CEST	443	49913	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.686135054 CEST	49913	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.686307907 CEST	49913	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.686342955 CEST	443	49913	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.699068069 CEST	443	49911	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.699145079 CEST	443	49911	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.699254990 CEST	443	49911	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.699289083 CEST	49911	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.699337959 CEST	49911	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.699701071 CEST	49911	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.699719906 CEST	443	49911	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.699733019 CEST	49911	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.699739933 CEST	443	49911	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.703063011 CEST	49914	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.703129053 CEST	443	49914	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.703263998 CEST	49914	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.703486919 CEST	49914	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.703506947 CEST	443	49914	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.730752945 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.730834007 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.731146097 CEST	49910	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.731184959 CEST	49910	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.731204987 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.731218100 CEST	49910	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.731225014 CEST	443	49910	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.734810114 CEST	49915	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.734858990 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.734978914 CEST	49915	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.735218048 CEST	49915	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.735228062 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.806638956 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.806720018 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.806801081 CEST	49912	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.807127953 CEST	49912	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.807149887 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.807164907 CEST	49912	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.807171106 CEST	443	49912	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.811330080 CEST	49916	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.811369896 CEST	443	49916	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.811441898 CEST	49916	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.811611891 CEST	49916	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.811623096 CEST	443	49916	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.823235989 CEST	443	49909	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.823270082 CEST	443	49909	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.823323011 CEST	49909	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.823328018 CEST	443	49909	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.823371887 CEST	49909	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.823690891 CEST	49909	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.823708057 CEST	443	49909	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.823719978 CEST	49909	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.823725939 CEST	443	49909	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.827119112 CEST	49917	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.827161074 CEST	443	49917	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:14.827280045 CEST	49917	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.827382088 CEST	49917	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:14.827399969 CEST	443	49917	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.428157091 CEST	443	49913	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.428728104 CEST	49913	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.428757906 CEST	443	49913	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.429435968 CEST	49913	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.429444075 CEST	443	49913	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.481025934 CEST	443	49914	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.482959986 CEST	49914	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.482995987 CEST	443	49914	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.483864069 CEST	49914	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.483870029 CEST	443	49914	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.502294064 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.502974987 CEST	49915	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.502985954 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.503839016 CEST	49915	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.503844023 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.568205118 CEST	443	49913	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.568245888 CEST	443	49913	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.568293095 CEST	443	49913	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.568383932 CEST	49913	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.568643093 CEST	49913	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.568655014 CEST	443	49913	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.568669081 CEST	49913	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.568674088 CEST	443	49913	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.571739912 CEST	49918	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.571790934 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.571867943 CEST	49918	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.572012901 CEST	49918	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.572026968 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.572695971 CEST	443	49917	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.573080063 CEST	49917	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.573107958 CEST	443	49917	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.573659897 CEST	49917	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.573664904 CEST	443	49917	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.579092026 CEST	443	49916	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.579497099 CEST	49916	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.579531908 CEST	443	49916	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.579941034 CEST	49916	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.579947948 CEST	443	49916	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.618285894 CEST	443	49914	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.618458986 CEST	443	49914	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.618544102 CEST	49914	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.618902922 CEST	49914	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.618932009 CEST	443	49914	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.618942976 CEST	49914	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.618949890 CEST	443	49914	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.622354984 CEST	49919	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.622415066 CEST	443	49919	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.622492075 CEST	49919	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.622652054 CEST	49919	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.622664928 CEST	443	49919	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.641885996 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.641911983 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.641961098 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.641997099 CEST	49915	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.642050028 CEST	49915	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.642230988 CEST	49915	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.642275095 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.642308950 CEST	49915	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.642324924 CEST	443	49915	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.644851923 CEST	49920	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.644891977 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.644947052 CEST	49920	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.645111084 CEST	49920	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.645129919 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.708436012 CEST	443	49917	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.709940910 CEST	443	49917	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.710019112 CEST	49917	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.710052013 CEST	49917	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.710071087 CEST	443	49917	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.710083961 CEST	49917	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.710088968 CEST	443	49917	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.712434053 CEST	49921	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.712466955 CEST	443	49921	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.712548971 CEST	49921	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.712686062 CEST	49921	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.712699890 CEST	443	49921	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.715023041 CEST	443	49916	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.715115070 CEST	443	49916	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.715168953 CEST	49916	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.715244055 CEST	49916	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.715282917 CEST	443	49916	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.715334892 CEST	49916	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.715352058 CEST	443	49916	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.717159033 CEST	49922	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.717192888 CEST	443	49922	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:15.717255116 CEST	49922	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.717367887 CEST	49922	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:15.717379093 CEST	443	49922	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.324912071 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.325517893 CEST	49918	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.325562000 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.325995922 CEST	49918	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.326009035 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.384306908 CEST	443	49919	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.385030031 CEST	49919	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.385109901 CEST	443	49919	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.385389090 CEST	49919	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.385405064 CEST	443	49919	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.409739971 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.410229921 CEST	49920	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.410257101 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.410656929 CEST	49920	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.410677910 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.476974964 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.477715969 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.477796078 CEST	49918	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.477823973 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.477896929 CEST	49918	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.477952003 CEST	49918	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.477989912 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.478018999 CEST	49918	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.478034973 CEST	443	49918	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.480732918 CEST	49923	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.480772018 CEST	443	49923	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.480850935 CEST	49923	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.481012106 CEST	49923	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.481020927 CEST	443	49923	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.482986927 CEST	443	49921	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.483536005 CEST	49921	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.483547926 CEST	443	49921	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.483813047 CEST	49921	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.483818054 CEST	443	49921	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.488333941 CEST	443	49922	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.488689899 CEST	49922	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.488708973 CEST	443	49922	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.489151001 CEST	49922	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.489156008 CEST	443	49922	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.523940086 CEST	443	49919	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.524032116 CEST	443	49919	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.524384975 CEST	49919	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.524439096 CEST	49919	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.524439096 CEST	49919	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.524461031 CEST	443	49919	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.524468899 CEST	443	49919	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.527595997 CEST	49924	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.527637959 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.527707100 CEST	49924	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.527889013 CEST	49924	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.527904034 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.549779892 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.549844027 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.549966097 CEST	49920	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.550071955 CEST	49920	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.550072908 CEST	49920	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.550096035 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.550107002 CEST	443	49920	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.552387953 CEST	49925	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.552428961 CEST	443	49925	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.552563906 CEST	49925	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.552722931 CEST	49925	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.552736044 CEST	443	49925	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.617389917 CEST	443	49921	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.617470026 CEST	443	49921	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.617624044 CEST	443	49921	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.617691994 CEST	49921	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.617738962 CEST	49921	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.617755890 CEST	443	49921	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.617765903 CEST	49921	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.617772102 CEST	443	49921	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.620475054 CEST	49926	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.620506048 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.620585918 CEST	49926	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.620735884 CEST	49926	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.620749950 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.626250029 CEST	443	49922	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.626303911 CEST	443	49922	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.626585960 CEST	49922	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.626585960 CEST	49922	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.626657009 CEST	49922	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.626673937 CEST	443	49922	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.628724098 CEST	49927	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.628761053 CEST	443	49927	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:16.628837109 CEST	49927	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.628958941 CEST	49927	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:16.628973007 CEST	443	49927	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.248321056 CEST	443	49923	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.248991966 CEST	49923	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.249015093 CEST	443	49923	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.249361992 CEST	49923	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.249366999 CEST	443	49923	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.290117979 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.290569067 CEST	49924	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.290606022 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.290932894 CEST	49924	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.290941000 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.321536064 CEST	443	49925	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.325489044 CEST	49925	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.325520039 CEST	443	49925	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.330882072 CEST	49925	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.330894947 CEST	443	49925	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.386262894 CEST	443	49927	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.386850119 CEST	49927	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.386871099 CEST	443	49927	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.387233019 CEST	49927	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.387238026 CEST	443	49927	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.388777018 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.389054060 CEST	49926	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.389081955 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.389350891 CEST	49926	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.389358044 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.428222895 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.428375006 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.428453922 CEST	49924	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.428507090 CEST	49924	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.428507090 CEST	49924	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.428533077 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.428545952 CEST	443	49924	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.431564093 CEST	49929	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.431648016 CEST	443	49929	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.431715965 CEST	49929	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.431930065 CEST	49929	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.431969881 CEST	443	49929	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.708611965 CEST	443	49925	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.708739042 CEST	443	49925	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.708789110 CEST	49925	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.709003925 CEST	49925	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.709018946 CEST	443	49925	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.709028959 CEST	49925	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.709034920 CEST	443	49925	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.709187984 CEST	443	49927	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.709193945 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.709218979 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.709249973 CEST	443	49927	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.709253073 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.709270954 CEST	49926	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.709300995 CEST	49926	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.709306955 CEST	49927	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.711220980 CEST	49927	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.711225986 CEST	443	49927	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.711247921 CEST	49927	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.711251974 CEST	443	49927	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.711689949 CEST	49926	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.711719990 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.711735010 CEST	49926	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.711743116 CEST	443	49926	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.714231968 CEST	49930	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.714268923 CEST	443	49930	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.714323044 CEST	49930	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.715085030 CEST	49931	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.715125084 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.715187073 CEST	49931	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.715255976 CEST	49932	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.715277910 CEST	443	49932	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.715336084 CEST	49932	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.715430021 CEST	49930	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.715454102 CEST	443	49930	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.715694904 CEST	49931	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.715718985 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:17.715771914 CEST	49932	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:17.715789080 CEST	443	49932	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.024528027 CEST	443	49923	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.024591923 CEST	443	49923	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.024692059 CEST	443	49923	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.024739027 CEST	49923	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.024771929 CEST	49923	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.024950027 CEST	49923	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.024966955 CEST	443	49923	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.024980068 CEST	49923	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.024986029 CEST	443	49923	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.027915955 CEST	49933	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.028017998 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.028145075 CEST	49933	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.029719114 CEST	49933	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.029753923 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.183159113 CEST	443	49929	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.183928013 CEST	49929	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.183947086 CEST	443	49929	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.184396029 CEST	49929	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.184401035 CEST	443	49929	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.321337938 CEST	443	49929	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.321515083 CEST	443	49929	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.321824074 CEST	49929	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.321824074 CEST	49929	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.322504997 CEST	49929	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.322525978 CEST	443	49929	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.324681044 CEST	49934	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.324754953 CEST	443	49934	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.324847937 CEST	49934	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.324971914 CEST	49934	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.324985027 CEST	443	49934	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.488492012 CEST	443	49930	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.489109993 CEST	49930	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.489137888 CEST	443	49930	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.489553928 CEST	49930	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.489561081 CEST	443	49930	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.498914957 CEST	443	49932	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.500303984 CEST	49932	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.500330925 CEST	443	49932	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.500714064 CEST	49932	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.500720978 CEST	443	49932	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.503166914 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.503563881 CEST	49931	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.503592014 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.503892899 CEST	49931	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.503899097 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.629992008 CEST	443	49930	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.630024910 CEST	443	49930	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.630065918 CEST	443	49930	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.630193949 CEST	49930	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.630435944 CEST	49930	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.630435944 CEST	49930	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.630435944 CEST	49930	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.633213997 CEST	49935	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.633261919 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.633366108 CEST	49935	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.633486032 CEST	49935	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.633495092 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.643237114 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.643337011 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.643382072 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.643449068 CEST	49931	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.643501997 CEST	49931	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.643521070 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.643532991 CEST	49931	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.643538952 CEST	443	49931	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.645816088 CEST	49936	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.645842075 CEST	443	49936	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.645920992 CEST	49936	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.646065950 CEST	49936	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.646080971 CEST	443	49936	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.648915052 CEST	443	49932	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.649081945 CEST	443	49932	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.649146080 CEST	49932	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.649174929 CEST	49932	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.649188995 CEST	443	49932	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.649200916 CEST	49932	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.649207115 CEST	443	49932	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.651201963 CEST	49937	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.651242018 CEST	443	49937	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.651330948 CEST	49937	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.651456118 CEST	49937	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.651473045 CEST	443	49937	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.783109903 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.783616066 CEST	49933	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.783649921 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.784305096 CEST	49933	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.784310102 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.926338911 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.926950932 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.927042007 CEST	49933	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.927082062 CEST	49933	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.927100897 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.927110910 CEST	49933	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.927115917 CEST	443	49933	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.929799080 CEST	49938	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.929836988 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.929902077 CEST	49938	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.930036068 CEST	49938	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.930047035 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:18.933523893 CEST	49930	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:18.933554888 CEST	443	49930	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.108161926 CEST	443	49934	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.109082937 CEST	49934	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.109117985 CEST	443	49934	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.109527111 CEST	49934	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.109533072 CEST	443	49934	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.246277094 CEST	443	49934	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.246357918 CEST	443	49934	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.246438980 CEST	49934	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.246817112 CEST	49934	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.246841908 CEST	443	49934	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.246865988 CEST	49934	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.246875048 CEST	443	49934	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.250077009 CEST	49939	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.250114918 CEST	443	49939	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.250220060 CEST	49939	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.250389099 CEST	49939	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.250406027 CEST	443	49939	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.566934109 CEST	443	49936	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.567307949 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.567560911 CEST	443	49937	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.621031046 CEST	49937	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.621033907 CEST	49936	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.623070002 CEST	49935	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.631386042 CEST	49936	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.631422043 CEST	443	49936	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.648578882 CEST	49936	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.648603916 CEST	443	49936	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.661385059 CEST	49935	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.661412001 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.678383112 CEST	49935	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.678405046 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.681349993 CEST	49937	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.681375027 CEST	443	49937	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.682450056 CEST	49937	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.682461023 CEST	443	49937	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.698503971 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.726799965 CEST	49938	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.726841927 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.736745119 CEST	49938	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.736771107 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.785500050 CEST	443	49936	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.785639048 CEST	443	49936	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.785691023 CEST	443	49936	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.785692930 CEST	49936	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.785737991 CEST	49936	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.787735939 CEST	49936	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.787753105 CEST	443	49936	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.787763119 CEST	49936	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.787770987 CEST	443	49936	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.809427977 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.809524059 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.809592009 CEST	49935	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.813802004 CEST	443	49937	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.814084053 CEST	443	49937	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.814140081 CEST	49937	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.840594053 CEST	49935	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.840624094 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.840636969 CEST	49935	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.840643883 CEST	443	49935	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.842823982 CEST	49937	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.842864037 CEST	443	49937	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.869172096 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.869210005 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.869266033 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.869266033 CEST	49938	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.869319916 CEST	49938	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.898346901 CEST	49938	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.898377895 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.898391962 CEST	49938	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.898399115 CEST	443	49938	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.899456024 CEST	49940	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.899507999 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.899571896 CEST	49940	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.903028965 CEST	49941	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.903076887 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.903139114 CEST	49941	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.903220892 CEST	49940	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.903239965 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.904783964 CEST	49942	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.904794931 CEST	443	49942	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.904853106 CEST	49942	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.904999971 CEST	49942	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.905013084 CEST	443	49942	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.905224085 CEST	49941	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.905242920 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.906228065 CEST	49943	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.906248093 CEST	443	49943	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:19.906303883 CEST	49943	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.906570911 CEST	49943	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:19.906582117 CEST	443	49943	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.008084059 CEST	443	49939	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.008825064 CEST	49939	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.008850098 CEST	443	49939	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.009357929 CEST	49939	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.009362936 CEST	443	49939	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.145067930 CEST	443	49939	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.145155907 CEST	443	49939	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.145281076 CEST	49939	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.145539999 CEST	49939	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.145565033 CEST	443	49939	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.145576954 CEST	49939	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.145582914 CEST	443	49939	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.148781061 CEST	49944	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.148835897 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.148921013 CEST	49944	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.149081945 CEST	49944	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.149096012 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.664555073 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.665399075 CEST	49940	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.665438890 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.666002035 CEST	49940	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.666017056 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.679377079 CEST	443	49943	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.680144072 CEST	49943	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.680176973 CEST	443	49943	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.680619955 CEST	49943	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.680625916 CEST	443	49943	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.681566000 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.682092905 CEST	49941	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.682106972 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.682554007 CEST	49941	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.682558060 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.685626030 CEST	443	49942	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.685991049 CEST	49942	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.686009884 CEST	443	49942	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.686366081 CEST	49942	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.686372042 CEST	443	49942	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.826203108 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.826236963 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.826288939 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.826359034 CEST	49940	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.826432943 CEST	49940	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.826726913 CEST	49940	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.826771975 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.826802015 CEST	49940	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.826817989 CEST	443	49940	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.830411911 CEST	49945	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.830468893 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.830760956 CEST	49945	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.830760956 CEST	49945	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.830806017 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.838603973 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.838666916 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.838721991 CEST	49941	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.838860989 CEST	49941	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.838876009 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.838886023 CEST	49941	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.838891029 CEST	443	49941	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.839021921 CEST	443	49943	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.839112997 CEST	443	49943	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.839164019 CEST	49943	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.839210987 CEST	49943	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.839215040 CEST	443	49943	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.839243889 CEST	49943	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.839246988 CEST	443	49943	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.839956999 CEST	443	49942	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.840147018 CEST	443	49942	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.840210915 CEST	49942	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.840290070 CEST	49942	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.840301037 CEST	443	49942	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.840310097 CEST	49942	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.840318918 CEST	443	49942	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.842384100 CEST	49946	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.842418909 CEST	443	49946	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.842482090 CEST	49946	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.842713118 CEST	49946	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.842751026 CEST	443	49946	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.842920065 CEST	49947	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.842958927 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.843023062 CEST	49948	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.843065023 CEST	443	49948	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.843116045 CEST	49947	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.843126059 CEST	49948	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.843231916 CEST	49948	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.843242884 CEST	443	49948	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.843266010 CEST	49947	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.843287945 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.917048931 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.917754889 CEST	49944	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.917779922 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:20.918322086 CEST	49944	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:20.918328047 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.057662010 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.057689905 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.057737112 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.057746887 CEST	49944	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.057791948 CEST	49944	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.058064938 CEST	49944	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.058084011 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.058094025 CEST	49944	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.058101892 CEST	443	49944	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.061676979 CEST	49949	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.061781883 CEST	443	49949	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.062047958 CEST	49949	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.062047958 CEST	49949	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.062191010 CEST	443	49949	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.586700916 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.587126017 CEST	49945	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.587146044 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.587609053 CEST	49945	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.587615013 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.610718012 CEST	443	49946	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.615814924 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.616240025 CEST	49946	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.616261005 CEST	443	49946	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.616986036 CEST	49946	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.616992950 CEST	443	49946	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.617579937 CEST	49947	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.617619038 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.618047953 CEST	49947	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.618057013 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.620589972 CEST	443	49948	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.624058008 CEST	49948	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.624078035 CEST	443	49948	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.624840975 CEST	49948	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.624846935 CEST	443	49948	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.726108074 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.726747036 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.726936102 CEST	49945	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.727004051 CEST	49945	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.727004051 CEST	49945	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.727025986 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.727035046 CEST	443	49945	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.729573965 CEST	49950	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.729620934 CEST	443	49950	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.729703903 CEST	49950	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.729844093 CEST	49950	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.729857922 CEST	443	49950	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.748892069 CEST	443	49946	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.748961926 CEST	443	49946	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.749018908 CEST	49946	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.749121904 CEST	49946	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.749130964 CEST	443	49946	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.749142885 CEST	49946	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.749146938 CEST	443	49946	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.751262903 CEST	49951	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.751303911 CEST	443	49951	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.751380920 CEST	49951	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.751497984 CEST	49951	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.751513958 CEST	443	49951	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.753237009 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.753382921 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.753443003 CEST	49947	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.753509998 CEST	49947	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.753509998 CEST	49947	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.753520012 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.753528118 CEST	443	49947	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.755146980 CEST	49952	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.755184889 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.755260944 CEST	49952	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.755373001 CEST	49952	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.755386114 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.760565996 CEST	443	49948	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.760656118 CEST	443	49948	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.760710001 CEST	49948	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.760787010 CEST	49948	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.760802031 CEST	443	49948	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.760812998 CEST	49948	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.760818005 CEST	443	49948	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.763659000 CEST	49953	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.763683081 CEST	443	49953	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.763744116 CEST	49953	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.763849020 CEST	49953	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.763861895 CEST	443	49953	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.813241959 CEST	443	49949	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.819061041 CEST	49949	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.819133997 CEST	443	49949	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.819977999 CEST	49949	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.819992065 CEST	443	49949	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.951942921 CEST	443	49949	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.952251911 CEST	443	49949	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.952332973 CEST	49949	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.953742981 CEST	49949	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.953742981 CEST	49949	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.953793049 CEST	443	49949	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.953823090 CEST	443	49949	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.960750103 CEST	49954	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.960793972 CEST	443	49954	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:21.960876942 CEST	49954	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.961057901 CEST	49954	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:21.961072922 CEST	443	49954	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.506079912 CEST	443	49951	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.507813931 CEST	49951	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.507850885 CEST	443	49951	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.511693001 CEST	49951	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.511712074 CEST	443	49951	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.517890930 CEST	443	49953	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.518307924 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.520721912 CEST	49953	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.520756006 CEST	443	49953	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.527637005 CEST	49953	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.527645111 CEST	443	49953	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.531264067 CEST	49952	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.531294107 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.535363913 CEST	49952	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.535368919 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.643956900 CEST	443	49951	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.644030094 CEST	443	49951	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.644109964 CEST	49951	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.644304037 CEST	49951	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.644357920 CEST	443	49951	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.644388914 CEST	49951	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.644407034 CEST	443	49951	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.647249937 CEST	49955	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.647295952 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.647381067 CEST	49955	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.647552967 CEST	49955	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.647568941 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.659574986 CEST	443	49953	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.659746885 CEST	443	49953	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.659816027 CEST	49953	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.659847975 CEST	49953	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.659859896 CEST	443	49953	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.659872055 CEST	49953	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.659876108 CEST	443	49953	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.662077904 CEST	49956	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.662122011 CEST	443	49956	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.662189960 CEST	49956	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.662303925 CEST	49956	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.662321091 CEST	443	49956	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.670572042 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.670646906 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.670726061 CEST	49952	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.670793056 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.670831919 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.670865059 CEST	49952	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.670916080 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.670948029 CEST	49952	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.670948982 CEST	49952	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.670969963 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.670989037 CEST	443	49952	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.673230886 CEST	49957	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.673274040 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.673356056 CEST	49957	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.673491001 CEST	49957	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.673508883 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.697005033 CEST	443	49950	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.697467089 CEST	49950	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.697496891 CEST	443	49950	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.697904110 CEST	49950	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.697911024 CEST	443	49950	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.716937065 CEST	443	49954	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.717441082 CEST	49954	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.717466116 CEST	443	49954	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.717844963 CEST	49954	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.717850924 CEST	443	49954	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.835180044 CEST	443	49950	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.835854053 CEST	443	49950	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.836045980 CEST	49950	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.836046934 CEST	49950	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.836046934 CEST	49950	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.838619947 CEST	49958	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.838689089 CEST	443	49958	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.838784933 CEST	49958	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.838962078 CEST	49958	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.838982105 CEST	443	49958	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.854058981 CEST	443	49954	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.854094982 CEST	443	49954	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.854151964 CEST	443	49954	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.854155064 CEST	49954	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.854202986 CEST	49954	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.854408026 CEST	49954	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.854448080 CEST	443	49954	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.854475021 CEST	49954	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.854490042 CEST	443	49954	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.857353926 CEST	49959	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.857419014 CEST	443	49959	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:22.857495070 CEST	49959	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.857621908 CEST	49959	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:22.857637882 CEST	443	49959	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.136868000 CEST	49950	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.136909962 CEST	443	49950	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.404764891 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.405235052 CEST	49955	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.405270100 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.405716896 CEST	49955	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.405723095 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.425386906 CEST	443	49956	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.425801039 CEST	49956	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.425832033 CEST	443	49956	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.426225901 CEST	49956	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.426233053 CEST	443	49956	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.439724922 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.440062046 CEST	49957	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.440088987 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.440407038 CEST	49957	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.440412998 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.544589043 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.544661999 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.544711113 CEST	49955	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.544991970 CEST	49955	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.545017958 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.545032024 CEST	49955	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.545037985 CEST	443	49955	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.549458981 CEST	49960	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.549501896 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.549587011 CEST	49960	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.549730062 CEST	49960	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.549742937 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.561001062 CEST	443	49956	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.561105013 CEST	443	49956	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.561158895 CEST	49956	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.561172009 CEST	443	49956	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.561244011 CEST	49956	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.561284065 CEST	49956	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.561306953 CEST	443	49956	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.561317921 CEST	49956	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.561323881 CEST	443	49956	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.565085888 CEST	49961	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.565134048 CEST	443	49961	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.565279007 CEST	49961	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.565964937 CEST	49961	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.565980911 CEST	443	49961	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.576524973 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.576924086 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.576993942 CEST	49957	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.577126026 CEST	49957	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.577146053 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.577163935 CEST	49957	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.577171087 CEST	443	49957	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.583059072 CEST	49962	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.583102942 CEST	443	49962	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.583154917 CEST	49962	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.583308935 CEST	49962	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.583333969 CEST	443	49962	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.616643906 CEST	443	49958	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.617075920 CEST	49958	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.617100000 CEST	443	49958	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.617506027 CEST	49958	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.617512941 CEST	443	49958	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.622307062 CEST	443	49959	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.622845888 CEST	49959	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.622863054 CEST	443	49959	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.623249054 CEST	49959	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.623255014 CEST	443	49959	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.755136013 CEST	443	49958	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.755199909 CEST	443	49958	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.755300999 CEST	49958	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.755455017 CEST	49958	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.755470037 CEST	443	49958	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.755506039 CEST	49958	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.755511999 CEST	443	49958	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.757961988 CEST	49964	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.757999897 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.758060932 CEST	49964	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.758184910 CEST	49964	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.758196115 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.761878967 CEST	443	49959	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.762043953 CEST	443	49959	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.762110949 CEST	49959	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.762156963 CEST	49959	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.762171984 CEST	443	49959	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.762183905 CEST	49959	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.762190104 CEST	443	49959	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.764142036 CEST	49965	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.764180899 CEST	443	49965	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:23.764240980 CEST	49965	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.764348984 CEST	49965	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:23.764362097 CEST	443	49965	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.307893038 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.308454990 CEST	49960	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.308476925 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.308933020 CEST	49960	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.308939934 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.355523109 CEST	443	49961	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.356065989 CEST	49961	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.356087923 CEST	443	49961	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.356468916 CEST	49961	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.356476068 CEST	443	49961	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.359908104 CEST	443	49962	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.360162973 CEST	49962	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.360178947 CEST	443	49962	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.360500097 CEST	49962	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.360506058 CEST	443	49962	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.445699930 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.445775032 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.445888042 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.445982933 CEST	49960	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.446046114 CEST	49960	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.446065903 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.446080923 CEST	49960	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.446089029 CEST	443	49960	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.448951006 CEST	49966	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.448999882 CEST	443	49966	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.449126005 CEST	49966	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.449317932 CEST	49966	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.449335098 CEST	443	49966	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.496220112 CEST	443	49961	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.496228933 CEST	443	49962	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.496313095 CEST	443	49961	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.496371984 CEST	49961	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.496409893 CEST	443	49962	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.496458054 CEST	49962	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.496566057 CEST	49961	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.496572018 CEST	49962	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.496579885 CEST	443	49962	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.496593952 CEST	49962	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.496598005 CEST	443	49961	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.496598959 CEST	443	49962	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.496613026 CEST	49961	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.496619940 CEST	443	49961	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.498882055 CEST	49967	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.498944998 CEST	49968	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.498975039 CEST	443	49967	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.499001026 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.499058008 CEST	49967	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.499069929 CEST	49968	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.499183893 CEST	49967	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.499222994 CEST	443	49967	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.499254942 CEST	49968	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.499270916 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.510885954 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.511235952 CEST	49964	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.511250973 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.511904001 CEST	49964	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.511909962 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.524879932 CEST	443	49965	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.525213003 CEST	49965	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.525238037 CEST	443	49965	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.525608063 CEST	49965	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.525619984 CEST	443	49965	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.648737907 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.648762941 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.648825884 CEST	49964	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.648843050 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.648922920 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.648979902 CEST	49964	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.649180889 CEST	49964	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.649193048 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.649241924 CEST	49964	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.649247885 CEST	443	49964	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.652070045 CEST	49969	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.652103901 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.652180910 CEST	49969	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.652522087 CEST	49969	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.652537107 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.662801981 CEST	443	49965	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.662949085 CEST	443	49965	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.663268089 CEST	49965	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.663371086 CEST	49965	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.663408041 CEST	443	49965	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.663435936 CEST	49965	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.663450956 CEST	443	49965	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.666110039 CEST	49970	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.666152000 CEST	443	49970	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:24.666260958 CEST	49970	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.666452885 CEST	49970	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:24.666470051 CEST	443	49970	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.221750975 CEST	443	49966	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.224278927 CEST	49966	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.224317074 CEST	443	49966	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.224725008 CEST	49966	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.224735022 CEST	443	49966	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.246444941 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.256992102 CEST	443	49967	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.257400990 CEST	49968	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.257436037 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.257860899 CEST	49968	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.257867098 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.258549929 CEST	49967	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.258619070 CEST	443	49967	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.258934975 CEST	49967	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.258954048 CEST	443	49967	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.362510920 CEST	443	49966	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.362535000 CEST	443	49966	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.362586975 CEST	49966	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.362595081 CEST	443	49966	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.362796068 CEST	49966	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.362853050 CEST	49966	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.362869024 CEST	443	49966	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.362878084 CEST	49966	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.362884045 CEST	443	49966	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.365674973 CEST	49971	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.365710974 CEST	443	49971	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.365880966 CEST	49971	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.366058111 CEST	49971	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.366071939 CEST	443	49971	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.390620947 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.390647888 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.390718937 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.390775919 CEST	49968	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.390775919 CEST	49968	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.390961885 CEST	49968	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.390961885 CEST	49968	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.390980959 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.390990973 CEST	443	49968	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.393459082 CEST	49972	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.393562078 CEST	443	49972	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.393709898 CEST	49972	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.393853903 CEST	49972	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.393891096 CEST	443	49972	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.397376060 CEST	443	49967	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.397406101 CEST	443	49967	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.397474051 CEST	443	49967	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.397530079 CEST	49967	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.397582054 CEST	49967	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.397582054 CEST	49967	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.397608995 CEST	443	49967	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.397631884 CEST	443	49967	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.399606943 CEST	49973	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.399643898 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.399718046 CEST	49973	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.399843931 CEST	49973	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.399856091 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.405441046 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.405796051 CEST	49969	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.405827999 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.406225920 CEST	49969	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.406232119 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.646884918 CEST	443	49970	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.647419930 CEST	49970	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.647433043 CEST	443	49970	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.648150921 CEST	49970	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.648155928 CEST	443	49970	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.770973921 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.771003008 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.771100044 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.771133900 CEST	49969	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.771188974 CEST	49969	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.771437883 CEST	49969	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.771460056 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.771471024 CEST	49969	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.771478891 CEST	443	49969	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.774665117 CEST	49974	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.774797916 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.774898052 CEST	49974	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.775080919 CEST	49974	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.775120974 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.784369946 CEST	443	49970	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.784431934 CEST	443	49970	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.784564972 CEST	49970	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.784738064 CEST	49970	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.784738064 CEST	49970	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.784754992 CEST	443	49970	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.784763098 CEST	443	49970	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.787102938 CEST	49975	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.787143946 CEST	443	49975	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:25.787226915 CEST	49975	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.787360907 CEST	49975	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:25.787375927 CEST	443	49975	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.134794950 CEST	443	49971	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.135365009 CEST	49971	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.135389090 CEST	443	49971	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.135832071 CEST	49971	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.135838032 CEST	443	49971	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.141499043 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.141897917 CEST	49973	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.141921997 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.142321110 CEST	49973	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.142330885 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.160972118 CEST	443	49972	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.161701918 CEST	49972	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.161736012 CEST	443	49972	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.161997080 CEST	49972	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.162003994 CEST	443	49972	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.272886038 CEST	443	49971	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.272958040 CEST	443	49971	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.273066998 CEST	49971	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.273715019 CEST	49971	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.273739100 CEST	443	49971	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.273753881 CEST	49971	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.273761988 CEST	443	49971	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.274626017 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.274710894 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.274764061 CEST	49973	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.274964094 CEST	49973	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.274964094 CEST	49973	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.274981022 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.274988890 CEST	443	49973	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.276956081 CEST	49976	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.276995897 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.277122974 CEST	49976	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.277345896 CEST	49976	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.277360916 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.277507067 CEST	49977	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.277561903 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.277641058 CEST	49977	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.277774096 CEST	49977	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.277790070 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.298592091 CEST	443	49972	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.298671961 CEST	443	49972	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.298739910 CEST	49972	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.298882008 CEST	49972	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.298904896 CEST	443	49972	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.298916101 CEST	49972	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.298922062 CEST	443	49972	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.301486015 CEST	49978	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.301532984 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.301611900 CEST	49978	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.301743984 CEST	49978	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.301753998 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.527754068 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.528234959 CEST	49974	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.528255939 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.528953075 CEST	49974	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.528961897 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.556746006 CEST	443	49975	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.557229996 CEST	49975	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.557245970 CEST	443	49975	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.557698011 CEST	49975	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.557703018 CEST	443	49975	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.664983034 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.665003061 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.665103912 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.665118933 CEST	49974	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.665189981 CEST	49974	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.665375948 CEST	49974	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.665440083 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.665529966 CEST	49974	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.665548086 CEST	443	49974	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.668093920 CEST	49979	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.668134928 CEST	443	49979	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.668219090 CEST	49979	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.668354988 CEST	49979	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.668365955 CEST	443	49979	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.698661089 CEST	443	49975	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.698683023 CEST	443	49975	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.698731899 CEST	443	49975	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.698771000 CEST	49975	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.698812962 CEST	49975	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.699022055 CEST	49975	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.699027061 CEST	443	49975	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.699038029 CEST	49975	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.699043036 CEST	443	49975	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.701639891 CEST	49980	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.701689959 CEST	443	49980	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:26.701766968 CEST	49980	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.701901913 CEST	49980	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:26.701920033 CEST	443	49980	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.033364058 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.033776999 CEST	49976	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.033807039 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.033839941 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.034214020 CEST	49976	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.034219980 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.034293890 CEST	49977	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.034322023 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.034668922 CEST	49977	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.034674883 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.064766884 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.065282106 CEST	49978	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.065314054 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.065704107 CEST	49978	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.065710068 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.243155003 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.243180037 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.243257046 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.243480921 CEST	49977	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.243627071 CEST	49977	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.243645906 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.243657112 CEST	49977	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.243663073 CEST	443	49977	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.247054100 CEST	49981	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.247109890 CEST	443	49981	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.247185946 CEST	49981	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.247333050 CEST	49981	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.247349977 CEST	443	49981	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.288475990 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.288499117 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.288513899 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.288677931 CEST	49976	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.288710117 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.288764000 CEST	49976	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.289237976 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.289307117 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.289314032 CEST	49976	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.289350033 CEST	49976	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.289381981 CEST	49976	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.289400101 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.289413929 CEST	49976	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.289419889 CEST	443	49976	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.291902065 CEST	49982	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.291950941 CEST	443	49982	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.292017937 CEST	49982	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.292145014 CEST	49982	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.292159081 CEST	443	49982	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.322380066 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.322415113 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.322439909 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.322488070 CEST	49978	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.322516918 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.322531939 CEST	49978	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.322566986 CEST	49978	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.441353083 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.441421986 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.441463947 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.441488981 CEST	49978	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.441544056 CEST	49978	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.441715002 CEST	49978	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.441736937 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.441751957 CEST	49978	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.441757917 CEST	443	49978	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.444108009 CEST	443	49979	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.444668055 CEST	49979	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.444709063 CEST	443	49979	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.444906950 CEST	49983	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.444951057 CEST	443	49983	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.445019007 CEST	49983	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.445141077 CEST	49983	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.445154905 CEST	443	49983	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.445177078 CEST	49979	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.445184946 CEST	443	49979	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.481010914 CEST	443	49980	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.481570005 CEST	49980	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.481601000 CEST	443	49980	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.482182980 CEST	49980	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.482197046 CEST	443	49980	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.584580898 CEST	443	49979	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.584602118 CEST	443	49979	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.584651947 CEST	443	49979	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.584671021 CEST	49979	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.584697008 CEST	49979	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.584898949 CEST	49979	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.584913969 CEST	443	49979	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.584928036 CEST	49979	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.584933043 CEST	443	49979	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.588207960 CEST	49984	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.588252068 CEST	443	49984	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.588306904 CEST	49984	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.588443995 CEST	49984	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.588452101 CEST	443	49984	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.621594906 CEST	443	49980	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.621622086 CEST	443	49980	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.621676922 CEST	49980	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.621681929 CEST	443	49980	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.621805906 CEST	49980	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.623127937 CEST	49980	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.623152018 CEST	443	49980	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.623169899 CEST	49980	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.623176098 CEST	443	49980	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.634994984 CEST	49985	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.635036945 CEST	443	49985	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.635101080 CEST	49985	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.635282993 CEST	49985	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.635299921 CEST	443	49985	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.999176025 CEST	443	49981	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:27.999746084 CEST	49981	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:27.999803066 CEST	443	49981	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.000359058 CEST	49981	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.000374079 CEST	443	49981	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.041186094 CEST	443	49982	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.042046070 CEST	49982	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.042089939 CEST	443	49982	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.042643070 CEST	49982	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.042649984 CEST	443	49982	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.137691021 CEST	443	49981	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.137823105 CEST	443	49981	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.137923002 CEST	49981	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.138075113 CEST	49981	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.138098001 CEST	443	49981	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.138115883 CEST	49981	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.138122082 CEST	443	49981	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.141496897 CEST	49986	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.141535997 CEST	443	49986	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.141601086 CEST	49986	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.141921043 CEST	49986	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.141940117 CEST	443	49986	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.177134037 CEST	443	49982	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.177300930 CEST	443	49982	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.177380085 CEST	49982	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.177439928 CEST	49982	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.177439928 CEST	49982	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.177464962 CEST	443	49982	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.177475929 CEST	443	49982	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.180061102 CEST	49987	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.180104017 CEST	443	49987	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.180183887 CEST	49987	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.180334091 CEST	49987	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.180351019 CEST	443	49987	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.191243887 CEST	443	49983	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.191598892 CEST	49983	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.191639900 CEST	443	49983	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.192027092 CEST	49983	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.192035913 CEST	443	49983	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.327130079 CEST	443	49983	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.327512026 CEST	443	49983	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.327594042 CEST	49983	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.327641964 CEST	49983	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.327663898 CEST	443	49983	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.327676058 CEST	49983	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.327681065 CEST	443	49983	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.330123901 CEST	49988	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.330173016 CEST	443	49988	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.330248117 CEST	49988	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.330363035 CEST	49988	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.330378056 CEST	443	49988	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.357811928 CEST	443	49984	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.358473063 CEST	49984	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.358504057 CEST	443	49984	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.359075069 CEST	49984	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.359083891 CEST	443	49984	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.383091927 CEST	443	49985	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.383673906 CEST	49985	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.383703947 CEST	443	49985	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.384258986 CEST	49985	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.384269953 CEST	443	49985	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.496757030 CEST	443	49984	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.496822119 CEST	443	49984	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.496887922 CEST	49984	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.497083902 CEST	49984	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.497101068 CEST	443	49984	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.497112989 CEST	49984	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.497118950 CEST	443	49984	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.500394106 CEST	49989	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.500418901 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.500500917 CEST	49989	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.500667095 CEST	49989	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.500677109 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.521922112 CEST	443	49985	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.521959066 CEST	443	49985	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.521994114 CEST	443	49985	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.521998882 CEST	49985	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.522046089 CEST	49985	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.522207022 CEST	49985	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.522214890 CEST	443	49985	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.522237062 CEST	49985	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.522242069 CEST	443	49985	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.897914886 CEST	443	49986	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.898585081 CEST	49986	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.898616076 CEST	443	49986	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.899164915 CEST	49986	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.899172068 CEST	443	49986	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.944197893 CEST	443	49987	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.944761038 CEST	49987	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.944792032 CEST	443	49987	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:28.945192099 CEST	49987	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:28.945200920 CEST	443	49987	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:29.037301064 CEST	443	49986	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:29.037386894 CEST	443	49986	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:29.037554979 CEST	49986	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:29.037818909 CEST	49986	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:29.037844896 CEST	443	49986	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:29.037872076 CEST	49986	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:29.037878036 CEST	443	49986	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:29.083764076 CEST	443	49987	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:29.083864927 CEST	443	49987	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:29.083951950 CEST	49987	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:29.084227085 CEST	49987	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:29.084254026 CEST	443	49987	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:29.084265947 CEST	49987	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:29.084271908 CEST	443	49987	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:29.110326052 CEST	443	49988	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:29.110934019 CEST	49988	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:29.110956907 CEST	443	49988	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:29.111527920 CEST	49988	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:29.111540079 CEST	443	49988	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:29.249109983 CEST	443	49988	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:29.249212027 CEST	443	49988	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:29.249286890 CEST	49988	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:29.249496937 CEST	49988	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:29.249496937 CEST	49988	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:29.249516964 CEST	443	49988	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:29.249527931 CEST	443	49988	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:29.262849092 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:29.263919115 CEST	49989	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:29.263942003 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:29.264503956 CEST	49989	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:29.264508963 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:29.400262117 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:29.400619984 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:29.400840998 CEST	49989	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:29.400871992 CEST	49989	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:29.400887966 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 23, 2024 17:11:29.400899887 CEST	49989	443	192.168.2.6	13.107.253.45
Oct 23, 2024 17:11:29.400907040 CEST	443	49989	13.107.253.45	192.168.2.6
Oct 23, 2024 17:12:05.090596914 CEST	49707	80	192.168.2.6	199.232.214.172
Oct 23, 2024 17:12:05.096663952 CEST	80	49707	199.232.214.172	192.168.2.6
Oct 23, 2024 17:12:05.096729994 CEST	49707	80	192.168.2.6	199.232.214.172

