Edit tour

Windows Analysis Report
SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

Overview

General Information

Sample name:	SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe
Analysis ID:	1545739
MD5:	5cb83a1a92e59213a76d94e436ae3ac6
SHA1:	c020e5b513007ca7d03ba4848223fe3abad0ed46
SHA256:	eff4f9c2020a0a07e60ebd0db6766b8aadf63b09be0b21589654e8c638e423af
Tags:	exe
Infos:

Detection

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Sigma detected: Drops script at startup location

Yara detected AntiVM3

.NET source code contains potential unpacker

AI detected suspicious sample

Drops VBS files to the startup folder

Injects a PE file into a foreign processes

Machine Learning detection for dropped file

Machine Learning detection for sample

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Writes to foreign memory regions

Yara detected Costura Assembly Loader

Allocates memory with a write watch (potentially for evading sandboxes)

Checks if the current process is being debugged

Contains functionality to call native functions

Creates a process in suspended mode (likely to inject code)

Creates a start menu entry (Start Menu\Programs\Startup)

Detected potential crypto function

Drops PE files

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Found inlined nop instructions (likely shell or obfuscated code)

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

One or more processes crash

PE / OLE file has an invalid certificate

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Stores files to the Windows start menu directory

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe (PID: 7280 cmdline: "C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe" MD5: 5CB83A1A92E59213A76D94E436AE3AC6)

MSBuild.exe (PID: 7836 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

WerFault.exe (PID: 7952 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 7836 -s 1120 MD5: C31336C1EFC2CCB44B4326EA793040F2)

cleanup

Yara Signatures

Memory Dumps

Source	Rule	Description	Author
00000000.00000002.2338851704.00000000037A6000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000000.00000002.2363378019.0000000006E90000.00000004.08000000.00040000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
00000000.00000002.2348038104.0000000004AC4000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
Process Memory Space: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe PID: 7280	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
Process Memory Space: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe PID: 7280	JoeSecurity_AntiVM_3	Yara detected AntiVM_3	Joe Security
Process Memory Space: MSBuild.exe PID: 7836	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
Click to see the 1 entries

Unpacked PEs

Source	Rule	Description	Author
0.2.SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe.6e90000.9.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe.4ec0290.6.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
0.2.SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe.4bc7ff0.3.raw.unpack	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security

Sigma Signatures

Data Obfuscation

Sigma detected: Drops script at startup location

Source: File created

Author: Joe Security: Data: EventID: 11, Image: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, ProcessId: 7280, TargetFilename: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\cvchost.vbs

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\cvchost.exe

Avira: detection malicious, Label: HEUR/AGEN.1304546

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\cvchost.exe

ReversingLabs: Detection: 47%

Multi AV Scanner detection for submitted file

Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

ReversingLabs: Detection: 47%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\cvchost.exe

Joe Sandbox ML: detected

Machine Learning detection for sample

Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

Joe Sandbox ML: detected

Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49908 version: TLS 1.2

Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: @Cn.pdb source: MSBuild.exe, 00000004.00000002.2941678936.0000000000F38000.00000004.00000010.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.pdbkK source: MSBuild.exe, 00000004.00000002.2941847024.0000000001142000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\exe\MSBuild.pdb source: MSBuild.exe, 00000004.00000002.2941847024.0000000001096000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\dll\System.pdb\|@ source: MSBuild.exe, 00000004.00000002.2941847024.0000000001096000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.PDB source: MSBuild.exe, 00000004.00000002.2941847024.0000000001142000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: f:\binaries\Intermediate\ndp_msbuild\xmakecommandline.csproj_1613737345\objr\x86\MSBuild.pdbCNxQ source: MSBuild.exe, 00000004.00000002.2941847024.0000000001142000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdbSHA256e source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.0000000003C6A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338518794.0000000001D90000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: ?CnC:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.pdb source: MSBuild.exe, 00000004.00000002.2941678936.0000000000F38000.00000004.00000010.00020000.00000000.sdmp
Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdb source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.0000000003C6A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338518794.0000000001D90000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: protobuf-net.pdbSHA256}Lq source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2359260205.0000000006D20000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: C:\Windows\MSBuild.pdbpdbild.pdb source: MSBuild.exe, 00000004.00000002.2941847024.0000000001096000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\MSBuild.pdb source: MSBuild.exe, 00000004.00000002.2941847024.0000000001096000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: Zdkutnl.pdb source: MSBuild.exe, 00000004.00000002.2943552650.0000000002E81000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000004.00000002.2949605643.00000000055B0000.00000004.08000000.00040000.00000000.sdmp, MSBuild.exe, 00000004.00000002.2944438408.000000000402C000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000004.00000002.2944438408.0000000004314000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: protobuf-net.pdb source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2359260205.0000000006D20000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: symbols\exe\MSBuild.pdb source: MSBuild.exe, 00000004.00000002.2941678936.0000000000F38000.00000004.00000010.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\exe\MSBuild.pdb:C source: MSBuild.exe, 00000004.00000002.2941847024.0000000001096000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: HP7n0C:\Windows\MSBuild.pdb source: MSBuild.exe, 00000004.00000002.2941678936.0000000000F38000.00000004.00000010.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\dll\System.pdb source: MSBuild.exe, 00000004.00000002.2941847024.0000000001096000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\symbols\dll\mscorlib.pdb source: MSBuild.exe, 00000004.00000002.2941847024.0000000001096000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: f:\binaries\Intermediate\ndp_msbuild\xmakecommandline.csproj_1613737345\objr\x86\MSBuild.pdb source: MSBuild.exe, 00000004.00000002.2941678936.0000000000F38000.00000004.00000010.00020000.00000000.sdmp, MSBuild.exe, 00000004.00000002.2941847024.0000000001142000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\symbols\exe\MSBuild.pdb source: MSBuild.exe, 00000004.00000002.2941847024.0000000001096000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: Zdkutnl.pdb8 source: MSBuild.exe, 00000004.00000002.2943552650.0000000002E81000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000004.00000002.2949605643.00000000055B0000.00000004.08000000.00040000.00000000.sdmp, MSBuild.exe, 00000004.00000002.2944438408.000000000402C000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000004.00000002.2944438408.0000000004314000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.pdb source: MSBuild.exe, 00000004.00000002.2941847024.0000000001136000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\symbols\dll\System.pdb source: MSBuild.exe, 00000004.00000002.2941847024.0000000001096000.00000004.00000020.00020000.00000000.sdmp

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 4x nop then jmp 06D8AB09h	0_2_06D8AAA8
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 4x nop then jmp 06D8AB09h	0_2_06D8AC99
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 4x nop then jmp 06D8AB09h	0_2_06D8AA9B
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 4x nop then cmp dword ptr [ebp-20h], 00000000h	0_2_06DC8E00
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 4x nop then cmp dword ptr [ebp-20h], 00000000h	0_2_06DC8DF8
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 4x nop then jmp 06DC41B0h	0_2_06DC40F8
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 4x nop then jmp 06DC41B0h	0_2_06DC40F0
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 4x nop then mov dword ptr [ebp-20h], 00000000h	0_2_06E1D590

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.149.23
Source: unknown	TCP traffic detected without corresponding DNS query: 104.18.38.233
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.149.23
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.149.23
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.149.23
Source: unknown	TCP traffic detected without corresponding DNS query: 104.18.38.233
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.149.23
Source: unknown	TCP traffic detected without corresponding DNS query: 172.64.149.23
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.100.168
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.100.168

Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, cvchost.exe.0.dr	String found in binary or memory: http://crl.comodoca.com/COMODOCodeSigningCA2.crl0r
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, cvchost.exe.0.dr	String found in binary or memory: http://ocsp.comodoca.com0
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.0000000003823000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.0000000003C6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2359260205.0000000006D20000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-net
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2359260205.0000000006D20000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-netJ
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2359260205.0000000006D20000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://github.com/mgravell/protobuf-neti
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2359260205.0000000006D20000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/11564914/23354;
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.00000000037A6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2359260205.0000000006D20000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/14436606/23354
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2359260205.0000000006D20000.00000004.08000000.00040000.00000000.sdmp	String found in binary or memory: https://stackoverflow.com/q/2152978/23354

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49908 version: TLS 1.2

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_06DC5F88 NtProtectVirtualMemory,	0_2_06DC5F88
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_06DC7408 NtResumeThread,	0_2_06DC7408
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_06DC5F81 NtProtectVirtualMemory,	0_2_06DC5F81
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_06DC7400 NtResumeThread,	0_2_06DC7400
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_06DC5DD0 NtProtectVirtualMemory,	0_2_06DC5DD0

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_0371BE80	0_2_0371BE80
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_03718028	0_2_03718028
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_03718019	0_2_03718019
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_037185E0	0_2_037185E0
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_037185D0	0_2_037185D0
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_067492B0	0_2_067492B0
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_06749990	0_2_06749990
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_06748448	0_2_06748448
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_06748438	0_2_06748438
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_06742878	0_2_06742878
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_06742868	0_2_06742868
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_067410E8	0_2_067410E8
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_067410D9	0_2_067410D9
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_06749980	0_2_06749980
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_06D86DD0	0_2_06D86DD0
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_06D8F995	0_2_06D8F995
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_06DCDFA0	0_2_06DCDFA0
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_06DCD170	0_2_06DCD170
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_06DCCC20	0_2_06DCCC20
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_06DC15F0	0_2_06DC15F0
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_06DC15E0	0_2_06DC15E0
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_06E10040	0_2_06E10040
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_06E10007	0_2_06E10007
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_06E1F940	0_2_06E1F940
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4_2_013D2DE4	4_2_013D2DE4
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4_2_013D77F0	4_2_013D77F0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4_2_013D4930	4_2_013D4930
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4_2_013D4940	4_2_013D4940
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4_2_013D7635	4_2_013D7635
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4_2_057A6A58	4_2_057A6A58

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 7836 -s 1120

Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

Static PE information: invalid certificate

Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.000000000399E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameZuuybfp.exe" vs SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2337336058.0000000001A3E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameclr.dllT vs SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.0000000003C6A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameMicrosoft.Win32.TaskScheduler.dll\ vs SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.0000000003882000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameZuuybfp.exe" vs SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2359260205.0000000006D20000.00000004.08000000.00040000.00000000.sdmp	Binary or memory string: OriginalFilenameprotobuf-net.dllJ vs SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.0000000003741000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilename vs SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000000.1680925441.00000000014A8000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenamecontaiinmarketing_1.exeB vs SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338518794.0000000001D90000.00000004.08000000.00040000.00000000.sdmp	Binary or memory string: OriginalFilenameMicrosoft.Win32.TaskScheduler.dll\ vs SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Binary or memory string: OriginalFilenamecontaiinmarketing_1.exeB vs SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: MSBuild.exe, 00000004.00000002.2941847024.0000000001142000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: f:\binaries\Intermediate\ndp_msbuild\xmakecommandline.csproj_1613737345\objr\x86\MSBuild.pdbCNxQ
Source: MSBuild.exe, 00000004.00000002.2941678936.0000000000F38000.00000004.00000010.00020000.00000000.sdmp, MSBuild.exe, 00000004.00000002.2941847024.0000000001142000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: f:\binaries\Intermediate\ndp_msbuild\xmakecommandline.csproj_1613737345\objr\x86\MSBuild.pdb

Source: classification engine

Classification label: mal100.expl.evad.winEXE@4/3@0/0

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\cvchost.vbs

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Mutant created: NULL
Source: C:\Windows\SysWOW64\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7952:64:WilError_03

Source: C:\Windows\SysWOW64\WerFault.exe

File created: C:\ProgramData\Microsoft\Windows\WER\Temp\f213a60c-c6d0-43f7-b866-8b9482684690

Jump to behavior

Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 50.01%

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

ReversingLabs: Detection: 47%

Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

String found in binary or memory: 3http://crl.usertrust.com/AddTrustExternalCARoot.crl05

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

File read: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe "C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe"
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 7836 -s 1120
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"	Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: gpapi.dll	Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0EE7644B-1BAD-48B1-9889-0281C206EB85}\InprocServer32

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

Static file information: File size 9078880 > 1048576

Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

Static PE information: Raw size of .text is bigger than: 0x100000 < 0x8a4e00

Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: @Cn.pdb source: MSBuild.exe, 00000004.00000002.2941678936.0000000000F38000.00000004.00000010.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.pdbkK source: MSBuild.exe, 00000004.00000002.2941847024.0000000001142000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\exe\MSBuild.pdb source: MSBuild.exe, 00000004.00000002.2941847024.0000000001096000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\dll\System.pdb\|@ source: MSBuild.exe, 00000004.00000002.2941847024.0000000001096000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.PDB source: MSBuild.exe, 00000004.00000002.2941847024.0000000001142000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: f:\binaries\Intermediate\ndp_msbuild\xmakecommandline.csproj_1613737345\objr\x86\MSBuild.pdbCNxQ source: MSBuild.exe, 00000004.00000002.2941847024.0000000001142000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdbSHA256e source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.0000000003C6A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338518794.0000000001D90000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: ?CnC:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.pdb source: MSBuild.exe, 00000004.00000002.2941678936.0000000000F38000.00000004.00000010.00020000.00000000.sdmp
Source:	Binary string: C:\Users\dahall\Documents\GitHubRepos\TaskScheduler\TaskService\obj\Release\net40\Microsoft.Win32.TaskScheduler.pdb source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.0000000003C6A000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338518794.0000000001D90000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: protobuf-net.pdbSHA256}Lq source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2359260205.0000000006D20000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: C:\Windows\MSBuild.pdbpdbild.pdb source: MSBuild.exe, 00000004.00000002.2941847024.0000000001096000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\MSBuild.pdb source: MSBuild.exe, 00000004.00000002.2941847024.0000000001096000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: Zdkutnl.pdb source: MSBuild.exe, 00000004.00000002.2943552650.0000000002E81000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000004.00000002.2949605643.00000000055B0000.00000004.08000000.00040000.00000000.sdmp, MSBuild.exe, 00000004.00000002.2944438408.000000000402C000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000004.00000002.2944438408.0000000004314000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: protobuf-net.pdb source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2359260205.0000000006D20000.00000004.08000000.00040000.00000000.sdmp
Source:	Binary string: symbols\exe\MSBuild.pdb source: MSBuild.exe, 00000004.00000002.2941678936.0000000000F38000.00000004.00000010.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\exe\MSBuild.pdb:C source: MSBuild.exe, 00000004.00000002.2941847024.0000000001096000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: HP7n0C:\Windows\MSBuild.pdb source: MSBuild.exe, 00000004.00000002.2941678936.0000000000F38000.00000004.00000010.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\dll\System.pdb source: MSBuild.exe, 00000004.00000002.2941847024.0000000001096000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\symbols\dll\mscorlib.pdb source: MSBuild.exe, 00000004.00000002.2941847024.0000000001096000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: f:\binaries\Intermediate\ndp_msbuild\xmakecommandline.csproj_1613737345\objr\x86\MSBuild.pdb source: MSBuild.exe, 00000004.00000002.2941678936.0000000000F38000.00000004.00000010.00020000.00000000.sdmp, MSBuild.exe, 00000004.00000002.2941847024.0000000001142000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\symbols\exe\MSBuild.pdb source: MSBuild.exe, 00000004.00000002.2941847024.0000000001096000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: Zdkutnl.pdb8 source: MSBuild.exe, 00000004.00000002.2943552650.0000000002E81000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000004.00000002.2949605643.00000000055B0000.00000004.08000000.00040000.00000000.sdmp, MSBuild.exe, 00000004.00000002.2944438408.000000000402C000.00000004.00000800.00020000.00000000.sdmp, MSBuild.exe, 00000004.00000002.2944438408.0000000004314000.00000004.00000800.00020000.00000000.sdmp
Source:	Binary string: C:\Windows\Microsoft.Net\assembly\GAC_32\mscorlib\v4.0_4.0.0.0__b77a5c561934e089\mscorlib.pdb source: MSBuild.exe, 00000004.00000002.2941847024.0000000001136000.00000004.00000020.00020000.00000000.sdmp
Source:	Binary string: \??\C:\Windows\symbols\dll\System.pdb source: MSBuild.exe, 00000004.00000002.2941847024.0000000001096000.00000004.00000020.00020000.00000000.sdmp

Data Obfuscation

.NET source code contains potential unpacker

Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, Vtkelbbj.cs	.Net Code: Main System.Reflection.Assembly.Load(byte[])
Source: 0.2.SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe.6d20000.8.raw.unpack, TypeModel.cs	.Net Code: TryDeserializeList
Source: 0.2.SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe.6d20000.8.raw.unpack, ListDecorator.cs	.Net Code: Read
Source: 0.2.SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe.6d20000.8.raw.unpack, TypeSerializer.cs	.Net Code: CreateInstance
Source: 0.2.SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe.6d20000.8.raw.unpack, TypeSerializer.cs	.Net Code: EmitCreateInstance
Source: 0.2.SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe.6d20000.8.raw.unpack, TypeSerializer.cs	.Net Code: EmitCreateIfNull
Source: 0.2.SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe.502d6f0.5.raw.unpack, TypeModel.cs	.Net Code: TryDeserializeList
Source: 0.2.SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe.502d6f0.5.raw.unpack, ListDecorator.cs	.Net Code: Read
Source: 0.2.SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe.502d6f0.5.raw.unpack, TypeSerializer.cs	.Net Code: CreateInstance
Source: 0.2.SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe.502d6f0.5.raw.unpack, TypeSerializer.cs	.Net Code: EmitCreateInstance
Source: 0.2.SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe.502d6f0.5.raw.unpack, TypeSerializer.cs	.Net Code: EmitCreateIfNull

Yara detected Costura Assembly Loader

Source: Yara match	File source: 0.2.SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe.6e90000.9.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe.4ec0290.6.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe.4bc7ff0.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000002.2338851704.00000000037A6000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2363378019.0000000006E90000.00000004.08000000.00040000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2348038104.0000000004AC4000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe PID: 7280, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: MSBuild.exe PID: 7836, type: MEMORYSTR

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_0674C599 push 6406D125h; retf	0_2_0674C5A5
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_06744A97 push es; retf	0_2_06744A98
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_06D8D699 push es; iretd	0_2_06D8D6A4
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_06D8D6BF push es; retf	0_2_06D8D6D4
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_06D8F4A8 push esp; iretd	0_2_06D8F4A9
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Code function: 0_2_06D8D585 push es; retf	0_2_06D8D5D0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4_2_057A3517 push esi; retf	4_2_057A351A
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4_2_057A35FF push ss; retf	4_2_057A3602

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

File created: C:\Users\user\AppData\Local\cvchost.exe

Jump to dropped file

Boot Survival

Drops VBS files to the startup folder

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\cvchost.vbs

Jump to dropped file

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\cvchost.vbs

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\cvchost.vbs

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior

Malware Analysis System Evasion

Yara detected AntiVM3

Source: Yara match

File source: Process Memory Space: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe PID: 7280, type: MEMORYSTR

Tries to detect sandboxes and other dynamic analysis tools (process name or module or function)

Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.0000000003BB6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SBIEDLL.DLL
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.0000000003823000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SBIEDLL.DLLP
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.00000000037A6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: EXPLORERJSBIEDLL.DLLKCUCKOOMON.DLLLWIN32_PROCESS.HANDLE='{0}'MPARENTPROCESSIDNCMDOSELECT * FROM WIN32_BIOS8UNEXPECTED WMI QUERY FAILUREPVERSIONQSERIALNUMBERSVMWARE\|VIRTUAL\|A M I\|XENTSELECT * FROM WIN32_COMPUTERSYSTEMUMANUFACTURERVMODELWMICROSOFT\|VMWARE\|VIRTUALXJOHNYANNAZXXXXXXXX
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.0000000003BB6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: SBIEDLL.DLL@\FQ

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Memory allocated: 36D0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Memory allocated: 3740000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Memory allocated: 5740000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 13D0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 2E80000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Memory allocated: 4E80000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

Window / User API: threadDelayed 630

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe TID: 7304	Thread sleep count: 268 > 30	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe TID: 7304	Thread sleep time: -267732s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe TID: 7304	Thread sleep count: 630 > 30	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe TID: 7304	Thread sleep time: -629370s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_BIOS

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : select * from Win32_ComputerSystem

Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.0000000003BB6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmware\V
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.0000000003823000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: vmware
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.0000000003823000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $fq 1:en-CH:Microsoft\|VMWare\|Virtual
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.0000000003BB6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware\|VIRTUAL\|A M I\|Xen@\fq
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.0000000003BB6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMwareLRfqp
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.0000000003823000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMware\|VIRTUAL\|A M I\|Xen
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.0000000003823000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $fq 1:en-CH:VMware\|VIRTUAL\|A M I\|Xen
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.0000000003823000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Microsoft\|VMWare\|Virtual
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.0000000003BB6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: GAW2R AHCMKTW5UU@\fq0VMware\|VIRTUAL\|A M<
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.00000000037A6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: explorerJSbieDll.dllKcuckoomon.dllLwin32_process.handle='{0}'MParentProcessIdNcmdOselect * from Win32_BIOS8Unexpected WMI query failurePversionQSerialNumberSVMware\|VIRTUAL\|A M I\|XenTselect * from Win32_ComputerSystemUmanufacturerVmodelWMicrosoft\|VMWare\|VirtualXjohnYannaZxxxxxxxx
Source: cvchost.exe.0.dr	Binary or memory string: VVmCi
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.0000000003BB6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: VMWareLRfq
Source: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.0000000003BB6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Whmv5DFbcg8GL2S 9ADzYGaV@\fq0Microsoft\|VMWare\|V<

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process queried: DebugPort			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process queried: DebugPort			Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process token adjusted: Debug			Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Process token adjusted: Debug			Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Injects a PE file into a foreign processes

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000 value starts with: 4D5A

Jump to behavior

Writes to foreign memory regions

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 402000	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 4BA000	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 4BC000	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: DAC008	Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"

Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Queries volume information: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	2 Windows Management Instrumentation	1 Scripting	211 Process Injection	1 Masquerading	OS Credential Dumping	221 Security Software Discovery	Remote Services	1 Archive Collected Data	12 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	2 Registry Run Keys / Startup Folder	2 Registry Run Keys / Startup Folder	4 Virtualization/Sandbox Evasion	LSASS Memory	4 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	1 Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	Security Account Manager	1 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	Steganography	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	211 Process Injection	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	2 Obfuscated Files or Information	LSA Secrets	32 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Software Packing	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	47%	ReversingLabs	Win32.Trojan.Generic
SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	100%	Avira	HEUR/AGEN.1304546
SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\cvchost.exe	100%	Avira	HEUR/AGEN.1304546
C:\Users\user\AppData\Local\cvchost.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\cvchost.exe	47%	ReversingLabs	Win32.Trojan.Generic