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 23, 2024 17:10:34.280425072 CEST	1.1.1.1	192.168.2.6	0xa04b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 17:10:34.280425072 CEST	1.1.1.1	192.168.2.6	0xa04b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 23, 2024 17:10:35.605901957 CEST	1.1.1.1	192.168.2.6	0x61c8	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 23, 2024 17:10:35.605901957 CEST	1.1.1.1	192.168.2.6	0x61c8	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 23, 2024 17:10:36.423908949 CEST	1.1.1.1	192.168.2.6	0x1d9c	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 17:10:36.423908949 CEST	1.1.1.1	192.168.2.6	0x1d9c	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 17:10:36.423908949 CEST	1.1.1.1	192.168.2.6	0x1d9c	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false

Target ID:	0
Start time:	11:10:30
Start date:	23/10/2024
Path:	C:\Users\user\Desktop\juwXcVX5AK.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\juwXcVX5AK.exe"
Imagebase:	0x450000
File size:	294'016 bytes
MD5 hash:	0BDAB914290343E6AB408211372E1C1F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	11:10:30
Start date:	23/10/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Imagebase:	0x770000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	11:10:30
Start date:	23/10/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 6036 -s 272
Imagebase:	0x440000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	11:10:31
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\Honda\Honda.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Imagebase:	0xf00000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, ReversingLabs
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	11:10:31
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	11:10:40
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\Honda\Honda.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Imagebase:	0x5d0000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	11:10:41
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	11:10:49
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\Honda\Honda.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Imagebase:	0xa60000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	11:10:49
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	11:10:57
Start date:	23/10/2024
Path:	C:\Users\user\AppData\Local\Temp\Honda\Honda.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\Honda\Honda.exe"
Imagebase:	0x550000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	16
Start time:	11:10:57
Start date:	23/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	1.4%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	2.9%
Total number of Nodes:	1391
Total number of Limit Nodes:	6

Executed Functions

Function 00452F7C Relevance: 1.6, APIs: 1, Instructions: 55
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualProtect.KERNELBASE(00490260,000004E4,00000040,?), ref: 00452FD1

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: 5f1356f8baef8c063824690d51d80b18a8ff396b723489f33fdcd560d4474468
Instruction ID: 86c30720b6445704f69158e54b233e271597f4feb0bb39c23777369aa7fa9cc1
Opcode Fuzzy Hash: 5f1356f8baef8c063824690d51d80b18a8ff396b723489f33fdcd560d4474468
Instruction Fuzzy Hash: 0A11E3712047059FD318EF25C806B1AB390AB48725F14485FFD54873C2DBB9ED09CB99

Function 0046C9D4 Relevance: 7.7, APIs: 5, Instructions: 202
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__alloca_probe_16.LIBCMT ref: 0046CA5B
__alloca_probe_16.LIBCMT ref: 0046CB1C
__freea.LIBCMT ref: 0046CB83

Part of subcall function 00467A23: HeapAlloc.KERNEL32(00000000,0046DBAE,?,?,0046DBAE,00000220,?,?,?), ref: 00467A55

__freea.LIBCMT ref: 0046CB98
__freea.LIBCMT ref: 0046CBA8

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: __freea$__alloca_probe_16$AllocHeap
String ID:
API String ID: 1096550386-0
Opcode ID: 6bf83da31bad89858d9da107b4bf284d3d7209816825e6d610688af65d180a28
Instruction ID: 52eb1abd41dfd012501ae5aadac9b3a6d0575db02c0294fd0cdc4818dfb330fa
Opcode Fuzzy Hash: 6bf83da31bad89858d9da107b4bf284d3d7209816825e6d610688af65d180a28
Instruction Fuzzy Hash: 9B51D67260021AAFEF119FA5DCC2EBB3AA9EF44714B14012EFD44D6241F678DD00D76A

Function 0046DDAA Relevance: 3.2, APIs: 2, Instructions: 177
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 0046D8DA: GetOEMCP.KERNEL32(00000000,?,?,?,?), ref: 0046D905

IsValidCodePage.KERNEL32(-00000030,00000000,?,?,?,?,?,?,?,?,0046DBF1,?,00000000,?,?,?), ref: 0046DE0B
GetCPInfo.KERNEL32(00000000,?,?,?,?,?,?,?,?,0046DBF1,?,00000000,?,?,?), ref: 0046DE4D

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: CodeInfoPageValid
String ID:
API String ID: 546120528-0
Opcode ID: a18b3faf373a0948581a258e77a9c8481cac062c8d5a4d073ec3d33bd4f69591
Instruction ID: a0afd1234a0fb6fe9d6f80003fb0d53f385d0ebe9c813e85995c115f869de0d1
Opcode Fuzzy Hash: a18b3faf373a0948581a258e77a9c8481cac062c8d5a4d073ec3d33bd4f69591
Instruction Fuzzy Hash: B5512170F007058EDB24DF75C880AABBBF4EF95304F18446FE0868B252F6799946CB4A

Function 0046762C Relevance: 3.0, APIs: 2, Instructions: 34
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LCMapStringEx.KERNELBASE(?,0046CAC2,?,?,00000000,?,00000000,00000000,00000000,00000000,00000000), ref: 00467660
LCMapStringW.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,?,00000000,?,?,0046CAC2,?,?,00000000,?,00000000), ref: 0046767E

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: String
String ID:
API String ID: 2568140703-0
Opcode ID: d285e1fff10aafd2064cbdb8711c114053436780fabc8373c4abe00d8644eb59
Instruction ID: 7f4c96b1eef884fc38e8c1c6b7a426ac5926417aa2a25614f82d83227c6618d4
Opcode Fuzzy Hash: d285e1fff10aafd2064cbdb8711c114053436780fabc8373c4abe00d8644eb59
Instruction Fuzzy Hash: 2FF0E23200051ABBCF125F90DC04DDE3F26EF08368F054111FA1825120C73AC872EB99

Function 0046D9AE Relevance: 1.6, APIs: 1, Instructions: 147
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCPInfo.KERNEL32(E8458D00,?,0046DBFD,0046DBF1,00000000), ref: 0046D9E0