Source	Detection	Scanner	Label
https://stackoverflow.com/q/14436606/23354	0%	URL Reputation	safe
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe
https://stackoverflow.com/q/11564914/23354;	0%	URL Reputation	safe
https://stackoverflow.com/q/2152978/23354	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false		unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/mgravell/protobuf-net	SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2359260205.0000000006D20000.00000004.08000000.00040000.00000000.sdmp	false		unknown
https://github.com/mgravell/protobuf-neti	SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2359260205.0000000006D20000.00000004.08000000.00040000.00000000.sdmp	false		unknown
https://stackoverflow.com/q/14436606/23354	SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.00000000037A6000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2359260205.0000000006D20000.00000004.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://github.com/mgravell/protobuf-netJ	SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2359260205.0000000006D20000.00000004.08000000.00040000.00000000.sdmp	false		unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.0000000003823000.00000004.00000800.00020000.00000000.sdmp, SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2338851704.0000000003C6A000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://stackoverflow.com/q/11564914/23354;	SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2359260205.0000000006D20000.00000004.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown
https://stackoverflow.com/q/2152978/23354	SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe, 00000000.00000002.2359260205.0000000006D20000.00000004.08000000.00040000.00000000.sdmp	false	URL Reputation: safe	unknown

World Map of Contacted IPs

⊘No contacted IP infos

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545739
Start date and time:	2024-10-30 22:35:11 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 47s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe
Detection:	MAL
Classification:	mal100.expl.evad.winEXE@4/3@0/0
EGA Information:	Successful, ratio: 50%
HCA Information:	Successful, ratio: 93% Number of executed functions: 259 Number of non-executed functions: 23
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 20.12.23.50, 2.19.126.137, 2.19.126.163, 13.85.23.206, 192.229.221.95, 40.69.42.241
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, ctldl.windowsupdate.com, a767.dspw65.akamai.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, ocsp.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, azureedge-t-prod.trafficmanager.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Execution Graph export aborted for target MSBuild.exe, PID 7836 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
VT rate limit hit for: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

Simulations

Behavior and APIs

Time	Type	Description
17:36:36	API Interceptor	868x Sleep call for process: SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe modified
21:37:12	Autostart	Run: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\cvchost.vbs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0017.t-0009.t-msedge.net	Paiement.eml	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	https://pub-6838e3dd185d4df89d3bb3eabe6469a4.r2.dev/index.html#	Get hash	malicious	Unknown	Browse	13.107.246.45
	https:/click.mailchimp.com/track/click/30010842/docsend.com?p=eyJzIjoiT2RaN0hwNHlyY2E3VXl5TWcwMlA2eFpHVlN3IiwidiI6MSwicCI6IntcInVcIjozMDAxMDg0MixcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2RvY3NlbmQuY29tXFxcL3ZpZXdcXFwvZzZnYzZjazdtNHlkYTRpa1wiLFwiaWRcIjpcImNhZDg3NzI1Y2UzMjRiMzI4Yzk1ZGVkYWUyMzc4ZTZjXCIsXCJ1cmxfaWRzXCI6W1wiYzE5ZWU5NGJiMzA5YmZhOGQ2MDU3OGI1Mjk5NTFmOWE4NDQ0ODNhYVwiXX0ifQ#steven.davis@tu.edu	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	https://jksvb.jnkpavers.com/?tZbf66=Tyw6/shhfkanxgsdff/&c=E,1,NSDuZCxGQc6fw5XDGugSpFh6vhsurKgNKuRtQYEvQblaeko7ktmOqkToectUm_5S_qV7IGwrOynGYnQ5TFSCJymAV2tc5TeuFegn96UyDZPOEKOyHYw,&typo=1	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	Credential Flusher	Browse	13.107.246.45
	https://share.hsforms.com/11zbkP7dfTBO0LgTS5dCN0Asixz3	Get hash	malicious	Mamba2FA	Browse	13.107.246.45
	https://app.pandadoc.com/document/v2?token=abf6587d58630a40e08d0ad15de8202e2e9c4af5	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	Stealc	Browse	13.107.246.45
	819614 - Midways Freight Ltd.xlsm	Get hash	malicious	Unknown	Browse	13.107.246.45
	173030718882fd8a78aff7fb8b038f7e8db48cb3c09555ed53a2929bebf8d42568818593e6176.dat-decoded.exe	Get hash	malicious	LummaC	Browse	13.107.246.45
fp2e7a.wpc.phicdn.net	https://pub-6838e3dd185d4df89d3bb3eabe6469a4.r2.dev/index.html#	Get hash	malicious	Unknown	Browse	192.229.221.95
	https:/click.mailchimp.com/track/click/30010842/docsend.com?p=eyJzIjoiT2RaN0hwNHlyY2E3VXl5TWcwMlA2eFpHVlN3IiwidiI6MSwicCI6IntcInVcIjozMDAxMDg0MixcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2RvY3NlbmQuY29tXFxcL3ZpZXdcXFwvZzZnYzZjazdtNHlkYTRpa1wiLFwiaWRcIjpcImNhZDg3NzI1Y2UzMjRiMzI4Yzk1ZGVkYWUyMzc4ZTZjXCIsXCJ1cmxfaWRzXCI6W1wiYzE5ZWU5NGJiMzA5YmZhOGQ2MDU3OGI1Mjk5NTFmOWE4NDQ0ODNhYVwiXX0ifQ#steven.davis@tu.edu	Get hash	malicious	HTMLPhisher	Browse	192.229.221.95
	https://jksvb.jnkpavers.com/?tZbf66=Tyw6/shhfkanxgsdff/&c=E,1,NSDuZCxGQc6fw5XDGugSpFh6vhsurKgNKuRtQYEvQblaeko7ktmOqkToectUm_5S_qV7IGwrOynGYnQ5TFSCJymAV2tc5TeuFegn96UyDZPOEKOyHYw,&typo=1	Get hash	malicious	Unknown	Browse	192.229.221.95
	https://share.hsforms.com/11zbkP7dfTBO0LgTS5dCN0Asixz3	Get hash	malicious	Mamba2FA	Browse	192.229.221.95
	https://app.pandadoc.com/document/v2?token=abf6587d58630a40e08d0ad15de8202e2e9c4af5	Get hash	malicious	Unknown	Browse	192.229.221.95
	FormulariomillasbonusLATAM_GsqrekXCVBmUf.cmd	Get hash	malicious	Unknown	Browse	192.229.221.95
	67JPbskewt.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	file.exe	Get hash	malicious	LummaC	Browse	192.229.221.95
	https://register.edx.org/verizon?&utm_source=vsf_e_paid-ggl-ubrnd&utm_medium=cpc&utm_campaign=GGL%7CEDX%7CAI%7CVSF%7CSEM%7CNBD%7CUS&gad_source=1&gclid=Cj0KCQjwj4K5BhDYARIsAD1Ly2pyzBeRgn77ojfsMTtg7r8SaT93hKq6Ob_f1zsDj7Kj8dy-Mn9a7tMaAng3EALw_wcB&_gl=11dphwek_gcl_awR0NMLjE3MzAyMTU4NDAuQ2owS0NRandqNEs1QmhEWUFSSXNBRDFMeTJweXpCZVJnbjc3b2pmc01UdGc3cjhTYVQ5M2hLcTZPYl9mMXpzRGo3S2o4ZHktTW45YTd0TWFBbmczRUFMd193Y0I._gcl_auMzQxNzQzMjE1LjE3MzAyMTU4Mzg._gaMTE0OTEyNzE2Ni4xNzMwMjE1ODM5_ga_D3KS4KMDT0*MTczMDIxNTgzOS4xLjAuMTczMDIxNTgzOS42MC4wLjA	Get hash	malicious	Unknown	Browse	192.229.221.95
	https://schiller.life/	Get hash	malicious	HTMLPhisher	Browse	192.229.221.95

ASNs

⊘No context

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	Paiement.eml	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	https://pub-6838e3dd185d4df89d3bb3eabe6469a4.r2.dev/index.html#	Get hash	malicious	Unknown	Browse	13.107.246.45
	https:/click.mailchimp.com/track/click/30010842/docsend.com?p=eyJzIjoiT2RaN0hwNHlyY2E3VXl5TWcwMlA2eFpHVlN3IiwidiI6MSwicCI6IntcInVcIjozMDAxMDg0MixcInZcIjoxLFwidXJsXCI6XCJodHRwczpcXFwvXFxcL2RvY3NlbmQuY29tXFxcL3ZpZXdcXFwvZzZnYzZjazdtNHlkYTRpa1wiLFwiaWRcIjpcImNhZDg3NzI1Y2UzMjRiMzI4Yzk1ZGVkYWUyMzc4ZTZjXCIsXCJ1cmxfaWRzXCI6W1wiYzE5ZWU5NGJiMzA5YmZhOGQ2MDU3OGI1Mjk5NTFmOWE4NDQ0ODNhYVwiXX0ifQ#steven.davis@tu.edu	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	13.107.246.45
	https://jksvb.jnkpavers.com/?tZbf66=Tyw6/shhfkanxgsdff/&c=E,1,NSDuZCxGQc6fw5XDGugSpFh6vhsurKgNKuRtQYEvQblaeko7ktmOqkToectUm_5S_qV7IGwrOynGYnQ5TFSCJymAV2tc5TeuFegn96UyDZPOEKOyHYw,&typo=1	Get hash	malicious	Unknown	Browse	13.107.246.45
	https://share.hsforms.com/11zbkP7dfTBO0LgTS5dCN0Asixz3	Get hash	malicious	Mamba2FA	Browse	13.107.246.45
	Access Audits -System #6878.msg	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	https://app.pandadoc.com/document/v2?token=abf6587d58630a40e08d0ad15de8202e2e9c4af5	Get hash	malicious	Unknown	Browse	13.107.246.45
	(No subject) (100).eml	Get hash	malicious	Tycoon2FA	Browse	13.107.246.45
	67JPbskewt.exe	Get hash	malicious	Unknown	Browse	13.107.246.45

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	9078880
Entropy (8bit):	7.99985578558253
Encrypted:	true
SSDEEP:	196608:EEdocR2KHRu24s7r1SpQnAHwcPuYl/cQsHwkM+gAtf1u1gts+APa4VRS4sD:f3c1zu6myyHwx0tfg+s3RO
MD5:	5CB83A1A92E59213A76D94E436AE3AC6
SHA1:	C020E5B513007CA7D03BA4848223FE3ABAD0ED46
SHA-256:	EFF4F9C2020A0A07E60EBD0DB6766B8AADF63B09BE0B21589654E8C638E423AF
SHA-512:	DBC2DBCF23E38AC26DA4132BBC254F8DB6D975936AE91356D4D31E9B4C88641133196BBCA6DCCFB87276883DCCDB7506E995FCE226F024C59D5E8C7EE990082D
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...b.!g.................N... .......l... ........@.. ....................................`..................................k..S....................p..`............................................................ ............... ..H............text....L... ...N.................. ..`.rsrc................P..............@..@.reloc...............n..............@..B.................k......H.......,]..............t"...:...........................................~....%:....&~..........s....%.....s....(.....s...........(.....~....:....r...p.....()...o....s/........~.....~...........j(....r/..p~....o0...t....*..0..:..........(..........&.....9....(......r...p(....o.....r[..p(....o......o.....o....o.....s..........s............io .....o!.....+.....9......o"......9......o".....9.....o".......(#.....s$...%r...po%...%r...po%.......o&...o'...9Y.....o(........8@..

C:\Users\user\AppData\Local\cvchost.exe:Zone.Identifier

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	26
Entropy (8bit):	3.95006375643621
Encrypted:	false
SSDEEP:	3:ggPYV:rPYV
MD5:	187F488E27DB4AF347237FE461A079AD
SHA1:	6693BA299EC1881249D59262276A0D2CB21F8E64
SHA-256:	255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309
SHA-512:	89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E
Malicious:	true
Reputation:	high, very likely benign file
Preview:	[ZoneTransfer]....ZoneId=0

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\cvchost.vbs

Download File

Process:	C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	80
Entropy (8bit):	4.664386108210763
Encrypted:	false
SSDEEP:	3:FER/n0eFHHot+kiE2J5GTaDLACHn:FER/lFHIwkn23G4J
MD5:	2B1CF4F845ED93FFD047D27C9DF3CC07
SHA1:	F9558B56926FCD6F11625C6DC8DE8879BF20BADA
SHA-256:	723245B1F04D1E0198AF52C18A75C0FC7373FD3DBCB8DD4B4D0FB8AFC5D1F952
SHA-512:	D2D173B31C144190137C0CD4BDD918A87AF1419A3217414B94EBF08462F290E7622423E9E10843F358C785BD9E51AA374C8B0605ADFC67B9C70B430B7CF921C7
Malicious:	true
Reputation:	low
Preview:	CreateObject("WScript.Shell").Run """C:\Users\user\AppData\Local\cvchost.exe"""

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	7.99985578558253
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 50.01% Win32 Executable (generic) a (10002005/4) 49.97% Generic Win/DOS Executable (2004/3) 0.01% DOS Executable Generic (2002/1) 0.01% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe
File size:	9'078'880 bytes
MD5:	5cb83a1a92e59213a76d94e436ae3ac6
SHA1:	c020e5b513007ca7d03ba4848223fe3abad0ed46
SHA256:	eff4f9c2020a0a07e60ebd0db6766b8aadf63b09be0b21589654e8c638e423af
SHA512:	dbc2dbcf23e38ac26da4132bbc254f8db6d975936ae91356d4d31e9b4c88641133196bbca6dccfb87276883dccdb7506e995fce226f024c59d5e8c7ee990082d
SSDEEP:	196608:EEdocR2KHRu24s7r1SpQnAHwcPuYl/cQsHwkM+gAtf1u1gts+APa4VRS4sD:f3c1zu6myyHwx0tfg+s3RO
TLSH:	139633AE97540FC5F954E6F7A24DA00F660B01892B01E974E4F271977CE9AF833B8724
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...b.!g.................N... .......l... ........@.. ....................................`................................

File Icon


Icon Hash:	1016339396b696b3

Static PE Info

General

Entrypoint:	0xca6c0e
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x67210762 [Tue Oct 29 16:03:46 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Authenticode Signature

Signature Valid:	false
Signature Issuer:	CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB
Signature Validation Error:	The digital signature of the object did not verify
Error Number:	-2146869232
Not Before, Not After	12/09/2014 01:00:00 13/09/2019 00:59:59
Subject Chain	CN=Nir Sofer, O=Nir Sofer, STREET=5 Hashoshanim st., L=Ramat Gan, S=Gush Dan, PostalCode=52583, C=IL
Version:	3
Thumbprint MD5:	20080320FBD46305C5578175AB0A9EAA
Thumbprint SHA-1:	A80BAEDA573DF2712F23A41857E648475EAC9BA5
Thumbprint SHA-256:	EAFCB355770E7E64E5559482605D7801F30FEE6B159BF91196D5C9DC6B2419AC
Serial:	1AF0660E837A35A2CD92EC613FC15DB8

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x8a6bb8	0x53	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x8a8000	0x1c2e	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x8a7000	0x1860
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x8aa000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x8a4c14	0x8a4e00	415e6354a864e04267a38f09d60cbade	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0x8a8000	0x1c2e	0x1e00	a1ec996d0455bbe76489cc82b06b073f	False	0.26653645833333334	data	3.6574778738055618	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x8aa000	0xc	0x200	b9aa7e2914ccd6a680767174608b8269	False	0.044921875	data	0.10191042566270775	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	ZLIB Complexity
RT_ICON	0x8a8160	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 0	0.16909005628517823
RT_ICON	0x8a9208	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 0	0.46365248226950356
RT_GROUP_ICON	0x8a9670	0x22	data	0.9705882352941176
RT_VERSION	0x8a9694	0x3b0	data	0.4067796610169492
RT_MANIFEST	0x8a9a44	0x1ea	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	0.5489795918367347

Imports

DLL	Import
mscoree.dll	_CorExeMain

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 22:36:07.046137094 CET	49675	443	192.168.2.4	173.222.162.32
Oct 30, 2024 22:36:47.843193054 CET	49730	80	192.168.2.4	172.64.149.23
Oct 30, 2024 22:36:47.843236923 CET	49732	80	192.168.2.4	104.18.38.233
Oct 30, 2024 22:36:47.843282938 CET	49731	80	192.168.2.4	172.64.149.23
Oct 30, 2024 22:36:47.843367100 CET	49733	80	192.168.2.4	172.64.149.23
Oct 30, 2024 22:36:47.849559069 CET	80	49730	172.64.149.23	192.168.2.4
Oct 30, 2024 22:36:47.849616051 CET	49730	80	192.168.2.4	172.64.149.23
Oct 30, 2024 22:36:47.850287914 CET	80	49732	104.18.38.233	192.168.2.4
Oct 30, 2024 22:36:47.850342035 CET	80	49731	172.64.149.23	192.168.2.4
Oct 30, 2024 22:36:47.850353003 CET	80	49733	172.64.149.23	192.168.2.4
Oct 30, 2024 22:36:47.850383043 CET	49732	80	192.168.2.4	104.18.38.233
Oct 30, 2024 22:36:47.850404978 CET	49731	80	192.168.2.4	172.64.149.23
Oct 30, 2024 22:36:47.850424051 CET	49733	80	192.168.2.4	172.64.149.23
Oct 30, 2024 22:37:00.001123905 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:00.001208067 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:00.001300097 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:00.001584053 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:00.001619101 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:00.757879019 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:00.757957935 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:00.760494947 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:00.760512114 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:00.760751963 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:00.773387909 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:00.815326929 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.022989035 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.023014069 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.023065090 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.023113966 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:01.023160934 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.023192883 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:01.023214102 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:01.146306038 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.146327972 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.146429062 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:01.146455050 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.146523952 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:01.263724089 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.263746023 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.263802052 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:01.263832092 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.263864040 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:01.263911009 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:01.382519960 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.382545948 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.382617950 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:01.382644892 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.382735014 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:01.502233028 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.502253056 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.502335072 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:01.502352953 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.502408981 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:01.621699095 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.621737957 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.621786118 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:01.621824026 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.621860027 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:01.621896029 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:01.741334915 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.741357088 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.741453886 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:01.741475105 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.741528988 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:01.860728025 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.860748053 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.860791922 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:01.860804081 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.860831976 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:01.860853910 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:01.864767075 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.864789009 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.864839077 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:01.864851952 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.864880085 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:01.864917994 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:01.984241962 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.984258890 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.984386921 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:01.984428883 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:01.984493971 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:02.100974083 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:02.100991964 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:02.101119995 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:02.101136923 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:02.101200104 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:02.219969988 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:02.219990969 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:02.220143080 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:02.220168114 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:02.220228910 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:02.224215031 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:02.224229097 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:02.224319935 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:02.224334955 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:02.224390030 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:02.264321089 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:02.264391899 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:02.264431000 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:02.264463902 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:02.264607906 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:02.264607906 CET	49741	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:02.264646053 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:02.264671087 CET	443	49741	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:02.314795971 CET	49743	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:02.314807892 CET	49742	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:02.314840078 CET	443	49742	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:02.314846992 CET	443	49743	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:02.314934969 CET	49742	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:02.315459013 CET	49742	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:02.315469027 CET	443	49742	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:02.315489054 CET	49743	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:02.315573931 CET	49743	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:02.315619946 CET	443	49743	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:02.316656113 CET	49744	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:02.316688061 CET	443	49744	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:02.316745996 CET	49744	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:02.316864967 CET	49744	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:02.316881895 CET	443	49744	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:02.317688942 CET	49745	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:02.317751884 CET	443	49745	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:02.317820072 CET	49745	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:02.318208933 CET	49746	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:02.318217039 CET	443	49746	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:02.318315029 CET	49745	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:02.318332911 CET	49746	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:02.318347931 CET	443	49745	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:02.318423986 CET	49746	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:02.318435907 CET	443	49746	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.040998936 CET	443	49743	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.041574955 CET	49743	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.041621923 CET	443	49743	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.042066097 CET	49743	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.042081118 CET	443	49743	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.046700954 CET	443	49742	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.047141075 CET	49742	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.047159910 CET	443	49742	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.047528028 CET	49742	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.047533989 CET	443	49742	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.056462049 CET	443	49746	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.056837082 CET	49746	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.056875944 CET	443	49746	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.057214022 CET	49746	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.057219982 CET	443	49746	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.059503078 CET	443	49745	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.059844017 CET	49745	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.059897900 CET	443	49745	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.060195923 CET	49745	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.060208082 CET	443	49745	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.104624033 CET	443	49744	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.104969025 CET	49744	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.105001926 CET	443	49744	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.105309963 CET	49744	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.105317116 CET	443	49744	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.171297073 CET	443	49743	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.171673059 CET	443	49743	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.171736956 CET	49743	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.176723957 CET	443	49742	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.176775932 CET	443	49742	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.176836967 CET	49742	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.176861048 CET	443	49742	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.176909924 CET	49742	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.176913023 CET	443	49742	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.177108049 CET	49742	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.182492971 CET	49743	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.182533026 CET	443	49743	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.182564020 CET	49743	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.182581902 CET	443	49743	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.183945894 CET	49742	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.183958054 CET	443	49742	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.183976889 CET	49742	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.183983088 CET	443	49742	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.189867020 CET	443	49746	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.189888000 CET	443	49746	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.189939022 CET	443	49746	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.189958096 CET	49746	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.189995050 CET	49746	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.191620111 CET	49747	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.191723108 CET	443	49747	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.191808939 CET	49747	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.192702055 CET	443	49745	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.192775011 CET	49748	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.192836046 CET	443	49748	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.192859888 CET	443	49745	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.192924976 CET	49748	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.192959070 CET	49746	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.192965984 CET	49745	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.192987919 CET	443	49746	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.193002939 CET	49746	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.193011045 CET	443	49746	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.194508076 CET	49748	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.194540977 CET	443	49748	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.195353985 CET	49747	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.195383072 CET	443	49747	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.195724010 CET	49745	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.195744038 CET	443	49745	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.195802927 CET	49745	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.195816040 CET	443	49745	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.199301004 CET	49749	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.199323893 CET	443	49749	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.199448109 CET	49749	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.199680090 CET	49749	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.199690104 CET	443	49749	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.201616049 CET	49750	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.201692104 CET	443	49750	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.201775074 CET	49750	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.201893091 CET	49750	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.201925993 CET	443	49750	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.244199038 CET	443	49744	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.244226933 CET	443	49744	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.244282961 CET	49744	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.244307995 CET	443	49744	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.244359016 CET	49744	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.244364023 CET	443	49744	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.244496107 CET	49744	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.244731903 CET	49744	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.244748116 CET	443	49744	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.244760036 CET	49744	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.244770050 CET	443	49744	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.246870041 CET	49751	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.246886015 CET	443	49751	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.247071028 CET	49751	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.247247934 CET	49751	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.247258902 CET	443	49751	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.928324938 CET	443	49747	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.928962946 CET	49747	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.929020882 CET	443	49747	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.929492950 CET	49747	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.929512024 CET	443	49747	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.938822031 CET	443	49750	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.939341068 CET	49750	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.939383984 CET	443	49750	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.939826012 CET	49750	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.939831972 CET	443	49750	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.944324017 CET	443	49749	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.944672108 CET	49749	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.944694996 CET	443	49749	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.945012093 CET	49749	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.945015907 CET	443	49749	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.986792088 CET	443	49751	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.987263918 CET	49751	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.987293005 CET	443	49751	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:03.987708092 CET	49751	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:03.987725019 CET	443	49751	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.070487022 CET	443	49747	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.070686102 CET	443	49747	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.070764065 CET	49747	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.070960045 CET	49747	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.071010113 CET	443	49747	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.071043015 CET	49747	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.071058989 CET	443	49747	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.071218967 CET	443	49750	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.071430922 CET	443	49750	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.071676016 CET	49750	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.073180914 CET	49750	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.073209047 CET	443	49750	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.073236942 CET	49750	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.073251009 CET	443	49750	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.074918985 CET	443	49749	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.075164080 CET	443	49749	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.075222969 CET	49749	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.075730085 CET	49749	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.075748920 CET	443	49749	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.075763941 CET	49749	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.075772047 CET	443	49749	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.076566935 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.076601028 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.076781034 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.077234983 CET	49753	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.077276945 CET	443	49753	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.077428102 CET	49753	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.077800989 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.077816963 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.078370094 CET	49754	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.078387022 CET	443	49754	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.078455925 CET	49754	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.078577995 CET	49754	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.078603029 CET	443	49754	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.078699112 CET	49753	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.078712940 CET	443	49753	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.119079113 CET	443	49751	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.119143963 CET	443	49751	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.119369030 CET	49751	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.119390965 CET	49751	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.119399071 CET	443	49751	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.119412899 CET	49751	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.119417906 CET	443	49751	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.121906996 CET	49755	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.121928930 CET	443	49755	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.122011900 CET	49755	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.122176886 CET	49755	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.122185946 CET	443	49755	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.330192089 CET	443	49748	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.330831051 CET	49748	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.330852985 CET	443	49748	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.331360102 CET	49748	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.331371069 CET	443	49748	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.468950033 CET	443	49748	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.469073057 CET	443	49748	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.469144106 CET	49748	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.469338894 CET	49748	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.469383001 CET	443	49748	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.469413996 CET	49748	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.469430923 CET	443	49748	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.472551107 CET	49756	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.472582102 CET	443	49756	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.472760916 CET	49756	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.472948074 CET	49756	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.472959042 CET	443	49756	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.814758062 CET	443	49754	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.815520048 CET	49754	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.815542936 CET	443	49754	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.815973997 CET	49754	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.815979004 CET	443	49754	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.820213079 CET	443	49753	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.820615053 CET	49753	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.820636988 CET	443	49753	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.821106911 CET	49753	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.821113110 CET	443	49753	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.824708939 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.825041056 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.825050116 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.825388908 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.825393915 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.857315063 CET	443	49755	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.857657909 CET	49755	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.857672930 CET	443	49755	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.858010054 CET	49755	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.858016014 CET	443	49755	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.947160959 CET	443	49754	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.947243929 CET	443	49754	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.947329998 CET	49754	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.947578907 CET	49754	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.947578907 CET	49754	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.947599888 CET	443	49754	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.947609901 CET	443	49754	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.950851917 CET	49757	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.950944901 CET	443	49757	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.951025009 CET	49757	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.951183081 CET	49757	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.951215029 CET	443	49757	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.951395988 CET	443	49753	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.951618910 CET	443	49753	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.951673985 CET	49753	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.951704979 CET	49753	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.951704979 CET	49753	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.951720953 CET	443	49753	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.951733112 CET	443	49753	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.953967094 CET	49758	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.954005003 CET	443	49758	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.954082012 CET	49758	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.954231024 CET	49758	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.954247952 CET	443	49758	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.958573103 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.958821058 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.958877087 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.958919048 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.958919048 CET	49752	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.958936930 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.958947897 CET	443	49752	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.960938931 CET	49759	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.960994959 CET	443	49759	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.961155891 CET	49759	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.961314917 CET	49759	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.961345911 CET	443	49759	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.990128994 CET	443	49755	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.990227938 CET	443	49755	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.990293026 CET	49755	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.990410089 CET	49755	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.990423918 CET	443	49755	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.990436077 CET	49755	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.990442991 CET	443	49755	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.992805958 CET	49760	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.992851973 CET	443	49760	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:04.992921114 CET	49760	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.993074894 CET	49760	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:04.993092060 CET	443	49760	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.213593006 CET	443	49756	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.214131117 CET	49756	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.214148045 CET	443	49756	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.214636087 CET	49756	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.214641094 CET	443	49756	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.344958067 CET	443	49756	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.345012903 CET	443	49756	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.345073938 CET	49756	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.345350027 CET	49756	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.345370054 CET	443	49756	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.345381021 CET	49756	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.345386028 CET	443	49756	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.349483967 CET	49761	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.349503040 CET	443	49761	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.349644899 CET	49761	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.351002932 CET	49761	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.351017952 CET	443	49761	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.690378904 CET	443	49757	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.690931082 CET	49757	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.690973997 CET	443	49757	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.691418886 CET	49757	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.691435099 CET	443	49757	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.700045109 CET	443	49759	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.700439930 CET	49759	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.700457096 CET	443	49759	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.700890064 CET	49759	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.700901985 CET	443	49759	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.730716944 CET	443	49760	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.731113911 CET	49760	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.731138945 CET	443	49760	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.731575012 CET	49760	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.731580973 CET	443	49760	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.821280956 CET	443	49757	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.821405888 CET	443	49757	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.821559906 CET	49757	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.821610928 CET	49757	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.821610928 CET	49757	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.821633101 CET	443	49757	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.821645975 CET	443	49757	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.824582100 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.824618101 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.824835062 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.824886084 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.824891090 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.848288059 CET	443	49759	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.848376036 CET	443	49759	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.848473072 CET	49759	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.848509073 CET	49759	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.848509073 CET	49759	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.848520994 CET	443	49759	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.848531008 CET	443	49759	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.850739002 CET	49763	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.850781918 CET	443	49763	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.850857019 CET	49763	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.850982904 CET	49763	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.850996971 CET	443	49763	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.864681005 CET	443	49760	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.866130114 CET	443	49760	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.866179943 CET	49760	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.866204977 CET	49760	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.866213083 CET	443	49760	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.866225004 CET	49760	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.866229057 CET	443	49760	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.868871927 CET	49764	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.868901014 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:05.868968010 CET	49764	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.869076967 CET	49764	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:05.869091034 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.099718094 CET	443	49761	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.103178978 CET	49761	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.103219986 CET	443	49761	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.103667974 CET	49761	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.103678942 CET	443	49761	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.232325077 CET	443	49761	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.232498884 CET	443	49761	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.233077049 CET	49761	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.233367920 CET	49761	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.233386993 CET	443	49761	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.233433962 CET	49761	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.233449936 CET	443	49761	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.500823975 CET	49765	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.500870943 CET	443	49765	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.502666950 CET	49765	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.503586054 CET	49765	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.503602982 CET	443	49765	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.556175947 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.556775093 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.556799889 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.557260990 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.557265997 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.610055923 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.613145113 CET	49764	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.613193989 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.613656044 CET	49764	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.613670111 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.624950886 CET	443	49763	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.629196882 CET	49763	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.629256010 CET	443	49763	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.629694939 CET	49763	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.629708052 CET	443	49763	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.687649012 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.687767982 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.687832117 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.688029051 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.688050032 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.688060045 CET	49762	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.688065052 CET	443	49762	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.691332102 CET	49766	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.691407919 CET	443	49766	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.691492081 CET	49766	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.691662073 CET	49766	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.691689014 CET	443	49766	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.696990967 CET	443	49758	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.697412014 CET	49758	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.697423935 CET	443	49758	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.697901964 CET	49758	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.697909117 CET	443	49758	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.742455959 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.742584944 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.742660046 CET	49764	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.742721081 CET	49764	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.742749929 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.742775917 CET	49764	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.742789984 CET	443	49764	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.745412111 CET	49767	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.745433092 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.745493889 CET	49767	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.745726109 CET	49767	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.745738983 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.763417006 CET	443	49763	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.763545036 CET	443	49763	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.763600111 CET	49763	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.763652086 CET	49763	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.763675928 CET	443	49763	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.763690948 CET	49763	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.763698101 CET	443	49763	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.765750885 CET	49768	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.765784979 CET	443	49768	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.765861988 CET	49768	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.765978098 CET	49768	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.765990019 CET	443	49768	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.852144957 CET	443	49758	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.852493048 CET	443	49758	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.852550983 CET	49758	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.852586985 CET	49758	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.852595091 CET	443	49758	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.852603912 CET	49758	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.852607965 CET	443	49758	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.854794025 CET	49769	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.854825020 CET	443	49769	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:06.854887009 CET	49769	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.855003119 CET	49769	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:06.855012894 CET	443	49769	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.233464956 CET	443	49765	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.234160900 CET	49765	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.234174013 CET	443	49765	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.234652996 CET	49765	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.234658957 CET	443	49765	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.372227907 CET	443	49765	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.372896910 CET	443	49765	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.372989893 CET	49765	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.373024940 CET	49765	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.373038054 CET	443	49765	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.373053074 CET	49765	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.373058081 CET	443	49765	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.376341105 CET	49770	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.376372099 CET	443	49770	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.376461983 CET	49770	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.376602888 CET	49770	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.376631021 CET	443	49770	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.422188997 CET	443	49766	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.422660112 CET	49766	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.422718048 CET	443	49766	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.423157930 CET	49766	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.423172951 CET	443	49766	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.497770071 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.498239040 CET	49767	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.498249054 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.498702049 CET	49767	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.498708010 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.502299070 CET	443	49768	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.502613068 CET	49768	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.502629042 CET	443	49768	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.503108978 CET	49768	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.503114939 CET	443	49768	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.552707911 CET	443	49766	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.552767992 CET	443	49766	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.552839994 CET	49766	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.553088903 CET	49766	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.553128958 CET	443	49766	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.553157091 CET	49766	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.553170919 CET	443	49766	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.556098938 CET	49771	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.556143999 CET	443	49771	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.556231022 CET	49771	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.556395054 CET	49771	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.556412935 CET	443	49771	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.599896908 CET	443	49769	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.600487947 CET	49769	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.600501060 CET	443	49769	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.600985050 CET	49769	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.600991011 CET	443	49769	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.630804062 CET	443	49768	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.631042004 CET	443	49768	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.631112099 CET	49768	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.631162882 CET	49768	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.631181002 CET	443	49768	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.631195068 CET	49768	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.631201029 CET	443	49768	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.632590055 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.632663965 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.632742882 CET	49767	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.632858992 CET	49767	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.632879019 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.632894039 CET	49767	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.632900953 CET	443	49767	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.635277033 CET	49772	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.635324001 CET	443	49772	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.635387897 CET	49772	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.635526896 CET	49772	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.635545015 CET	443	49772	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.636349916 CET	49773	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.636388063 CET	443	49773	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.636460066 CET	49773	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.636857033 CET	49773	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.636873960 CET	443	49773	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.735806942 CET	443	49769	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.735871077 CET	443	49769	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.735923052 CET	49769	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.736372948 CET	49769	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.736387968 CET	443	49769	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.736402035 CET	49769	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.736407995 CET	443	49769	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.740062952 CET	49774	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.740103006 CET	443	49774	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:07.740158081 CET	49774	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.740308046 CET	49774	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:07.740323067 CET	443	49774	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.113728046 CET	443	49770	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.114476919 CET	49770	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.114496946 CET	443	49770	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.115000010 CET	49770	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.115005970 CET	443	49770	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.248640060 CET	443	49770	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.248794079 CET	443	49770	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.249103069 CET	49770	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.249103069 CET	49770	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.249138117 CET	49770	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.249156952 CET	443	49770	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.252545118 CET	49775	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.252628088 CET	443	49775	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.252724886 CET	49775	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.252863884 CET	49775	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.252897024 CET	443	49775	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.301204920 CET	443	49771	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.301990986 CET	49771	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.302016973 CET	443	49771	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.302503109 CET	49771	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.302509069 CET	443	49771	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.384013891 CET	443	49773	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.387046099 CET	49773	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.387094975 CET	443	49773	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.387550116 CET	49773	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.387562990 CET	443	49773	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.389406919 CET	443	49772	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.391171932 CET	49772	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.391195059 CET	443	49772	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.391573906 CET	49772	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.391581059 CET	443	49772	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.432986975 CET	443	49771	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.433248043 CET	443	49771	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.433312893 CET	49771	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.433345079 CET	49771	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.433362961 CET	443	49771	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.433377028 CET	49771	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.433383942 CET	443	49771	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.436177969 CET	49776	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.436201096 CET	443	49776	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.436281919 CET	49776	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.436460972 CET	49776	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.436476946 CET	443	49776	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.515548944 CET	443	49773	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.516168118 CET	443	49773	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.518589020 CET	49773	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.520807028 CET	443	49774	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.522145033 CET	49773	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.522165060 CET	443	49773	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.522185087 CET	49773	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.522192955 CET	443	49773	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.522424936 CET	443	49772	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.522680998 CET	49774	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.522696972 CET	443	49774	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.522703886 CET	443	49772	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.522754908 CET	49772	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.523158073 CET	49774	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.523161888 CET	443	49774	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.525712967 CET	49772	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.525726080 CET	443	49772	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.525736094 CET	49772	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.525742054 CET	443	49772	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.528595924 CET	49777	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.528625965 CET	443	49777	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.528690100 CET	49777	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.528834105 CET	49778	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.528862000 CET	443	49778	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.529211998 CET	49777	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.529227972 CET	443	49777	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.529248953 CET	49778	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.529515028 CET	49778	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.529525995 CET	443	49778	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.661144972 CET	443	49774	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.661366940 CET	443	49774	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.661446095 CET	49774	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.661744118 CET	49774	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.661761999 CET	443	49774	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.661772013 CET	49774	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.661777020 CET	443	49774	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.666018963 CET	49779	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.666054010 CET	443	49779	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.666115046 CET	49779	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.666409016 CET	49779	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:08.666421890 CET	443	49779	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:08.979882956 CET	443	49775	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.030601978 CET	49775	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.108254910 CET	49775	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.108288050 CET	443	49775	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.109080076 CET	49775	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.109093904 CET	443	49775	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.185890913 CET	443	49776	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.188477039 CET	49776	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.188549042 CET	443	49776	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.189269066 CET	49776	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.189282894 CET	443	49776	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.234885931 CET	443	49775	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.235632896 CET	443	49775	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.235688925 CET	49775	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.236804962 CET	49775	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.236824989 CET	443	49775	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.236857891 CET	49775	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.236865997 CET	443	49775	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.241905928 CET	49780	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.241950035 CET	443	49780	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.242012978 CET	49780	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.243772984 CET	49780	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.243804932 CET	443	49780	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.270189047 CET	443	49778	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.271370888 CET	49778	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.271414042 CET	443	49778	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.271827936 CET	49778	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.271843910 CET	443	49778	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.283488989 CET	443	49777	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.283966064 CET	49777	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.283978939 CET	443	49777	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.284651041 CET	49777	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.284655094 CET	443	49777	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.319894075 CET	443	49776	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.319947004 CET	443	49776	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.320039034 CET	49776	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.320406914 CET	49776	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.320422888 CET	443	49776	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.320457935 CET	49776	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.320465088 CET	443	49776	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.323656082 CET	49781	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.323698044 CET	443	49781	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.323774099 CET	49781	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.324209929 CET	49781	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.324224949 CET	443	49781	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.400943041 CET	443	49778	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.401021004 CET	443	49778	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.401092052 CET	49778	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.401806116 CET	49778	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.401824951 CET	443	49778	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.401842117 CET	49778	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.401849985 CET	443	49778	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.406909943 CET	443	49779	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.420758009 CET	49782	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.420806885 CET	443	49782	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.420886040 CET	49782	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.422228098 CET	49779	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.422239065 CET	443	49779	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.422389984 CET	443	49777	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.422457933 CET	443	49777	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.422530890 CET	49777	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.423333883 CET	49779	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.423340082 CET	443	49779	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.423629999 CET	49782	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.423655987 CET	443	49782	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.423945904 CET	49777	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.423964024 CET	443	49777	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.423974037 CET	49777	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.423979998 CET	443	49777	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.427685976 CET	49783	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.427717924 CET	443	49783	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.427791119 CET	49783	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.427958965 CET	49783	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.427973986 CET	443	49783	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.551987886 CET	443	49779	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.552053928 CET	443	49779	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.552139044 CET	49779	