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: Info
String ID:
API String ID: 1807457897-0
Opcode ID: eb8ed8612b75120169b3292f97c24f106c4ca13192047697861e972e6e38c1aa
Instruction ID: 411941c5ed5b8a498ffc84e68ac0d8d188c7b47d7e26ae9ce8cfd14fbc6d4e1a
Opcode Fuzzy Hash: eb8ed8612b75120169b3292f97c24f106c4ca13192047697861e972e6e38c1aa
Instruction Fuzzy Hash: BD516D71F082589BCB218F68CD84AF67BBCEB55704F2405EED49AC7142E238AD46DF25

Function 004557E2 Relevance: 1.5, APIs: 1, Instructions: 17
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

KiUserExceptionDispatcher.NTDLL ref: 004557EF

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: DispatcherExceptionUser
String ID:
API String ID: 6842923-0
Opcode ID: 3a0dba4d867b408718a3ec38f6b49b3b46b572a5e8e6bd20f0a11b62fe345c98
Instruction ID: b8ad3f91a9874462a1f9f00dad40a11124024395da577491cabd4e1b7c02fdad
Opcode Fuzzy Hash: 3a0dba4d867b408718a3ec38f6b49b3b46b572a5e8e6bd20f0a11b62fe345c98
Instruction Fuzzy Hash: 96D05E749002086BCB04FBB5D849D9E73B9AE04346B6045BDB8158B557DB34A90EC645

Non-executed Functions

Function 004710A3 Relevance: 10.2, APIs: 1, Strings: 4, Instructions: 1436COMMONLIBRARYCODE

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 00471287

Strings

1#IND, xrefs: 004711A8
1#INF, xrefs: 004711D9
1#QNAN, xrefs: 004711B6
1#SNAN, xrefs: 004711AF

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: 81e1a86526811bc3f73f2f573f7972e257b783b453c754882520de82b2a51fd6
Instruction ID: 436357a87853b4f2e5e56d89cd29f16327c11582eb28b37179cecff650360e29
Opcode Fuzzy Hash: 81e1a86526811bc3f73f2f573f7972e257b783b453c754882520de82b2a51fd6
Instruction Fuzzy Hash: B0D23771E082298FDB65CE28CD407EAB7B5EB49305F1481EBD80DE7250E778AE858F45

Function 0047051E Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 85COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(?,2000000B,0047083C,00000002,00000000,?,?,?,0047083C,?,00000000), ref: 004705B7
GetLocaleInfoW.KERNEL32(?,20001004,0047083C,00000002,00000000,?,?,?,0047083C,?,00000000), ref: 004705E0
GetACP.KERNEL32(?,?,0047083C,?,00000000), ref: 004705F5

Strings

OCP, xrefs: 00470572
ACP, xrefs: 0047053C

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: InfoLocale
String ID: ACP$OCP
API String ID: 2299586839-711371036
Opcode ID: 020412517a7285f63e7feefd1a2df0d39e87ee8b32b7bab2f5c1d8eb46894b74
Instruction ID: 835977e5ef2ff0461a217dac0effeb1093971fd06ee1ac3aeead5beb77f03ac6
Opcode Fuzzy Hash: 020412517a7285f63e7feefd1a2df0d39e87ee8b32b7bab2f5c1d8eb46894b74
Instruction Fuzzy Hash: F921A462602101FADB34CF24C905AD773A6EB54B64B56C466E94ED7200E73ADE41CB58

Function 004706F3 Relevance: 7.7, APIs: 5, Instructions: 183COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00468DB3: GetLastError.KERNEL32(?,00000008,004669CC), ref: 00468DB7
Part of subcall function 00468DB3: SetLastError.KERNEL32(00000000,00480710,00000024,0045DDA3), ref: 00468E59

GetUserDefaultLCID.KERNEL32(?,?,?,00000055,?), ref: 004707FF
IsValidCodePage.KERNEL32(00000000), ref: 00470848
IsValidLocale.KERNEL32(?,00000001), ref: 00470857
GetLocaleInfoW.KERNEL32(?,00001001,-00000050,00000040,?,000000D0,00000055,00000000,?,?,00000055,00000000), ref: 0047089F
GetLocaleInfoW.KERNEL32(?,00001002,00000030,00000040), ref: 004708BE

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: Locale$ErrorInfoLastValid$CodeDefaultPageUser
String ID:
API String ID: 415426439-0
Opcode ID: 88b939b269be66ebc2d7b63e016fa77b7677ec32c03992b21668e723ade3452b
Instruction ID: 8e9f8c7644ee9b3428d96d2e8c5b5130e700a59ec28017b5c5da73d7a8836c56
Opcode Fuzzy Hash: 88b939b269be66ebc2d7b63e016fa77b7677ec32c03992b21668e723ade3452b
Instruction Fuzzy Hash: FE51B271901209EBDB14EFA5CC41BEF73B8BF44700F15842EE909E7281E778A9408B69

Function 00462D90 Relevance: 7.4, APIs: 2, Strings: 2, Instructions: 449COMMONLIBRARYCODE

Download Yara Rule

Strings

O#G, xrefs: 00462DAB, 00462F2E, 00463157, 004630F0, 00462F7D
O#G, xrefs: 004630D3, 004630B1

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID:
String ID: O#G$O#G
API String ID: 0-1178826985
Opcode ID: 5d6c2b0c2b7731d556a830f47680bcf32448849bf7266fb62c648a6abdd5fe24
Instruction ID: 80cb6a9aa2dc2d359933a6fa8882f37bc51766948c34c8b61eafc77ab5a23af9
Opcode Fuzzy Hash: 5d6c2b0c2b7731d556a830f47680bcf32448849bf7266fb62c648a6abdd5fe24
Instruction Fuzzy Hash: 2DF16071E002199FDF14CFA9C9806AEB7B1FF49314F15826EE815A7384E735AE05CB85

Function 0046FD8F Relevance: 7.3, APIs: 3, Strings: 1, Instructions: 251COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00468DB3: GetLastError.KERNEL32(?,00000008,004669CC), ref: 00468DB7
Part of subcall function 00468DB3: SetLastError.KERNEL32(00000000,00480710,00000024,0045DDA3), ref: 00468E59

GetACP.KERNEL32(?,?,?,?,?,?,00464F88,?,?,?,00000055,?,-00000050,?,?,00000004), ref: 0046FE50
IsValidCodePage.KERNEL32(00000000,?,?,?,?,?,?,00464F88,?,?,?,00000055,?,-00000050,?,?), ref: 0046FE7B
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078,-00000050,00000000,000000D0), ref: 0046FFDE

Strings

utf8, xrefs: 0046FF4D

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: ErrorLast$CodeInfoLocalePageValid
String ID: utf8
API String ID: 607553120-905460609
Opcode ID: cfca1f17825317769eb9a397cd6a3707c558b259c6b86a8c9580e2fc121add1a
Instruction ID: 65c02dc6158e395766546df48f0d1f3dadd7e9fb569a8f544840324f23779fc2
Opcode Fuzzy Hash: cfca1f17825317769eb9a397cd6a3707c558b259c6b86a8c9580e2fc121add1a
Instruction Fuzzy Hash: BE712B31600602AADB28AB75EC46BA777A8EF45304F10403FF545D7281FB7CED48875A

Function 00467C32 Relevance: 6.3, APIs: 4, Instructions: 337COMMONLIBRARYCODE

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 00467CBF

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: 345b19b73ae581e04342a76ae529d1a1f04ad07f21d6b651d60a02739456ec14
Instruction ID: bf1092fe11397b35be7442b083d3c22ddcb2bb6af1dfe6e4ff52faca66a180a1
Opcode Fuzzy Hash: 345b19b73ae581e04342a76ae529d1a1f04ad07f21d6b651d60a02739456ec14
Instruction Fuzzy Hash: 39B17C319082459FDB158F68C881BFFBBA5EF55318F1481ABE415AB341E23D9C05C7AA

Function 0045A085 Relevance: 6.1, APIs: 4, Instructions: 70COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017,?), ref: 0045A091
IsDebuggerPresent.KERNEL32 ref: 0045A15D
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 0045A176
UnhandledExceptionFilter.KERNEL32(?), ref: 0045A180

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: ExceptionFilterPresentUnhandled$DebuggerFeatureProcessor
String ID:
API String ID: 254469556-0
Opcode ID: fd4cbafb2a9f255bd0b66f239647eed40ecb47334bff2fc3ab9e979b870176cc
Instruction ID: eb805189a854d2002fd8575b3da78179b118a5d5056f6a82782252733c8d2020
Opcode Fuzzy Hash: fd4cbafb2a9f255bd0b66f239647eed40ecb47334bff2fc3ab9e979b870176cc
Instruction Fuzzy Hash: 18314775C012189BDF21DFA0D9497CDBBB8AF08304F1041EAE90CAB250EB759B88CF49

Function 004701A2 Relevance: 4.7, APIs: 3, Instructions: 205COMMON

Download Yara Rule

APIs

Part of subcall function 00468DB3: GetLastError.KERNEL32(?,00000008,004669CC), ref: 00468DB7
Part of subcall function 00468DB3: SetLastError.KERNEL32(00000000,00480710,00000024,0045DDA3), ref: 00468E59

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 004701F6
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00470240
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00470306

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: InfoLocale$ErrorLast
String ID:
API String ID: 661929714-0
Opcode ID: d0428a7ba6e323fa878c37a3cbbbd8c2ea98382b3227c804e18d088f61b46a63
Instruction ID: 6888456aa57a4a36e4399495a3926e8aaeab69d38edd2f5a0c289dc4918aade9
Opcode Fuzzy Hash: d0428a7ba6e323fa878c37a3cbbbd8c2ea98382b3227c804e18d088f61b46a63
Instruction Fuzzy Hash: E2619B71901207DFDB289F28C886BAA77A9EF04300F1081AAED09D6285E77CDD85DB58

Function 00460B69 Relevance: 4.6, APIs: 3, Instructions: 77COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32(?,?,?,?,?,?), ref: 00460C61
SetUnhandledExceptionFilter.KERNEL32(00000000,?,?,?,?,?,?), ref: 00460C6B
UnhandledExceptionFilter.KERNEL32(?,?,?,?,?,?,?), ref: 00460C78

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: 54662961ff524c9f7b01e23abc11de17f97898b4c95e25a377135b67ebe976cd
Instruction ID: b1f0f9e3d2cda19f8ae1d4e9c264e2d0d0c1678c3b5a4722f1c8dcdc98199c9a
Opcode Fuzzy Hash: 54662961ff524c9f7b01e23abc11de17f97898b4c95e25a377135b67ebe976cd
Instruction Fuzzy Hash: 5831057090131C9BCB21DF64D98978DBBB8BF08310F5042EAE80CA7261E7349F858F49

Function 00452805 Relevance: 4.0, APIs: 1, Strings: 1, Instructions: 477COMMON

Download Yara Rule

Strings

ios base: %i, xrefs: 0045297D

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: H_prolog3_catch
String ID: ios base: %i
API String ID: 3886170330-1055636949
Opcode ID: 2f26d66719d709a5dbdf651f45c7bb7b16068cf1de15bb54c04be827e1caafd5
Instruction ID: cb736396db8eba34ca71ba8a377b47a6f29a07d0da5c02a656d9ca7b99fa2a7e
Opcode Fuzzy Hash: 2f26d66719d709a5dbdf651f45c7bb7b16068cf1de15bb54c04be827e1caafd5
Instruction Fuzzy Hash: 5AE17772A087164BC318DF398A812AFBBE1EF8A311F14463FED55973D2D37989098749

Function 00452A0F Relevance: 1.9, APIs: 1, Instructions: 384COMMON

Download Yara Rule

APIs

Part of subcall function 0045301A: __EH_prolog3_catch.LIBCMT ref: 00453021

_Deallocate.LIBCONCRT ref: 00452E06

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: DeallocateH_prolog3_catch
String ID:
API String ID: 20358830-0
Opcode ID: b205591d52042a80474cd02ee0ade2311398e6ed513a44da6cb67509e3884182
Instruction ID: 4d2df687df8bed469598e3d135c4b7de8a5a20fb2434f45bcc937014d6c44c97
Opcode Fuzzy Hash: b205591d52042a80474cd02ee0ade2311398e6ed513a44da6cb67509e3884182
Instruction Fuzzy Hash: 68B1B332D10A1A4BD708DD798B811DFBAA5EB9B321F50433BED25EB3D2D37D49068648

Function 0046943C Relevance: 1.8, APIs: 1, Instructions: 274COMMONLIBRARYCODE

Download Yara Rule

APIs

RaiseException.KERNEL32(C000000D,00000000,00000001,?,?,00000008,?,?,00469437,?,?,00000008,?,?,00474915,00000000), ref: 00469669

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: ExceptionRaise
String ID:
API String ID: 3997070919-0
Opcode ID: 8cac117362e6f08d49acdf213b9d48446097348f81becdcf3ce932c5d2806968
Instruction ID: c8e7e6eaa6acf71660462577e44a949619600bd189b94499aa19e16c08e0e3ae
Opcode Fuzzy Hash: 8cac117362e6f08d49acdf213b9d48446097348f81becdcf3ce932c5d2806968
Instruction Fuzzy Hash: 04B16C32210608DFD715CF28C486A657BE4FF05364F29865AE89ACF3A1D379ED82CB45

Function 00459B05 Relevance: 1.7, APIs: 1, Instructions: 242COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(0000000A), ref: 00459B1B

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: FeaturePresentProcessor
String ID:
API String ID: 2325560087-0
Opcode ID: 87fd055c79c56b21d0852de6579bb7df4ad82f6ebd8bfdf0309ab99f4dcac922
Instruction ID: 5c49addfec5eabd19cf30371659f0b2ed772f5dbdb2085d9a7db66f924d2465d
Opcode Fuzzy Hash: 87fd055c79c56b21d0852de6579bb7df4ad82f6ebd8bfdf0309ab99f4dcac922
Instruction Fuzzy Hash: 0FA167B1900605CFDB18CF58D9856AEBBB1FB48315F248A3ED911AB3A1D3789984CF58

Function 0046D2FE Relevance: 1.6, APIs: 1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8a0f7a4d459c6e25106afb0852d4dc4106b571f566fc5fe6cfa3ae8bd37e3cd7
Instruction ID: 564cfee0aa0b1ac367aff011db6d586413cd8e4d4e25e0d84d5691b5116f3c12
Opcode Fuzzy Hash: 8a0f7a4d459c6e25106afb0852d4dc4106b571f566fc5fe6cfa3ae8bd37e3cd7
Instruction Fuzzy Hash: BE41B575D0421DAFCB20DF69CC89AAAB7B8EF45304F1442DEE409D3201EA359E858F15

Function 0045FD34 Relevance: 1.6, Strings: 1, Instructions: 344COMMONLIBRARYCODE

Download Yara Rule

Strings

0, xrefs: 0045FEC2

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: b80d344130d134aeb8b5fe1329971d164d3fdf363ea8f52a0afe6e8d8f896698
Instruction ID: b31a35308f29eabc14b5e15adfbe14466a31c70948bb5d6b28c9bc07bb39053e
Opcode Fuzzy Hash: b80d344130d134aeb8b5fe1329971d164d3fdf363ea8f52a0afe6e8d8f896698
Instruction Fuzzy Hash: CCC1DF305006498FCB24CE68C48567BB7B2AB05305F24462FD856977A3D739AD4ECB5B

Function 004703F5 Relevance: 1.6, APIs: 1, Instructions: 83COMMON

Download Yara Rule

APIs

Part of subcall function 00468DB3: GetLastError.KERNEL32(?,00000008,004669CC), ref: 00468DB7
Part of subcall function 00468DB3: SetLastError.KERNEL32(00000000,00480710,00000024,0045DDA3), ref: 00468E59

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 00470449

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: 624c15e488916480cbf04d45c72ab7e00d88cf8e397e0a9bca9ae741b8df77f3
Instruction ID: 5a4e3ada9d66cb9b7cc8414aa5483e942548561cc5fb3b16472075fc50e2a68c
Opcode Fuzzy Hash: 624c15e488916480cbf04d45c72ab7e00d88cf8e397e0a9bca9ae741b8df77f3
Instruction Fuzzy Hash: B521B372502206EBDB289B65DC41ABB33E8EF44314F10807FFE09D6281EA7CDD449758

Function 0047007C Relevance: 1.6, APIs: 1, Instructions: 63COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00468DB3: GetLastError.KERNEL32(?,00000008,004669CC), ref: 00468DB7
Part of subcall function 00468DB3: SetLastError.KERNEL32(00000000,00480710,00000024,0045DDA3), ref: 00468E59

EnumSystemLocalesW.KERNEL32(004701A2,00000001,00000000,?,-00000050,?,004707D3,00000000,?,?,?,00000055,?), ref: 004700EE

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: 0f1259453b160a424cf984726105dd7e9fa585cf09a3396a3e19c1651e1a77de
Instruction ID: 514b2b6750e618b347787dca754462908bca72515f0ceb1a975b6fb4d219a347
Opcode Fuzzy Hash: 0f1259453b160a424cf984726105dd7e9fa585cf09a3396a3e19c1651e1a77de
Instruction Fuzzy Hash: F81129362007059FDB189F39D8916FBB792FF80328B14842EE98A47B40D3756842C744

Function 00470624 Relevance: 1.5, APIs: 1, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 00468DB3: GetLastError.KERNEL32(?,00000008,004669CC), ref: 00468DB7
Part of subcall function 00468DB3: SetLastError.KERNEL32(00000000,00480710,00000024,0045DDA3), ref: 00468E59

GetLocaleInfoW.KERNEL32(?,20000001,?,00000002,?,00000000,?,?,004703BE,00000000,00000000,?), ref: 00470650

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: 2829dadb08439a2efcdda5d8ed123778158dab9cd23ea3e686e46f8eab15e446
Instruction ID: e5f380320673f8d660b1e2cf07efec4ca723022640aac287676a1651ac005af5
Opcode Fuzzy Hash: 2829dadb08439a2efcdda5d8ed123778158dab9cd23ea3e686e46f8eab15e446
Instruction Fuzzy Hash: 73F0FE32501111EBDB3457618815BFB7754DB80354F15842ADC09A32C0DA78FD51C5D8

Function 00470117 Relevance: 1.5, APIs: 1, Instructions: 41COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00468DB3: GetLastError.KERNEL32(?,00000008,004669CC), ref: 00468DB7
Part of subcall function 00468DB3: SetLastError.KERNEL32(00000000,00480710,00000024,0045DDA3), ref: 00468E59

EnumSystemLocalesW.KERNEL32(004703F5,00000001,?,?,-00000050,?,00470797,-00000050,?,?,?,00000055,?,-00000050,?,?), ref: 00470161

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: 2a177b7cae6c046ad7403f516f21f383c3b11c5789d788d9f8e62f107bf67e7e
Instruction ID: 44e5b8125e28b072d985012f1e91d9962742829d75c06f02ff23721120ed095b
Opcode Fuzzy Hash: 2a177b7cae6c046ad7403f516f21f383c3b11c5789d788d9f8e62f107bf67e7e
Instruction Fuzzy Hash: D9F0F6363053049FDB249F399C81ABB7B95EF80368F15C42EFA494B790D6B6AC41C754

Function 00467026 Relevance: 1.5, APIs: 1, Instructions: 33COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00460E12: EnterCriticalSection.KERNEL32(?,?,00468A8B,?,004807B0,00000008,00468C4F,?,fE,?), ref: 00460E21

EnumSystemLocalesW.KERNEL32(00467019,00000001,00480750,0000000C,004673EB,00000000), ref: 0046705E

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: CriticalEnterEnumLocalesSectionSystem
String ID:
API String ID: 1272433827-0
Opcode ID: 98484c6085a33f583b0749b5403ffba5e292b3f56583f1d8243c78c7ea138c31
Instruction ID: 0da431ae4652c0ac018d2f1c185b4fd656f050a993b5a71ff5f046f00b343bb5
Opcode Fuzzy Hash: 98484c6085a33f583b0749b5403ffba5e292b3f56583f1d8243c78c7ea138c31
Instruction Fuzzy Hash: 33F0AF32A00304EFD710DFA8E942B8D77F0EB04725F10456FF800972A1E7B949048F8A

Function 00470031 Relevance: 1.5, APIs: 1, Instructions: 31COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 00468DB3: GetLastError.KERNEL32(?,00000008,004669CC), ref: 00468DB7
Part of subcall function 00468DB3: SetLastError.KERNEL32(00000000,00480710,00000024,0045DDA3), ref: 00468E59

EnumSystemLocalesW.KERNEL32(0046FF8A,00000001,?,?,?,004707F5,-00000050,?,?,?,00000055,?,-00000050,?,?,00000004), ref: 00470068

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: 035b3cb5101ab3148af298c22f2dc19c1829e03e3f33a4de8333c235cac77cca
Instruction ID: db83e5481125d3511ddef3c40e5c72a479e3b13f19cbb6a76dea894b372f8218
Opcode Fuzzy Hash: 035b3cb5101ab3148af298c22f2dc19c1829e03e3f33a4de8333c235cac77cca
Instruction Fuzzy Hash: 1AF05C3530024597CB08DF35D8057AA7F94EFC2720B06806EFA0D8B291D6799842C794

Function 004674EF Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(00000000,?,00000000,?,-00000050,?,?,?,00465AEE,?,20001004,00000000,00000002,?,?,004650F0), ref: 00467523

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: InfoLocale
String ID:
API String ID: 2299586839-0
Opcode ID: 23f77a59b33b55738d52578f84a82a53744ab30ff635b44e65077fa4d24bbfff
Instruction ID: 1ca14903475242886818cabf8dbc9d4e94ff25fdbf3e08725756cd4d2460067c
Opcode Fuzzy Hash: 23f77a59b33b55738d52578f84a82a53744ab30ff635b44e65077fa4d24bbfff
Instruction Fuzzy Hash: 0EE0DF35004628BBCF122F21DC08A9E7F16EF04769F014022FC0A61221DB398961AAEA

Function 0045A212 Relevance: 1.5, APIs: 1, Instructions: 3COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32(Function_0000A21E,00459799), ref: 0045A217

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: 0a04d345e23ea4240ae8eed8c427b3b74fb106e72aac73dacbe49371a2f15042
Instruction ID: 4ee86f19b18570bd83d73fc9dad5a72c6dd966b7728b0c9d5c9f9911f0970688
Opcode Fuzzy Hash: 0a04d345e23ea4240ae8eed8c427b3b74fb106e72aac73dacbe49371a2f15042
Instruction Fuzzy Hash:

Function 0046E177 Relevance: 1.3, APIs: 1, Instructions: 5memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32 ref: 0046E177

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: HeapProcess
String ID:
API String ID: 54951025-0
Opcode ID: a2ceaaea0d8ca9e54a49a47539aab5cd48fbb233560e213cfc92ae6f23d4b7ce
Instruction ID: c7000ef303677dd7b090b31e14321facc21ae2c3f61abc78f2616e46ede2c325
Opcode Fuzzy Hash: a2ceaaea0d8ca9e54a49a47539aab5cd48fbb233560e213cfc92ae6f23d4b7ce
Instruction Fuzzy Hash: 41A011302022008B83008F30AB082083AAAFA08280B02003AA808C2020EB2088808A08

Function 0046F840 Relevance: .3, Instructions: 327COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: ErrorLastProcess$CurrentFeatureInfoLocalePresentProcessorTerminate
String ID:
API String ID: 3471368781-0
Opcode ID: 48c2d1d1551b9ca829c4c4aea3c53567a215fa8c25043269ecaf4272b284cf2c
Instruction ID: 41b72144cf75fb128999761558016ce5fe715f18628a753456887ef09ef713e9
Opcode Fuzzy Hash: 48c2d1d1551b9ca829c4c4aea3c53567a215fa8c25043269ecaf4272b284cf2c
Instruction Fuzzy Hash: DDB107755007019BCB349F65DC92BB7B3A8EB44308F14457FE98786680FA78A989CB1A

Function 0045F9EC Relevance: .3, Instructions: 314COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 44305e497dcf0b8b57aa09f52d6eb91130be61e493a58cfde511386dd1d77bc7
Instruction ID: 4021e4469a5335135f41ecd4768b37a466604ed0db47150025c03a20b97e2594
Opcode Fuzzy Hash: 44305e497dcf0b8b57aa09f52d6eb91130be61e493a58cfde511386dd1d77bc7
Instruction Fuzzy Hash: AFB1BE7090060A8BCB248E68C5A56BFB7B1AB44306F14063FDC56D7393D639AD4ECB5B

Function 00452F17 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1964fa3f3c5ddeafa050864b076ac7db1cd142d081677185fa248428cddb93e5
Instruction ID: cf5f296feaab3e492f3beb058381e456026718b036919a5deb9d4bc633fb7b8e
Opcode Fuzzy Hash: 1964fa3f3c5ddeafa050864b076ac7db1cd142d081677185fa248428cddb93e5
Instruction Fuzzy Hash: 6EE06D716092009BE308AA54D55975B3AE9EBC5314F10C47FB1499B3D4CFFC584897DA

Function 0046CC6F Relevance: .0, Instructions: 22COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c9be6b6f35371869e062396f73cb3a676a20dd67872fdeac340a7b63f963c531
Instruction ID: 332d12819b93c4ead44324a5e80d30496737e886f8c062060ae6e1b6c85095f9
Opcode Fuzzy Hash: c9be6b6f35371869e062396f73cb3a676a20dd67872fdeac340a7b63f963c531
Instruction Fuzzy Hash: 28E08C72921228EBCB24DF89C944D9AF3ECEB44B14F11049BB905D3200D274DE40CBD9

Function 00463BBE Relevance: .0, Instructions: 12COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5235bc6f45b747b251e4dee57095da2f280f55043986cdd14d68c6e044f9f23d
Instruction ID: 53c369d504f40517db825adf9b78ecc9a190fe04e63396b2278502dd4e8a77a8
Opcode Fuzzy Hash: 5235bc6f45b747b251e4dee57095da2f280f55043986cdd14d68c6e044f9f23d
Instruction Fuzzy Hash: BCC08C34200A884ACE298D1092B13B63354AF91F83F80048FC4960B743E92EBD82DA06

Function 004592CD Relevance: 14.0, APIs: 4, Strings: 4, Instructions: 19
libraryloaderCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleW.KERNEL32(kernel32.dll), ref: 004592D3
GetProcAddress.KERNEL32(00000000,GetCurrentPackageId), ref: 004592E1
GetProcAddress.KERNEL32(00000000,GetSystemTimePreciseAsFileTime), ref: 004592F2
GetProcAddress.KERNEL32(00000000,GetTempPath2W), ref: 00459303

Strings

kernel32.dll, xrefs: 004592CE
GetTempPath2W, xrefs: 004592F8
GetSystemTimePreciseAsFileTime, xrefs: 004592E7
GetCurrentPackageId, xrefs: 004592DB

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: AddressProc$HandleModule
String ID: GetCurrentPackageId$GetSystemTimePreciseAsFileTime$GetTempPath2W$kernel32.dll
API String ID: 667068680-1247241052
Opcode ID: 95bb1ef5a120c13d94977a5b4267d6f0e70dc998b1edd64563fae876043d0d7c
Instruction ID: 639039496cae3c18b237ff14f8aef8dfab110363fb080e3b81ec107e2d5a30e0
Opcode Fuzzy Hash: 95bb1ef5a120c13d94977a5b4267d6f0e70dc998b1edd64563fae876043d0d7c
Instruction Fuzzy Hash: 18E08C31585A50AB9B00DF70BC0C8C53ABEEA143523828233B40CD2320E2B808808B9C

Function 0045CE02 Relevance: 12.6, APIs: 3, Strings: 4, Instructions: 303
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

type_info::operator==.LIBVCRUNTIME ref: 0045CF21
___TypeMatch.LIBVCRUNTIME ref: 0045D02F
CallUnexpected.LIBVCRUNTIME ref: 0045D19C

Strings

csm, xrefs: 0045CEAC
csm, xrefs: 0045CE3F
csm, xrefs: 0045CF58
hrG, xrefs: 0045CF18

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: CallMatchTypeUnexpectedtype_info::operator==
String ID: csm$csm$csm$hrG
API String ID: 1206542248-1645544639
Opcode ID: f48077bf202dfd0e63f63f13639c32d7b726cc7d7b8c4a390dc1bb15d58f1ee4
Instruction ID: 7d2da18f11689845a3d6266dcf21823ed8f121023981f7c5fc2df4708f1fb462
Opcode Fuzzy Hash: f48077bf202dfd0e63f63f13639c32d7b726cc7d7b8c4a390dc1bb15d58f1ee4
Instruction Fuzzy Hash: 89B16871C00209AFCF24EFA5C8819AEBBB5BF14316F14415BEC116B253D738DA5ACB99

Function 0046B85E Relevance: 12.5, APIs: 6, Strings: 1, Instructions: 298
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

, xrefs: 0046BAD7

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID:
String ID:
API String ID: 0-3907804496
Opcode ID: 829f2c50119752dec6b19c764d17871cf0aecabe10d83fe7c6a1a872d99c724a
Instruction ID: 1b324f45a67a9f99c288c2a2892e28e884a255e78c2c9e00b7ef16afc386cd67
Opcode Fuzzy Hash: 829f2c50119752dec6b19c764d17871cf0aecabe10d83fe7c6a1a872d99c724a
Instruction Fuzzy Hash: 6EB10570A00245AFDB11DF99C880BAE7BB1EF49314F14415BE404D7396E779AD82CBAA

Function 004671EF Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 74
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FreeLibrary.KERNEL32(00000000,?,00000000,00000800,00000000,F8250000,?,A5D23014,fE,004672FC,fE,?,F8250000,00000000), ref: 004672B0

Strings

fE, xrefs: 004671F1
api-ms-, xrefs: 00467246
ext-ms-, xrefs: 0046725A

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: FreeLibrary
String ID: api-ms-$ext-ms-$fE
API String ID: 3664257935-657889910
Opcode ID: e3b03e01e74cefcd69c069461223e35abc08ceda5ddb4b6870bf383c52bb4d36
Instruction ID: 0d0ad66a93f94ff1458d3505b9c4a7175c726ca7d78e29042d5de387ed9caab1
Opcode Fuzzy Hash: e3b03e01e74cefcd69c069461223e35abc08ceda5ddb4b6870bf383c52bb4d36
Instruction Fuzzy Hash: 69215B32A05210A7DB219B61EC50A9B3768AB41768B2501A6F905A33D1F638ED04C6EA

Function 004590E3 Relevance: 12.2, APIs: 8, Instructions: 175COMMON

Download Yara Rule

APIs

MultiByteToWideChar.KERNEL32(00000000,00000000,00000001,?,00000000,00000000,?,?,?,00000001), ref: 0045912C
__alloca_probe_16.LIBCMT ref: 00459158
MultiByteToWideChar.KERNEL32(00000001,00000001,00000000,?,00000000,00000000), ref: 00459197
LCMapStringEx.KERNEL32(?,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 004591B4
LCMapStringEx.KERNEL32(?,?,00000000,00000000,00000000,?,00000000,00000000,00000000), ref: 004591F3
__alloca_probe_16.LIBCMT ref: 00459210
LCMapStringEx.KERNEL32(?,?,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 00459252
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,?,00000000,00000000), ref: 00459275

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: ByteCharMultiStringWide$__alloca_probe_16
String ID:
API String ID: 2040435927-0
Opcode ID: 1ee008a2bb6b62e34d60734edfd2fcc058f3e4446f718f2bf65e5ae3e4455d3d
Instruction ID: 159833616b45b7da274a98da972ffb5a3bfd393eb1e5279212b29d870dd19929
Opcode Fuzzy Hash: 1ee008a2bb6b62e34d60734edfd2fcc058f3e4446f718f2bf65e5ae3e4455d3d
Instruction Fuzzy Hash: 7451C472900216FBEF208FA1DC45FAB7BA9EF40742F15496AFD04A6252D7388C48DB58

Function 0045C8D0 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

_ValidateLocalCookies.LIBCMT ref: 0045C907
___except_validate_context_record.LIBVCRUNTIME ref: 0045C90F
_ValidateLocalCookies.LIBCMT ref: 0045C998
__IsNonwritableInCurrentImage.LIBCMT ref: 0045C9C3
_ValidateLocalCookies.LIBCMT ref: 0045CA18

Strings

csm, xrefs: 0045C9AD

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: CookiesLocalValidate$CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 1170836740-1018135373
Opcode ID: 0cdce18a651a479f8685aa5dea85c3cf4d1217af4353bc491069b7fbc370680a
Instruction ID: fe3fbc3c7024abeea26edacc759cb588976fe86a385683b071b3345284d51b2b
Opcode Fuzzy Hash: 0cdce18a651a479f8685aa5dea85c3cf4d1217af4353bc491069b7fbc370680a
Instruction Fuzzy Hash: 0D41D270A00208AFCF10DF29C885A9FBBB5EF45315F14819AEC199B353C7399949CB99

Function 004573C5 Relevance: 10.5, APIs: 7, Instructions: 49COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 004573CC
std::_Lockit::_Lockit.LIBCPMT ref: 004573D6
int.LIBCPMT ref: 004573ED

Part of subcall function 00451830: std::_Lockit::_Lockit.LIBCPMT ref: 00451841
Part of subcall function 00451830: std::_Lockit::~_Lockit.LIBCPMT ref: 0045185B

codecvt.LIBCPMT ref: 00457410
std::_Facet_Register.LIBCPMT ref: 00457427
std::_Lockit::~_Lockit.LIBCPMT ref: 00457447
Concurrency::cancel_current_task.LIBCPMT ref: 00457454

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_H_prolog3Registercodecvt
String ID:
API String ID: 2133458128-0
Opcode ID: 19d172380a6ccd2a972c054dc91d45bce3f45f3364bee1d7d9f1f6da0b65ec8b
Instruction ID: e3635d0191ba50907578fdc3b4e619e65fe88e9e010f21305fcb68326d82e05e
Opcode Fuzzy Hash: 19d172380a6ccd2a972c054dc91d45bce3f45f3364bee1d7d9f1f6da0b65ec8b
Instruction Fuzzy Hash: FC0104718001169BCF01EB65E8057BE7B61AF4032AF24442FEC106B3A3DF3C9D098B89

Function 00454A2F Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 48COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00454A3B
int.LIBCPMT ref: 00454A4E

Part of subcall function 00451830: std::_Lockit::_Lockit.LIBCPMT ref: 00451841
Part of subcall function 00451830: std::_Lockit::~_Lockit.LIBCPMT ref: 0045185B

std::_Facet_Register.LIBCPMT ref: 00454A81
std::_Lockit::~_Lockit.LIBCPMT ref: 00454A97
Concurrency::cancel_current_task.LIBCPMT ref: 00454AA2

Strings

|dG, xrefs: 00454A35

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_Register
String ID: |dG
API String ID: 2081738530-1266889398
Opcode ID: a44b50ea530c68d5d48cf1a4c1c4b994647ed355cf01c5175fa2bd1210103dad
Instruction ID: 61a37204ad6a29ad7e4752ad312a9f2609f0155809f365b769160962a501b966
Opcode Fuzzy Hash: a44b50ea530c68d5d48cf1a4c1c4b994647ed355cf01c5175fa2bd1210103dad
Instruction Fuzzy Hash: 3601F732910114BBCB14ABA6D90599E7B68DFC0769F20016FFC055B292EF789E49878C

Function 0045CA94 Relevance: 9.1, APIs: 6, Instructions: 60COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,0045CA8B,0045AD89,004569F4,A5D23014,?,?,?,?,004752D0,000000FF), ref: 0045CAA2
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 0045CAB0
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 0045CAC9
SetLastError.KERNEL32(00000000,?,0045CA8B,0045AD89,004569F4,A5D23014,?,?,?,?,004752D0,000000FF), ref: 0045CB1B

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: cea9f05cc2a7aa581b9bb09f5a3fe3a52e3d189d84bc996990d06a6f0ffd7bcc
Instruction ID: 4057e72eac8065cab08776867df24e2521c6ec1dce96649a1c3f55ccbd503018
Opcode Fuzzy Hash: cea9f05cc2a7aa581b9bb09f5a3fe3a52e3d189d84bc996990d06a6f0ffd7bcc
Instruction Fuzzy Hash: 8201F1322087116EEA257B757CC696B2B84EB017BB720023FF825511E3EF995C08928C

Function 00463BE0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 42libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,A5D23014,?,?,00000000,004754C3,000000FF,?,00463B70,00463CA0,?,00463B44,00000000), ref: 00463C15
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 00463C27
FreeLibrary.KERNEL32(00000000,?,?,00000000,004754C3,000000FF,?,00463B70,00463CA0,?,00463B44,00000000), ref: 00463C49

Strings

CorExitProcess, xrefs: 00463C1F
mscoree.dll, xrefs: 00463C0E

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: 472b11a1c92e8c7dfcdb088f6d7a1fd839ed75688164e9ff29a0512ee11361ff
Instruction ID: 624e382b75b4f42af6b512f5b68eff5444b132b783046648b78f3e469d70f0f3
Opcode Fuzzy Hash: 472b11a1c92e8c7dfcdb088f6d7a1fd839ed75688164e9ff29a0512ee11361ff
Instruction Fuzzy Hash: C901A732940669AFDB158F50DD09FEEBBB9FB04B11F000536F815A22D0D7789944CA48

Function 00458BAA Relevance: 7.6, APIs: 5, Instructions: 116threadCOMMON

Download Yara Rule

APIs

GetCurrentThreadId.KERNEL32 ref: 00458BBE
AcquireSRWLockExclusive.KERNEL32(00000003,?,00000002,?,004534CC,?,?), ref: 00458BDD
AcquireSRWLockExclusive.KERNEL32(00000003,00000000,00000000,?,00000002,?,004534CC,?,?), ref: 00458C0B
TryAcquireSRWLockExclusive.KERNEL32(00000003,00000000,00000000,?,00000002,?,004534CC,?,?), ref: 00458C66
TryAcquireSRWLockExclusive.KERNEL32(00000003,00000000,00000000,?,00000002,?,004534CC,?,?), ref: 00458C7D

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: AcquireExclusiveLock$CurrentThread
String ID:
API String ID: 66001078-0
Opcode ID: f65e9ee1b911d37d686cd15b31649444ff12bd7abad19eb4397bc1d47a7d2c92
Instruction ID: 8590c808788494c482d5f15756af2d09fd50899dd1e37c5d94683b3b0f8b1349
Opcode Fuzzy Hash: f65e9ee1b911d37d686cd15b31649444ff12bd7abad19eb4397bc1d47a7d2c92
Instruction Fuzzy Hash: 55415C30501A06DBCB22DF65C58196AB3F5FF04312B50492FD856E7642DF38F989CB69

Function 004548F7 Relevance: 7.5, APIs: 5, Instructions: 48COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00454903
int.LIBCPMT ref: 00454916

Part of subcall function 00451830: std::_Lockit::_Lockit.LIBCPMT ref: 00451841
Part of subcall function 00451830: std::_Lockit::~_Lockit.LIBCPMT ref: 0045185B

std::_Facet_Register.LIBCPMT ref: 00454949
std::_Lockit::~_Lockit.LIBCPMT ref: 0045495F
Concurrency::cancel_current_task.LIBCPMT ref: 0045496A

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_Register
String ID:
API String ID: 2081738530-0
Opcode ID: 004ac8ee688bf642556422f7468d8d22c615c05cf962cb43fda74afe48d2b2ae
Instruction ID: a6e71f9a92b1af3ef1a66c801f7a474e933e5af31c49a11721d0c1c1a379ca7b
Opcode Fuzzy Hash: 004ac8ee688bf642556422f7468d8d22c615c05cf962cb43fda74afe48d2b2ae
Instruction Fuzzy Hash: AE01F772900114ABCB14AB65D81699F7B68DF80769B20016FFD056B2A3DF389E4987C8

Function 00454F6E Relevance: 7.5, APIs: 5, Instructions: 48COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00454F7A
int.LIBCPMT ref: 00454F8D

Part of subcall function 00451830: std::_Lockit::_Lockit.LIBCPMT ref: 00451841
Part of subcall function 00451830: std::_Lockit::~_Lockit.LIBCPMT ref: 0045185B

std::_Facet_Register.LIBCPMT ref: 00454FC0
std::_Lockit::~_Lockit.LIBCPMT ref: 00454FD6
Concurrency::cancel_current_task.LIBCPMT ref: 00454FE1

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_Register
String ID:
API String ID: 2081738530-0
Opcode ID: 5009e301592efe7f703df701a7331e231598a0dc3e26c58493b55e265f4846d7
Instruction ID: 80208fd94ef60ee4354c9a1aaa95a8fa63fc0526318fca03e96a3eac0b46b88e
Opcode Fuzzy Hash: 5009e301592efe7f703df701a7331e231598a0dc3e26c58493b55e265f4846d7
Instruction Fuzzy Hash: B001F732900114BBCB14AB5AD80589E7B68DF80369B14016FFD015B292DF389E49C788

Function 004587C2 Relevance: 7.5, APIs: 5, Instructions: 44COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 004587C9
std::_Lockit::_Lockit.LIBCPMT ref: 004587D4
std::_Lockit::~_Lockit.LIBCPMT ref: 00458842

Part of subcall function 00458925: std::locale::_Locimp::_Locimp.LIBCPMT ref: 0045893D

std::locale::_Setgloballocale.LIBCPMT ref: 004587EF
_Yarn.LIBCPMT ref: 00458805

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: Lockitstd::_std::locale::_$H_prolog3LocimpLocimp::_Lockit::_Lockit::~_SetgloballocaleYarn
String ID:
API String ID: 1088826258-0
Opcode ID: ab72223382c734980284c9a043eb2a55d866aa34e2dd84bcebd61a447e13a4e4
Instruction ID: ce8078173333391e3fea48c0de3e42bffde1109807a307860473deb171779331
Opcode Fuzzy Hash: ab72223382c734980284c9a043eb2a55d866aa34e2dd84bcebd61a447e13a4e4
Instruction Fuzzy Hash: 98019A75A016219BCB06EB21980557C7BA2FB84355B55402EEC0667393CF386E4ACB8E

Function 0045DB97 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 27libraryCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(?,00000000,00000800,?,0045DB48,?,?,00000000,?,?,?,0045DC72,00000002,FlsGetValue,00477CF0,FlsGetValue), ref: 0045DBA4
GetLastError.KERNEL32(?,0045DB48,?,?,00000000,?,?,?,0045DC72,00000002,FlsGetValue,00477CF0,FlsGetValue,?,?,0045CAB5), ref: 0045DBAE
LoadLibraryExW.KERNEL32(?,00000000,00000000), ref: 0045DBD6

Strings

api-ms-, xrefs: 0045DBBB

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: LibraryLoad$ErrorLast
String ID: api-ms-
API String ID: 3177248105-2084034818
Opcode ID: dd55ca4486f4c79945765f96ff317dc05a2d8f9021d7059f89fbcce7296789c9
Instruction ID: 043e1e55292230ead766470b3fb6a0e348e9f4eb5b8aa979ea76ce4bd822a117
Opcode Fuzzy Hash: dd55ca4486f4c79945765f96ff317dc05a2d8f9021d7059f89fbcce7296789c9
Instruction Fuzzy Hash: C6E01230644208B7DB202B51EC06F593E56AF00B51F114431FD4EA95E1E766A898958C

Function 00469DB0 Relevance: 6.3, APIs: 4, Instructions: 338fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32(A5D23014,00000000,00000000,7622F550), ref: 00469E13

Part of subcall function 0046CDFB: WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,00000000,?,0000FDE9,00000000,-00000008,00000000,?,0046CB79,?,00000000,-00000008), ref: 0046CEA7

WriteFile.KERNEL32(?,?,00000000,?,00000000), ref: 0046A06E
WriteFile.KERNEL32(?,?,00000001,?,00000000), ref: 0046A0B6
GetLastError.KERNEL32 ref: 0046A159

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: FileWrite$ByteCharConsoleErrorLastMultiOutputWide
String ID:
API String ID: 2112829910-0
Opcode ID: f80a11f38bc0b4dfecb26d22d919d6d0416809108bba98474395a806a9a4009a
Instruction ID: 6e561a17c539e7d0c07b2faf09c48df79da3d554a2691c12955d15a165f37465
Opcode Fuzzy Hash: f80a11f38bc0b4dfecb26d22d919d6d0416809108bba98474395a806a9a4009a
Instruction Fuzzy Hash: E7D16975E00658AFCB15CFA8C8809EEBBB5FF49304F18412AE855E7341E734A852CF56

Function 0045CBAB Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 0045CC72
___AdjustPointer.LIBCMT ref: 0045CC95
___AdjustPointer.LIBCMT ref: 0045CD31

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: ce456ba450db4e2fd2b4cdca4862cb506f9b7d640140e4f7b5a6ec75dd38f336
Instruction ID: ac0a525bbb36a012e363080c879469feb4dde2376d2a35411631ad917baa3986
Opcode Fuzzy Hash: ce456ba450db4e2fd2b4cdca4862cb506f9b7d640140e4f7b5a6ec75dd38f336
Instruction Fuzzy Hash: F151DF71600706AFDB2A9F51D881BAA77A1FF00316F14412FEC0987692E739AC88C799

Function 0046D0BB Relevance: 6.1, APIs: 4, Instructions: 82COMMON

Download Yara Rule

APIs

Part of subcall function 0046CDFB: WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,00000000,?,0000FDE9,00000000,-00000008,00000000,?,0046CB79,?,00000000,-00000008), ref: 0046CEA7

GetLastError.KERNEL32 ref: 0046D11F
__dosmaperr.LIBCMT ref: 0046D126
GetLastError.KERNEL32(?,?,?,?), ref: 0046D160
__dosmaperr.LIBCMT ref: 0046D167

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: ErrorLast__dosmaperr$ByteCharMultiWide
String ID:
API String ID: 1913693674-0
Opcode ID: 3b7332888324a469f71a53f32d6c889b3852b8670e0dea72d1af138e871f4352
Instruction ID: 24f42476bd1b8aae58aa0828296857265db8824d002396be42e0a279c533eee6
Opcode Fuzzy Hash: 3b7332888324a469f71a53f32d6c889b3852b8670e0dea72d1af138e871f4352
Instruction Fuzzy Hash: 5621A471F00615AFDB20AF66C88096B77A9FF45368710841FF86997250FB78EC40CB56

Function 004632F6 Relevance: 6.1, APIs: 4, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9d6b70798a1663b9510682e39d18596e9c86cfdb4582679276719d8f5fda54f9
Instruction ID: 1fb903bfa7e8cb1ecb371ab94ed2c0072d20c785b1a928106e0e0cdb93eda040
Opcode Fuzzy Hash: 9d6b70798a1663b9510682e39d18596e9c86cfdb4582679276719d8f5fda54f9
Instruction Fuzzy Hash: BD219231600695AFDB20AF66CC4096BB7A9BF10369710452AFC66D7340FF38EE80875A

Function 0046E06A Relevance: 6.1, APIs: 4, Instructions: 74COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32 ref: 0046E072

Part of subcall function 0046CDFB: WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,00000000,?,0000FDE9,00000000,-00000008,00000000,?,0046CB79,?,00000000,-00000008), ref: 0046CEA7

FreeEnvironmentStringsW.KERNEL32(00000000), ref: 0046E0AA
FreeEnvironmentStringsW.KERNEL32(00000000), ref: 0046E0CA

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: EnvironmentStrings$Free$ByteCharMultiWide
String ID:
API String ID: 158306478-0
Opcode ID: 4f851e96cf839b1a0ba00358214facd8afc61366da97f7a3ac5af08c56a57afc
Instruction ID: 8014ae28d4c6deb1d44b16b5806b2b7d2cdd1b201d41097dd9e0b2745fbd9ea3
Opcode Fuzzy Hash: 4f851e96cf839b1a0ba00358214facd8afc61366da97f7a3ac5af08c56a57afc
Instruction Fuzzy Hash: 5F1104B55015257FA6212773AC8DCBF2EADEE85398311002BF80192201FE7CDD0182BB