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.553102016 CET	49779	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.553102016 CET	49779	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.553118944 CET	443	49779	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.553128004 CET	443	49779	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.559937000 CET	49784	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.559976101 CET	443	49784	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.560053110 CET	49784	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.560427904 CET	49784	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.560455084 CET	443	49784	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.980386019 CET	443	49780	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.982500076 CET	49780	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.982572079 CET	443	49780	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:09.982995033 CET	49780	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:09.983010054 CET	443	49780	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.065368891 CET	443	49781	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.066042900 CET	49781	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.066056967 CET	443	49781	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.066549063 CET	49781	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.066554070 CET	443	49781	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.111975908 CET	443	49780	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.112082005 CET	443	49780	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.112174988 CET	49780	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.112446070 CET	49780	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.112485886 CET	443	49780	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.112523079 CET	49780	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.112540007 CET	443	49780	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.116108894 CET	49785	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.116158009 CET	443	49785	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.116240978 CET	49785	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.116467953 CET	49785	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.116486073 CET	443	49785	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.170356989 CET	443	49783	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.170926094 CET	49783	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.170948029 CET	443	49783	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.171761036 CET	49783	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.171766043 CET	443	49783	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.171854973 CET	443	49782	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.172215939 CET	49782	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.172277927 CET	443	49782	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.172681093 CET	49782	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.172694921 CET	443	49782	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.198771954 CET	443	49781	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.198867083 CET	443	49781	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.198966980 CET	49781	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.199045897 CET	49781	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.199060917 CET	443	49781	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.199070930 CET	49781	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.199076891 CET	443	49781	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.202527046 CET	49786	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.202569962 CET	443	49786	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.202651978 CET	49786	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.202939987 CET	49786	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.202954054 CET	443	49786	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.302529097 CET	443	49783	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.302799940 CET	443	49783	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.302959919 CET	49783	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.303122997 CET	49783	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.303128004 CET	443	49784	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.303144932 CET	443	49783	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.303159952 CET	49783	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.303167105 CET	443	49783	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.304582119 CET	49784	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.304615974 CET	443	49784	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.304913044 CET	443	49782	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.305093050 CET	443	49782	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.305161953 CET	49782	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.305399895 CET	49784	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.305408001 CET	443	49784	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.305543900 CET	49782	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.305587053 CET	443	49782	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.305615902 CET	49782	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.305632114 CET	443	49782	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.308288097 CET	49787	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.308325052 CET	443	49787	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.308460951 CET	49787	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.308626890 CET	49787	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.308649063 CET	443	49787	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.309427977 CET	49788	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.309465885 CET	443	49788	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.309593916 CET	49788	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.309731960 CET	49788	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.309745073 CET	443	49788	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.440644026 CET	443	49784	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.440838099 CET	443	49784	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.440908909 CET	49784	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.453167915 CET	49784	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.453198910 CET	443	49784	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.453218937 CET	49784	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.453226089 CET	443	49784	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.462543964 CET	49789	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.462625980 CET	443	49789	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.462929964 CET	49789	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.463088989 CET	49789	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.463124037 CET	443	49789	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.868870974 CET	443	49785	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.869395018 CET	49785	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.869431973 CET	443	49785	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.870112896 CET	49785	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.870120049 CET	443	49785	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.942682028 CET	443	49786	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.943224907 CET	49786	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.943342924 CET	443	49786	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:10.943866014 CET	49786	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:10.943882942 CET	443	49786	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.004079103 CET	443	49785	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.004225016 CET	443	49785	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.004283905 CET	49785	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.004579067 CET	49785	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.004595995 CET	443	49785	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.004601955 CET	49785	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.004607916 CET	443	49785	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.007618904 CET	49790	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.007658958 CET	443	49790	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.007760048 CET	49790	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.007936954 CET	49790	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.007950068 CET	443	49790	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.044399023 CET	443	49788	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.045186043 CET	49788	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.045224905 CET	443	49788	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.045773029 CET	49788	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.045780897 CET	443	49788	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.075880051 CET	443	49786	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.075959921 CET	443	49786	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.076071024 CET	49786	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.076271057 CET	49786	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.076313972 CET	443	49786	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.076342106 CET	49786	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.076356888 CET	443	49786	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.079914093 CET	49791	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.079972029 CET	443	49791	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.080040932 CET	49791	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.080210924 CET	49791	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.080226898 CET	443	49791	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.108542919 CET	443	49787	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.109039068 CET	49787	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.109055042 CET	443	49787	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.109570980 CET	49787	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.109575987 CET	443	49787	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.182547092 CET	443	49788	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.182821035 CET	443	49788	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.182874918 CET	49788	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.182912111 CET	49788	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.182933092 CET	443	49788	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.182944059 CET	49788	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.182949066 CET	443	49788	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.186077118 CET	49792	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.186141968 CET	443	49792	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.186259985 CET	49792	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.186418056 CET	49792	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.186450005 CET	443	49792	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.222048998 CET	443	49789	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.223347902 CET	49789	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.223371983 CET	443	49789	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.223855972 CET	49789	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.223862886 CET	443	49789	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.248306036 CET	443	49787	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.248416901 CET	443	49787	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.248467922 CET	49787	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.248780966 CET	49787	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.248799086 CET	443	49787	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.248811007 CET	49787	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.248816013 CET	443	49787	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.263679028 CET	49793	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.263710976 CET	443	49793	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.263773918 CET	49793	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.264657974 CET	49793	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.264669895 CET	443	49793	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.357187986 CET	443	49789	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.357477903 CET	443	49789	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.357539892 CET	49789	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.358398914 CET	49789	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.358418941 CET	443	49789	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.358634949 CET	49789	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.358642101 CET	443	49789	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.362354040 CET	49794	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.362412930 CET	443	49794	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.362615108 CET	49794	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.363388062 CET	49794	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.363419056 CET	443	49794	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.746746063 CET	443	49790	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.760312080 CET	49790	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.760348082 CET	443	49790	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.763022900 CET	49790	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.763029099 CET	443	49790	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.807260990 CET	443	49791	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.807848930 CET	49791	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.807888031 CET	443	49791	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.808372974 CET	49791	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.808379889 CET	443	49791	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.892868042 CET	443	49790	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.893109083 CET	443	49790	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.893167019 CET	49790	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.893277884 CET	49790	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.893297911 CET	443	49790	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.893307924 CET	49790	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.893312931 CET	443	49790	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.896359921 CET	49795	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.896414042 CET	443	49795	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.896471977 CET	49795	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.897195101 CET	49795	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.897209883 CET	443	49795	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.936868906 CET	443	49792	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.937761068 CET	49792	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.937774897 CET	443	49792	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.938235998 CET	49792	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.938240051 CET	443	49792	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.985636950 CET	443	49791	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.985793114 CET	443	49791	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.985877037 CET	49791	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.986061096 CET	49791	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.986061096 CET	49791	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.986110926 CET	443	49791	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.986138105 CET	443	49791	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.989288092 CET	49796	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.989330053 CET	443	49796	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:11.989401102 CET	49796	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.989548922 CET	49796	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:11.989558935 CET	443	49796	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.016362906 CET	443	49793	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.017195940 CET	49793	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.017218113 CET	443	49793	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.017693996 CET	49793	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.017699003 CET	443	49793	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.070096016 CET	443	49792	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.070269108 CET	443	49792	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.070334911 CET	49792	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.070475101 CET	49792	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.070533037 CET	443	49792	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.070560932 CET	49792	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.070575953 CET	443	49792	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.073512077 CET	49797	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.073585033 CET	443	49797	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.073669910 CET	49797	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.073836088 CET	49797	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.073870897 CET	443	49797	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.105914116 CET	443	49794	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.106468916 CET	49794	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.106496096 CET	443	49794	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.106973886 CET	49794	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.106987000 CET	443	49794	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.149030924 CET	443	49793	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.149811029 CET	443	49793	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.149868011 CET	49793	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.149920940 CET	49793	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.149930954 CET	443	49793	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.149940968 CET	49793	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.149945021 CET	443	49793	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.153891087 CET	49798	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.153930902 CET	443	49798	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.154006958 CET	49798	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.154158115 CET	49798	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.154175997 CET	443	49798	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.238627911 CET	443	49794	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.238924026 CET	443	49794	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.239001989 CET	49794	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.239054918 CET	49794	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.239054918 CET	49794	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.239080906 CET	443	49794	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.239092112 CET	443	49794	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.242285967 CET	49799	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.242364883 CET	443	49799	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.242439032 CET	49799	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.242615938 CET	49799	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.242652893 CET	443	49799	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.499783039 CET	49724	80	192.168.2.4	2.16.100.168
Oct 30, 2024 22:37:12.506840944 CET	80	49724	2.16.100.168	192.168.2.4
Oct 30, 2024 22:37:12.506930113 CET	49724	80	192.168.2.4	2.16.100.168
Oct 30, 2024 22:37:12.679975986 CET	443	49795	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.680556059 CET	49795	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.680589914 CET	443	49795	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.681029081 CET	49795	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.681035042 CET	443	49795	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.731300116 CET	443	49796	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.731791019 CET	49796	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.731822968 CET	443	49796	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.732283115 CET	49796	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.732290030 CET	443	49796	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.819945097 CET	443	49795	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.820024967 CET	443	49795	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.820089102 CET	49795	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.820324898 CET	49795	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.820346117 CET	443	49795	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.820358992 CET	49795	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.820367098 CET	443	49795	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.823811054 CET	49800	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.823869944 CET	443	49800	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.823949099 CET	49800	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.824100018 CET	49800	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.824112892 CET	443	49800	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.853529930 CET	443	49797	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.854090929 CET	49797	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.854163885 CET	443	49797	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.854543924 CET	49797	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.854557991 CET	443	49797	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.862916946 CET	443	49796	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.863389015 CET	443	49796	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.863451004 CET	49796	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.863492966 CET	49796	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.863513947 CET	443	49796	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.863532066 CET	49796	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.863538027 CET	443	49796	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.872236013 CET	49801	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.872272968 CET	443	49801	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.872425079 CET	49801	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.872575998 CET	49801	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.872590065 CET	443	49801	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.883881092 CET	443	49798	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.889010906 CET	49798	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.889033079 CET	443	49798	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.889569044 CET	49798	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.889575005 CET	443	49798	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.988025904 CET	443	49797	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.989340067 CET	443	49797	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.989432096 CET	49797	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.989506960 CET	49797	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.989507914 CET	49797	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.989550114 CET	443	49797	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.989574909 CET	443	49797	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.989871025 CET	443	49799	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.990360022 CET	49799	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.990381956 CET	443	49799	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.991036892 CET	49799	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.991049051 CET	443	49799	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.992625952 CET	49802	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.992710114 CET	443	49802	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:12.992794991 CET	49802	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.992938995 CET	49802	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:12.992966890 CET	443	49802	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.017851114 CET	443	49798	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.017925024 CET	443	49798	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.018131018 CET	49798	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.018181086 CET	49798	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.018203974 CET	443	49798	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.018218994 CET	49798	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.018225908 CET	443	49798	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.021310091 CET	49803	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.021342993 CET	443	49803	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.021668911 CET	49803	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.021822929 CET	49803	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.021836042 CET	443	49803	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.125933886 CET	443	49799	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.126013041 CET	443	49799	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.126090050 CET	49799	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.126374006 CET	49799	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.126414061 CET	443	49799	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.126440048 CET	49799	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.126452923 CET	443	49799	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.129597902 CET	49804	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.129697084 CET	443	49804	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.129781961 CET	49804	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.129995108 CET	49804	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.130024910 CET	443	49804	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.564023972 CET	443	49800	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.564769983 CET	49800	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.564794064 CET	443	49800	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.565279007 CET	49800	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.565289974 CET	443	49800	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.688148022 CET	443	49801	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.689292908 CET	49801	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.689315081 CET	443	49801	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.689821959 CET	49801	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.689830065 CET	443	49801	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.732419968 CET	443	49802	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.733119965 CET	49802	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.733156919 CET	443	49802	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.733460903 CET	49802	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.733470917 CET	443	49802	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.753478050 CET	443	49803	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.754127026 CET	49803	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.754137993 CET	443	49803	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.754843950 CET	49803	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.754848957 CET	443	49803	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.831783056 CET	443	49801	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.831995010 CET	443	49801	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.832313061 CET	49801	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.832375050 CET	49801	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.832375050 CET	49801	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.832397938 CET	443	49801	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.832411051 CET	443	49801	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.836262941 CET	49805	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.836292028 CET	443	49805	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.836395979 CET	49805	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.836538076 CET	49805	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.836553097 CET	443	49805	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.863677979 CET	443	49802	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.864053965 CET	443	49802	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.864135981 CET	49802	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.864186049 CET	49802	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.864217997 CET	443	49802	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.864244938 CET	49802	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.864259958 CET	443	49802	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.866930008 CET	49806	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.866975069 CET	443	49806	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.867224932 CET	49806	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.867381096 CET	49806	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.867393970 CET	443	49806	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.876458883 CET	443	49804	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.878361940 CET	49804	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.878382921 CET	443	49804	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.879141092 CET	49804	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.879148960 CET	443	49804	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.885313988 CET	443	49803	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.885607004 CET	443	49803	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.885687113 CET	49803	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.885749102 CET	49803	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.885749102 CET	49803	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.885756969 CET	443	49803	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.885766029 CET	443	49803	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.889352083 CET	49807	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.889373064 CET	443	49807	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:13.889436960 CET	49807	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.889591932 CET	49807	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:13.889605045 CET	443	49807	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.001729965 CET	443	49800	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.001805067 CET	443	49800	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.001894951 CET	49800	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.013164997 CET	443	49804	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.013261080 CET	443	49804	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.013354063 CET	49804	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.027364969 CET	49800	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.027401924 CET	443	49800	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.027439117 CET	49800	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.027448893 CET	443	49800	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.028846025 CET	49804	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.028861046 CET	443	49804	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.028875113 CET	49804	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.028879881 CET	443	49804	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.032237053 CET	49808	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.032279968 CET	443	49808	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.032367945 CET	49808	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.035437107 CET	49809	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.035479069 CET	443	49809	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.035551071 CET	49809	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.035742044 CET	49808	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.035761118 CET	443	49808	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.035881042 CET	49809	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.035897017 CET	443	49809	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.578142881 CET	443	49805	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.578805923 CET	49805	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.578816891 CET	443	49805	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.579543114 CET	49805	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.579547882 CET	443	49805	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.631608009 CET	443	49807	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.632077932 CET	49807	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.632085085 CET	443	49807	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.632548094 CET	49807	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.632551908 CET	443	49807	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.644566059 CET	443	49806	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.644865036 CET	49806	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.644890070 CET	443	49806	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.645380974 CET	49806	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.645385981 CET	443	49806	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.726000071 CET	443	49805	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.726087093 CET	443	49805	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.726186037 CET	49805	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.726360083 CET	49805	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.726378918 CET	443	49805	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.726388931 CET	49805	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.726393938 CET	443	49805	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.729461908 CET	49810	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.729511976 CET	443	49810	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.729592085 CET	49810	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.729773998 CET	49810	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.729789019 CET	443	49810	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.764539003 CET	443	49807	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.764606953 CET	443	49807	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.764647007 CET	49807	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.764972925 CET	49807	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.764986038 CET	443	49807	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.764995098 CET	49807	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.765000105 CET	443	49807	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.769134998 CET	49811	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.769174099 CET	443	49811	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.769236088 CET	49811	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.769459963 CET	49811	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.769475937 CET	443	49811	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.772847891 CET	443	49809	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.773247957 CET	49809	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.773257971 CET	443	49809	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.773725986 CET	49809	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.773731947 CET	443	49809	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.781986952 CET	443	49806	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.782073975 CET	443	49806	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.782124043 CET	49806	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.782238007 CET	49806	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.782253027 CET	443	49806	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.782264948 CET	49806	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.782269955 CET	443	49806	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.783020973 CET	443	49808	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.783595085 CET	49808	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.783613920 CET	443	49808	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.784352064 CET	49808	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.784358025 CET	443	49808	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.784712076 CET	49812	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.784734011 CET	443	49812	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.784790993 CET	49812	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.784931898 CET	49812	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.784946918 CET	443	49812	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.904256105 CET	443	49809	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.904407024 CET	443	49809	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.904459000 CET	49809	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.904644966 CET	49809	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.904661894 CET	443	49809	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.904670954 CET	49809	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.904679060 CET	443	49809	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.907978058 CET	49813	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.908020973 CET	443	49813	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.908090115 CET	49813	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.908257008 CET	49813	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.908267975 CET	443	49813	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.958651066 CET	443	49808	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.958733082 CET	443	49808	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.958796024 CET	49808	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.958937883 CET	49808	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.958946943 CET	443	49808	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.958955050 CET	49808	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.958959103 CET	443	49808	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.961909056 CET	49814	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.961946011 CET	443	49814	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:14.962002993 CET	49814	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.962152004 CET	49814	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:14.962165117 CET	443	49814	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.473318100 CET	443	49810	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.473887920 CET	49810	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.473906040 CET	443	49810	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.474458933 CET	49810	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.474462986 CET	443	49810	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.517066002 CET	443	49811	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.517503023 CET	49811	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.517568111 CET	443	49811	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.517819881 CET	443	49812	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.517985106 CET	49811	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.518002033 CET	443	49811	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.518069029 CET	49812	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.518088102 CET	443	49812	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.518429041 CET	49812	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.518435955 CET	443	49812	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.606998920 CET	443	49810	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.607063055 CET	443	49810	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.607146978 CET	49810	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.607307911 CET	49810	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.607309103 CET	49810	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.607328892 CET	443	49810	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.607336998 CET	443	49810	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.610506058 CET	49815	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.610547066 CET	443	49815	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.610605955 CET	49815	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.610775948 CET	49815	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.610791922 CET	443	49815	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.646641970 CET	443	49812	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.646785021 CET	443	49812	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.646836996 CET	49812	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.646969080 CET	49812	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.646986008 CET	443	49812	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.647001982 CET	49812	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.647010088 CET	443	49812	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.649482965 CET	49816	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.649523020 CET	443	49816	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.649581909 CET	49816	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.649703026 CET	49816	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.649717093 CET	443	49816	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.654145002 CET	443	49811	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.654546022 CET	443	49811	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.654606104 CET	49811	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.654670954 CET	49811	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.654670954 CET	49811	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.654702902 CET	443	49811	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.654732943 CET	443	49811	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.656714916 CET	49817	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.656811953 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.656889915 CET	49817	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.657022953 CET	49817	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.657077074 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.674882889 CET	443	49813	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.675224066 CET	49813	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.675242901 CET	443	49813	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.675664902 CET	49813	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.675672054 CET	443	49813	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.729432106 CET	443	49814	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.729919910 CET	49814	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.729940891 CET	443	49814	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.730357885 CET	49814	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.730365038 CET	443	49814	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.812338114 CET	443	49813	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.814001083 CET	443	49813	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.814070940 CET	49813	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.814172029 CET	49813	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.814192057 CET	443	49813	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.814213037 CET	49813	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.814223051 CET	443	49813	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.817259073 CET	49818	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.817291975 CET	443	49818	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.817929029 CET	49818	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.818181992 CET	49818	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.818200111 CET	443	49818	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.866374016 CET	443	49814	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.866986990 CET	443	49814	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.867060900 CET	49814	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.867335081 CET	49814	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.867352009 CET	443	49814	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.867363930 CET	49814	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.867372036 CET	443	49814	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.870053053 CET	49819	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.870080948 CET	443	49819	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:15.870299101 CET	49819	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.870534897 CET	49819	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:15.870546103 CET	443	49819	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.351674080 CET	443	49815	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.352329969 CET	49815	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.352354050 CET	443	49815	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.352906942 CET	49815	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.352916002 CET	443	49815	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.388930082 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.389518976 CET	49817	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.389553070 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.389738083 CET	49817	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.389744997 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.406435966 CET	443	49816	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.406820059 CET	49816	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.406845093 CET	443	49816	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.407200098 CET	49816	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.407206059 CET	443	49816	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.484509945 CET	443	49815	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.484632015 CET	443	49815	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.486586094 CET	49815	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.486623049 CET	49815	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.486639977 CET	443	49815	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.486651897 CET	49815	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.486658096 CET	443	49815	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.489523888 CET	49820	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.489557028 CET	443	49820	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.490861893 CET	49820	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.490997076 CET	49820	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.491012096 CET	443	49820	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.520564079 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.520586014 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.520665884 CET	49817	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.520728111 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.520761013 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.520817995 CET	49817	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.520895004 CET	49817	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.520911932 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.520925045 CET	49817	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.520931959 CET	443	49817	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.523403883 CET	49821	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.523420095 CET	443	49821	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.524595022 CET	49821	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.524699926 CET	49821	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.524712086 CET	443	49821	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.541261911 CET	443	49816	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.541438103 CET	443	49816	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.542774916 CET	49816	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.542920113 CET	49816	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.542936087 CET	443	49816	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.542944908 CET	49816	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.542949915 CET	443	49816	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.544821978 CET	49822	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.544877052 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.548602104 CET	49822	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.548727989 CET	49822	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.548755884 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.565248013 CET	443	49818	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.569099903 CET	49818	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.569113970 CET	443	49818	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.569535017 CET	49818	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.569539070 CET	443	49818	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.607297897 CET	443	49819	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.609071016 CET	49819	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.609123945 CET	443	49819	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.609481096 CET	49819	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.609494925 CET	443	49819	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.703934908 CET	443	49818	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.704014063 CET	443	49818	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.704086065 CET	49818	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.704313040 CET	49818	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.704330921 CET	443	49818	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.704339981 CET	49818	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.704344988 CET	443	49818	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.709391117 CET	49823	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.709412098 CET	443	49823	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.709470987 CET	49823	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.709628105 CET	49823	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.709640026 CET	443	49823	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.742453098 CET	443	49819	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.743721008 CET	443	49819	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.743807077 CET	49819	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.841622114 CET	49819	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.841634035 CET	443	49819	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.841645956 CET	49819	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.841650963 CET	443	49819	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.954893112 CET	49824	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.954935074 CET	443	49824	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:16.954993963 CET	49824	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.958239079 CET	49824	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:16.958254099 CET	443	49824	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.241975069 CET	443	49820	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.242710114 CET	49820	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.242738962 CET	443	49820	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.243213892 CET	49820	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.243217945 CET	443	49820	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.269336939 CET	443	49821	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.269979000 CET	49821	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.270005941 CET	443	49821	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.270504951 CET	49821	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.270509958 CET	443	49821	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.321589947 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.322240114 CET	49822	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.322257042 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.322607994 CET	49822	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.322612047 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.377711058 CET	443	49820	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.377728939 CET	443	49820	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.377779007 CET	443	49820	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.377798080 CET	49820	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.377841949 CET	49820	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.378144026 CET	49820	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.378159046 CET	443	49820	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.378171921 CET	49820	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.378176928 CET	443	49820	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.381680965 CET	49825	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.381717920 CET	443	49825	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.381813049 CET	49825	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.381987095 CET	49825	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.381998062 CET	443	49825	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.407485008 CET	443	49821	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.407545090 CET	443	49821	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.407613039 CET	49821	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.407619953 CET	443	49821	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.407793045 CET	49821	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.407866955 CET	49821	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.407882929 CET	443	49821	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.407893896 CET	49821	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.407897949 CET	443	49821	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.410953999 CET	49826	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.410991907 CET	443	49826	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.411082029 CET	49826	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.411252975 CET	49826	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.411267996 CET	443	49826	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.459425926 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.459443092 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.459538937 CET	49822	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.459600925 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.459628105 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.459690094 CET	49822	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.459853888 CET	49822	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.459853888 CET	49822	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.459884882 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.459908009 CET	443	49822	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.462843895 CET	49827	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.462862015 CET	443	49827	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.462953091 CET	49827	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.463078022 CET	49827	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.463084936 CET	443	49827	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.466063023 CET	443	49823	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.466433048 CET	49823	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.466455936 CET	443	49823	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.466912985 CET	49823	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.466919899 CET	443	49823	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.605906963 CET	443	49823	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.605995893 CET	443	49823	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.606053114 CET	49823	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.606278896 CET	49823	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.606292963 CET	443	49823	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.606306076 CET	49823	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.606309891 CET	443	49823	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.609395981 CET	49828	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.609437943 CET	443	49828	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.609524965 CET	49828	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.609666109 CET	49828	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.609683037 CET	443	49828	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.697616100 CET	443	49824	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.698261976 CET	49824	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.698276043 CET	443	49824	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.698646069 CET	49824	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.698648930 CET	443	49824	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.851157904 CET	443	49824	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.851221085 CET	443	49824	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.851264000 CET	49824	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.851543903 CET	49824	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.851555109 CET	443	49824	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.851566076 CET	49824	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.851571083 CET	443	49824	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.854715109 CET	49829	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.854753017 CET	443	49829	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:17.854809046 CET	49829	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.854999065 CET	49829	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:17.855010033 CET	443	49829	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.123404026 CET	443	49825	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.124942064 CET	49825	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.124990940 CET	443	49825	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.126737118 CET	49825	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.126750946 CET	443	49825	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.149584055 CET	443	49826	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.150145054 CET	49826	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.150156975 CET	443	49826	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.150820971 CET	49826	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.150834084 CET	443	49826	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.240350008 CET	443	49827	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.241077900 CET	49827	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.241106987 CET	443	49827	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.241658926 CET	49827	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.241662979 CET	443	49827	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.259766102 CET	443	49825	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.260288954 CET	443	49825	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.260354996 CET	49825	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.260441065 CET	49825	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.260482073 CET	443	49825	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.260512114 CET	49825	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.260528088 CET	443	49825	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.264199972 CET	49830	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.264235973 CET	443	49830	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.264287949 CET	49830	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.264484882 CET	49830	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.264501095 CET	443	49830	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.285218954 CET	443	49826	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.285298109 CET	443	49826	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.285377026 CET	49826	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.285638094 CET	49826	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.285655022 CET	443	49826	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.285665035 CET	49826	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.285670996 CET	443	49826	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.289267063 CET	49831	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.289364100 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.289525986 CET	49831	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.289716005 CET	49831	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.289743900 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.363964081 CET	443	49828	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.364762068 CET	49828	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.364785910 CET	443	49828	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.365231991 CET	49828	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.365238905 CET	443	49828	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.404827118 CET	443	49827	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.405024052 CET	443	49827	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.405169964 CET	49827	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.405314922 CET	49827	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.405353069 CET	443	49827	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.405404091 CET	49827	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.405421019 CET	443	49827	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.408865929 CET	49832	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.408915043 CET	443	49832	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.408987045 CET	49832	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.409135103 CET	49832	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.409149885 CET	443	49832	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.498929977 CET	443	49828	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.499011040 CET	443	49828	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.499058962 CET	49828	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.499552965 CET	49828	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.499569893 CET	443	49828	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.499583960 CET	49828	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.499593973 CET	443	49828	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.502604961 CET	49833	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.502650023 CET	443	49833	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.502716064 CET	49833	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.502855062 CET	49833	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.502867937 CET	443	49833	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.683671951 CET	443	49829	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.684431076 CET	49829	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.684468031 CET	443	49829	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.684916973 CET	49829	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.684922934 CET	443	49829	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.865067959 CET	443	49829	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.865299940 CET	443	49829	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.865375042 CET	49829	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.865653038 CET	49829	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.865653038 CET	49829	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.865700960 CET	443	49829	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.865727901 CET	443	49829	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.868639946 CET	49834	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.868671894 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:18.868741989 CET	49834	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.868902922 CET	49834	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:18.868918896 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.021282911 CET	443	49830	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.021892071 CET	49830	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.021924019 CET	443	49830	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.022366047 CET	49830	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.022373915 CET	443	49830	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.045551062 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.045990944 CET	49831	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.046026945 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.046500921 CET	49831	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.046515942 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.153697014 CET	443	49830	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.153760910 CET	443	49830	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.153887033 CET	49830	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.154160976 CET	49830	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.154186964 CET	443	49830	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.154201031 CET	49830	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.154211044 CET	443	49830	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.157653093 CET	49835	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.157716990 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.157813072 CET	49835	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.157952070 CET	49835	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.157984018 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.160130978 CET	443	49832	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.168878078 CET	49832	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.168895006 CET	443	49832	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.169426918 CET	49832	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.169433117 CET	443	49832	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.179514885 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.179593086 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.179706097 CET	49831	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.179910898 CET	49831	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.179910898 CET	49831	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.179938078 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.179958105 CET	443	49831	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.182636976 CET	49836	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.182713985 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.182797909 CET	49836	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.182924032 CET	49836	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.182957888 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.239809036 CET	443	49833	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.240214109 CET	49833	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.240243912 CET	443	49833	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.240637064 CET	49833	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.240648985 CET	443	49833	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.298216105 CET	443	49832	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.298350096 CET	443	49832	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.298439026 CET	49832	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.298645973 CET	49832	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.298659086 CET	443	49832	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.298670053 CET	49832	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.298675060 CET	443	49832	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.301321030 CET	49837	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.301357031 CET	443	49837	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.301439047 CET	49837	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.301624060 CET	49837	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.301635027 CET	443	49837	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.371792078 CET	443	49833	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.371856928 CET	443	49833	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.371968985 CET	443	49833	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.372061014 CET	49833	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.372198105 CET	49833	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.372231007 CET	443	49833	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.372257948 CET	49833	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.372275114 CET	443	49833	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.375482082 CET	49838	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.375530005 CET	443	49838	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.375628948 CET	49838	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.375813961 CET	49838	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.375843048 CET	443	49838	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.603674889 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.604274035 CET	49834	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.604300022 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.604870081 CET	49834	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.604875088 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.736768961 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.736901999 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.737065077 CET	49834	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.737298965 CET	49834	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.737318039 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.737329006 CET	49834	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.737334967 CET	443	49834	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.741067886 CET	49839	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.741102934 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.741198063 CET	49839	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.741421938 CET	49839	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.741429090 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.890491962 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.891047001 CET	49835	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.891079903 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.891675949 CET	49835	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.891683102 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.926721096 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.927328110 CET	49836	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.927356005 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:19.927884102 CET	49836	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:19.927894115 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.021847010 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.021888018 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.021939993 CET	49835	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.021954060 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.021996021 CET	49835	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.022280931 CET	49835	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.022308111 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.022325993 CET	49835	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.022332907 CET	443	49835	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.026220083 CET	49840	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.026242971 CET	443	49840	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.026303053 CET	49840	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.026484013 CET	49840	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.026494980 CET	443	49840	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.046483040 CET	443	49837	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.047003031 CET	49837	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.047041893 CET	443	49837	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.047547102 CET	49837	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.047557116 CET	443	49837	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.061976910 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.062056065 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.062098980 CET	49836	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.062220097 CET	49836	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.062232018 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.062247038 CET	49836	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.062252045 CET	443	49836	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.065105915 CET	49841	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.065140009 CET	443	49841	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.065195084 CET	49841	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.065377951 CET	49841	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.065390110 CET	443	49841	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.105896950 CET	443	49838	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.106256008 CET	49838	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.106265068 CET	443	49838	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.106718063 CET	49838	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.106722116 CET	443	49838	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.178356886 CET	443	49837	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.178442001 CET	443	49837	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.178508997 CET	49837	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.178661108 CET	49837	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.178687096 CET	443	49837	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.178702116 CET	49837	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.178709030 CET	443	49837	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.181622982 CET	49842	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.181654930 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.181713104 CET	49842	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.181860924 CET	49842	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.181874037 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.240032911 CET	443	49838	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.240101099 CET	443	49838	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.240147114 CET	49838	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.240406036 CET	49838	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.240422010 CET	443	49838	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.240436077 CET	49838	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.240439892 CET	443	49838	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.243897915 CET	49843	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.243940115 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.244000912 CET	49843	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.244209051 CET	49843	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.244220018 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.482914925 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.483655930 CET	49839	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.483670950 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.484355927 CET	49839	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.484360933 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.615976095 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.616008043 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.616056919 CET	49839	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.616066933 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.616082907 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.616131067 CET	49839	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.616369009 CET	49839	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.616384983 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.616394997 CET	49839	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.616400003 CET	443	49839	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.619761944 CET	49844	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.619790077 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.619858980 CET	49844	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.620043993 CET	49844	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.620050907 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.801928997 CET	443	49841	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.802597046 CET	49841	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.802624941 CET	443	49841	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.803647041 CET	49841	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.803658962 CET	443	49841	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.804670095 CET	443	49840	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.805130959 CET	49840	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.805175066 CET	443	49840	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.805759907 CET	49840	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.805768967 CET	443	49840	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.927561998 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.928298950 CET	49842	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.928335905 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.929157019 CET	49842	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.929164886 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.935655117 CET	443	49841	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.935717106 CET	443	49841	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.935966969 CET	49841	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.936021090 CET	49841	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.936039925 CET	443	49841	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.936049938 CET	49841	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.936055899 CET	443	49841	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.940295935 CET	49845	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.940350056 CET	443	49845	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.940412045 CET	49845	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.940561056 CET	49845	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.940577984 CET	443	49845	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.942867994 CET	443	49840	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.942965031 CET	443	49840	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.943062067 CET	49840	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.943088055 CET	49840	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.943104982 CET	443	49840	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.943119049 CET	49840	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.943125963 CET	443	49840	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.945553064 CET	49846	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.945584059 CET	443	49846	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.945643902 CET	49846	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.945749044 CET	49846	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.945760012 CET	443	49846	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.993364096 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.993798018 CET	49843	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.993820906 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:20.994375944 CET	49843	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:20.994380951 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.059827089 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.059914112 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.060034990 CET	49842	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.060358047 CET	49842	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.060421944 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.060460091 CET	49842	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.060476065 CET	443	49842	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.063812971 CET	49847	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.063849926 CET	443	49847	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.063925982 CET	49847	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.064080954 CET	49847	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.064094067 CET	443	49847	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.131464005 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.131499052 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.131553888 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.131617069 CET	49843	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.131648064 CET	49843	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.131916046 CET	49843	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.131942034 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.131958008 CET	49843	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.131963015 CET	443	49843	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.134799957 CET	49848	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.134850025 CET	443	49848	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.134932995 CET	49848	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.135087013 CET	49848	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.135097027 CET	443	49848	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.356451988 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.359297991 CET	49844	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.359309912 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.359792948 CET	49844	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.359797955 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.490094900 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.490153074 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.490298986 CET	49844	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.490627050 CET	49844	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.490639925 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.490649939 CET	49844	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.490654945 CET	443	49844	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.493947983 CET	49849	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.493992090 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.494081020 CET	49849	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.494235992 CET	49849	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.494257927 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.665116072 CET	443	49845	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.667402983 CET	49845	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.667433977 CET	443	49845	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.667812109 CET	49845	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.667820930 CET	443	49845	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.731445074 CET	443	49846	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.732239008 CET	49846	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.732263088 CET	443	49846	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.732672930 CET	49846	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.732681036 CET	443	49846	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.797007084 CET	443	49845	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.797055006 CET	443	49845	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.797097921 CET	49845	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.797110081 CET	443	49845	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.797149897 CET	49845	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.797400951 CET	49845	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.797424078 CET	443	49845	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.797435045 CET	49845	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.797441959 CET	443	49845	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.801001072 CET	49850	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.801047087 CET	443	49850	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.801115036 CET	49850	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.801270008 CET	49850	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.801282883 CET	443	49850	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.802853107 CET	443	49847	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.803210020 CET	49847	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.803222895 CET	443	49847	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.803711891 CET	49847	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.803716898 CET	443	49847	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.870296955 CET	443	49846	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.870584965 CET	443	49846	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.870635986 CET	49846	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.870683908 CET	49846	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.870697975 CET	443	49846	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.870707989 CET	49846	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.870712996 CET	443	49846	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.873646975 CET	49851	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.873680115 CET	443	49851	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.873744011 CET	49851	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.873876095 CET	49851	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.873893976 CET	443	49851	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.894821882 CET	443	49848	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.895204067 CET	49848	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.895235062 CET	443	49848	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.895781994 CET	49848	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.895788908 CET	443	49848	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.933804989 CET	443	49847	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.933902979 CET	443	49847	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.933973074 CET	49847	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.935656071 CET	49847	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.935674906 CET	443	49847	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.935688019 CET	49847	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.935693979 CET	443	49847	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.939928055 CET	49852	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.939975023 CET	443	49852	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:21.940053940 CET	49852	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.940192938 CET	49852	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:21.940210104 CET	443	49852	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.029367924 CET	443	49848	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.029515982 CET	443	49848	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.029571056 CET	49848	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.029758930 CET	49848	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.029778957 CET	443	49848	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.029792070 CET	49848	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.029798031 CET	443	49848	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.034976959 CET	49853	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.035008907 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.035104036 CET	49853	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.035257101 CET	49853	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.035270929 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.233094931 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.233793974 CET	49849	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.233829975 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.234471083 CET	49849	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.234477043 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.366695881 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.366719007 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.366763115 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.366777897 CET	49849	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.366846085 CET	49849	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.367180109 CET	49849	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.367180109 CET	49849	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.367207050 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.367211103 CET	443	49849	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.370464087 CET	49854	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.370549917 CET	443	49854	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.370646000 CET	49854	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.370831966 CET	49854	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.370876074 CET	443	49854	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.539994955 CET	443	49850	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.540832996 CET	49850	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.540872097 CET	443	49850	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.541465044 CET	49850	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.541471958 CET	443	49850	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.604190111 CET	443	49851	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.606762886 CET	49851	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.606780052 CET	443	49851	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.607422113 CET	49851	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.607426882 CET	443	49851	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.673049927 CET	443	49850	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.673124075 CET	443	49850	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.673342943 CET	49850	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.673506975 CET	49850	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.673548937 CET	443	49850	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.673564911 CET	49850	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.673573017 CET	443	49850	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.677815914 CET	49855	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.677855015 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.678107977 CET	49855	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.678164959 CET	49855	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.678172112 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.680241108 CET	443	49852	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.680846930 CET	49852	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.680887938 CET	443	49852	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.681310892 CET	49852	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.681324005 CET	443	49852	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.734987020 CET	443	49851	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.735110998 CET	443	49851	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.735290051 CET	49851	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.735332966 CET	49851	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.735332966 CET	49851	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.735352039 CET	443	49851	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.735364914 CET	443	49851	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.738239050 CET	49856	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.738255024 CET	443	49856	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.738322020 CET	49856	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.738488913 CET	49856	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.738502979 CET	443	49856	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.778721094 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.779594898 CET	49853	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.779619932 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.780189991 CET	49853	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.780196905 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.821731091 CET	443	49852	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.821902990 CET	443	49852	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.822041988 CET	49852	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.822139025 CET	49852	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.822154999 CET	443	49852	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.822170019 CET	49852	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.822176933 CET	443	49852	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.825411081 CET	49857	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.825429916 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.825695992 CET	49857	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.825851917 CET	49857	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.825865984 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.910942078 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.910993099 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.911027908 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.911134958 CET	49853	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.911134958 CET	49853	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.911362886 CET	49853	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.911381960 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.911391973 CET	49853	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.911396980 CET	443	49853	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.914305925 CET	49858	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.914333105 CET	443	49858	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:22.914427042 CET	49858	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.914633036 CET	49858	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:22.914645910 CET	443	49858	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.175179005 CET	443	49854	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.177097082 CET	49854	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.177117109 CET	443	49854	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.177603960 CET	49854	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.177611113 CET	443	49854	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.318309069 CET	443	49854	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.318425894 CET	443	49854	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.318528891 CET	49854	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.318800926 CET	49854	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.318825960 CET	443	49854	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.318840027 CET	49854	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.318846941 CET	443	49854	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.321999073 CET	49859	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.322029114 CET	443	49859	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.322108984 CET	49859	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.322391033 CET	49859	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.322402954 CET	443	49859	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.431730986 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.433094025 CET	49855	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.433118105 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.433584929 CET	49855	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.433589935 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.484597921 CET	443	49856	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.489229918 CET	49856	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.489245892 CET	443	49856	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.489736080 CET	49856	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.489741087 CET	443	49856	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.567948103 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.568407059 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.568466902 CET	49855	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.568546057 CET	49855	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.568562984 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.568573952 CET	49855	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.568582058 CET	443	49855	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.572108984 CET	49860	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.572139025 CET	443	49860	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.572212934 CET	49860	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.572361946 CET	49860	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.572374105 CET	443	49860	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.575629950 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.576071978 CET	49857	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.576090097 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.576699018 CET	49857	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.576704979 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.617522955 CET	443	49856	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.617602110 CET	443	49856	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.617705107 CET	49856	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.617960930 CET	49856	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.617980003 CET	443	49856	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.617991924 CET	49856	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.617999077 CET	443	49856	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.620820999 CET	49861	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.620913029 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.621006966 CET	49861	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.621161938 CET	49861	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.621196985 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.651850939 CET	443	49858	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.652621031 CET	49858	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.652632952 CET	443	49858	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.653259993 CET	49858	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.653264999 CET	443	49858	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.727078915 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.727168083 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.727226973 CET	49857	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.727242947 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.727343082 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.727396011 CET	49857	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.727490902 CET	49857	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.727509022 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.727523088 CET	49857	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.727529049 CET	443	49857	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.731081009 CET	49862	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.731128931 CET	443	49862	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.731209993 CET	49862	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.731379032 CET	49862	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.731389046 CET	443	49862	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.785410881 CET	443	49858	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.785550117 CET	443	49858	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.785727978 CET	49858	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.785814047 CET	49858	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.785834074 CET	443	49858	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.785847902 CET	49858	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.785852909 CET	443	49858	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.789349079 CET	49863	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.789427042 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:23.789514065 CET	49863	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.789678097 CET	49863	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:23.789696932 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.076917887 CET	443	49859	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.078016043 CET	49859	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.078049898 CET	443	49859	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.078938007 CET	49859	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.078949928 CET	443	49859	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.212745905 CET	443	49859	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.212830067 CET	443	49859	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.212893963 CET	49859	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.213196993 CET	49859	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.213196993 CET	49859	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.213229895 CET	443	49859	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.213257074 CET	443	49859	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.217119932 CET	49864	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.217171907 CET	443	49864	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.217245102 CET	49864	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.217444897 CET	49864	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.217468977 CET	443	49864	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.310767889 CET	443	49860	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.311502934 CET	49860	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.311517000 CET	443	49860	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.312360048 CET	49860	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.312366962 CET	443	49860	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.367132902 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.367739916 CET	49861	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.367780924 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.368480921 CET	49861	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.368496895 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.443789005 CET	443	49860	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.443881035 CET	443	49860	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.443939924 CET	49860	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.444224119 CET	49860	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.444224119 CET	49860	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.444242954 CET	443	49860	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.444252014 CET	443	49860	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.448046923 CET	49865	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.448092937 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.448163033 CET	49865	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.448404074 CET	49865	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.448417902 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.500068903 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.500104904 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.500164986 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.500205994 CET	49861	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.500266075 CET	49861	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.500504971 CET	49861	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.500504971 CET	49861	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.500544071 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.500572920 CET	443	49861	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.504067898 CET	49866	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.504132032 CET	443	49866	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.504216909 CET	49866	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.504400015 CET	49866	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.504412889 CET	443	49866	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.523603916 CET	443	49862	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.524054050 CET	49862	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.524070978 CET	443	49862	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.524683952 CET	49862	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.524693012 CET	443	49862	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.571485996 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.572000980 CET	49863	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.572026014 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.572604895 CET	49863	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.572612047 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.662307978 CET	443	49862	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.662373066 CET	443	49862	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.662460089 CET	49862	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.662698030 CET	49862	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.662698030 CET	49862	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.662717104 CET	443	49862	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.662724972 CET	443	49862	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.674556017 CET	49867	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.674583912 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.674648046 CET	49867	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.674810886 CET	49867	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.674825907 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.731679916 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.731756926 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.731849909 CET	49863	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.731858015 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.731914043 CET	49863	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.732057095 CET	49863	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.732073069 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.732085943 CET	49863	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.732093096 CET	443	49863	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.734730005 CET	49868	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.734766960 CET	443	49868	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.734834909 CET	49868	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.734945059 CET	49868	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.734962940 CET	443	49868	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.953727007 CET	443	49864	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.954262972 CET	49864	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.954293013 CET	443	49864	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:24.954886913 CET	49864	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:24.954894066 CET	443	49864	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.086656094 CET	443	49864	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.087037086 CET	443	49864	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.087106943 CET	49864	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.087160110 CET	49864	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.087193012 CET	443	49864	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.087219000 CET	49864	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.087235928 CET	443	49864	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.090612888 CET	49869	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.090657949 CET	443	49869	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.090785980 CET	49869	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.090979099 CET	49869	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.090991974 CET	443	49869	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.199018002 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.199603081 CET	49865	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.199634075 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.200274944 CET	49865	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.200284004 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.233477116 CET	443	49866	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.234134912 CET	49866	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.234158993 CET	443	49866	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.234852076 CET	49866	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.234863997 CET	443	49866	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.365780115 CET	443	49866	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.365876913 CET	443	49866	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.365962029 CET	49866	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.382996082 CET	49866	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.383040905 CET	443	49866	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.383069038 CET	49866	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.383085966 CET	443	49866	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.389210939 CET	49870	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.389261007 CET	443	49870	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.389328003 CET	49870	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.389574051 CET	49870	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.389590025 CET	443	49870	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.390013933 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.390080929 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.390120983 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.390130043 CET	49865	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.390170097 CET	49865	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.390340090 CET	49865	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.390340090 CET	49865	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.390357971 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.390367985 CET	443	49865	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.393285990 CET	49871	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.393379927 CET	443	49871	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.393498898 CET	49871	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.393663883 CET	49871	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.393703938 CET	443	49871	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.447496891 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.448229074 CET	49867	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.448246002 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.448875904 CET	49867	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.448884010 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.490494013 CET	443	49868	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.491039991 CET	49868	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.491072893 CET	443	49868	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.491520882 CET	49868	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.491525888 CET	443	49868	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.579518080 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.579560041 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.579617977 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.579638958 CET	49867	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.579689026 CET	49867	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.579885006 CET	49867	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.579910994 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.579925060 CET	49867	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.579931974 CET	443	49867	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.583506107 CET	49872	