Function 00473966 Relevance: 6.0, APIs: 4, Instructions: 29COMMONLIBRARYCODE

Download Yara Rule

APIs

WriteConsoleW.KERNEL32(00000000,0000000C,00000000,00000000,00000000,?,00472877,00000000,00000001,00000000,7622F550,?,0046A1AD,7622F550,00000000,00000000), ref: 0047397D
GetLastError.KERNEL32(?,00472877,00000000,00000001,00000000,7622F550,?,0046A1AD,7622F550,00000000,00000000,7622F550,7622F550,?,0046A734,00000000), ref: 00473989

Part of subcall function 0047394F: CloseHandle.KERNEL32(FFFFFFFE,00473999,?,00472877,00000000,00000001,00000000,7622F550,?,0046A1AD,7622F550,00000000,00000000,7622F550,7622F550), ref: 0047395F

___initconout.LIBCMT ref: 00473999

Part of subcall function 00473911: CreateFileW.KERNEL32(CONOUT$,40000000,00000003,00000000,00000003,00000000,00000000,00473940,00472864,7622F550,?,0046A1AD,7622F550,00000000,00000000,7622F550), ref: 00473924

WriteConsoleW.KERNEL32(00000000,0000000C,00000000,00000000,?,00472877,00000000,00000001,00000000,7622F550,?,0046A1AD,7622F550,00000000,00000000,7622F550), ref: 004739AE

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast___initconout
String ID:
API String ID: 2744216297-0
Opcode ID: 3d722b6a8763cfa37b4ab86cbf634dcd15f58da6ede7879742a3a7abc47f7938
Instruction ID: b44fb5780ee333fe98e486d00083913b20f317477be017000ed98114f90cb854
Opcode Fuzzy Hash: 3d722b6a8763cfa37b4ab86cbf634dcd15f58da6ede7879742a3a7abc47f7938
Instruction Fuzzy Hash: 8BF01C76000124BBCF225FD5DC08ADE3F66FB083A2F018865FA1D95231DA728960EB98

Function 0045D1A7 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 112COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32(00000000,?), ref: 0045D1CC

Strings

RCC, xrefs: 0045D1E6
MOC, xrefs: 0045D1DE

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: EncodePointer
String ID: MOC$RCC
API String ID: 2118026453-2084237596
Opcode ID: b7ffcfc4c22a67f377b174972f79c986c562c322a80734b52e2ed612517c92c3
Instruction ID: 63fd86134ebcfb0c240c5314d9e4af79810e7e20248e7f9f711fd47514dd49c0
Opcode Fuzzy Hash: b7ffcfc4c22a67f377b174972f79c986c562c322a80734b52e2ed612517c92c3
Instruction Fuzzy Hash: 21418831D00209AFDF26DF94CC81AEEBBB5BF48305F14809AFD05A6252D339D964DB58

Function 00456AB5 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 73COMMON

Download Yara Rule

APIs

__alloca_probe_16.LIBCMT ref: 00456B3D
RaiseException.KERNEL32(?,?,?,?,?), ref: 00456B62

Part of subcall function 0045AD9B: RaiseException.KERNEL32(E06D7363,00000001,00000003,00451365,?,?,?,?,00451365,?,00480B30), ref: 0045ADFB

Part of subcall function 0045DD93: IsProcessorFeaturePresent.KERNEL32(00000017,0045F12B,?,?,?,?,00000000,004608D9,?,?,?), ref: 0045DDAF

Strings

csm, xrefs: 00456AF1

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: ExceptionRaise$FeaturePresentProcessor__alloca_probe_16
String ID: csm
API String ID: 1924019822-1018135373
Opcode ID: bda7d3abfc2910bb8f065df5c834755fdc33e1747104320fe9e73146a5cc6ed6
Instruction ID: b28880fd24e040ea4b6b9303b2aaaf754df35e53414ce2ad4b64149ef22d8a5c
Opcode Fuzzy Hash: bda7d3abfc2910bb8f065df5c834755fdc33e1747104320fe9e73146a5cc6ed6
Instruction Fuzzy Hash: AB21AE31D00228EBCF24DF95D9459AEB7B9AF00716F96041EEC05AB252C738AD4CCB89

Function 0045301A Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 70COMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 00453021

Part of subcall function 00454A2F: std::_Lockit::_Lockit.LIBCPMT ref: 00454A3B
Part of subcall function 00454A2F: int.LIBCPMT ref: 00454A4E
Part of subcall function 00454A2F: std::_Lockit::~_Lockit.LIBCPMT ref: 00454A97

Strings

xdG, xrefs: 004530A0
|dG, xrefs: 0045302B, 00453030, 00453043, 00453073, 004530FE

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: Lockitstd::_$H_prolog3_catchLockit::_Lockit::~_
String ID: xdG$|dG
API String ID: 1693569656-2697944042
Opcode ID: 761ed7a998785e1cb35bb01355b374de52af4e36afff32033672047aeb62ad62
Instruction ID: d5a21823a75c545a3f999b819a1d379ec43d8b0d7c0c6bf87975430bba6637c6
Opcode Fuzzy Hash: 761ed7a998785e1cb35bb01355b374de52af4e36afff32033672047aeb62ad62
Instruction Fuzzy Hash: 8721A271E00205DFCB04DFA4C995EADBBF0AF48315F14C1AEE509AB2A2D7359D46CB54

Function 0045175B Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 33COMMONLIBRARYCODE

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 00451762
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 0045179A

Part of subcall function 004588C0: _Yarn.LIBCPMT ref: 004588DF
Part of subcall function 004588C0: _Yarn.LIBCPMT ref: 00458903

Strings

bad locale name, xrefs: 004517A8

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: Yarnstd::_$Locinfo::_Locinfo_ctorLockitLockit::_
String ID: bad locale name
API String ID: 1908188788-1405518554
Opcode ID: 5ffffafe84e6ce65e96cb75e37813c2817fc44eb0a70e685963aac97328f81fa
Instruction ID: 341d7b4ab05ba438d002524309e0739b07b9e2858305059cb27b64a7e152a6ab
Opcode Fuzzy Hash: 5ffffafe84e6ce65e96cb75e37813c2817fc44eb0a70e685963aac97328f81fa
Instruction Fuzzy Hash: F3F01D71909B409E83319F6B9481443FBE4BE282117908A2FE4DEC3A12D774A408CB6E

Function 00451000 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 19COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 00451007

Strings

\bG, xrefs: 00451011
,bG, xrefs: 0045100C, 0045101F

Memory Dump Source

Source File: 00000000.00000002.2485594636.0000000000451000.00000020.00000001.01000000.00000003.sdmp, Offset: 00450000, based on PE: true

Associated: 00000000.00000002.2485574032.0000000000450000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485620207.0000000000476000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485637496.0000000000482000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485657324.0000000000490000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485672462.0000000000491000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485687461.0000000000493000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2485704951.0000000000497000.00000008.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_450000_juwXcVX5AK.jbxd

Similarity

API ID: H_prolog3
String ID: ,bG$\bG
API String ID: 431132790-3474691125
Opcode ID: 351624442901db017aba7a8a3e7a37220d0071d198e72865f71f066cceae5c01
Instruction ID: 20074cc9d9a27a35620e43d5c7c12a04009d82a66904f10322f3392c1af59d2d
Opcode Fuzzy Hash: 351624442901db017aba7a8a3e7a37220d0071d198e72865f71f066cceae5c01
Instruction Fuzzy Hash: 06E09AB0A41201DADB04FBA08A0639C7960BB02319F60898EA6107E3D2D7FE0A0CC76D

Analysis Process: MSBuild.exePID: 2752, Parent PID: 6036COMMON

Executed Functions

Function 00EE9A30 Relevance: 7.1, Strings: 5, Instructions: 888COMMON

Download Yara Rule

Strings

lv, xrefs: 00EE9AA4
(jgA, xrefs: 00EE9C51
g2%, xrefs: 00EE9FA7
E"W, xrefs: 00EEA327
(x, xrefs: 00EEA517

Memory Dump Source

Source File: 00000002.00000002.2160976116.0000000000EE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ee0000_MSBuild.jbxd

Similarity

API ID:
String ID: (jgA$(x$E"W$lv$g2%
API String ID: 0-1174055530
Opcode ID: f438102909bd698fff804a5cc973c89acd8bc176afa87789bc175dbcbf967ccd
Instruction ID: 6ce7e32993232c2f9f52305ef9aa6ece2cb7a09265d74fae39c85e4c789db1ef
Opcode Fuzzy Hash: f438102909bd698fff804a5cc973c89acd8bc176afa87789bc175dbcbf967ccd
Instruction Fuzzy Hash: A792E274E012598FCB64CFA9C980B9DBBF1BB49304F1481AAE819E7355E730AE85CF51

Function 00EE07B0 Relevance: 5.4, Strings: 4, Instructions: 393COMMON

Download Yara Rule

Strings

K(:, xrefs: 00EE099F
K$S , xrefs: 00EE0A78
b6K, xrefs: 00EE08C4
;(:, xrefs: 00EE0959

Memory Dump Source

Source File: 00000002.00000002.2160976116.0000000000EE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ee0000_MSBuild.jbxd

Similarity

API ID:
String ID: ;(:$K$S $K(:$b6K
API String ID: 0-896138553
Opcode ID: a2b1916dae29a7ccb12d76713ece4a8a914fec6dcc5c1fcebf087f1608d34826
Instruction ID: bb5318a4983e29c1f191ece8df7f93281330d4e7cf92f131a0a776e3ef91c8d1
Opcode Fuzzy Hash: a2b1916dae29a7ccb12d76713ece4a8a914fec6dcc5c1fcebf087f1608d34826
Instruction Fuzzy Hash: 1E020774E01248CFCB45DFA9C58499DBBF1EF49304B2591AAD419AB366EB30ED86CF40

Function 00EE0848 Relevance: 5.4, Strings: 4, Instructions: 359COMMON

Download Yara Rule

Strings

K(:, xrefs: 00EE099F
K$S , xrefs: 00EE0A78
b6K, xrefs: 00EE08C4
;(:, xrefs: 00EE0959

Memory Dump Source

Source File: 00000002.00000002.2160976116.0000000000EE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ee0000_MSBuild.jbxd

Similarity

API ID:
String ID: ;(:$K$S $K(:$b6K
API String ID: 0-896138553
Opcode ID: b9da1aa371c1fb7c611bef5f00b705c7922f4f38dfe9ace477f5c6dd752c1356
Instruction ID: 4ff028c7d1783fa0eca6298a2b7f22446cdbd7e39a527b306faff9bf1a7f803c
Opcode Fuzzy Hash: b9da1aa371c1fb7c611bef5f00b705c7922f4f38dfe9ace477f5c6dd752c1356
Instruction Fuzzy Hash: A3F1B174E01248DFCB45DFA9C58499DBBF1FF88304B2591AAD419AB365EB30EA85CF40

Function 00EE0847 Relevance: 5.3, Strings: 4, Instructions: 323COMMON

Download Yara Rule

Strings

K(:, xrefs: 00EE099F
K$S , xrefs: 00EE0A78
b6K, xrefs: 00EE08C4
;(:, xrefs: 00EE0959

Memory Dump Source

Source File: 00000002.00000002.2160976116.0000000000EE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ee0000_MSBuild.jbxd

Similarity

API ID:
String ID: ;(:$K$S $K(:$b6K
API String ID: 0-896138553
Opcode ID: 3fc03e46661cc830d1d3534bcfccd95a01dfc17565b5b950a9300f0f1617cd5f
Instruction ID: 37f2d17050461a6b090997ac38e5682c6043516f9a55e10d1242e64dfbce77c6
Opcode Fuzzy Hash: 3fc03e46661cc830d1d3534bcfccd95a01dfc17565b5b950a9300f0f1617cd5f
Instruction Fuzzy Hash: 67E1A074E01248DFCB45DFA9C58499DBBF1FF88304B2591AAD419AB365EB30EA85CF40

Function 00EE3108 Relevance: 1.6, Strings: 1, Instructions: 307COMMON

Download Yara Rule

Strings

-x, xrefs: 00EE31A5

Memory Dump Source

Source File: 00000002.00000002.2160976116.0000000000EE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ee0000_MSBuild.jbxd

Similarity

API ID:
String ID: -x
API String ID: 0-1059959070
Opcode ID: 4cf0d7f4bc89e0d1e70e0ead745a1987e62eade46951c1cc74826342d1096ba4
Instruction ID: 60a40b5e1076e8736379a373a933b1993b0614b17ccdb45b1a9bd8c6fbd28c5c
Opcode Fuzzy Hash: 4cf0d7f4bc89e0d1e70e0ead745a1987e62eade46951c1cc74826342d1096ba4
Instruction Fuzzy Hash: 5FD1D378A012498FCB14DFA9D984A9DBBF2FB48304F24856AE419EB355D734EA46CF40

Function 00EE8488 Relevance: 1.7, Strings: 1, Instructions: 457COMMON

Download Yara Rule

Strings

Ds, xrefs: 00EE86F9

Memory Dump Source

Source File: 00000002.00000002.2160976116.0000000000EE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ee0000_MSBuild.jbxd

Similarity

API ID:
String ID: Ds
API String ID: 0-1726540861
Opcode ID: b0af7459341c87e5694163d58fa0d3c805004bd54d21dd9501f88c3c9302dcf9
Instruction ID: c764a434ed828a554d1655a20aed2e7270c55e50f77f242e8b62bd9891cea39a
Opcode Fuzzy Hash: b0af7459341c87e5694163d58fa0d3c805004bd54d21dd9501f88c3c9302dcf9
Instruction Fuzzy Hash: 01718A30A002068FCB15DF6DC980999BBF1FF84314B558769E519EB396DB30ED86CB84

Function 00EEA424 Relevance: 1.3, Strings: 1, Instructions: 93COMMON

Download Yara Rule

Strings

(x, xrefs: 00EEA517

Memory Dump Source

Source File: 00000002.00000002.2160976116.0000000000EE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ee0000_MSBuild.jbxd

Similarity

API ID:
String ID: (x
API String ID: 0-3979080048
Opcode ID: cb40f3af19e602cdbfb8a3e18eeff13d1929cade9c5d350bf0213cf2c18bd552
Instruction ID: a0965b8771ce1453fe25943085a48bd2e40ef30c7dce47ee4af3c7b774b315a2
Opcode Fuzzy Hash: cb40f3af19e602cdbfb8a3e18eeff13d1929cade9c5d350bf0213cf2c18bd552
Instruction Fuzzy Hash: ED31F830B006458FC705DB69D8D49AAB7B2EFC5304B15C6BAD459D72A5EB30FC46CB81

Function 00EE3A5B Relevance: .6, Instructions: 560COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2160976116.0000000000EE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ee0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7e631e2b4ca423c51fbf544c9db8b9c46fd19fdf0829b29b5a3b7f362841b9fe
Instruction ID: 6c2078ab84ae0646b10737459bb7cb5d19bf13424452b9b954577febd4ee0100
Opcode Fuzzy Hash: 7e631e2b4ca423c51fbf544c9db8b9c46fd19fdf0829b29b5a3b7f362841b9fe
Instruction Fuzzy Hash: 00420674A0064A8FCB05DFADD98499CB7B2FF88314B198651E515EB3A6CB30EC86CF44

Function 00EE8A25 Relevance: .4, Instructions: 450COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2160976116.0000000000EE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ee0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cd69a37a7605d2cb901dc2870d895d19bd0dcb563b19106aa683e91e342a441e
Instruction ID: e1d240cdc6ce12ce83c6a09de188757cce8aac06454c45f5f02a6ddb349d9025
Opcode Fuzzy Hash: cd69a37a7605d2cb901dc2870d895d19bd0dcb563b19106aa683e91e342a441e
Instruction Fuzzy Hash: 8721F231909288AFCB01DBB9DD441DDBFF2AF8A300F2481E7E445AB292DB311D05CB51

Function 00EE90BB Relevance: .3, Instructions: 262COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2160976116.0000000000EE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ee0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6a591b6acc83e7feb4c2fa1d358487b9cea6943198b83709dcb1b20cf2c355b5
Instruction ID: 1028e5b39379427a1a3a57808995909394edc9719c7ece967abe587047e6f8c1
Opcode Fuzzy Hash: 6a591b6acc83e7feb4c2fa1d358487b9cea6943198b83709dcb1b20cf2c355b5
Instruction Fuzzy Hash: 95B15974B002488FDB14DF99D984A99BBF2BB88304F25C16AD459EB396DB34ED46CF40

Function 00EE95CB Relevance: .2, Instructions: 242COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2160976116.0000000000EE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ee0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cbd4ae0c319ac03b186372479955100204c157b1543307cef30bfb1535bc9f1c
Instruction ID: 124893b5940078187cccdcadbb99d1800cba576a62398d7f6b001096faa8f1fd
Opcode Fuzzy Hash: cbd4ae0c319ac03b186372479955100204c157b1543307cef30bfb1535bc9f1c
Instruction Fuzzy Hash: 9EA19E70A006468FCB14DF6DD88099DB7F2FF85714B198629E119EB3A6DB30ED86CB44

Function 00EE3693 Relevance: .2, Instructions: 181COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2160976116.0000000000EE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ee0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 41f5689e71cb35f11385971099a18ccc3c8c29d5ed7cec6fea4753e0f7fcfc75
Instruction ID: 38e6b9139f4b6da4d91b258d4af362187c37934d47f3df54a5031b25822e8c3f
Opcode Fuzzy Hash: 41f5689e71cb35f11385971099a18ccc3c8c29d5ed7cec6fea4753e0f7fcfc75
Instruction Fuzzy Hash: 6371CF74A006468FCB25DF79D9488DDBBF2FF88304714861AD016EB6A5D730EE86CB94

Function 00EEA770 Relevance: .1, Instructions: 128COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2160976116.0000000000EE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ee0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 67d56f6f11c8372d9aed31a926928305ed09480a4cfa01fb39a52f9fc7a0de36
Instruction ID: 9df2e17808a313211308a466ad436a4877de460fc6405c16541f7a61118fd88a
Opcode Fuzzy Hash: 67d56f6f11c8372d9aed31a926928305ed09480a4cfa01fb39a52f9fc7a0de36
Instruction Fuzzy Hash: 7F513671E0035C8FDB18CFAAD88479EBBF5AF88700F248029D419B7254DB74A842CB95

Function 00EE94B8 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2160976116.0000000000EE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ee0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 33bbd225d8407c762857512cca1951ffea0fdb537293f8af55cede75d8bd00d1
Instruction ID: d58e1ebaee88e95c8842a387f78b5c1167ed7e537ee1a229367c4e085ba4a069
Opcode Fuzzy Hash: 33bbd225d8407c762857512cca1951ffea0fdb537293f8af55cede75d8bd00d1
Instruction Fuzzy Hash: 5721F631E0024A8FCF05CBA8D8949EEBBF1EF85310F158666D511BB291DF74A90ACB90

Function 00EE7740 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2160976116.0000000000EE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ee0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2a6d0a555ff341702819de0058687e7883fd30ea1970005ca52720a36b3e88f9
Instruction ID: 57bd381c62f1925e96409943f64ae9317965eb39136b4b8b6366bc1b5f4b541e
Opcode Fuzzy Hash: 2a6d0a555ff341702819de0058687e7883fd30ea1970005ca52720a36b3e88f9
Instruction Fuzzy Hash: 96210531D042498FCF14DF68D8949EEBBB6EF84310F15866AD152B7290EF74A90ACB94

Function 00EE3938 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2160976116.0000000000EE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ee0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 96f93b0d2d08ba6f691b6fc722e097b618a3c98aa34e08f8ad1a4c75f7651c1d
Instruction ID: 1e0ecbd4ca67d0a67d15dc80c5b14e6f3b1a26825529559ce25f21b09fc123d5
Opcode Fuzzy Hash: 96f93b0d2d08ba6f691b6fc722e097b618a3c98aa34e08f8ad1a4c75f7651c1d
Instruction Fuzzy Hash: CE31F531D002498FCB04CBB9D894DEEFBB1AF84310F15C66AD525B7291DF70A90ACB95

Function 00EEA920 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2160976116.0000000000EE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ee0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e9450f8000997ea12511bb093f1428ef332aacc891957655f2124c41adb80dd6
Instruction ID: 72dbd606efad5eadad12d55f0ce94451d2cff38feeed166f7096f20fd5d0d78f
Opcode Fuzzy Hash: e9450f8000997ea12511bb093f1428ef332aacc891957655f2124c41adb80dd6
Instruction Fuzzy Hash: 243104B1D0125CDFDB14CFAAD980ADEBBF5BF88310F24802AE409B7250DB75A945CB51

Function 00EEA915 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2160976116.0000000000EE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ee0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6e0756fee6d3f911c70b28d0ec9f4b5bc0d87d454184ee035a6a10860b569c59
Instruction ID: 911de47f2117f97ba60feb67a9f4711d79d251f6078caf00d590b406d77271cb
Opcode Fuzzy Hash: 6e0756fee6d3f911c70b28d0ec9f4b5bc0d87d454184ee035a6a10860b569c59
Instruction Fuzzy Hash: 1D3168B080538C8FCB15CFAAD890A9EBFB4AF89300F24816AD045F7292D7759845CB11

Function 00EE8D38 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2160976116.0000000000EE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ee0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 952f967c5a7383d0e7e78c6a9cbb5378aa744c4f9f79e669992b41c42fd47091
Instruction ID: 18f79f0690355a82ab9c33477f56e8e4db408766119e01f58129b23538cb98aa
Opcode Fuzzy Hash: 952f967c5a7383d0e7e78c6a9cbb5378aa744c4f9f79e669992b41c42fd47091
Instruction Fuzzy Hash: E0218E31E0124CEFCF04EBBAD9405DEBFF6AF8A300F2481A6E505B7651DA315D048B61

Function 00E8D035 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2157204757.0000000000E8D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E8D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_e8d000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7cb35b478984a7b78f599f386d2f4e244120231761da77284ad1d68ca76983f4
Instruction ID: 5272d07ef360411f43ddab43aca01897f6e1652438a101181e71cc1ea76438dc
Opcode Fuzzy Hash: 7cb35b478984a7b78f599f386d2f4e244120231761da77284ad1d68ca76983f4
Instruction Fuzzy Hash: AB01A77110C3449AE7206A65DD84767BB99EF41324F18C51AED4D6E1C2C379D846C771

Function 00E8D034 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2157204757.0000000000E8D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00E8D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_e8d000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d7259e971ea2456d2b484bfe5e80d4470f0990515e53f2464c35dd6a23d39cbe
Instruction ID: 2353dfb3c492cff221284c54a41115b090ac6df18ae3273006ac793843ecacc8
Opcode Fuzzy Hash: d7259e971ea2456d2b484bfe5e80d4470f0990515e53f2464c35dd6a23d39cbe
Instruction Fuzzy Hash: 42F0C271008344AAE7109E1ADC84B63FF98EB80728F18C45AED4C1E2C2C3799C45CBB1

Function 00EE3080 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2160976116.0000000000EE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ee0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6dbf8279a13e5c05cfc4ed47572993c5e24fe0ff2473aa7874d12272a416f36f
Instruction ID: 6f67cf874ab418d21b268dd9c60dad57d83b30994da8e724b5766cb3de033032
Opcode Fuzzy Hash: 6dbf8279a13e5c05cfc4ed47572993c5e24fe0ff2473aa7874d12272a416f36f
Instruction Fuzzy Hash: 8BF0E931E1014997CF04D775C8659EFBBB69F84300F048427D502B7340DEB0590687C1

Function 00EE8E18 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2160976116.0000000000EE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ee0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b2477f98dbdf4635e8eedbec63f8472eaa5779e968f61f21a8c2a8a65d256d3d
Instruction ID: b2bbfda3266e8b7874321b7ea60f504a11c955a0934b67fa6cac0052f2c49614
Opcode Fuzzy Hash: b2477f98dbdf4635e8eedbec63f8472eaa5779e968f61f21a8c2a8a65d256d3d
Instruction Fuzzy Hash: D3F0E23280E3A52FD70257349C105DAFFA49F03210B0A409BE8D8971A3CA149D8AC3C6

Function 00EE9468 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000002.00000002.2160976116.0000000000EE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00EE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_2_2_ee0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 147f0dfaf2405e5217ffa41b11a9d77ea764692f38fd0b82744e26f182fc511e
Instruction ID: 059aef91af7d1f39f57b1160ce90261769eabe6dc24634920137ab1c7d8af93b
Opcode Fuzzy Hash: 147f0dfaf2405e5217ffa41b11a9d77ea764692f38fd0b82744e26f182fc511e
Instruction Fuzzy Hash: CBC04C30840158DBE7345765E868BA872B1AB44305F109895D189E21A1CF341985DF31

Analysis Process: Honda.exePID: 5988, Parent PID: 2752COMMON

Executed Functions

Function 01772788 Relevance: 2.0, Instructions: 1994COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2163393547.0000000001770000.00000040.00000800.00020000.00000000.sdmp, Offset: 01770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1770000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 146085c7568d7c28f3e582aabfba9b32dadc9cf2e1db94237938493ddad4e3d1
Instruction ID: 3984b9deb2e8113796fff0a5f814592b26458deaad84547a70449ee752400a4a
Opcode Fuzzy Hash: 146085c7568d7c28f3e582aabfba9b32dadc9cf2e1db94237938493ddad4e3d1
Instruction Fuzzy Hash: 11039C30A00619DFDB21DF69CC44BA9B7B6FF89700F6182D5E6086B695CB74AEC1CB41

Function 01775A41 Relevance: .4, Instructions: 431COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2163393547.0000000001770000.00000040.00000800.00020000.00000000.sdmp, Offset: 01770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1770000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0dffd982ad2e76068bcb9fd653cfe3214af7b36b619732fc44c9390fc096914
Instruction ID: 276e1b4bb26227604ca2ef35aaeecae7e6da730e1f118dd72dd18b5958758695
Opcode Fuzzy Hash: e0dffd982ad2e76068bcb9fd653cfe3214af7b36b619732fc44c9390fc096914
Instruction Fuzzy Hash: 11F16B30A01205DFDB24CF69D998BAEF7F2BF88314F148429D505AB295DB75EC82CB90

Function 01774C68 Relevance: .4, Instructions: 418COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2163393547.0000000001770000.00000040.00000800.00020000.00000000.sdmp, Offset: 01770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1770000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 932aada25672ada1c18baae0cb5468e2d2344fe8729d711b461f95a35de3021e
Instruction ID: 40df9fa47b8e2c36f691efd9261dfc858cf8d8b696b8b0d3c2434239985353bd
Opcode Fuzzy Hash: 932aada25672ada1c18baae0cb5468e2d2344fe8729d711b461f95a35de3021e
Instruction Fuzzy Hash: CC219A71A042558FEF15DFB9C8587AEBBF2AF89300F184069D502B7284DB399941CBA4

Function 01774868 Relevance: .2, Instructions: 218COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2163393547.0000000001770000.00000040.00000800.00020000.00000000.sdmp, Offset: 01770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1770000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb49e2281bd7f24f5fd9eaf5060643549a588f35aec47f8bfb7a37933f07d1d6
Instruction ID: 94c02d3b0492e0002881c389a2a75e7e9b20c71a0f0ed51160436c77c8ba744e
Opcode Fuzzy Hash: bb49e2281bd7f24f5fd9eaf5060643549a588f35aec47f8bfb7a37933f07d1d6
Instruction Fuzzy Hash: 7E911830600606CFDB15DF28C884A69BBF6EF45350F46C5A9E44A9B666E730FE85CB84

Function 01771068 Relevance: .2, Instructions: 216COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2163393547.0000000001770000.00000040.00000800.00020000.00000000.sdmp, Offset: 01770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1770000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e221b5e015c17bf3007e618239e7bc870ca74def6c6e4294b0a9b8bbb633d452
Instruction ID: 1b618e9b0031976ab183e401b9bc563543a2579bd01fcd1a398ef7827ccbb027
Opcode Fuzzy Hash: e221b5e015c17bf3007e618239e7bc870ca74def6c6e4294b0a9b8bbb633d452
Instruction Fuzzy Hash: E8915871A00248DFCF15DFE9D9549EEBBBAFF88310F14806AE506A7254DB349946CF90

Function 01775E28 Relevance: .2, Instructions: 180COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2163393547.0000000001770000.00000040.00000800.00020000.00000000.sdmp, Offset: 01770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1770000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2a770c6c4ed1835465db60fcec7a88fb8019ba22a3bf2dc5b03048bd458077fc
Instruction ID: 64bc6a6cdbb9cec744b00b4145e7dd6b7d40f65d29224e035dd1feaca85c742f
Opcode Fuzzy Hash: 2a770c6c4ed1835465db60fcec7a88fb8019ba22a3bf2dc5b03048bd458077fc
Instruction Fuzzy Hash: 61615C34B00219AFDB14DF69D848BAEBBF2BF88710F188165E905EB295DB74DC41CB90

Function 017717C8 Relevance: .2, Instructions: 150COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2163393547.0000000001770000.00000040.00000800.00020000.00000000.sdmp, Offset: 01770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1770000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f8eec47cfe9781f92885168bb4d5dde551cad8b478c809116d7e0139d7d72648
Instruction ID: fae77187c7720313f7d5b1dc4ccbcc51f656ea52cb22ca24e8a87ca08f37cf18
Opcode Fuzzy Hash: f8eec47cfe9781f92885168bb4d5dde551cad8b478c809116d7e0139d7d72648
Instruction Fuzzy Hash: D651AD31E002099FDB19DFB998146EEBBB6FF85320F14C0BAD509E7254EB344A06CB91

Function 01771B68 Relevance: .1, Instructions: 127COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2163393547.0000000001770000.00000040.00000800.00020000.00000000.sdmp, Offset: 01770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1770000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 31ec552bd383f79d2fa0c52c46473308f377176ea72fe8300fe20e9be9012166
Instruction ID: 82284ca1ef38125542f06ac48db7d83647a3a212fa3af9f2de0ff2946420ba51
Opcode Fuzzy Hash: 31ec552bd383f79d2fa0c52c46473308f377176ea72fe8300fe20e9be9012166
Instruction Fuzzy Hash: 0F41BC30B00206CFCB58EF78C848AADFBB6EF45715F9544A9D5069B262DB35DD42CB81

Function 01771CC0 Relevance: .1, Instructions: 121COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2163393547.0000000001770000.00000040.00000800.00020000.00000000.sdmp, Offset: 01770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1770000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 778808c59dc7f34c8b35202544d41be882b57a0e60a39d2a628cd494b711523a
Instruction ID: 07a04b458f3da385bc0c1d7b213d2d1f9672939067bdff15700d1f132ee13dba
Opcode Fuzzy Hash: 778808c59dc7f34c8b35202544d41be882b57a0e60a39d2a628cd494b711523a
Instruction Fuzzy Hash: 93418F30A00209CFDB18EF29D45499AB7B7FF85310B10C1A9D415CB369DB749D46CF50

Function 01770848 Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2163393547.0000000001770000.00000040.00000800.00020000.00000000.sdmp, Offset: 01770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1770000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 52302b1ae021edd92cd39e66d564fcc682a12baf53781ad0d08b7930b5ec806a
Instruction ID: c46402c5748ec7f78b0a0c020f61468198d2b135c0ae2c5b266f62d28b8c8e38
Opcode Fuzzy Hash: 52302b1ae021edd92cd39e66d564fcc682a12baf53781ad0d08b7930b5ec806a
Instruction Fuzzy Hash: A9418E30A0024ADFDB04EBBDE454B9DBBB2FF84310F108169E505AB355EB749D86CB91

Function 01771CBB Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2163393547.0000000001770000.00000040.00000800.00020000.00000000.sdmp, Offset: 01770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1770000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1ccc044ba7a4b202e9c2fb99d8df433d28cfa61414285cb9055825c627a73351
Instruction ID: a60e44edacf843927dc999befc2217c5c0651ab7c29ff1a99b5905cd596cc6de
Opcode Fuzzy Hash: 1ccc044ba7a4b202e9c2fb99d8df433d28cfa61414285cb9055825c627a73351
Instruction Fuzzy Hash: 56314B34A00109DFCB18EF29D85499AB7F6FF88321B11C169E5168B368DB74DD45CF90

Function 01770838 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2163393547.0000000001770000.00000040.00000800.00020000.00000000.sdmp, Offset: 01770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1770000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 18f8991afd97ef3851c11adf7296789f7062a85bb7632365503dfec4cb7d8acb
Instruction ID: d47bec7b0f99c1ff753bc2c1c02314ede797648ebb1f26cb2a0cd9ebe6ce220d
Opcode Fuzzy Hash: 18f8991afd97ef3851c11adf7296789f7062a85bb7632365503dfec4cb7d8acb
Instruction Fuzzy Hash: 0A315E30A0024ADFDB04DFB9E458A8DFBB2FF85304F148119E5156B259DB75A88ACB91

Function 01772777 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2163393547.0000000001770000.00000040.00000800.00020000.00000000.sdmp, Offset: 01770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1770000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7b4b4dc220d0a620508a0357eb0d14432febd6c6805b5f027c610ae35b9932cd
Instruction ID: 0e0708c3a4e6c57b29fe2817620a3414ccb5f29717602ff91054d2b7efa483c4
Opcode Fuzzy Hash: 7b4b4dc220d0a620508a0357eb0d14432febd6c6805b5f027c610ae35b9932cd
Instruction Fuzzy Hash: 98319130A00204CFEB25CFA9D944BA9BBF6EF55321F0584AAE425CB296D739DD45CB60

Function 01771B78 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2163393547.0000000001770000.00000040.00000800.00020000.00000000.sdmp, Offset: 01770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1770000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1081dc78cc0fc17fdb6d079adcc4e8f45a54518a7ab54fedb0dee301801bf6e1
Instruction ID: 8af8a8e9768b02665f1566f9be2f9221f672e0c345b7dc92cb988ae0d1dbd6e7
Opcode Fuzzy Hash: 1081dc78cc0fc17fdb6d079adcc4e8f45a54518a7ab54fedb0dee301801bf6e1
Instruction Fuzzy Hash: 7F21F574B01116CFCB48EFB8C49896DB7B2AF48715B6144A9E906DB3A1DB36DD42CB80

Function 01774F48 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2163393547.0000000001770000.00000040.00000800.00020000.00000000.sdmp, Offset: 01770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1770000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 334b64a07411c9cc6d7231125af0ffd55ac9f7b668b64b30a4b2ee61523155ca
Instruction ID: ac4f0307c488d7a14b439df924514b440bca48dc50d726dc4ab9d68453d662e0
Opcode Fuzzy Hash: 334b64a07411c9cc6d7231125af0ffd55ac9f7b668b64b30a4b2ee61523155ca
Instruction Fuzzy Hash: 91115B75A042598FEF14DFBAC8587AEBBF2AF88200F144469D502A7384DB3999418BA5

Function 01776060 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2163393547.0000000001770000.00000040.00000800.00020000.00000000.sdmp, Offset: 01770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1770000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa2ec49b9c5947e3d169a627d0176d2100f8a5a5e59839f17589552e3d25f1cf
Instruction ID: a52f78e180b8436e203c443cf7256e5a6e3872f938146bcdcd74ff214b1bfb52
Opcode Fuzzy Hash: aa2ec49b9c5947e3d169a627d0176d2100f8a5a5e59839f17589552e3d25f1cf
Instruction Fuzzy Hash: 5F11E571E00309AFCB69DF79D808B9EBBB6EBD4324F10417DE11497251DB7549068B90

Function 01775218 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2163393547.0000000001770000.00000040.00000800.00020000.00000000.sdmp, Offset: 01770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1770000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3d0f99f3d854fd5c766368792e4f621a24fec74a39b47e4da4be8528f884f1e4
Instruction ID: 0e4429edc25677891e6eb448bd545d0ef559f6a60e9efa43cbade6bf2c882c4f
Opcode Fuzzy Hash: 3d0f99f3d854fd5c766368792e4f621a24fec74a39b47e4da4be8528f884f1e4
Instruction Fuzzy Hash: F001D671B01121DFC7189B3DE84491AB7EBEF8972172641B9E905DB321CE75EC828BD0

Function 01770A98 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2163393547.0000000001770000.00000040.00000800.00020000.00000000.sdmp, Offset: 01770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1770000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bfaa8831d902ca1a50355918b9421d36bcdef601fc1df06c52187620c1b42b2e
Instruction ID: f2a7f5181bf0dbbdf6f4dfa81b8b45fbfed93dd09bb8f57efef8e1b07b8a2a84
Opcode Fuzzy Hash: bfaa8831d902ca1a50355918b9421d36bcdef601fc1df06c52187620c1b42b2e
Instruction Fuzzy Hash: 0E01F7347053814FEF146B7998296697F55AB47254F0642EAF601C32D1DE78DD41C392

Function 01775228 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2163393547.0000000001770000.00000040.00000800.00020000.00000000.sdmp, Offset: 01770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1770000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5fd836264e71d6bffcc91581883e7d777fcab9fd0edf75fd34265ec826e253b8
Instruction ID: 39d268ea1b8b352219e816063623d6e25201490dd3fea168f87d8a162af01a4f
Opcode Fuzzy Hash: 5fd836264e71d6bffcc91581883e7d777fcab9fd0edf75fd34265ec826e253b8
Instruction Fuzzy Hash: FAF06872B11131CFC7149B3EE84481A77EADF8966131641B9E905DB321CE75EC418BD0

Function 01770AA8 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2163393547.0000000001770000.00000040.00000800.00020000.00000000.sdmp, Offset: 01770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1770000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a224037ebe8e7070180fd78aac978e474baab98a63bc24b272cbbd2802c8109b
Instruction ID: a2bc1beee5100d35084cbe5b38391ebf27d7142959f8fa46909cf350991cebb9
Opcode Fuzzy Hash: a224037ebe8e7070180fd78aac978e474baab98a63bc24b272cbbd2802c8109b
Instruction Fuzzy Hash: 41F090387012508BEB24BB79E91837A7A56AB49654F0581B9EA06C3394EFB9DC81C7C1

Function 01774B34 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2163393547.0000000001770000.00000040.00000800.00020000.00000000.sdmp, Offset: 01770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1770000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cec0a67c9e37f40a68dcb9a5deeed6375dff7d68e87b6af0a3aa51b347d88fcd
Instruction ID: e4417fe5a776f677ad8f957ebdf1260543a799a2aff23ad699537cc994817300
Opcode Fuzzy Hash: cec0a67c9e37f40a68dcb9a5deeed6375dff7d68e87b6af0a3aa51b347d88fcd
Instruction Fuzzy Hash: 22F02E72D09285EFCB01DBF5A8590ECBFB1EF82300B0480DAD05687622E6748B46CB40

Function 01770F07 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2163393547.0000000001770000.00000040.00000800.00020000.00000000.sdmp, Offset: 01770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1770000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b672bde9cc526a5b6260ffdd88cea206e87eb170cd9f7ff6a818a9e725bcd664
Instruction ID: fe678b0162aa36201b13a29a34c494bd464252692a1c6f41def2b359049cb1d7
Opcode Fuzzy Hash: b672bde9cc526a5b6260ffdd88cea206e87eb170cd9f7ff6a818a9e725bcd664
Instruction Fuzzy Hash: 0DF02772E0424DEFCB05EB78D804558FFB1DB66214F10049CEA0893211E6709E02C750

Function 01775148 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2163393547.0000000001770000.00000040.00000800.00020000.00000000.sdmp, Offset: 01770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1770000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6a0006696edb46bba9050e76496864ff4cb699a6246a95a173e4270ec70d1ac4
Instruction ID: 412ecee7aa4e767f69bd6e63b559d5c3f24eeaa86019580f3c40c22ac1fb30ad
Opcode Fuzzy Hash: 6a0006696edb46bba9050e76496864ff4cb699a6246a95a173e4270ec70d1ac4
Instruction Fuzzy Hash: ADE012357011049BC324DE7AE89895ABBBBFFC9361750853AE90AC3359DE759C068BA0

Function 017713B0 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2163393547.0000000001770000.00000040.00000800.00020000.00000000.sdmp, Offset: 01770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1770000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c5e9e5a89f4798458a9c32459f848230f54315004e78a231d8eafd7b39a39731
Instruction ID: ff2f3ece0cc44f66d3b45bc6e9331f75976b9189ec8d9a0754344f79abaeb5b3
Opcode Fuzzy Hash: c5e9e5a89f4798458a9c32459f848230f54315004e78a231d8eafd7b39a39731
Instruction Fuzzy Hash: 97F0B774640206CFDB18EF75D168A68B7B2FF49314F1044A9E5169B3A1CB79DC46CF00

Function 01770F28 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2163393547.0000000001770000.00000040.00000800.00020000.00000000.sdmp, Offset: 01770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1770000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c69223ed7a4611dc80561232d9639a0e516caac5208b3c71ea6514a433e03cc1
Instruction ID: 075e293fb56a37a2a3487087ba53245a1fbbb570e8813707d967c9711a9fead7
Opcode Fuzzy Hash: c69223ed7a4611dc80561232d9639a0e516caac5208b3c71ea6514a433e03cc1
Instruction Fuzzy Hash: 02E04F3190221DEFC740DFB4D90165CF7F5FF45218F2081A9D908D7210E7316E029B40

Function 01770F70 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2163393547.0000000001770000.00000040.00000800.00020000.00000000.sdmp, Offset: 01770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1770000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 44d3922620dc6d5b9df5782b5f0cf2eb833b47c86db02538457222da93a52512
Instruction ID: d8a469c82c8ad299aaa497960e05d92fc4c2b6f789da187d3ded869acef633b9
Opcode Fuzzy Hash: 44d3922620dc6d5b9df5782b5f0cf2eb833b47c86db02538457222da93a52512
Instruction Fuzzy Hash: F9E02B3252E3500FDB025629AC00262BBDC8707161F0040F7F884C3352F1438D4443D5

Function 01770F38 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2163393547.0000000001770000.00000040.00000800.00020000.00000000.sdmp, Offset: 01770000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_1770000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2c458a2faf1703035f3f9326aba967de17328596bed7a001a8095e7207fce096
Instruction ID: 51c823da5dc80d1d8e4cd0b8c7a1536edb7ebe34484ee76f8148669a78530bd8
Opcode Fuzzy Hash: 2c458a2faf1703035f3f9326aba967de17328596bed7a001a8095e7207fce096
Instruction Fuzzy Hash: 6DD01731E0010EEF8B00DFB8E90555DFBFAEB48214F1081A9D90CD3204EA31AF019B80

Analysis Process: Honda.exePID: 4256, Parent PID: 4004COMMON

Executed Functions

Function 02742788 Relevance: 2.0, Instructions: 1998COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2250680556.0000000002740000.00000040.00000800.00020000.00000000.sdmp, Offset: 02740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2740000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d7183440d16c5aa4248384a6bd606b759a45d16f5f121206a3b40a94151301aa
Instruction ID: d31199361a6615c03c727d1cd7f51167da031ef29c9efe5d53cae316a9b5eecb
Opcode Fuzzy Hash: d7183440d16c5aa4248384a6bd606b759a45d16f5f121206a3b40a94151301aa
Instruction Fuzzy Hash: D003AD34A00319DFEB11EF64CC44BA9B7B6FF89700F618695E6087B695CB70AA81CF51

Function 02745A41 Relevance: .4, Instructions: 437COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2250680556.0000000002740000.00000040.00000800.00020000.00000000.sdmp, Offset: 02740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2740000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0595dd6e1f32d9346a030888a7b2fbc593400e67e337257ad8e6b6ba4c42d507
Instruction ID: 17fcd27c8619d72d58d7abf9e4b8655084caed949564ee89e2876665e9fd50d2
Opcode Fuzzy Hash: 0595dd6e1f32d9346a030888a7b2fbc593400e67e337257ad8e6b6ba4c42d507
Instruction Fuzzy Hash: 06F19930A01306DFDB24DF24D984BAEB7B2AF89704F958429E416AB295DB35EC41CF90

Function 02744C69 Relevance: .4, Instructions: 420COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2250680556.0000000002740000.00000040.00000800.00020000.00000000.sdmp, Offset: 02740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2740000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 69c0b8fb79a685701492553f90c598492520fde99c9789da7a6f2a5ac3c84619
Instruction ID: d9c4edfabe383d011349f59d5a2a38de89ff5e69eac5aa4f366981fc49c84727
Opcode Fuzzy Hash: 69c0b8fb79a685701492553f90c598492520fde99c9789da7a6f2a5ac3c84619
Instruction Fuzzy Hash: F021AE74A082899FEB04DBB5C864BEDBBF1AF8A300F14416AD401FB395DF349905DB61

Function 02744868 Relevance: .2, Instructions: 221COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2250680556.0000000002740000.00000040.00000800.00020000.00000000.sdmp, Offset: 02740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2740000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 06dcedde79dfa332163ff46a1dec61a0f3a7e1c7b5bc03c84f76cb4c1d569995
Instruction ID: c557cffb9ce502a83b8ff74c643742fc17f87df2ef823a29ab2fceac2799e49d
Opcode Fuzzy Hash: 06dcedde79dfa332163ff46a1dec61a0f3a7e1c7b5bc03c84f76cb4c1d569995
Instruction Fuzzy Hash: 87A11930600605CFCB15DF28C894B69BBF6EF45350F46C9AAE4499B666DB30ED84DB88

Function 02741062 Relevance: .2, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2250680556.0000000002740000.00000040.00000800.00020000.00000000.sdmp, Offset: 02740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2740000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 19ed4299a48bff18ea9e351b0da71211769f291adb09c7b1dcd2cc47d5ec86ff
Instruction ID: 09fed12ec774d249f1bf3ed5547002df255778731e874895d293b294a6c37f63
Opcode Fuzzy Hash: 19ed4299a48bff18ea9e351b0da71211769f291adb09c7b1dcd2cc47d5ec86ff
Instruction Fuzzy Hash: 8D914F71E002489FDF15EFE5D854AEEBBBABF88300F14812AE905EB254DB319946CF50

Function 02745E28 Relevance: .2, Instructions: 182COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2250680556.0000000002740000.00000040.00000800.00020000.00000000.sdmp, Offset: 02740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2740000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 07dda57fb7dffb2ee1e4e45a19597c5ab08052f07932600cf189ec23bd939558
Instruction ID: 3a6bee3830f6f775c79f9601df2a7d8c1ebe911606202b09e31a9f17d3ce2d57
Opcode Fuzzy Hash: 07dda57fb7dffb2ee1e4e45a19597c5ab08052f07932600cf189ec23bd939558
Instruction Fuzzy Hash: 19618B30B042199FDB14DF64D894BAEBBF6BF89710F558165E905EB3A5CB30AC41CBA0

Function 027417C8 Relevance: .2, Instructions: 153COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2250680556.0000000002740000.00000040.00000800.00020000.00000000.sdmp, Offset: 02740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2740000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 758a31a4ece1694762a4f21b063be446392aec8f93efa3f5a80d49da58454304
Instruction ID: 2511a557585f53c89f0c8c8887cfbdbecb3d5dfbe4e646004913e41b3d6a20b8
Opcode Fuzzy Hash: 758a31a4ece1694762a4f21b063be446392aec8f93efa3f5a80d49da58454304
Instruction Fuzzy Hash: 8D51CF30E042499FCB09EF6998106EEBFB2EFC5310F04C07AD159E7251EB344A45CB91

Function 02741992 Relevance: .1, Instructions: 123COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2250680556.0000000002740000.00000040.00000800.00020000.00000000.sdmp, Offset: 02740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2740000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ecdb1274ec9c3d25b4ee955252106b5ad1638db81d553f1149ad6156f1532c41
Instruction ID: 7e3cb76d0fe046a3447ca557c0dc0c2b439a80ee2fa748bacec914b0e4dc9191
Opcode Fuzzy Hash: ecdb1274ec9c3d25b4ee955252106b5ad1638db81d553f1149ad6156f1532c41
Instruction Fuzzy Hash: 47411330B00344CFDB19EF68C518BEEBBF2AF45714F4540AAD40AAB291CF348985CBA1