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.583539963 CET	443	49872	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.583755016 CET	49872	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.583940029 CET	49872	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.583954096 CET	443	49872	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.625963926 CET	443	49868	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.626154900 CET	443	49868	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.626219988 CET	49868	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.626324892 CET	49868	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.626344919 CET	443	49868	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.626355886 CET	49868	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.626362085 CET	443	49868	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.629755974 CET	49873	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.629862070 CET	443	49873	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.629961967 CET	49873	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.630140066 CET	49873	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.630172968 CET	443	49873	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.818722010 CET	443	49869	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.819375038 CET	49869	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.819457054 CET	443	49869	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:25.819914103 CET	49869	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:25.819935083 CET	443	49869	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.118844032 CET	443	49870	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.119580030 CET	49870	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.119616032 CET	443	49870	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.120182037 CET	49870	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.120187044 CET	443	49870	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.129982948 CET	443	49871	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.130542994 CET	49871	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.130633116 CET	443	49871	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.131098032 CET	49871	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.131114960 CET	443	49871	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.253324986 CET	443	49870	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.253402948 CET	443	49870	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.253458023 CET	49870	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.253891945 CET	49870	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.253911018 CET	443	49870	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.253921032 CET	49870	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.253926992 CET	443	49870	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.257183075 CET	49874	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.257249117 CET	443	49874	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.257462978 CET	49874	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.257649899 CET	49874	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.257667065 CET	443	49874	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.262538910 CET	443	49871	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.262608051 CET	443	49871	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.262692928 CET	49871	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.262880087 CET	49871	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.262902021 CET	443	49871	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.262914896 CET	49871	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.262922049 CET	443	49871	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.264965057 CET	49875	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.265045881 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.265122890 CET	49875	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.265319109 CET	49875	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.265350103 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.341880083 CET	443	49872	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.342339039 CET	49872	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.342366934 CET	443	49872	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.342881918 CET	49872	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.342888117 CET	443	49872	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.374910116 CET	443	49873	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.375467062 CET	49873	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.375524998 CET	443	49873	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.376255035 CET	49873	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.376266956 CET	443	49873	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.476587057 CET	443	49872	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.476819992 CET	443	49872	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.476890087 CET	49872	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.476984978 CET	49872	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.477005959 CET	443	49872	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.477024078 CET	49872	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.477034092 CET	443	49872	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.480129004 CET	49876	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.480206013 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.480397940 CET	49876	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.480552912 CET	49876	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.480573893 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.509864092 CET	443	49873	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.509931087 CET	443	49873	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.510035038 CET	443	49873	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.510066032 CET	49873	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.510153055 CET	49873	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.510200977 CET	49873	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.510246992 CET	443	49873	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.510281086 CET	49873	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.510297060 CET	443	49873	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.512810946 CET	49877	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.512852907 CET	443	49877	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.512912989 CET	49877	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.513101101 CET	49877	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.513118029 CET	443	49877	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.992898941 CET	443	49874	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.993509054 CET	49874	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.993535995 CET	443	49874	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:26.994155884 CET	49874	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:26.994163036 CET	443	49874	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.002075911 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.002403021 CET	49875	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.002485991 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.002909899 CET	49875	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.002924919 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.127428055 CET	443	49874	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.127501011 CET	443	49874	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.127599955 CET	49874	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.127871037 CET	49874	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.127891064 CET	443	49874	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.127902985 CET	49874	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.127911091 CET	443	49874	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.131449938 CET	49878	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.131547928 CET	443	49878	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.131666899 CET	49878	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.131819010 CET	49878	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.131853104 CET	443	49878	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.136694908 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.136769056 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.136822939 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.136898041 CET	49875	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.136960983 CET	49875	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.136960983 CET	49875	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.136995077 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.137018919 CET	443	49875	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.139342070 CET	49879	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.139388084 CET	443	49879	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.139458895 CET	49879	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.139585972 CET	49879	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.139600039 CET	443	49879	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.224673986 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.229058027 CET	49876	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.229101896 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.229536057 CET	49876	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.229547977 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.249521971 CET	443	49877	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.253066063 CET	49877	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.253106117 CET	443	49877	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.253509045 CET	49877	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.253515005 CET	443	49877	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.355704069 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.355779886 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.355912924 CET	49876	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.356193066 CET	49876	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.356215000 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.356230974 CET	49876	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.356240034 CET	443	49876	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.360054016 CET	49880	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.360093117 CET	443	49880	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.360174894 CET	49880	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.360342026 CET	49880	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.360354900 CET	443	49880	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.388982058 CET	443	49877	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.389175892 CET	443	49877	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.389261961 CET	49877	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.389585972 CET	49877	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.389610052 CET	443	49877	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.389621019 CET	49877	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.389626980 CET	443	49877	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.393085957 CET	49881	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.393126965 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.393204927 CET	49881	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.393414974 CET	49881	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.393431902 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.834789991 CET	443	49869	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.834836006 CET	443	49869	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.834908962 CET	443	49869	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.834949017 CET	49869	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.835005999 CET	49869	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.835267067 CET	49869	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.835268021 CET	49869	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.835303068 CET	443	49869	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.835342884 CET	443	49869	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.838778973 CET	49882	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.838804960 CET	443	49882	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.838887930 CET	49882	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.839071035 CET	49882	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.839082003 CET	443	49882	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.874771118 CET	443	49878	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.875215054 CET	49878	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.875255108 CET	443	49878	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.875727892 CET	49878	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.875740051 CET	443	49878	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.879914045 CET	443	49879	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.880319118 CET	49879	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.880350113 CET	443	49879	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:27.880795956 CET	49879	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:27.880800962 CET	443	49879	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.008387089 CET	443	49878	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.008446932 CET	443	49878	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.008512974 CET	49878	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.008786917 CET	49878	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.008786917 CET	49878	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.008848906 CET	443	49878	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.008877993 CET	443	49878	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.012356997 CET	49883	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.012393951 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.012449980 CET	49883	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.012624025 CET	49883	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.012640953 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.021102905 CET	443	49879	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.021167994 CET	443	49879	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.021223068 CET	49879	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.021238089 CET	443	49879	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.021280050 CET	49879	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.021414042 CET	49879	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.021433115 CET	443	49879	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.021442890 CET	49879	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.021447897 CET	443	49879	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.024369955 CET	49884	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.024446011 CET	443	49884	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.024516106 CET	49884	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.024667978 CET	49884	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.024703979 CET	443	49884	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.142534018 CET	443	49880	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.143106937 CET	49880	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.143135071 CET	443	49880	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.143595934 CET	49880	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.143600941 CET	443	49880	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.150516033 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.150899887 CET	49881	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.150918961 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.151391983 CET	49881	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.151400089 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.283237934 CET	443	49880	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.283401012 CET	443	49880	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.283467054 CET	49880	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.283920050 CET	49880	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.283960104 CET	443	49880	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.284007072 CET	49880	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.284024000 CET	443	49880	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.284745932 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.284818888 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.284866095 CET	49881	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.284881115 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.285023928 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.285038948 CET	49881	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.285063028 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.285075903 CET	49881	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.285075903 CET	49881	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.285084009 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.285089970 CET	443	49881	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.288666964 CET	49885	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.288701057 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.288764000 CET	49885	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.290572882 CET	49885	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.290595055 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.290961981 CET	49886	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.290993929 CET	443	49886	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.291105986 CET	49886	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.291311026 CET	49886	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.291330099 CET	443	49886	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.577512026 CET	443	49882	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.578172922 CET	49882	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.578197002 CET	443	49882	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.578704119 CET	49882	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.578708887 CET	443	49882	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.709312916 CET	443	49882	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.727931023 CET	443	49882	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.728022099 CET	49882	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.728079081 CET	49882	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.728095055 CET	443	49882	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.728110075 CET	49882	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.728115082 CET	443	49882	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.731329918 CET	49887	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.731379986 CET	443	49887	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.731496096 CET	49887	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.731729031 CET	49887	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.731748104 CET	443	49887	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.762674093 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.763175011 CET	49883	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.763186932 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.763695955 CET	49883	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.763700962 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.804846048 CET	443	49884	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.810333967 CET	49884	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.810367107 CET	443	49884	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.810960054 CET	49884	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.810967922 CET	443	49884	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.898364067 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.898538113 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.898662090 CET	49883	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.898745060 CET	49883	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.898770094 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.898785114 CET	49883	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.898789883 CET	443	49883	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.902178049 CET	49888	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.902228117 CET	443	49888	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.902309895 CET	49888	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.902497053 CET	49888	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.902518034 CET	443	49888	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.945007086 CET	443	49884	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.945703030 CET	443	49884	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.945787907 CET	49884	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.945830107 CET	49884	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.945852041 CET	443	49884	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.945868969 CET	49884	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.945875883 CET	443	49884	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.949017048 CET	49889	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.949098110 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:28.949214935 CET	49889	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.949390888 CET	49889	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:28.949419975 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.032434940 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.033094883 CET	49885	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.033123016 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.034682989 CET	49885	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.034696102 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.042572975 CET	443	49886	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.042936087 CET	49886	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.042958975 CET	443	49886	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.043303967 CET	49886	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.043309927 CET	443	49886	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.165196896 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.165527105 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.165600061 CET	49885	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.165683031 CET	49885	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.165683031 CET	49885	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.165702105 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.165710926 CET	443	49885	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.169203043 CET	49890	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.169248104 CET	443	49890	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.169327974 CET	49890	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.169493914 CET	49890	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.169507027 CET	443	49890	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.177541971 CET	443	49886	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.177689075 CET	443	49886	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.177774906 CET	49886	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.177810907 CET	49886	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.177812099 CET	49886	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.177825928 CET	443	49886	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.177839994 CET	443	49886	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.180097103 CET	49891	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.180135012 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.180200100 CET	49891	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.180326939 CET	49891	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.180346012 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.474967957 CET	443	49887	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.477109909 CET	49887	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.477150917 CET	443	49887	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.477601051 CET	49887	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.477610111 CET	443	49887	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.610822916 CET	443	49887	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.611033916 CET	443	49887	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.611357927 CET	49887	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.611418962 CET	49887	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.611418962 CET	49887	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.611438990 CET	443	49887	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.611454964 CET	443	49887	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.614646912 CET	49892	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.614703894 CET	443	49892	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.614783049 CET	49892	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.614923000 CET	49892	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.614938974 CET	443	49892	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.671960115 CET	443	49888	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.672616005 CET	49888	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.672636032 CET	443	49888	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.673118114 CET	49888	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.673122883 CET	443	49888	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.692107916 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.692532063 CET	49889	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.692547083 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.692918062 CET	49889	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.692924023 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.809672117 CET	443	49888	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.809762001 CET	443	49888	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.809868097 CET	49888	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.810194016 CET	49888	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.810209036 CET	443	49888	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.810220003 CET	49888	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.810228109 CET	443	49888	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.813592911 CET	49893	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.813621998 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.813710928 CET	49893	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.813848972 CET	49893	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.813858986 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.827058077 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.827377081 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.827430010 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.827481031 CET	49889	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.827526093 CET	49889	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.827755928 CET	49889	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.827774048 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.827789068 CET	49889	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.827795029 CET	443	49889	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.830621958 CET	49894	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.830657959 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.830723047 CET	49894	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.830864906 CET	49894	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.830878019 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.920175076 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.920711994 CET	49891	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.920728922 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.921350956 CET	49891	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.921355963 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.924138069 CET	443	49890	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.924536943 CET	49890	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.924557924 CET	443	49890	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:29.924983025 CET	49890	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:29.924988985 CET	443	49890	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.059483051 CET	443	49890	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.059715033 CET	443	49890	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.059792995 CET	49890	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.059909105 CET	49890	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.059909105 CET	49890	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.059926987 CET	443	49890	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.059937000 CET	443	49890	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.063471079 CET	49895	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.063565969 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.063648939 CET	49895	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.063832998 CET	49895	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.063863993 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.264285088 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.264729977 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.264796019 CET	49891	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.264859915 CET	49891	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.264879942 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.264892101 CET	49891	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.264899015 CET	443	49891	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.268326998 CET	49896	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.268415928 CET	443	49896	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.268496990 CET	49896	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.268662930 CET	49896	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.268696070 CET	443	49896	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.357743025 CET	443	49892	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.358308077 CET	49892	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.358372927 CET	443	49892	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.358933926 CET	49892	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.358953953 CET	443	49892	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.490792990 CET	443	49892	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.490859032 CET	443	49892	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.490928888 CET	49892	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.491158962 CET	49892	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.491187096 CET	443	49892	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.491203070 CET	49892	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.491209984 CET	443	49892	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.494541883 CET	49897	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.494586945 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.494654894 CET	49897	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.494911909 CET	49897	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.494926929 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.573189020 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.573923111 CET	49894	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.573992968 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.574414968 CET	49894	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.574445963 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.590745926 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.591244936 CET	49893	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.591276884 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.591588974 CET	49893	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.591594934 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.706036091 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.706073046 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.706130028 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.706176996 CET	49894	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.706216097 CET	49894	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.706484079 CET	49894	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.706507921 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.706526041 CET	49894	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.706533909 CET	443	49894	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.709930897 CET	49898	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.709974051 CET	443	49898	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.710063934 CET	49898	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.710256100 CET	49898	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.710266113 CET	443	49898	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.751116037 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.751143932 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.751214027 CET	49893	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.751231909 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.751246929 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.751292944 CET	49893	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.751439095 CET	49893	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.751451969 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.751461029 CET	49893	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.751466036 CET	443	49893	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.753703117 CET	49899	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.753729105 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.753793001 CET	49899	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.753943920 CET	49899	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.753954887 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.798167944 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.798599958 CET	49895	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.798613071 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.799091101 CET	49895	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.799097061 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.929374933 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.929940939 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.929990053 CET	49895	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.930006027 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.930089951 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.930111885 CET	49895	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.930111885 CET	49895	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.930133104 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.930143118 CET	49895	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.930147886 CET	443	49895	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.933485985 CET	49900	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.933562040 CET	443	49900	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:30.933742046 CET	49900	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.933880091 CET	49900	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:30.933902025 CET	443	49900	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.013056993 CET	443	49896	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.016129971 CET	49896	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.016166925 CET	443	49896	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.016642094 CET	49896	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.016647100 CET	443	49896	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.147876024 CET	443	49896	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.148036957 CET	443	49896	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.148272991 CET	49896	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.148549080 CET	49896	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.148549080 CET	49896	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.148578882 CET	443	49896	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.148591995 CET	443	49896	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.151462078 CET	49901	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.151520967 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.151616096 CET	49901	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.151839972 CET	49901	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.151865959 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.242216110 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.245074034 CET	49897	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.245100975 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.245554924 CET	49897	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.245565891 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.376369953 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.376410007 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.376471043 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.376533985 CET	49897	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.376570940 CET	49897	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.376857996 CET	49897	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.376883984 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.376898050 CET	49897	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.376904011 CET	443	49897	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.380027056 CET	49902	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.380111933 CET	443	49902	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.380202055 CET	49902	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.380441904 CET	49902	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.380474091 CET	443	49902	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.451780081 CET	443	49898	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.453387022 CET	49898	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.453447104 CET	443	49898	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.453869104 CET	49898	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.453886032 CET	443	49898	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.490729094 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.493100882 CET	49899	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.493133068 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.493626118 CET	49899	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.493634939 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.584325075 CET	443	49898	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.584405899 CET	443	49898	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.584605932 CET	49898	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.584750891 CET	49898	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.584790945 CET	443	49898	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.584822893 CET	49898	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.584839106 CET	443	49898	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.588145971 CET	49903	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.588180065 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.588274956 CET	49903	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.588490963 CET	49903	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.588504076 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.623621941 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.623641968 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.623689890 CET	49899	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.623708963 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.623888016 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.623923063 CET	49899	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.623945951 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.623958111 CET	49899	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.623958111 CET	49899	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.623965025 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.623970985 CET	443	49899	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.627049923 CET	49904	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.627073050 CET	443	49904	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.627151012 CET	49904	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.627304077 CET	49904	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.627324104 CET	443	49904	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.684601068 CET	443	49900	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.685332060 CET	49900	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.685348034 CET	443	49900	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.685856104 CET	49900	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.685862064 CET	443	49900	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.825593948 CET	443	49900	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.825644970 CET	443	49900	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.825697899 CET	443	49900	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.825763941 CET	49900	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.826064110 CET	49900	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.826081038 CET	443	49900	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.826091051 CET	49900	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.826097012 CET	443	49900	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.829572916 CET	49905	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.829659939 CET	443	49905	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.829758883 CET	49905	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.829885960 CET	49905	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.829910040 CET	443	49905	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.891968966 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.892513990 CET	49901	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.892534971 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:31.892999887 CET	49901	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:31.893006086 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.041798115 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.041876078 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.041938066 CET	49901	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.041954041 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.042064905 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.042262077 CET	49901	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.042262077 CET	49901	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.042299986 CET	49901	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.042315960 CET	443	49901	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.045674086 CET	49906	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.045725107 CET	443	49906	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.045789003 CET	49906	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.045947075 CET	49906	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.045968056 CET	443	49906	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.126660109 CET	443	49902	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.127305984 CET	49902	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.127340078 CET	443	49902	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.127831936 CET	49902	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.127836943 CET	443	49902	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.261390924 CET	443	49902	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.261462927 CET	443	49902	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.261522055 CET	49902	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.261773109 CET	49902	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.261795998 CET	443	49902	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.261811972 CET	49902	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.261817932 CET	443	49902	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.265209913 CET	49907	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.265249968 CET	443	49907	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.265331984 CET	49907	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.265595913 CET	49907	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.265610933 CET	443	49907	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.551361084 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.551615000 CET	443	49904	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.552021027 CET	49904	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.552027941 CET	49903	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.552047014 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.552056074 CET	443	49904	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.552472115 CET	49903	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.552475929 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.552539110 CET	49904	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.552545071 CET	443	49904	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.681941986 CET	443	49905	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.682579041 CET	49905	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.682601929 CET	443	49905	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.683048010 CET	49905	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.683053970 CET	443	49905	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.685216904 CET	443	49904	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.685280085 CET	443	49904	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.685337067 CET	49904	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.685525894 CET	49904	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.685544014 CET	443	49904	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.685571909 CET	49904	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.685576916 CET	443	49904	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.687422037 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.687901974 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.687982082 CET	49903	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.687999010 CET	49903	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.688011885 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.688029051 CET	49903	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.688035011 CET	443	49903	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.688664913 CET	49908	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.688685894 CET	443	49908	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.688775063 CET	49908	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.688971996 CET	49908	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.688986063 CET	443	49908	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.690521002 CET	49909	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.690555096 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.690623045 CET	49909	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.690731049 CET	49909	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.690742970 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.815913916 CET	443	49905	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.815953970 CET	443	49905	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.816009998 CET	443	49905	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.816076040 CET	49905	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.816195965 CET	49905	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.816493988 CET	49905	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.816513062 CET	443	49905	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.816535950 CET	49905	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.816543102 CET	443	49905	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.819546938 CET	49910	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.819571972 CET	443	49910	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.819674015 CET	49910	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.819808006 CET	49910	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.819822073 CET	443	49910	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.829905987 CET	443	49906	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.830272913 CET	49906	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.830292940 CET	443	49906	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.830713987 CET	49906	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.830720901 CET	443	49906	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.972650051 CET	443	49906	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.972872019 CET	443	49906	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.972971916 CET	49906	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.973005056 CET	49906	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.973021030 CET	443	49906	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.973033905 CET	49906	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.973038912 CET	443	49906	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.976128101 CET	49911	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.976172924 CET	443	49911	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:32.976238966 CET	49911	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.976377964 CET	49911	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:32.976392031 CET	443	49911	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.005742073 CET	443	49907	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.006191015 CET	49907	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.006220102 CET	443	49907	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.006654978 CET	49907	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.006660938 CET	443	49907	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.255966902 CET	443	49907	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.256004095 CET	443	49907	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.256057024 CET	443	49907	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.256118059 CET	49907	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.256201029 CET	49907	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.258476973 CET	49907	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.258526087 CET	443	49907	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.258555889 CET	49907	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.258572102 CET	443	49907	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.261430979 CET	49912	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.261496067 CET	443	49912	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.261593103 CET	49912	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.261857986 CET	49912	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.261898994 CET	443	49912	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.429711103 CET	443	49908	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.433046103 CET	49908	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.433063984 CET	443	49908	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.433172941 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.433563948 CET	49908	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.433568001 CET	443	49908	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.433811903 CET	49909	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.433864117 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.434156895 CET	49909	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.434170961 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.559087038 CET	443	49910	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.559966087 CET	49910	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.559977055 CET	443	49910	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.560709000 CET	49910	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.560714960 CET	443	49910	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.562566996 CET	443	49908	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.562657118 CET	443	49908	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.562743902 CET	49908	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.563002110 CET	49908	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.563018084 CET	443	49908	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.563029051 CET	49908	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.563040018 CET	443	49908	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.566086054 CET	49913	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.566154957 CET	443	49913	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.566227913 CET	49913	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.566387892 CET	49913	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.566404104 CET	443	49913	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.567826986 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.567861080 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.567913055 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.567981958 CET	49909	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.568075895 CET	49909	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.568097115 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.568109989 CET	49909	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.568116903 CET	443	49909	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.570298910 CET	49914	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.570400000 CET	443	49914	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.570485115 CET	49914	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.570596933 CET	49914	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.570620060 CET	443	49914	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.692631960 CET	443	49910	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.692739010 CET	443	49910	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.692826033 CET	49910	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.693125010 CET	49910	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.693125010 CET	49910	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.693147898 CET	443	49910	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.693156004 CET	443	49910	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.696418047 CET	49915	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.696481943 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.696599007 CET	49915	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.696825981 CET	49915	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.696846008 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.738652945 CET	443	49911	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.739135981 CET	49911	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.739164114 CET	443	49911	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.739660025 CET	49911	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.739666939 CET	443	49911	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.870290995 CET	443	49911	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.870481968 CET	443	49911	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.870564938 CET	49911	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.870901108 CET	49911	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.870920897 CET	443	49911	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.870934963 CET	49911	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.870944977 CET	443	49911	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.874279022 CET	49916	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.874376059 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:33.874452114 CET	49916	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.874610901 CET	49916	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:33.874648094 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.014004946 CET	443	49912	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.014605045 CET	49912	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.014668941 CET	443	49912	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.015372992 CET	49912	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.015387058 CET	443	49912	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.151417971 CET	443	49912	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.151490927 CET	443	49912	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.151552916 CET	49912	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.151846886 CET	49912	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.151889086 CET	443	49912	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.151937962 CET	49912	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.151952982 CET	443	49912	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.155169964 CET	49917	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.155215025 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.155282021 CET	49917	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.155467033 CET	49917	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.155477047 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.296627045 CET	443	49914	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.297216892 CET	49914	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.297266960 CET	443	49914	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.297667980 CET	49914	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.297683001 CET	443	49914	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.314374924 CET	443	49913	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.314882040 CET	49913	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.314924955 CET	443	49913	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.315309048 CET	49913	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.315324068 CET	443	49913	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.428447962 CET	443	49914	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.428543091 CET	443	49914	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.428612947 CET	49914	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.428847075 CET	49914	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.428896904 CET	443	49914	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.428947926 CET	49914	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.428963900 CET	443	49914	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.432153940 CET	49918	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.432208061 CET	443	49918	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.432270050 CET	49918	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.432420015 CET	49918	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.432440042 CET	443	49918	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.447729111 CET	443	49913	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.447803974 CET	443	49913	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.447868109 CET	49913	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.448024035 CET	49913	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.448046923 CET	443	49913	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.448060989 CET	49913	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.448070049 CET	443	49913	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.450474024 CET	49919	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.450517893 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.450587034 CET	49919	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.450769901 CET	49919	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.450788975 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.484627962 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.485168934 CET	49915	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.485205889 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.485660076 CET	49915	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.485666990 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.620610952 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.620733976 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.620789051 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.620804071 CET	49915	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.620851040 CET	49915	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.621049881 CET	49915	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.621073961 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.621089935 CET	49915	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.621098042 CET	443	49915	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.624135017 CET	49920	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.624172926 CET	443	49920	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.624253988 CET	49920	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.624459982 CET	49920	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.624475956 CET	443	49920	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.629877090 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.630261898 CET	49916	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.630304098 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.630697966 CET	49916	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.630705118 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.763537884 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.763710976 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.764098883 CET	49916	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.764159918 CET	49916	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.764178038 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.764188051 CET	49916	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.764193058 CET	443	49916	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.767818928 CET	49921	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.767874956 CET	443	49921	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.767959118 CET	49921	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.768166065 CET	49921	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.768182993 CET	443	49921	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.899072886 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.899703979 CET	49917	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.899782896 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:34.900181055 CET	49917	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:34.900196075 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.034759998 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.034806967 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.034862041 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.036164999 CET	49917	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.036487103 CET	49917	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.036529064 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.036556959 CET	49917	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.036572933 CET	443	49917	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.039827108 CET	49922	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.039885998 CET	443	49922	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.039961100 CET	49922	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.040153980 CET	49922	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.040174007 CET	443	49922	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.162254095 CET	443	49918	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.162914038 CET	49918	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.162949085 CET	443	49918	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.163425922 CET	49918	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.163431883 CET	443	49918	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.201001883 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.201729059 CET	49919	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.201756001 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.202136040 CET	49919	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.202142954 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.293889046 CET	443	49918	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.294003963 CET	443	49918	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.294312954 CET	49918	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.294358015 CET	49918	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.294384956 CET	443	49918	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.294399023 CET	49918	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.294404984 CET	443	49918	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.297838926 CET	49923	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.297938108 CET	443	49923	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.298070908 CET	49923	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.298209906 CET	49923	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.298230886 CET	443	49923	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.336338997 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.336360931 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.336410999 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.336568117 CET	49919	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.336910009 CET	49919	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.336937904 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.336952925 CET	49919	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.336960077 CET	443	49919	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.340496063 CET	49924	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.340532064 CET	443	49924	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.340656996 CET	49924	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.340881109 CET	49924	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.340893984 CET	443	49924	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.380892038 CET	443	49920	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.381583929 CET	49920	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.381607056 CET	443	49920	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.382081032 CET	49920	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.382087946 CET	443	49920	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.519335985 CET	443	49921	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.520003080 CET	49921	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.520042896 CET	443	49921	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.520488977 CET	49921	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.520494938 CET	443	49921	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.523685932 CET	443	49920	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.523787975 CET	443	49920	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.523974895 CET	49920	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.524010897 CET	49920	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.524039030 CET	443	49920	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.524051905 CET	49920	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.524060965 CET	443	49920	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.527209997 CET	49925	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.527249098 CET	443	49925	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.527333975 CET	49925	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.527476072 CET	49925	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.527484894 CET	443	49925	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.652349949 CET	443	49921	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.652396917 CET	443	49921	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.652451038 CET	443	49921	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.652571917 CET	49921	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.652650118 CET	49921	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.652790070 CET	49921	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.652836084 CET	443	49921	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.652864933 CET	49921	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.652880907 CET	443	49921	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.655999899 CET	49926	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.656039000 CET	443	49926	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.656135082 CET	49926	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.656697989 CET	49926	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.656714916 CET	443	49926	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.780020952 CET	443	49922	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.780654907 CET	49922	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.780679941 CET	443	49922	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.781148911 CET	49922	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.781158924 CET	443	49922	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.914302111 CET	443	49922	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.914374113 CET	443	49922	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.914424896 CET	49922	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.914673090 CET	49922	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.914693117 CET	443	49922	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.914781094 CET	49922	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.914822102 CET	443	49922	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.917910099 CET	49927	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.917953968 CET	443	49927	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:35.918029070 CET	49927	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.918185949 CET	49927	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:35.918198109 CET	443	49927	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.078928947 CET	443	49923	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.079514027 CET	49923	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.079561949 CET	443	49923	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.080120087 CET	49923	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.080128908 CET	443	49923	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.105752945 CET	443	49924	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.106312990 CET	49924	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.106324911 CET	443	49924	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.106796026 CET	49924	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.106801033 CET	443	49924	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.220725060 CET	443	49923	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.220751047 CET	443	49923	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.220822096 CET	443	49923	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.220829964 CET	49923	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.220885038 CET	49923	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.221102953 CET	49923	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.221102953 CET	49923	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.221148014 CET	443	49923	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.221188068 CET	443	49923	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.224492073 CET	49928	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.224550009 CET	443	49928	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.224617004 CET	49928	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.224781990 CET	49928	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.224800110 CET	443	49928	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.241221905 CET	443	49924	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.241272926 CET	443	49924	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.241334915 CET	49924	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.241345882 CET	443	49924	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.241358042 CET	443	49924	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.241420984 CET	49924	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.241605997 CET	49924	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.241620064 CET	443	49924	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.241630077 CET	49924	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.241635084 CET	443	49924	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.244565964 CET	49929	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.244596958 CET	443	49929	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.244677067 CET	49929	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.244803905 CET	49929	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.244817972 CET	443	49929	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.274873018 CET	443	49925	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.275299072 CET	49925	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.275320053 CET	443	49925	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.275760889 CET	49925	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.275767088 CET	443	49925	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.402555943 CET	443	49926	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.403357983 CET	49926	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.403376102 CET	443	49926	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.404089928 CET	49926	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.404094934 CET	443	49926	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.425086021 CET	443	49925	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.425384998 CET	443	49925	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.425425053 CET	49925	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.425441027 CET	443	49925	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.425489902 CET	443	49925	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.425529003 CET	49925	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.425741911 CET	49925	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.425757885 CET	443	49925	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.425770044 CET	49925	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.425776005 CET	443	49925	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.429650068 CET	49930	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.429713964 CET	443	49930	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.429788113 CET	49930	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.429986000 CET	49930	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.430016041 CET	443	49930	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.536494017 CET	443	49926	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.536871910 CET	443	49926	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.536936045 CET	49926	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.537034035 CET	49926	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.537034035 CET	49926	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.537051916 CET	443	49926	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.537082911 CET	443	49926	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.540810108 CET	49931	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.540843010 CET	443	49931	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.540909052 CET	49931	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.541229010 CET	49931	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.541240931 CET	443	49931	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.686350107 CET	443	49927	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.686954021 CET	49927	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.686985016 CET	443	49927	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.687423944 CET	49927	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.687429905 CET	443	49927	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.822685003 CET	443	49927	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.822716951 CET	443	49927	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.822777033 CET	49927	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.822778940 CET	443	49927	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.822827101 CET	49927	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.823203087 CET	49927	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.823220968 CET	443	49927	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.823232889 CET	49927	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.823237896 CET	443	49927	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.826256037 CET	49932	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.826301098 CET	443	49932	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.826369047 CET	49932	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.826534033 CET	49932	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.826550007 CET	443	49932	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.981218100 CET	443	49928	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.981789112 CET	49928	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.981822014 CET	443	49928	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:36.982296944 CET	49928	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:36.982311010 CET	443	49928	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.114336014 CET	443	49928	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.114500999 CET	443	49928	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.114607096 CET	49928	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.114886045 CET	49928	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.114886045 CET	49928	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.114921093 CET	443	49928	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.114947081 CET	443	49928	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.117815018 CET	49933	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.117865086 CET	443	49933	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.117954969 CET	49933	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.118123055 CET	49933	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.118141890 CET	443	49933	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.139379025 CET	443	49929	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.143073082 CET	49929	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.143091917 CET	443	49929	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.143523932 CET	49929	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.143529892 CET	443	49929	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.173502922 CET	443	49930	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.174958944 CET	49930	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.174978971 CET	443	49930	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.175359011 CET	49930	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.175371885 CET	443	49930	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.273740053 CET	443	49929	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.273916960 CET	443	49929	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.273972988 CET	443	49929	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.274034023 CET	49929	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.274082899 CET	49929	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.274344921 CET	49929	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.274362087 CET	443	49929	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.274373055 CET	49929	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.274378061 CET	443	49929	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.277267933 CET	49934	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.277307987 CET	443	49934	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.277385950 CET	49934	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.277688026 CET	49934	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.277703047 CET	443	49934	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.306397915 CET	443	49930	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.306689978 CET	443	49930	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.307033062 CET	443	49931	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.307123899 CET	49930	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.307199955 CET	49930	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.307199955 CET	49930	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.307241917 CET	443	49930	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.307264090 CET	443	49930	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.308585882 CET	49931	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.308603048 CET	443	49931	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.309046030 CET	49931	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.309050083 CET	443	49931	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.310688972 CET	49935	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.310723066 CET	443	49935	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.310798883 CET	49935	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.310894966 CET	49935	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.310909033 CET	443	49935	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.439240932 CET	443	49931	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.439429045 CET	443	49931	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.439558983 CET	49931	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.439564943 CET	443	49931	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.439634085 CET	49931	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.439682007 CET	49931	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.439699888 CET	443	49931	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.439709902 CET	49931	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.439717054 CET	443	49931	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.442672968 CET	49936	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.442706108 CET	443	49936	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.442786932 CET	49936	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.442972898 CET	49936	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.442985058 CET	443	49936	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.555212021 CET	443	49932	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.557076931 CET	49932	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.557106972 CET	443	49932	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.557559013 CET	49932	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.557564974 CET	443	49932	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.686728954 CET	443	49932	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.686887980 CET	443	49932	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.689898014 CET	49932	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.689951897 CET	49932	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.689951897 CET	49932	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.689971924 CET	443	49932	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.689986944 CET	443	49932	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.693094969 CET	49937	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.693176031 CET	443	49937	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.693262100 CET	49937	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.693408012 CET	49937	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.693423986 CET	443	49937	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.871596098 CET	443	49933	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.872289896 CET	49933	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.872330904 CET	443	49933	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:37.872778893 CET	49933	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:37.872786045 CET	443	49933	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.004276991 CET	443	49933	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.004349947 CET	443	49933	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.004404068 CET	49933	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.004429102 CET	443	49933	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.004457951 CET	443	49933	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.004513979 CET	49933	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.004714966 CET	49933	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.004734039 CET	443	49933	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.004761934 CET	49933	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.004774094 CET	443	49933	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.007553101 CET	443	49934	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.007966995 CET	49934	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.007997036 CET	443	49934	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.008316994 CET	49938	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.008349895 CET	443	49938	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.008457899 CET	49938	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.008479118 CET	49934	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.008483887 CET	443	49934	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.008553028 CET	49938	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.008560896 CET	443	49938	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.058968067 CET	443	49935	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.059567928 CET	49935	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.059596062 CET	443	49935	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.060378075 CET	49935	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.060384989 CET	443	49935	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.319605112 CET	443	49934	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.319679976 CET	443	49934	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.319729090 CET	49934	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.320168972 CET	49934	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.320188046 CET	443	49934	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.320199013 CET	49934	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.320204020 CET	443	49934	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.324487925 CET	49939	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.324538946 CET	443	49939	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.324614048 CET	49939	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.324784994 CET	49939	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.324810982 CET	443	49939	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.328072071 CET	443	49936	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.328460932 CET	49936	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.328480959 CET	443	49936	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.328876019 CET	49936	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.328881025 CET	443	49936	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.339167118 CET	443	49935	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.339226007 CET	443	49935	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.339271069 CET	49935	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.339364052 CET	49935	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.339386940 CET	443	49935	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.339401960 CET	49935	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.339409113 CET	443	49935	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.341653109 CET	49940	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.341677904 CET	443	49940	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.341733932 CET	49940	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.341850042 CET	49940	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.341866016 CET	443	49940	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.459126949 CET	443	49937	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.459671021 CET	49937	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.459700108 CET	443	49937	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.459784031 CET	443	49936	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.459853888 CET	443	49936	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.459898949 CET	49936	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.459914923 CET	443	49936	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.460031986 CET	443	49936	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.460056067 CET	49936	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.460078001 CET	443	49936	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.460089922 CET	49936	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.460089922 CET	49936	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.460098028 CET	443	49936	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.460105896 CET	443	49936	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.460720062 CET	49937	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.460732937 CET	443	49937	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.463006020 CET	49941	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.463040113 CET	443	49941	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.463097095 CET	49941	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.463224888 CET	49941	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.463234901 CET	443	49941	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.593508959 CET	443	49937	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.593570948 CET	443	49937	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.593624115 CET	49937	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.593791008 CET	49937	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.593806982 CET	443	49937	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.593818903 CET	49937	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.593825102 CET	443	49937	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.596363068 CET	49942	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.596407890 CET	443	49942	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.596481085 CET	49942	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.596690893 CET	49942	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.596709013 CET	443	49942	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.800149918 CET	443	49938	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.801124096 CET	49938	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.801141977 CET	443	49938	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.801634073 CET	49938	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.801639080 CET	443	49938	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.940401077 CET	443	49938	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.940491915 CET	443	49938	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.940547943 CET	49938	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.940767050 CET	49938	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.940779924 CET	443	49938	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.940809011 CET	49938	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.940814972 CET	443	49938	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.943708897 CET	49943	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.943738937 CET	443	49943	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:38.943933964 CET	49943	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.944091082 CET	49943	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:38.944106102 CET	443	49943	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.063146114 CET	443	49939	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.063752890 CET	49939	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.063816071 CET	443	49939	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.064464092 CET	49939	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.064480066 CET	443	49939	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.081907988 CET	443	49940	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.085005999 CET	49940	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.085123062 CET	443	49940	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.085464001 CET	49940	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.085480928 CET	443	49940	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.195805073 CET	443	49939	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.196064949 CET	443	49939	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.196118116 CET	443	49939	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.196178913 CET	49939	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.196249008 CET	49939	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.196302891 CET	49939	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.196302891 CET	49939	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.196342945 CET	443	49939	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.196368933 CET	443	49939	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.199460983 CET	49944	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.199558020 CET	443	49944	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.199649096 CET	49944	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.199819088 CET	49944	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.199845076 CET	443	49944	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.214695930 CET	443	49940	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.214776039 CET	443	49940	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.214920998 CET	49940	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.214989901 CET	49940	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.214989901 CET	49940	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.215029955 CET	443	49940	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.215071917 CET	443	49940	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.217555046 CET	49945	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.217597008 CET	443	49945	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.217665911 CET	49945	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.217783928 CET	49945	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.217801094 CET	443	49945	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.221451998 CET	443	49941	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.221844912 CET	49941	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.221879005 CET	443	49941	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.222309113 CET	49941	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.222316027 CET	443	49941	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.342243910 CET	443	49942	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.343282938 CET	49942	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.343310118 CET	443	49942	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.343786001 CET	49942	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.343794107 CET	443	49942	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.356072903 CET	443	49941	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.356209993 CET	443	49941	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.356316090 CET	443	49941	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.356353045 CET	49941	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.356398106 CET	49941	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.356622934 CET	49941	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.356638908 CET	443	49941	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.356652021 CET	49941	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.356657028 CET	443	49941	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.359828949 CET	49946	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.359914064 CET	443	49946	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.360009909 CET	49946	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.360174894 CET	49946	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.360208035 CET	443	49946	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.478018045 CET	443	49942	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.478102922 CET	443	49942	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.478415966 CET	49942	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.478470087 CET	49942	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.478470087 CET	49942	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.478502989 CET	443	49942	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.478517056 CET	443	49942	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.481564999 CET	49947	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.481626034 CET	443	49947	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.481698036 CET	49947	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.481832981 CET	49947	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.481853008 CET	443	49947	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.689146996 CET	443	49943	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.693099976 CET	49943	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.693118095 CET	443	49943	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.693599939 CET	49943	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.693604946 CET	443	49943	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.824800014 CET	443	49943	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.825023890 CET	443	49943	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.825128078 CET	49943	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.825213909 CET	49943	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.825226068 CET	443	49943	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.825263023 CET	49943	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.825268984 CET	443	49943	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.828572035 CET	49948	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.828603029 CET	443	49948	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.828694105 CET	49948	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.828881025 CET	49948	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.828896999 CET	443	49948	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.947612047 CET	443	49944	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.948276997 CET	49944	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.948317051 CET	443	49944	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.948774099 CET	49944	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.948786974 CET	443	49944	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.957886934 CET	443	49945	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.958333969 CET	49945	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.958352089 CET	443	49945	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:39.958946943 CET	49945	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:39.958955050 CET	443	49945	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.084264994 CET	443	49944	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.085021973 CET	443	49944	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.085089922 CET	443	49944	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.085091114 CET	49944	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.085170031 CET	49944	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.085217953 CET	49944	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.085287094 CET	443	49944	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.085325956 CET	49944	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.085361958 CET	443	49944	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.088630915 CET	49949	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.088665962 CET	443	49949	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.088799000 CET	49949	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.089005947 CET	49949	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.089025021 CET	443	49949	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.093245983 CET	443	49945	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.093322039 CET	443	49945	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.093370914 CET	49945	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.093595982 CET	49945	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.093617916 CET	443	49945	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.093632936 CET	49945	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.093640089 CET	443	49945	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.097341061 CET	49950	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.097374916 CET	443	49950	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.097438097 CET	49950	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.097588062 CET	49950	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.097595930 CET	443	49950	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.116543055 CET	443	49946	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.117202044 CET	49946	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.117250919 CET	443	49946	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.118345976 CET	49946	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.118362904 CET	443	49946	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.218976974 CET	443	49947	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.219536066 CET	49947	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.219558001 CET	443	49947	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.220082045 CET	49947	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.220088959 CET	443	49947	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.251753092 CET	443	49946	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.251935005 CET	443	49946	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.252006054 CET	49946	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.252089977 CET	49946	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.252089977 CET	49946	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.252129078 CET	443	49946	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.252154112 CET	443	49946	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.255390882 CET	49951	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.255415916 CET	443	49951	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.255506039 CET	49951	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.255615950 CET	49951	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.255635977 CET	443	49951	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.351784945 CET	443	49947	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.351813078 CET	443	49947	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.351861954 CET	443	49947	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.351870060 CET	49947	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.351912022 CET	49947	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.352155924 CET	49947	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.352183104 CET	443	49947	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.352199078 CET	49947	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.352205992 CET	443	49947	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.356179953 CET	49952	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.356223106 CET	443	49952	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.356287956 CET	49952	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.356478930 CET	49952	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.356487036 CET	443	49952	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.583672047 CET	443	49948	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.584212065 CET	49948	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.584248066 CET	443	49948	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.584847927 CET	49948	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.584853888 CET	443	49948	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.728490114 CET	443	49948	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.728564024 CET	443	49948	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.728648901 CET	49948	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.728902102 CET	49948	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.728915930 CET	443	49948	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.728925943 CET	49948	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.728933096 CET	443	49948	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.732157946 CET	49953	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.732247114 CET	443	49953	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.732352972 CET	49953	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.732562065 CET	49953	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.732594967 CET	443	49953	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.816682100 CET	443	49949	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.819499016 CET	49949	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.819509029 CET	443	49949	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.819981098 CET	49949	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.819986105 CET	443	49949	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.860356092 CET	443	49950	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.861067057 CET	49950	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.861084938 CET	443	49950	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.861521959 CET	49950	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.861526966 CET	443	49950	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.947657108 CET	443	49949	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.947727919 CET	443	49949	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.947827101 CET	49949	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.947838068 CET	443	49949	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.947851896 CET	443	49949	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.947925091 CET	49949	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.948056936 CET	49949	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.948056936 CET	49949	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.948067904 CET	443	49949	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.948076010 CET	443	49949	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.950918913 CET	49954	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.950962067 CET	443	49954	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.951060057 CET	49954	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.951209068 CET	49954	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.951217890 CET	443	49954	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.993582964 CET	443	49950	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.993649006 CET	443	49950	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.993971109 CET	49950	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.993994951 CET	49950	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.993994951 CET	49950	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.994008064 CET	443	49950	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.994015932 CET	443	49950	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.996860027 CET	49955	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.996956110 CET	443	49955	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:40.997040987 CET	49955	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.997198105 CET	49955	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:40.997234106 CET	443	49955	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.010936022 CET	443	49951	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.011332989 CET	49951	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.011353970 CET	443	49951	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.011857033 CET	49951	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.011878967 CET	443	49951	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.109666109 CET	443	49952	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.110373020 CET	49952	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.110400915 CET	443	49952	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.110897064 CET	49952	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.110903978 CET	443	49952	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.145488024 CET	443	49951	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.145643950 CET	443	49951	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.145880938 CET	49951	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.146151066 CET	49951	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.146151066 CET	49951	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.146173000 CET	443	49951	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.146184921 CET	443	49951	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.149101973 CET	49956	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.149174929 CET	443	49956	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.149252892 CET	49956	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.149416924 CET	49956	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.149435997 CET	443	49956	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.247530937 CET	443	49952	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.247592926 CET	443	49952	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.247860909 CET	49952	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.247888088 CET	49952	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.247900009 CET	443	49952	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.247910976 CET	49952	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.247915983 CET	443	49952	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.250828028 CET	49957	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.250873089 CET	443	49957	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.250941038 CET	49957	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.251085043 CET	49957	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.251099110 CET	443	49957	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.658147097 CET	443	49953	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.658921003 CET	49953	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.658967018 CET	443	49953	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.659387112 CET	49953	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.659401894 CET	443	49953	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.687253952 CET	443	49954	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.687707901 CET	49954	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.687728882 CET	443	49954	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.688136101 CET	49954	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.688141108 CET	443	49954	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.735364914 CET	443	49955	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.737071991 CET	49955	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.737098932 CET	443	49955	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.737539053 CET	49955	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.737545013 CET	443	49955	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.793474913 CET	443	49953	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.793513060 CET	443	49953	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.793564081 CET	443	49953	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.793576956 CET	49953	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.793612003 CET	49953	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.793893099 CET	49953	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.793914080 CET	443	49953	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.793931007 CET	49953	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.793937922 CET	443	49953	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.797343016 CET	49958	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.797399044 CET	443	49958	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.797506094 CET	49958	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.797657967 CET	49958	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.797672987 