Function 02740848 Relevance: .1, Instructions: 120COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2250680556.0000000002740000.00000040.00000800.00020000.00000000.sdmp, Offset: 02740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2740000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6139193e55321e0ab6519edd0b1d94f8630d83213b1132163263483389809db
Instruction ID: 49b08db56e5e2d29c743bb518bf1c05d5bdecc065675cd424fa614c5a10c19dd
Opcode Fuzzy Hash: e6139193e55321e0ab6519edd0b1d94f8630d83213b1132163263483389809db
Instruction Fuzzy Hash: 0F41A070E00289DFDB05EBB8E854BADBBB2FF84304F148169D205AB399DF749945CB91

Function 02741CC0 Relevance: .1, Instructions: 119COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2250680556.0000000002740000.00000040.00000800.00020000.00000000.sdmp, Offset: 02740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2740000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 36b7363a87a1f8c59b73f8ab4ab42d308535bc1cd05596558ded5d4b283703f1
Instruction ID: b3c1091e0d825eb5f2d18040dee38ee794ce0a34767265f218de9dd0841e131e
Opcode Fuzzy Hash: 36b7363a87a1f8c59b73f8ab4ab42d308535bc1cd05596558ded5d4b283703f1
Instruction Fuzzy Hash: D041A1346002499FDB05EF29E844AAEBBB6EF85310B108169E509DB369EF349D46CF61

Function 02741B68 Relevance: .1, Instructions: 108COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2250680556.0000000002740000.00000040.00000800.00020000.00000000.sdmp, Offset: 02740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2740000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 07324863345798f0d44dd565898af3d549b337f6447544cf019658361db25708
Instruction ID: 074737174cacb050aa7375db87904f5b3ede3ac92e01b42b376e58d9d1d0742d
Opcode Fuzzy Hash: 07324863345798f0d44dd565898af3d549b337f6447544cf019658361db25708
Instruction Fuzzy Hash: 1141AB30B01241CFC758EF78C858AADB7B2AF45B05B5544A9E40ADF272DB32DC82CB91

Function 02741CB2 Relevance: .1, Instructions: 101COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2250680556.0000000002740000.00000040.00000800.00020000.00000000.sdmp, Offset: 02740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2740000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a01164c67173acd4b1bad9ed3bc000898ae061396999badff35cdedf31af4a4
Instruction ID: 2f0dcb48de92ee34bfc800479043726ad59aae744287334d9eda40272f365159
Opcode Fuzzy Hash: 1a01164c67173acd4b1bad9ed3bc000898ae061396999badff35cdedf31af4a4
Instruction Fuzzy Hash: 28418134600209DFDB05EF29D844AAEBBF6FF893117118169E509DB369DB309D45CF61

Function 02740838 Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2250680556.0000000002740000.00000040.00000800.00020000.00000000.sdmp, Offset: 02740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2740000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 78111da375726c0a11923b4b1b56b0c649e01c53b13643538f6f975df7ea0026
Instruction ID: 08f217e3115de687a5e0be56acf3ac2cc579a84e8204f41cff81da16d5196cb8
Opcode Fuzzy Hash: 78111da375726c0a11923b4b1b56b0c649e01c53b13643538f6f975df7ea0026
Instruction Fuzzy Hash: EC317574A00249DFDB05EBB8E594B9DBFB2FF84304F048119D204AF359DB71A986CB91

Function 02742777 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2250680556.0000000002740000.00000040.00000800.00020000.00000000.sdmp, Offset: 02740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2740000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 13155a66cecd104a2f25c6aa9c1b19bfb08741f3f91d50d25ee1bf522544e962
Instruction ID: 0be282a250b50fdcc1610b8ce02f6fa9271a317b9ce5ffd872b8df817287cf79
Opcode Fuzzy Hash: 13155a66cecd104a2f25c6aa9c1b19bfb08741f3f91d50d25ee1bf522544e962
Instruction Fuzzy Hash: C7318030A05304CFD714CF69DD48BA9BBF6EF45301F4584A9E805DB2A2DB349A54CB60

Function 02741C73 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2250680556.0000000002740000.00000040.00000800.00020000.00000000.sdmp, Offset: 02740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2740000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e2df6310257697f5cbfdf500c79cf284d24f83059f8d76b92b719eac5be2c64c
Instruction ID: 03ed44519bfac21ea151fa597c00d1a847d40a36a355bd8db87773111e3320b0
Opcode Fuzzy Hash: e2df6310257697f5cbfdf500c79cf284d24f83059f8d76b92b719eac5be2c64c
Instruction Fuzzy Hash: B52121343401809FCB06EBB4D8949AC3BA6EF4AB187480099E049CF366CB21E942CB91

Function 02741B78 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2250680556.0000000002740000.00000040.00000800.00020000.00000000.sdmp, Offset: 02740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2740000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f42aa0e9745f6e42891a7f3b853c0b54c0c270964ec47378da4a2ecd2883317b
Instruction ID: 02b001e291afed81c90c8059bf4cf71b865543af4de46dbb11e1c4b42282e46b
Opcode Fuzzy Hash: f42aa0e9745f6e42891a7f3b853c0b54c0c270964ec47378da4a2ecd2883317b
Instruction Fuzzy Hash: 34210974B01116CFCB48EF78C49896D77B2AF48715B6144A9E50ADF361DB36DD42CB80

Function 02744F48 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2250680556.0000000002740000.00000040.00000800.00020000.00000000.sdmp, Offset: 02740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2740000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8725ed29ca2e6589c305ac010149fc090b952493cdbc34bcd641f638cc8c57b5
Instruction ID: 9a57161b7c59638de7905a5138037e0d9be415b952dee77b818931660fed1ba0
Opcode Fuzzy Hash: 8725ed29ca2e6589c305ac010149fc090b952493cdbc34bcd641f638cc8c57b5
Instruction Fuzzy Hash: 87119474A082598FDB14EBB6C8547AE7BF2AF89700F544129E501BB384DF359D00DBA1

Function 02746060 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2250680556.0000000002740000.00000040.00000800.00020000.00000000.sdmp, Offset: 02740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2740000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a567e1ca8b44694e04d03ec094a0603d28efc07909a8ed74bd1bfc12e633adde
Instruction ID: 86316ad6e1a83404c581048cf1a861582b822b89b04c11b9fc61fb60405af4d0
Opcode Fuzzy Hash: a567e1ca8b44694e04d03ec094a0603d28efc07909a8ed74bd1bfc12e633adde
Instruction Fuzzy Hash: 65110270E052899FC755DF389858BAE7FB5EFC6314F0541AEE014DB292DB71180ACB51

Function 02745218 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2250680556.0000000002740000.00000040.00000800.00020000.00000000.sdmp, Offset: 02740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2740000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 38e91712447fe9af7cb53b9934d1171754f03222a5d76d4579a3aaa31f9a3ff7
Instruction ID: 596d407a2a57e9bdd485d5bffed33fcf2533d54649afa879dcd27088b39d9b36
Opcode Fuzzy Hash: 38e91712447fe9af7cb53b9934d1171754f03222a5d76d4579a3aaa31f9a3ff7
Instruction Fuzzy Hash: 35018875B146218FC716AB3DE84481677B99F8A65131A40F6E405DF375CA31EC45CBA0

Function 02740A98 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2250680556.0000000002740000.00000040.00000800.00020000.00000000.sdmp, Offset: 02740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2740000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 47e42037ebb2f3360870c02b6f9cf7acaaeeae2a11105ee30bcb58eeeb7a4e08
Instruction ID: 4e0b4633e6e0e72e5841b40efc72995aa657bdc2264394799b62cf112a94484f
Opcode Fuzzy Hash: 47e42037ebb2f3360870c02b6f9cf7acaaeeae2a11105ee30bcb58eeeb7a4e08
Instruction Fuzzy Hash: 3A01D6347093804FDB0D6770AC1876A3B56EB82644F0444AAD646CB3E4EF658841CBA5

Function 02745228 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2250680556.0000000002740000.00000040.00000800.00020000.00000000.sdmp, Offset: 02740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2740000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed34a9804a206a22b87f0ee3c7a87f7fc6b803a3834ce3aa94ee6426f266b027
Instruction ID: 0ac4b06450f4b971dd31a0e0b4a89499a55d8126b111d49b2169bdbbb10636f2
Opcode Fuzzy Hash: ed34a9804a206a22b87f0ee3c7a87f7fc6b803a3834ce3aa94ee6426f266b027
Instruction Fuzzy Hash: 79F04476B101318FC715AB3DE84491A77EADF8966131601B9E905EF324CE71EC418BA0

Function 02740AA8 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2250680556.0000000002740000.00000040.00000800.00020000.00000000.sdmp, Offset: 02740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2740000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5d1a81d14bc35c7b639406e2cc9a0206a5befa495ea398d35cb73e2d8e7931dc
Instruction ID: 0e802b3f8382a994114db7387198f9a65a9a3e90e249c8764f8e4c461b6560ec
Opcode Fuzzy Hash: 5d1a81d14bc35c7b639406e2cc9a0206a5befa495ea398d35cb73e2d8e7931dc
Instruction Fuzzy Hash: 30F090347043904BDB0C7774F81C72A3656AB44A84F04447A9A0AD73A4EFA5C841CB94

Function 02744B34 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2250680556.0000000002740000.00000040.00000800.00020000.00000000.sdmp, Offset: 02740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2740000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7b705b205e637cba499494ba71d29fd456d268a6673e7163c262b9e5ec8f73e
Instruction ID: 3f3ecae99295b1c088da61618ef7a38feca6cec6b5fffda1ee86856e14e86f9d
Opcode Fuzzy Hash: b7b705b205e637cba499494ba71d29fd456d268a6673e7163c262b9e5ec8f73e
Instruction Fuzzy Hash: 0EF0F075A09284EECB01DBB598642ACBFB0EF81204B0480DAD15697626E6748605DB51

Function 027413B0 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2250680556.0000000002740000.00000040.00000800.00020000.00000000.sdmp, Offset: 02740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2740000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 09423277f13d6a9921a09d175bf587cb550e94b5d275dee67bb18e7eeb4f56d4
Instruction ID: b4efde3ae570b46c89afd61646b8ba709b837565f359a58f43d3e61693cdf913
Opcode Fuzzy Hash: 09423277f13d6a9921a09d175bf587cb550e94b5d275dee67bb18e7eeb4f56d4
Instruction Fuzzy Hash: 49F0B774640206CFDB15EF74D598A69BBB2EF48704F1044A9E50AAF3A5CF75D845CF10

Function 02745148 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2250680556.0000000002740000.00000040.00000800.00020000.00000000.sdmp, Offset: 02740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2740000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: afe231eef93d4e010d8f0015b454fa823ed9ea6bd18f3a5a4c501dc8af1b95a0
Instruction ID: 0b90a12608bc0929c96531e9b2b441ca7658a858c8e61d0be2c95b3d3f6387f0
Opcode Fuzzy Hash: afe231eef93d4e010d8f0015b454fa823ed9ea6bd18f3a5a4c501dc8af1b95a0
Instruction Fuzzy Hash: 75E01B353013049BC304DB7DE85495AB7AAEFC93517508539E90EC7365DE755C05C771

Function 02740F28 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2250680556.0000000002740000.00000040.00000800.00020000.00000000.sdmp, Offset: 02740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2740000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ece1f0a4d9feec2a28f8a3ccd5d4e2fbad3c1032c7fd18aae48b2c0e25c790b1
Instruction ID: b7fcc6e7157b5119cbba8b713a3f98d30aa66d8b879d8e97343864cc4995dd6a
Opcode Fuzzy Hash: ece1f0a4d9feec2a28f8a3ccd5d4e2fbad3c1032c7fd18aae48b2c0e25c790b1
Instruction Fuzzy Hash: EFE06D3090A24ADFCB01DF64D9509ACBBB5EB8620071002EBD518DB262E6305E089B11

Function 02740F70 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2250680556.0000000002740000.00000040.00000800.00020000.00000000.sdmp, Offset: 02740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2740000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c930cce0901c8cd520ebda8d79f8ccc038516762b3c95790de9dbf3177b532f9
Instruction ID: c157f5667ca8e9bbbc18378ff46e1164f450d3da736541fe1e545384c03469b5
Opcode Fuzzy Hash: c930cce0901c8cd520ebda8d79f8ccc038516762b3c95790de9dbf3177b532f9
Instruction Fuzzy Hash: 6CE02B3111D3944FE3576639BC006523BD84B13510B0544F7D984C7252FB419C40C7D9

Function 02740F38 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000008.00000002.2250680556.0000000002740000.00000040.00000800.00020000.00000000.sdmp, Offset: 02740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_8_2_2740000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 94c8ae99389f4be15000b3fe3efc8950a7c4b4c91228d49361c6a21d640eeb5f
Instruction ID: 37bcab450a55c194263c858821b0d8a842bb112d1a55683cbe6acffcabd92f2b
Opcode Fuzzy Hash: 94c8ae99389f4be15000b3fe3efc8950a7c4b4c91228d49361c6a21d640eeb5f
Instruction Fuzzy Hash: 1CD01730A0120EEFCB40EFA8E951A5DBBF9EB84200B1041A9A50CE7351EA31AF009B91

Analysis Process: Honda.exePID: 4892, Parent PID: 4004COMMON

Executed Functions

Function 010D2788 Relevance: 2.0, Instructions: 1994COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2332802699.00000000010D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 010D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_10d0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 41331432811214cb38e7a97b018effec5d12a711f46863d81709ea2ebe27e770
Instruction ID: 41b95869af7af48e40aa600d74c11a85343b655cd80996658235dcd75fa0ce6d
Opcode Fuzzy Hash: 41331432811214cb38e7a97b018effec5d12a711f46863d81709ea2ebe27e770
Instruction Fuzzy Hash: 2803AB31A00319DFEB11DF64CC44BA9B7B6FF89700F5182D5E6086B6A5DB70AE85CB41

Function 010D1CC0 Relevance: 1.7, Strings: 1, Instructions: 475COMMON

Download Yara Rule

Strings

", xrefs: 010D1F97

Memory Dump Source

Source File: 0000000D.00000002.2332802699.00000000010D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 010D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_10d0000_Honda.jbxd

Similarity

API ID:
String ID: "
API String ID: 0-123907689
Opcode ID: 1855bd8c26f16668141415daed08cdfcd460548bdc7d23836a4588775f2b45db
Instruction ID: e9359291533f9ed06553f158c03057de807e3e62f87b5cafe881856c73eba5e7
Opcode Fuzzy Hash: 1855bd8c26f16668141415daed08cdfcd460548bdc7d23836a4588775f2b45db
Instruction Fuzzy Hash: B402B135B002069FDB15DF68C880ABEBBF2EF88310F1485A9E555DB296DB34DD46CB90

Function 010D5A41 Relevance: .4, Instructions: 432COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2332802699.00000000010D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 010D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_10d0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 346042c9841d6e01ba32049ae11db08bd959f94721fbaaf977a7e12933102522
Instruction ID: c6b31e6e3bbba035c9ed5f44d662f0ec3bcb57e1d8c71810d34a7766ac0f8fcf
Opcode Fuzzy Hash: 346042c9841d6e01ba32049ae11db08bd959f94721fbaaf977a7e12933102522
Instruction Fuzzy Hash: C2F1BC31A013058FDB29DF68DD84BAEB7F2AF89701F148469D846AB291DB74EC41CF90

Function 010D4C68 Relevance: .4, Instructions: 417COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2332802699.00000000010D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 010D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_10d0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a87cfa1317c060fda522ed8472a313e374db83f4b98f2b59a40d158f71681570
Instruction ID: 2aa518a7ea80d3a58fe831d7c23a0dd8df72df276a4f26825719a5b395b85020
Opcode Fuzzy Hash: a87cfa1317c060fda522ed8472a313e374db83f4b98f2b59a40d158f71681570
Instruction Fuzzy Hash: 591106B1A083448FEB00EBBAC8497AD7FF2AF49300F144069E541F7395DB349904CBA1

Function 010D4868 Relevance: .2, Instructions: 218COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2332802699.00000000010D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 010D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_10d0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 93f07d1408be3be33f1b0bd710e180b8f8d7304a4b13795198f717cd84b3aa1b
Instruction ID: 14c28819a2b656b393a3a9ec3071ca1cde8bb86c782c68ec2750c8b18c1d2b8f
Opcode Fuzzy Hash: 93f07d1408be3be33f1b0bd710e180b8f8d7304a4b13795198f717cd84b3aa1b
Instruction Fuzzy Hash: B3914930600606CFDB15DF28C484AA9BBF2EF40340F46C5A9E4899BA66E730FD85CF84

Function 010D1062 Relevance: .2, Instructions: 217COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2332802699.00000000010D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 010D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_10d0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e9702768c0e98791f3b2ccaa3cc9ed314081b7bca84e54e128ed2dc06e9b5090
Instruction ID: 407bfb840ebfef01776917538396e9bcb0c1d8cb0ce93e85874def1bc190fda3
Opcode Fuzzy Hash: e9702768c0e98791f3b2ccaa3cc9ed314081b7bca84e54e128ed2dc06e9b5090
Instruction Fuzzy Hash: EA913AB2E002489FDB05DFE5D8549EEBBBABF89300F14806AE506E7264DB359946CF50

Function 010D5E28 Relevance: .2, Instructions: 181COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2332802699.00000000010D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 010D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_10d0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 658b8c8c7d254314188ee576b857e3ee09a3c2c6ce213b3ab4a6a8e65298e170
Instruction ID: ad769e2aa7c15b8cbbb71d1b59bdefd98b0dd7fcfe6b264ab7e6463299cabaf6
Opcode Fuzzy Hash: 658b8c8c7d254314188ee576b857e3ee09a3c2c6ce213b3ab4a6a8e65298e170
Instruction Fuzzy Hash: E1616935A003199FDB15DF68DC54BAEBBF2AF89710F148065E945AB3A1DA34AC41CB90

Function 010D17C8 Relevance: .2, Instructions: 164COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2332802699.00000000010D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 010D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_10d0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 506deeac2c3412dd47e2a48559238d4fb22bda0b81a9a809c550149f18d27ccc
Instruction ID: a23b4ede4359d74ba077fcb3200d3433b51d3290742b8a834dbd58f5551003a6
Opcode Fuzzy Hash: 506deeac2c3412dd47e2a48559238d4fb22bda0b81a9a809c550149f18d27ccc
Instruction Fuzzy Hash: 5151F271E043099FDB09EB7998116EEBFF5EF85310F0480BAD549D72A1EB344A05CB91

Function 010D1C72 Relevance: .1, Instructions: 128COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2332802699.00000000010D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 010D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_10d0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1c79b3d2a090e01ac615a53d362ac80b33740770aba8b2ce6677bff964e1fda2
Instruction ID: b864fbc6d512f734afc3459e78c270675db40861c7f5601fda50cbe43f383686
Opcode Fuzzy Hash: 1c79b3d2a090e01ac615a53d362ac80b33740770aba8b2ce6677bff964e1fda2
Instruction Fuzzy Hash: 49410775B002099FDB05EF29D844A9D7BF6EF86351B1581A9E406CB366EB309D09CF60

Function 010D0848 Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2332802699.00000000010D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 010D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_10d0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bca785e943ccfc8a77f12ebc585dc7b6f6203f69eb1f4552c2c3c7d980989dfd
Instruction ID: d3daf0b195953e15a45244eb83a94fe63847c8f5d8b3afd9f295c5888e0faf55
Opcode Fuzzy Hash: bca785e943ccfc8a77f12ebc585dc7b6f6203f69eb1f4552c2c3c7d980989dfd
Instruction Fuzzy Hash: F9418F30A0024ADFDB05EBB8E855B9DBBF2FF84304F108169E1459B365DB749D46CB91

Function 010D1B68 Relevance: .1, Instructions: 111COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2332802699.00000000010D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 010D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_10d0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 92fdc15a777edf43c317648546d87fe60b39ecf02d0b2de586d93870b775dada
Instruction ID: 1dc6c095d6f60f19857fac177c5b8e18035b9c46bb03b26c0300fa8b1cadf243
Opcode Fuzzy Hash: 92fdc15a777edf43c317648546d87fe60b39ecf02d0b2de586d93870b775dada
Instruction Fuzzy Hash: 5741CEB2B01241CFCB45EB78C845AADBBB1EF49721B1444A9D545EB362EB36D842CB80

Function 010D614F Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2332802699.00000000010D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 010D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_10d0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1aa0c285b43564504da1de9bc688e75236449b531512b59b5f319959a7aa20f1
Instruction ID: 90a77f2c3d5da07415f00bc14c8a81e3c97b37531fbcc7536982865a7e5d0b1e
Opcode Fuzzy Hash: 1aa0c285b43564504da1de9bc688e75236449b531512b59b5f319959a7aa20f1
Instruction Fuzzy Hash: CB21D075E002099FCB14EFB9D8416EEBBF5EF84314F1081BAD118E3292EB754A068B90

Function 010D0838 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2332802699.00000000010D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 010D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_10d0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e3c8e508f7e3f0d59c4ca29cd37d6cf81c38e1c0149cd0355ea3456253ea8c33
Instruction ID: f34bd501148b03312ba2f13770f85544599b98ff4cea2855902232f793191c15
Opcode Fuzzy Hash: e3c8e508f7e3f0d59c4ca29cd37d6cf81c38e1c0149cd0355ea3456253ea8c33
Instruction Fuzzy Hash: 5731813490024ADFDB01DFB8E894B9DBFB2FF84304F149159E1059B359DB709986CB51

Function 010D2777 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2332802699.00000000010D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 010D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_10d0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d6b607de8d0c5c4b26b2021bae74d973412b84df95cb0b8a4e28214eeb183fd
Instruction ID: d68bd540f4f2fe2816425143adad5a73fa68df090c538855c4f78f58f174667a
Opcode Fuzzy Hash: 2d6b607de8d0c5c4b26b2021bae74d973412b84df95cb0b8a4e28214eeb183fd
Instruction Fuzzy Hash: DF21E231A04308CFE764CFA8C949BA97BF5EF45311F0884A9E445C72A2D738DC44CB60

Function 010D1B78 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2332802699.00000000010D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 010D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_10d0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6a5f05da431be1b15163b811829666952dd687bd84899215e33e83abe8778322
Instruction ID: 3648781c94d6088bbbd07f743319ac93a38f02ac71243aed6ecb92f271c929df
Opcode Fuzzy Hash: 6a5f05da431be1b15163b811829666952dd687bd84899215e33e83abe8778322
Instruction Fuzzy Hash: 9821F574B01216CFCB48EF78C49896D77F2AF48711B2144A9E906DB3B1DA36DC42CB80

Function 010D4F48 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2332802699.00000000010D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 010D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_10d0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f93d3b2322de0a7bfff5693490995592e7e34df997b991750ae855e490352f1
Instruction ID: ceb6c318a0e15c756f0c1f2413a12868b19dd10c5c4be62f6c488b735ea2ca84
Opcode Fuzzy Hash: 6f93d3b2322de0a7bfff5693490995592e7e34df997b991750ae855e490352f1
Instruction Fuzzy Hash: DC11C4B1A043598FEF04EBBAC8597AE7BF2AF88300F144069E541E7394DF359940DBA1

Function 010D6060 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2332802699.00000000010D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 010D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_10d0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d3f159dafdb4861e34059e9dfb35a4a84f1dad50998cb4711a7f2d2661e9dca0
Instruction ID: 89d7f04a61643ce1a23d4b1eda89eb020b956c29aa9659a12bfc5337f882610b
Opcode Fuzzy Hash: d3f159dafdb4861e34059e9dfb35a4a84f1dad50998cb4711a7f2d2661e9dca0
Instruction Fuzzy Hash: 380104B2E042489FCB65DB79DC04B9F7FB6DFC6314F1441BDE0159B282EA7548068790

Function 010D5218 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2332802699.00000000010D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 010D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_10d0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e7051b307c5acd331f693ed84261f7f1d963e34400d3f3b56f6b26567fd208da
Instruction ID: 38741a595549d3a2b7f7559cee72b69681cf06c97756caf9904856e65cb4330f
Opcode Fuzzy Hash: e7051b307c5acd331f693ed84261f7f1d963e34400d3f3b56f6b26567fd208da
Instruction Fuzzy Hash: 4D0126B3B101308FC3099B3CEC44E6E37E69FC975231601B9E805DB361CA25DC058B90

Function 010D0A98 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2332802699.00000000010D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 010D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_10d0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c88d2042b46b12698586fe9f3b71d4ecc8f72d0975bffa521594563c4b7f6d03
Instruction ID: 2ee38986ddf4c452eb85cdf709ae680a98706d6d4cfe01727c21ed08677a6fb5
Opcode Fuzzy Hash: c88d2042b46b12698586fe9f3b71d4ecc8f72d0975bffa521594563c4b7f6d03
Instruction Fuzzy Hash: DB012635B043808FFB049778EC6D66A3FA1AB82344F0400ECF586C33E5EA61C805CB82

Function 010D5228 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2332802699.00000000010D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 010D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_10d0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 02a1ac99ed10764e60b5e7fcc7dcb3a770c688c8e8dace648047e235ba9f76d7
Instruction ID: bc965bee23d257ec89d7065826ccd3130a9530cd8bf643e3d3c1d275569d1f01
Opcode Fuzzy Hash: 02a1ac99ed10764e60b5e7fcc7dcb3a770c688c8e8dace648047e235ba9f76d7
Instruction Fuzzy Hash: B3F06876B112318FC715AB3DE844D1A77FADF8966131601B9E905DB335CE31EC418B90

Function 010D0AA8 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2332802699.00000000010D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 010D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_10d0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b60bdae2dfd66c203d33c169f98316cbf3dd788100af823c3931045063b1f572
Instruction ID: 2dcae339354220380deb14232545676223a7ca86d835a7b7ef739ebba1dd63db
Opcode Fuzzy Hash: b60bdae2dfd66c203d33c169f98316cbf3dd788100af823c3931045063b1f572
Instruction Fuzzy Hash: 9DF09035B0435587FB0467B8E82C32A3A96AB85B40F0445BCBA8AC33A4EEA5C844C7D1

Function 010D4B34 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2332802699.00000000010D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 010D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_10d0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 911f2cf377c8dacb82abf62660370edd610f9ea2050c63c7ed4ac82b38c881f9
Instruction ID: 082cbf4341402324e11f97dffc9eb7b9378f1c67d83f57d96b16e2f775a1ec02
Opcode Fuzzy Hash: 911f2cf377c8dacb82abf62660370edd610f9ea2050c63c7ed4ac82b38c881f9
Instruction Fuzzy Hash: F0F024B6D05345EFCB01DBF5AC540ECBFB1EF82300B1480DAD09687A22E774860ACB51

Function 010D5139 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2332802699.00000000010D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 010D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_10d0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 514b169e99e1b5f26111a8ccd4f0a3ddf8e74ab7d36ebb4bb8b9303e8598ba0f
Instruction ID: 83c2cce34acf1f0da7d3d0446e243e22a02cfc6a5686627bdf3fade9e747f8cf
Opcode Fuzzy Hash: 514b169e99e1b5f26111a8ccd4f0a3ddf8e74ab7d36ebb4bb8b9303e8598ba0f
Instruction Fuzzy Hash: 0AF089763051445FD3449B75EC549AE7BB6EFC9351B144139E40AC3265DA384805CB50

Function 010D5148 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2332802699.00000000010D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 010D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_10d0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d9113e711ec85ba7707222e6af7bf4bc4a8ede6d0df3aa471ff0f74debb67d58
Instruction ID: 4c2fed45c00221cb915af7864c75d5d2aa8946598ce43bb8f3001bf4e84b93d2
Opcode Fuzzy Hash: d9113e711ec85ba7707222e6af7bf4bc4a8ede6d0df3aa471ff0f74debb67d58
Instruction Fuzzy Hash: 04E065313011049BC3049F29E85485AB7BAEBCA2517508539A90AC3325DE355C05C760

Function 010D13B0 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2332802699.00000000010D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 010D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_10d0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0cb33931eebdefebfa90fcac05e5e2db998ee85603f79787ddd126424e504bfd
Instruction ID: 37e87b6b03f3ebc76d3ddcd6fe6bd2fb63a497a3450576b155d56e33c3cffe3e
Opcode Fuzzy Hash: 0cb33931eebdefebfa90fcac05e5e2db998ee85603f79787ddd126424e504bfd
Instruction Fuzzy Hash: 61F0F474600206CFCB14EF74D168A687BB1EB49344F104468E4068B3A1CB759841CF00

Function 010D0F28 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2332802699.00000000010D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 010D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_10d0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a420990335024683e943366c01c56545de6aba1e0c6263ce381d1640878c9052
Instruction ID: 8af851f4ece46c8951ed81692fbf4566eb5dfb8538b2ef584dbc84b6de19757c
Opcode Fuzzy Hash: a420990335024683e943366c01c56545de6aba1e0c6263ce381d1640878c9052
Instruction Fuzzy Hash: 34E04FB290820DAFCB00DFA8ED4269DBBE5DB46341F1085B99408E3352EA75AE00AB50

Function 010D0F38 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2332802699.00000000010D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 010D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_10d0000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9dc3262bd49e030dfd99af01dac5901e20ec7a2591cfe45d2952e2ea0df28551
Instruction ID: 9789b9fec311485512b70b7d76bd3a32c5de1f6916b8af5adba048f55a320c65
Opcode Fuzzy Hash: 9dc3262bd49e030dfd99af01dac5901e20ec7a2591cfe45d2952e2ea0df28551
Instruction Fuzzy Hash: B2D01770A0420EEF8B00EFB8E94255DBBF9EB85244B1081A99409D3312EA71AF00AB90

Analysis Process: Honda.exePID: 2444, Parent PID: 4004COMMON

Executed Functions

Function 01172788 Relevance: 2.0, Instructions: 2021COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2412616192.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_1170000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d3108feff580f914ead63847ee43412b493b374f9d2adf8173c4a882dc239bf
Instruction ID: c81fbe84122c309d38716790b0b12cb84bec2386362ea68545620ccda4698a1f
Opcode Fuzzy Hash: 6d3108feff580f914ead63847ee43412b493b374f9d2adf8173c4a882dc239bf
Instruction Fuzzy Hash: 69039C34A00719DFEB15DF68CC44BADB7B6FF89700F518695E6082B691CBB0AE81CB41

Function 01171CC0 Relevance: 1.8, Strings: 1, Instructions: 500COMMON

Download Yara Rule

Strings

", xrefs: 01171F97

Memory Dump Source

Source File: 0000000F.00000002.2412616192.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_1170000_Honda.jbxd

Similarity

API ID:
String ID: "
API String ID: 0-123907689
Opcode ID: b69b7afc45b3907a09081c3e4f967acb967836e68f60ce58640d704e37bce33e
Instruction ID: ccb4f0bdbdd102728072afb0cd4016817569804740c5747d49727af8783f0e7a
Opcode Fuzzy Hash: b69b7afc45b3907a09081c3e4f967acb967836e68f60ce58640d704e37bce33e
Instruction Fuzzy Hash: 9502AE34B002169FDB09DF69C840AAEB7F2FF88310F258569D5059B3A6DB34DD46CBA1

Function 01175A41 Relevance: .4, Instructions: 439COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2412616192.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_1170000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4ffafa0f670819ab025f4972122c78c082cbd1fffa4710880390923d203bd987
Instruction ID: 825289db7ffbcb7dec29a1c676b4928b44f89666e36e7e51b1de6f3055b16f37
Opcode Fuzzy Hash: 4ffafa0f670819ab025f4972122c78c082cbd1fffa4710880390923d203bd987
Instruction Fuzzy Hash: B3F18A30A012169FDB68DF68D944BAEB7F3BF85304F15842AD406AB791DB35EC42CB90

Function 011717C8 Relevance: 1.4, Strings: 1, Instructions: 156COMMON

Download Yara Rule

Strings

], xrefs: 01171942

Memory Dump Source

Source File: 0000000F.00000002.2412616192.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_1170000_Honda.jbxd

Similarity

API ID:
String ID: ]
API String ID: 0-3352871620
Opcode ID: 7c356ea7d646a3c506726acf1ccccba8bd2810598bf85239d6d529156844cc60
Instruction ID: b00bbe2be18d380758e2a0a31c3c146afa1a5c3d5d36ffacb9df166cc5358494
Opcode Fuzzy Hash: 7c356ea7d646a3c506726acf1ccccba8bd2810598bf85239d6d529156844cc60
Instruction Fuzzy Hash: E451D031E042489FDB09DB79D8106EEBFB2EFC5310F1480ABD559E7291EB344A06CB92

Function 01174868 Relevance: .2, Instructions: 238COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2412616192.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_1170000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc4addc38630744fbc8bc4621bbcf55be9f00707b85ffd36558548ef9f099327
Instruction ID: fc4b906a749a1b9a766f4b00c8acd915f8918f30e42e59042dec570cb2b76960
Opcode Fuzzy Hash: dc4addc38630744fbc8bc4621bbcf55be9f00707b85ffd36558548ef9f099327
Instruction Fuzzy Hash: EEA15D34200606CFD71ADF28C494A69BBF2FF45350F46C5A9E04A9BA62E730FD85CB94

Function 01171062 Relevance: .2, Instructions: 219COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2412616192.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_1170000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9dd911efd9f37cee2103b5fc4211d3f0148ca5b5ec5a083154bf633506ab9f4b
Instruction ID: a14bbc7e57f5357eca4812e89966b3d1a66f0ae8a1988f1bb5de45509bb43dfd
Opcode Fuzzy Hash: 9dd911efd9f37cee2103b5fc4211d3f0148ca5b5ec5a083154bf633506ab9f4b
Instruction Fuzzy Hash: 56916F71E00258AFDB09DFE5D954AEEBBBAFF88304F14802AE505EB264DB309945CF51

Function 01175E28 Relevance: .2, Instructions: 184COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2412616192.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_1170000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 193f73a7c4ddf7ea7037ad4a8d2aff8f67b30a3937e31d4507c364e5ae212eb6
Instruction ID: bf92c8e1b8dce1e5f7beec0cc1e8f248270fcd0050b6126c4a0f4f40ffbfb1ef
Opcode Fuzzy Hash: 193f73a7c4ddf7ea7037ad4a8d2aff8f67b30a3937e31d4507c364e5ae212eb6
Instruction Fuzzy Hash: 29618E34B002259FDB19DF68D994BAEBBF2BF89710F158065E905EB391DB34AC41CB50

Function 01170848 Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2412616192.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_1170000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 404e25a04123f442ffd9d1a1bf3a9a369ef0b3326569bc50f6cf23f79c86dc93
Instruction ID: b42ec236dd96336ab83f887952e8d1be513f91ff0101409320b622e639f75d0e
Opcode Fuzzy Hash: 404e25a04123f442ffd9d1a1bf3a9a369ef0b3326569bc50f6cf23f79c86dc93
Instruction Fuzzy Hash: 54419130A00249DFDB05EBB8E8547AEBBF2FF84304F108169E1099B355EB749946CB91

Function 01171C72 Relevance: .1, Instructions: 107COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2412616192.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_1170000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f9641a6c0d4f5c7a441305b6fdb3c51babebb6de794636428d4858235337a2e8
Instruction ID: 7b2a2da3a3571d04b2b61e022a00e3fb0b3c393c2db40f34a77ede95286cd430
Opcode Fuzzy Hash: f9641a6c0d4f5c7a441305b6fdb3c51babebb6de794636428d4858235337a2e8
Instruction Fuzzy Hash: 44419F34B00205DFDB09EF28D844AAEB7F6FF89311B15826AE4058B365EB749D05CF95

Function 01171CB0 Relevance: .1, Instructions: 102COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2412616192.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_1170000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f126231baf17e7878de5a601f1fb7b82e313a4971285cf16be0c35d71ff64f5a
Instruction ID: 2719cc12c8afe2ebd197674eb4721b8670459acf1efaff58540e0776bb071bc6
Opcode Fuzzy Hash: f126231baf17e7878de5a601f1fb7b82e313a4971285cf16be0c35d71ff64f5a
Instruction Fuzzy Hash: 3F416D34A00105DFDB09EF29E848AAEBBF6EF89315712816AE405CB365EB349D05CF55

Function 01172777 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2412616192.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_1170000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 12d87e611d8691e07c5b86db4e163cf418386b4f910648e9d2bb7b38ba8620c9
Instruction ID: 0ab95f665eb580267ba4c7a5dd5c4f59a6691aa9a8ad9c0b4480805855e61fe9
Opcode Fuzzy Hash: 12d87e611d8691e07c5b86db4e163cf418386b4f910648e9d2bb7b38ba8620c9
Instruction Fuzzy Hash: FC31DE31A00204CFE729CFA9D944BA97BF6EF45311F4584AAE405CB3A1D739DD46CB61

Function 01170838 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2412616192.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_1170000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 522385a1ce7fe9c268d5482b621d16e8cccd7a43ed05370c9ce60ac482a1ee28
Instruction ID: ebd0b9f583be94de02f0727edbd7832b520fec65e2e2fc6ed4a0b6df2757c9e7
Opcode Fuzzy Hash: 522385a1ce7fe9c268d5482b621d16e8cccd7a43ed05370c9ce60ac482a1ee28
Instruction Fuzzy Hash: CC318230A0024ADFDB05EBA8E494B9DBFB2FF84304F14C119E1096B365EB75998ACB51

Function 01171B68 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2412616192.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_1170000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1b64a6ddd6f00afa620349d09e65ade90704235e5640c6496bc15a5693541607
Instruction ID: 0c1d3886cf4574e33ac285810e087506a63a17d7ac24740681a0c1eab5c35efd
Opcode Fuzzy Hash: 1b64a6ddd6f00afa620349d09e65ade90704235e5640c6496bc15a5693541607
Instruction Fuzzy Hash: 6F212670B01112CFCB58EF78D48896D7BB2AF88705B2144A9E506DF361EB36ED42CB80

Function 01171B78 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2412616192.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_1170000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 976ace533375f4820897e32832bafa9be288a20aec3f1695785b675d564f24cb
Instruction ID: b562f2e92de6e8651af99903697c5d5634e81fbe74a43bb5ef96c62fc4bf8bfb
Opcode Fuzzy Hash: 976ace533375f4820897e32832bafa9be288a20aec3f1695785b675d564f24cb
Instruction Fuzzy Hash: 3B210974B01116CFCB48EFB8C49896D77B2AF48711B2144A9E506DF361DB36ED42CB80

Function 01174F42 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2412616192.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_1170000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 83876184b9559ec9cffb8df9d3661ae5ac96dfeef06d1b543088f979a02954ac
Instruction ID: 63df2e61812da401f56975c18e9a2d8e72fed45ad2af3cd24aaa6ce6fb9f5277
Opcode Fuzzy Hash: 83876184b9559ec9cffb8df9d3661ae5ac96dfeef06d1b543088f979a02954ac
Instruction Fuzzy Hash: B611B270A042548FEB18EBBAC5587EEBBF2AF89300F144529D501B7B84DB349944CBA2

Function 01174F48 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2412616192.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_1170000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a1ac1f509869eda118ff0e7ecfe5bb7ee525aafe43a69cf4f7140733ebcf786a
Instruction ID: 48e65da409aa31a38f0dcf12f8b63cf397ce1b0a398623bfece25dcd1d5eb608
Opcode Fuzzy Hash: a1ac1f509869eda118ff0e7ecfe5bb7ee525aafe43a69cf4f7140733ebcf786a
Instruction Fuzzy Hash: 6411C870A042548FEB08EBBAC5187AE7BF2AF89300F144129D501B7784DF349904DBA1

Function 01176060 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2412616192.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_1170000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 83df36e4348af597aad503d017b2a2d030e235137d166aae032e3dcba6d2a85d
Instruction ID: afa539ea1e4dffd88be3a3c3f4f3bbafcd75ff13b126f8962f2cc4ed59505612
Opcode Fuzzy Hash: 83df36e4348af597aad503d017b2a2d030e235137d166aae032e3dcba6d2a85d
Instruction Fuzzy Hash: 7E11E070E042459FC76A9B689854B9E7BB1EFC6324F1141BED0088B292DB754806C751

Function 01175218 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2412616192.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_1170000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d23a9193fa8b578ef4035ca01128ec9dcd428f7d73c91a08034688fe1b75d6b8
Instruction ID: 68688b2a01875d746557843abdc23a7572f9b0c094668bdf360bebbf69d90be6
Opcode Fuzzy Hash: d23a9193fa8b578ef4035ca01128ec9dcd428f7d73c91a08034688fe1b75d6b8
Instruction Fuzzy Hash: BE018F71B406318FC3599B3CE85496E3BE6EFC962632641BAE405DF371CA31DC468B90

Function 01175228 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2412616192.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_1170000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cd5e48a2784a125da1c49966b18aff90a9e6232105c5ef9f88f14f872fa3f68a
Instruction ID: af323a7cdb687cfeca1bbe5d68f503e8f428dc3b3edf91efed3aedc41723aac8
Opcode Fuzzy Hash: cd5e48a2784a125da1c49966b18aff90a9e6232105c5ef9f88f14f872fa3f68a
Instruction Fuzzy Hash: 4BF0C872B10130CFC754AB3DE84491E77EADF8962531201B9E905DB330CE31EC418B90

Function 01170A98 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2412616192.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_1170000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c606ab12eea1c214446719667c26d651abdf51fbd0b2245ef8ca699e5472d928
Instruction ID: da8e878fce616e3afb6495ee500a5abb9ca9a46cb9638f2bd76689bd48e5433f
Opcode Fuzzy Hash: c606ab12eea1c214446719667c26d651abdf51fbd0b2245ef8ca699e5472d928
Instruction Fuzzy Hash: BE01D1347063904FEB096774E92832E3F65AB8B298F0401ADE502CB3F1EBA68945C351

Function 01170AA8 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2412616192.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_1170000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2cb1ed2b652159c306e0e0f1cbda49a12eb4f8b4a9e37674ae6ef926d78a7531
Instruction ID: d9034c087cbddc742758daf12dc94f2aef0eb7663283da2df820fbcbd364beba
Opcode Fuzzy Hash: 2cb1ed2b652159c306e0e0f1cbda49a12eb4f8b4a9e37674ae6ef926d78a7531
Instruction Fuzzy Hash: 69F090347003614BEB1C7778E91832E3AA5AB49658F044578AA06C73E0EFA5DC40C781

Function 01175139 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2412616192.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_1170000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d74de53e522b9df95bf8432551c5e1ddcfd5e770d74230b3392be181b4c1853
Instruction ID: f9c4fe135602f03b2377aadd41c6085098fbde1783c387ed8b315b190cdfdc41
Opcode Fuzzy Hash: 6d74de53e522b9df95bf8432551c5e1ddcfd5e770d74230b3392be181b4c1853
Instruction Fuzzy Hash: 0DF0E2313012009FD308DB79D868A9EBBF6FFCA260711847BE409CB272DA384C06CB61

Function 01174B34 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2412616192.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_1170000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8bdafe50b14c84cb75cfbd31a35f98e39e9e3c5699d0686caea127ea5d86950f
Instruction ID: daaa4ae80fabfed80e469943171dc8cf7c26751fc0d029eb64bdfe8ee2e86619
Opcode Fuzzy Hash: 8bdafe50b14c84cb75cfbd31a35f98e39e9e3c5699d0686caea127ea5d86950f
Instruction Fuzzy Hash: A0F0F071905244EEDB05EBB598581ECBFB0EF81204B0480DBD05687A25E6749606CB41

Function 01175148 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2412616192.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_1170000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a056148705f3b7efe2c836eaadd6c0756aaad5904f03b88d85e79543180a179
Instruction ID: 35558d456ce634290bcf4c9c867e8450c6c875a703b0ced051c11e5a15551525
Opcode Fuzzy Hash: 1a056148705f3b7efe2c836eaadd6c0756aaad5904f03b88d85e79543180a179
Instruction Fuzzy Hash: 2DE09B313011049BD304DB79E854A5EB7AAEFC9351750453AE90AC3365DE355C018760

Function 011713B0 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2412616192.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_1170000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fd4783ae9185e454569dc9b799ed791449a0f858c4536a8cc3c94a675187092e
Instruction ID: 7c675b96c09936be3949092e8f9493bde93a8e6220bec7165b938b40d3fd881b
Opcode Fuzzy Hash: fd4783ae9185e454569dc9b799ed791449a0f858c4536a8cc3c94a675187092e
Instruction Fuzzy Hash: 63F0B778640216CFDB18EF64D558A6DB7B1EF49309F114469E4069B3A1CB79D845CF04

Function 01170F28 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2412616192.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_1170000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7704a5e1c2f79544dc7ee80f3ebe4e3baab3f58b71d42c63f91e74f0be973a44
Instruction ID: 05ab07de9a0a318f6c18590a659c57b631ccb7f6f3088b2a0cf50be50c25b148
Opcode Fuzzy Hash: 7704a5e1c2f79544dc7ee80f3ebe4e3baab3f58b71d42c63f91e74f0be973a44
Instruction Fuzzy Hash: 89E09A30A04349EFCB41EFA4E9121ACBBF1EF46214B1144BAD408E7622E6318E009B44

Function 01170F70 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2412616192.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_1170000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9d8a3e4ba5a48978e409098fbc28be9fa96d63f2f00e08509851c04d76197e08
Instruction ID: d494238fb928c3f2210bccb9a7d5e1e63eefa4e2a56a1eee9dab883197d11b7d
Opcode Fuzzy Hash: 9d8a3e4ba5a48978e409098fbc28be9fa96d63f2f00e08509851c04d76197e08
Instruction Fuzzy Hash: C9D02E3152E3800FD39B8A28B8002A13BB18B5B218B5204BBF888C7762E3008E008B87

Function 01170F38 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.2412616192.0000000001170000.00000040.00000800.00020000.00000000.sdmp, Offset: 01170000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_1170000_Honda.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 22c61a45a1121ca5ed14b5dbea98769daedcb515d927d957c6b262aedb520fab
Instruction ID: 77e6254dbfcc69f127146b48a3c2aa63ef2c538350beba17f365f9b2d85bee6a
Opcode Fuzzy Hash: 22c61a45a1121ca5ed14b5dbea98769daedcb515d927d957c6b262aedb520fab
Instruction Fuzzy Hash: 65D05B70A0010DEFCB00EFB4E90155DBBF5DB44304B1041A9D40CD3700FA315F009B44

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report juwXcVX5AK.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_juwXcVX5AK.exe_bfe27b7320ad53d947e34bb313186fe1a87ede_980bb77e_836babe6-b6a2-44ae-88f6-3ef52dbf32ed\Report.wer

C:\ProgramData\Microsoft\Windows\WER\Temp\WER239C.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WER240B.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WER244A.tmp.xml

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Honda.exe.log

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\MSBuild.exe.log

C:\Users\user\AppData\Local\Temp\Honda\Honda.exe

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GoogleApp_a8215e8c5ffe450d961f8808893dfacd.lnk

C:\Windows\appcompat\Programs\Amcache.hve

\Device\ConDrv

Static File Info

General

File Icon

Static PE Info

General

Authenticode Signature

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Windows Analysis Report
juwXcVX5AK.exe

Function 00452F7C Relevance: 1.6, APIs: 1, Instructions: 55
memoryCOMMON

Function 0046C9D4 Relevance: 7.7, APIs: 5, Instructions: 202
COMMON

Function 0046DDAA Relevance: 3.2, APIs: 2, Instructions: 177
COMMON

Function 0046762C Relevance: 3.0, APIs: 2, Instructions: 34
COMMONLIBRARYCODE

Function 0046D9AE Relevance: 1.6, APIs: 1, Instructions: 147
COMMON

Function 004557E2 Relevance: 1.5, APIs: 1, Instructions: 17
COMMON