CET	443	49958	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.823131084 CET	443	49954	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.823447943 CET	443	49954	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.823560953 CET	49954	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.824569941 CET	49954	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.824569941 CET	49954	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.824587107 CET	443	49954	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.824598074 CET	443	49954	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.826045036 CET	49959	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.826090097 CET	443	49959	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.826162100 CET	49959	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.826287985 CET	49959	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.826308966 CET	443	49959	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.869873047 CET	443	49955	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.869900942 CET	443	49955	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.869954109 CET	443	49955	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.870088100 CET	49955	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.870148897 CET	49955	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.870260000 CET	49955	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.870286942 CET	443	49955	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.870304108 CET	49955	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.870311975 CET	443	49955	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.872711897 CET	49960	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.872796059 CET	443	49960	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.872883081 CET	49960	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.873028994 CET	49960	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.873063087 CET	443	49960	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.892757893 CET	443	49956	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.893276930 CET	49956	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.893296957 CET	443	49956	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:41.893610001 CET	49956	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:41.893616915 CET	443	49956	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.024979115 CET	443	49956	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.025135994 CET	443	49956	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.025228977 CET	49956	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.047259092 CET	49956	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.047295094 CET	443	49956	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.047327995 CET	49956	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.047337055 CET	443	49956	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.052650928 CET	49961	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.052690029 CET	443	49961	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.052743912 CET	49961	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.053004026 CET	49961	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.053016901 CET	443	49961	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.109194994 CET	443	49957	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.115192890 CET	49957	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.115258932 CET	443	49957	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.119272947 CET	49957	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.119281054 CET	443	49957	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.254358053 CET	443	49957	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.254390955 CET	443	49957	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.254448891 CET	443	49957	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.254523039 CET	49957	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.254553080 CET	49957	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.264480114 CET	49957	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.264497995 CET	443	49957	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.264508963 CET	49957	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.264513969 CET	443	49957	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.270514011 CET	49962	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.270618916 CET	443	49962	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.270701885 CET	49962	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.270872116 CET	49962	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.270910978 CET	443	49962	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.536983013 CET	443	49958	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.537651062 CET	49958	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.537699938 CET	443	49958	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.538156986 CET	49958	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.538165092 CET	443	49958	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.553407907 CET	443	49959	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.554028034 CET	49959	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.554050922 CET	443	49959	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.554933071 CET	49959	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.554939032 CET	443	49959	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.602344036 CET	443	49960	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.602933884 CET	49960	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.602977037 CET	443	49960	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.603442907 CET	49960	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.603456974 CET	443	49960	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.670337915 CET	443	49958	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.670408964 CET	443	49958	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.670460939 CET	49958	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.670649052 CET	49958	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.670670033 CET	443	49958	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.670684099 CET	49958	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.670691013 CET	443	49958	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.673958063 CET	49963	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.673990011 CET	443	49963	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.674048901 CET	49963	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.674211979 CET	49963	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.674226046 CET	443	49963	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.687005997 CET	443	49959	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.687131882 CET	443	49959	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.687182903 CET	49959	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.687268972 CET	49959	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.687268972 CET	49959	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.687329054 CET	443	49959	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.687349081 CET	443	49959	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.689692974 CET	49964	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.689729929 CET	443	49964	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.689800024 CET	49964	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.689960957 CET	49964	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.689975023 CET	443	49964	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.741693020 CET	443	49960	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.741807938 CET	443	49960	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.741871119 CET	49960	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.742053986 CET	49960	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.742053986 CET	49960	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.742091894 CET	443	49960	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.742116928 CET	443	49960	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.745209932 CET	49965	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.745269060 CET	443	49965	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.745352030 CET	49965	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.745513916 CET	49965	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.745532990 CET	443	49965	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.984042883 CET	443	49961	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.984594107 CET	49961	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.984631062 CET	443	49961	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:42.985095978 CET	49961	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:42.985102892 CET	443	49961	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.114322901 CET	443	49962	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.114845037 CET	49962	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.114883900 CET	443	49962	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.115360022 CET	49962	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.115379095 CET	443	49962	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.122626066 CET	443	49961	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.122698069 CET	443	49961	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.122813940 CET	443	49961	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.122831106 CET	49961	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.122873068 CET	49961	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.122908115 CET	49961	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.122925997 CET	443	49961	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.122939110 CET	49961	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.122944117 CET	443	49961	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.125796080 CET	49966	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.125828028 CET	443	49966	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.125972033 CET	49966	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.126120090 CET	49966	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.126132011 CET	443	49966	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.251255035 CET	443	49962	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.251621008 CET	443	49962	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.254640102 CET	49962	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.258385897 CET	49962	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.258424997 CET	443	49962	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.258475065 CET	49962	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.258490086 CET	443	49962	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.261822939 CET	49967	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.261871099 CET	443	49967	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.261984110 CET	49967	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.262096882 CET	49967	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.262108088 CET	443	49967	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.414782047 CET	443	49963	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.421138048 CET	49963	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.421150923 CET	443	49963	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.421602011 CET	49963	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.421607018 CET	443	49963	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.439306021 CET	443	49964	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.440053940 CET	49964	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.440083981 CET	443	49964	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.440449953 CET	49964	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.440455914 CET	443	49964	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.754014969 CET	443	49963	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.754106045 CET	443	49963	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.754317045 CET	49963	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.754360914 CET	49963	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.754379034 CET	443	49963	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.754390955 CET	49963	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.754395962 CET	443	49963	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.754602909 CET	443	49964	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.754682064 CET	443	49964	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.754749060 CET	49964	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.754913092 CET	49964	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.754930019 CET	443	49964	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.754942894 CET	49964	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.754949093 CET	443	49964	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.755600929 CET	443	49965	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.756239891 CET	49965	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.756275892 CET	443	49965	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.756792068 CET	49965	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.756809950 CET	443	49965	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.758088112 CET	49968	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.758117914 CET	443	49968	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.758194923 CET	49968	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.758213997 CET	49969	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.758282900 CET	443	49969	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.758316040 CET	49968	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.758332014 CET	443	49968	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.758346081 CET	49969	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.758522034 CET	49969	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.758558989 CET	443	49969	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.891706944 CET	443	49966	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.892406940 CET	49966	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.892430067 CET	443	49966	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.892921925 CET	49966	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.892926931 CET	443	49966	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.905316114 CET	443	49965	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.905385017 CET	443	49965	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.905833006 CET	49965	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.905976057 CET	49965	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.905976057 CET	49965	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.906001091 CET	443	49965	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.906013012 CET	443	49965	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.908895016 CET	49970	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.908926964 CET	443	49970	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:43.909018040 CET	49970	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.909198046 CET	49970	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:43.909210920 CET	443	49970	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.014249086 CET	443	49967	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.014930010 CET	49967	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.014945984 CET	443	49967	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.015582085 CET	49967	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.015588045 CET	443	49967	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.022059917 CET	443	49966	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.022201061 CET	443	49966	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.022263050 CET	49966	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.022340059 CET	49966	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.022361040 CET	443	49966	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.022386074 CET	49966	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.022392035 CET	443	49966	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.025403976 CET	49971	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.025485992 CET	443	49971	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.025574923 CET	49971	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.025732040 CET	49971	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.025753975 CET	443	49971	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.150557041 CET	443	49967	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.150846958 CET	443	49967	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.150919914 CET	49967	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.150989056 CET	49967	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.150989056 CET	49967	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.151009083 CET	443	49967	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.151024103 CET	443	49967	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.154311895 CET	49972	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.154326916 CET	443	49972	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.154539108 CET	49972	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.154679060 CET	49972	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.154690981 CET	443	49972	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.484662056 CET	443	49968	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.485162973 CET	49968	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.485178947 CET	443	49968	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.485694885 CET	49968	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.485702991 CET	443	49968	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.486848116 CET	443	49969	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.487355947 CET	49969	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.487413883 CET	443	49969	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.487976074 CET	49969	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.487993956 CET	443	49969	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.617360115 CET	443	49968	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.617470026 CET	443	49968	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.617585897 CET	49968	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.618757963 CET	443	49969	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.618896961 CET	443	49969	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.618947029 CET	443	49969	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.618984938 CET	49969	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.618985891 CET	49969	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.648525953 CET	49968	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.648560047 CET	443	49968	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.648572922 CET	49968	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.648580074 CET	443	49968	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.649857044 CET	49969	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.649914026 CET	443	49969	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.656209946 CET	443	49970	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.673996925 CET	49970	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.674015045 CET	443	49970	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.674432993 CET	49970	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.674438953 CET	443	49970	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.677517891 CET	49973	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.677562952 CET	443	49973	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.677715063 CET	49973	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.677815914 CET	49973	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.677824020 CET	443	49973	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.678793907 CET	49974	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.678841114 CET	443	49974	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.679210901 CET	49974	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.679497957 CET	49974	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.679510117 CET	443	49974	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.776812077 CET	443	49971	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.780338049 CET	49971	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.780402899 CET	443	49971	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.784059048 CET	49971	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.784076929 CET	443	49971	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.804948092 CET	443	49970	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.805049896 CET	443	49970	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.805136919 CET	49970	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.806832075 CET	49970	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.806853056 CET	443	49970	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.806864023 CET	49970	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.806869984 CET	443	49970	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.849195957 CET	49975	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.849246025 CET	443	49975	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.849327087 CET	49975	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.852925062 CET	49975	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.852932930 CET	443	49975	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.892318010 CET	443	49972	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.896702051 CET	49972	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.896708965 CET	443	49972	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.897109032 CET	49972	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.897128105 CET	443	49972	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.924180984 CET	443	49971	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.924249887 CET	443	49971	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.924335003 CET	49971	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.924355984 CET	443	49971	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.926661015 CET	49971	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.927165985 CET	49971	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.927165985 CET	49971	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.927207947 CET	443	49971	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.927233934 CET	443	49971	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.934257030 CET	49976	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.934299946 CET	443	49976	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:44.934839010 CET	49976	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.938029051 CET	49976	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:44.938045979 CET	443	49976	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.025439978 CET	443	49972	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.025562048 CET	443	49972	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.025624037 CET	49972	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.025856018 CET	49972	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.025856018 CET	49972	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.025872946 CET	443	49972	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.025882006 CET	443	49972	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.028984070 CET	49977	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.029016972 CET	443	49977	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.029078007 CET	49977	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.029217958 CET	49977	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.029232025 CET	443	49977	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.417221069 CET	443	49973	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.418231010 CET	49973	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.418257952 CET	443	49973	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.418756008 CET	49973	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.418761969 CET	443	49973	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.492151022 CET	443	49974	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.492851973 CET	49974	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.492883921 CET	443	49974	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.493391991 CET	49974	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.493396997 CET	443	49974	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.551229954 CET	443	49973	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.551309109 CET	443	49973	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.551565886 CET	49973	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.551611900 CET	49973	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.551611900 CET	49973	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.551632881 CET	443	49973	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.551668882 CET	443	49973	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.554801941 CET	49978	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.554856062 CET	443	49978	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.554943085 CET	49978	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.555130005 CET	49978	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.555150986 CET	443	49978	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.621741056 CET	443	49974	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.621783018 CET	443	49974	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.621835947 CET	443	49974	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.621901989 CET	49974	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.621902943 CET	49974	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.622159004 CET	49974	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.622159958 CET	49974	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.622178078 CET	443	49974	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.622195005 CET	443	49974	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.625188112 CET	49979	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.625226021 CET	443	49979	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.625305891 CET	49979	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.625425100 CET	49979	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.625437975 CET	443	49979	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.630031109 CET	443	49975	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.630450964 CET	49975	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.630470037 CET	443	49975	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.631058931 CET	49975	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.631082058 CET	443	49975	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.698386908 CET	443	49976	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.699023008 CET	49976	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.699058056 CET	443	49976	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.699512005 CET	49976	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.699520111 CET	443	49976	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.770756006 CET	443	49975	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.770842075 CET	443	49975	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.770925999 CET	49975	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.771202087 CET	49975	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.771218061 CET	443	49975	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.771229029 CET	49975	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.771234989 CET	443	49975	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.771812916 CET	443	49977	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.772288084 CET	49977	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.772308111 CET	443	49977	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.772814989 CET	49977	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.772819996 CET	443	49977	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.774436951 CET	49980	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.774482012 CET	443	49980	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.774564028 CET	49980	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.774682045 CET	49980	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.774697065 CET	443	49980	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.831783056 CET	443	49976	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.831928968 CET	443	49976	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.832026958 CET	49976	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.832117081 CET	49976	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.832117081 CET	49976	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.832161903 CET	443	49976	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.832190990 CET	443	49976	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.834862947 CET	49981	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.834897995 CET	443	49981	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.834974051 CET	49981	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.835119009 CET	49981	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.835131884 CET	443	49981	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.914001942 CET	443	49977	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.914076090 CET	443	49977	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.914124012 CET	443	49977	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.914139032 CET	49977	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.914166927 CET	49977	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.914376020 CET	49977	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.914395094 CET	443	49977	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.914406061 CET	49977	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.914412022 CET	443	49977	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.917393923 CET	49982	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.917421103 CET	443	49982	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:45.917495966 CET	49982	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.917661905 CET	49982	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:45.917675972 CET	443	49982	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.499140978 CET	443	49978	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.499655962 CET	443	49979	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.499958038 CET	49978	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.499980927 CET	443	49978	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.500519991 CET	49978	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.500524998 CET	443	49978	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.500701904 CET	49979	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.500734091 CET	443	49979	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.501521111 CET	49979	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.501528025 CET	443	49979	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.531920910 CET	443	49980	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.532335997 CET	49980	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.532363892 CET	443	49980	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.532771111 CET	49980	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.532776117 CET	443	49980	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.621329069 CET	443	49981	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.621849060 CET	49981	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.621865034 CET	443	49981	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.622307062 CET	49981	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.622312069 CET	443	49981	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.635509968 CET	443	49979	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.635737896 CET	443	49979	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.635791063 CET	49979	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.635910034 CET	49979	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.635910034 CET	49979	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.635931015 CET	443	49979	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.635936975 CET	443	49979	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.638509989 CET	49983	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.638544083 CET	443	49983	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.638623953 CET	49983	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.638761997 CET	49983	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.638776064 CET	443	49983	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.652134895 CET	443	49978	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.652213097 CET	443	49978	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.652272940 CET	49978	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.652357101 CET	49978	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.652368069 CET	443	49978	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.652383089 CET	49978	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.652393103 CET	443	49978	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.654503107 CET	49984	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.654512882 CET	443	49984	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.654587030 CET	49984	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.654725075 CET	49984	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.654736042 CET	443	49984	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.667411089 CET	443	49980	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.667438030 CET	443	49980	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.667499065 CET	49980	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.667517900 CET	443	49980	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.667649984 CET	49980	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.667666912 CET	443	49980	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.667675018 CET	49980	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.667798042 CET	443	49980	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.667830944 CET	443	49980	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.667869091 CET	49980	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.669632912 CET	49985	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.669661045 CET	443	49985	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.669727087 CET	49985	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.669840097 CET	49985	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.669853926 CET	443	49985	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.759898901 CET	443	49981	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.760021925 CET	443	49981	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.760071993 CET	49981	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.760262966 CET	49981	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.760282040 CET	443	49981	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.760293007 CET	49981	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.760298014 CET	443	49981	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.763780117 CET	49986	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.763802052 CET	443	49986	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:46.763861895 CET	49986	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.764005899 CET	49986	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:46.764018059 CET	443	49986	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.037339926 CET	443	49982	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.045206070 CET	49982	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.045236111 CET	443	49982	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.046860933 CET	49982	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.046869993 CET	443	49982	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.175472975 CET	443	49982	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.175497055 CET	443	49982	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.175578117 CET	49982	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.175599098 CET	443	49982	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.175936937 CET	49982	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.175947905 CET	443	49982	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.176120996 CET	443	49982	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.176155090 CET	443	49982	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.176198006 CET	49982	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.176245928 CET	49982	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.176259995 CET	443	49982	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.179260969 CET	49987	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.179290056 CET	443	49987	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.179476023 CET	49987	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.179723978 CET	49987	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.179738998 CET	443	49987	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.393599987 CET	443	49984	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.399638891 CET	49984	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.399666071 CET	443	49984	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.403844118 CET	49984	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.403850079 CET	443	49984	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.406492949 CET	443	49985	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.412055016 CET	49985	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.412075996 CET	443	49985	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.416071892 CET	49985	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.416079044 CET	443	49985	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.424817085 CET	443	49983	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.432301998 CET	49983	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.432311058 CET	443	49983	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.435908079 CET	49983	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.435914040 CET	443	49983	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.536128044 CET	443	49984	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.536155939 CET	443	49984	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.536248922 CET	443	49984	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.536334991 CET	49984	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.546575069 CET	443	49985	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.546597004 CET	443	49985	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.546650887 CET	443	49985	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.546725035 CET	49985	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.557658911 CET	443	49986	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.570175886 CET	49984	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.570250988 CET	443	49984	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.570290089 CET	49984	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.570306063 CET	443	49984	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.570555925 CET	443	49983	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.570575953 CET	443	49983	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.570631027 CET	443	49983	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.570646048 CET	49983	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.570688009 CET	49983	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.572494984 CET	49983	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.572499037 CET	443	49983	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.572520971 CET	49983	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.572524071 CET	443	49983	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.574903011 CET	49985	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.574928999 CET	443	49985	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.575005054 CET	49985	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.575011969 CET	443	49985	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.576039076 CET	49986	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.576046944 CET	443	49986	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.576694965 CET	49986	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.576699018 CET	443	49986	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.580352068 CET	49988	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.580389023 CET	443	49988	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.580512047 CET	49988	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.581517935 CET	49989	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.581552029 CET	443	49989	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.581908941 CET	49989	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.582055092 CET	49989	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.582082033 CET	443	49989	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.583426952 CET	49990	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.583442926 CET	443	49990	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.583506107 CET	49988	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.583517075 CET	443	49988	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.583637953 CET	49990	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.583662033 CET	49990	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.583668947 CET	443	49990	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.707880020 CET	443	49986	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.708091974 CET	443	49986	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.708168030 CET	49986	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.708204031 CET	49986	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.708204031 CET	49986	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.708220959 CET	443	49986	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.708230019 CET	443	49986	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.710319042 CET	49991	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.710411072 CET	443	49991	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.710500002 CET	49991	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.710613966 CET	49991	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.710649967 CET	443	49991	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.931371927 CET	443	49987	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.932060957 CET	49987	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.932085037 CET	443	49987	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:47.932559967 CET	49987	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:47.932564974 CET	443	49987	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.068300962 CET	443	49987	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.068387985 CET	443	49987	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.068461895 CET	49987	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.068733931 CET	49987	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.068753004 CET	443	49987	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.068763971 CET	49987	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.068768978 CET	443	49987	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.072113991 CET	49992	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.072175026 CET	443	49992	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.072233915 CET	49992	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.072487116 CET	49992	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.072504997 CET	443	49992	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.328005075 CET	443	49990	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.328511000 CET	49990	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.328526974 CET	443	49990	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.329077005 CET	49990	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.329082966 CET	443	49990	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.356401920 CET	443	49989	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.356769085 CET	49989	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.356821060 CET	443	49989	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.357238054 CET	49989	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.357251883 CET	443	49989	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.357634068 CET	443	49988	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.357954979 CET	49988	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.357965946 CET	443	49988	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.358369112 CET	49988	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.358376026 CET	443	49988	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.447253942 CET	443	49991	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.447674036 CET	49991	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.447727919 CET	443	49991	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.448158026 CET	49991	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.448170900 CET	443	49991	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.458055019 CET	443	49990	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.458082914 CET	443	49990	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.458131075 CET	443	49990	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.458178043 CET	49990	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.458178043 CET	49990	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.458431959 CET	49990	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.458432913 CET	49990	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.458446026 CET	443	49990	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.458487034 CET	443	49990	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.461321115 CET	49993	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.461355925 CET	443	49993	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.461431980 CET	49993	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.461539030 CET	49993	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.461555958 CET	443	49993	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.489733934 CET	443	49989	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.490163088 CET	443	49989	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.490221977 CET	49989	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.490277052 CET	49989	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.490292072 CET	443	49989	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.490309000 CET	49989	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.490314960 CET	443	49989	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.493252993 CET	443	49988	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.493266106 CET	49994	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.493304014 CET	443	49994	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.493365049 CET	443	49988	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.493366003 CET	49994	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.493412971 CET	49988	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.493465900 CET	49988	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.493465900 CET	49988	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.493474960 CET	443	49988	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.493484974 CET	443	49988	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.493827105 CET	49994	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.493838072 CET	443	49994	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.495706081 CET	49995	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.495740891 CET	443	49995	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.495810986 CET	49995	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.495960951 CET	49995	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.495970964 CET	443	49995	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.581300974 CET	443	49991	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.581329107 CET	443	49991	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.581381083 CET	443	49991	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.581396103 CET	49991	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.581439972 CET	49991	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.581720114 CET	49991	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.581751108 CET	443	49991	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.581764936 CET	49991	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.581779003 CET	443	49991	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.586246967 CET	49996	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.586287975 CET	443	49996	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.586343050 CET	49996	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.586821079 CET	49996	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.586838961 CET	443	49996	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.843749046 CET	443	49992	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.847419977 CET	49992	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.847441912 CET	443	49992	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:48.848002911 CET	49992	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:48.848009109 CET	443	49992	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.108331919 CET	443	49992	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.108357906 CET	443	49992	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.108376980 CET	443	49992	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.108436108 CET	49992	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.108472109 CET	443	49992	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.108489990 CET	49992	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.108524084 CET	49992	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.109349012 CET	443	49992	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.109410048 CET	49992	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.109411955 CET	443	49992	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.109462023 CET	49992	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.109462976 CET	49992	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.109487057 CET	443	49992	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.109507084 CET	49992	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.109513998 CET	443	49992	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.112380981 CET	49997	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.112415075 CET	443	49997	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.112644911 CET	49997	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.112644911 CET	49997	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.112673044 CET	443	49997	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.235395908 CET	443	49993	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.235975981 CET	49993	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.235991955 CET	443	49993	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.236423969 CET	49993	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.236428976 CET	443	49993	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.242161036 CET	443	49994	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.242434978 CET	49994	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.242451906 CET	443	49994	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.242779016 CET	49994	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.242785931 CET	443	49994	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.247919083 CET	443	49995	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.248189926 CET	49995	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.248198986 CET	443	49995	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.248517036 CET	49995	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.248522043 CET	443	49995	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.343700886 CET	443	49996	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.344227076 CET	49996	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.344263077 CET	443	49996	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.344686031 CET	49996	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.344696045 CET	443	49996	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.370321989 CET	443	49993	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.370342970 CET	443	49993	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.370397091 CET	443	49993	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.370402098 CET	49993	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.370450974 CET	49993	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.370722055 CET	49993	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.370743036 CET	443	49993	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.370794058 CET	49993	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.370815039 CET	443	49993	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.373784065 CET	49998	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.373831987 CET	443	49998	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.373910904 CET	49998	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.374090910 CET	49998	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.374111891 CET	443	49998	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.383953094 CET	443	49995	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.383976936 CET	443	49995	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.384028912 CET	443	49995	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.384071112 CET	49995	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.384071112 CET	49995	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.384238005 CET	49995	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.384238005 CET	49995	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.384247065 CET	443	49995	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.384258986 CET	443	49995	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.386575937 CET	49999	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.386610031 CET	443	49999	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.386674881 CET	49999	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.386795044 CET	49999	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.386809111 CET	443	49999	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.479172945 CET	443	49996	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.479198933 CET	443	49996	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.479284048 CET	443	49996	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.479370117 CET	49996	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.479531050 CET	49996	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.479558945 CET	443	49996	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.479576111 CET	49996	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.479582071 CET	443	49996	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.481683969 CET	50000	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.481707096 CET	443	50000	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.481832981 CET	50000	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.481951952 CET	50000	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.481967926 CET	443	50000	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.497525930 CET	443	49994	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.497561932 CET	443	49994	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.497581005 CET	443	49994	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.497621059 CET	49994	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.497634888 CET	443	49994	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.497657061 CET	49994	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.497675896 CET	49994	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.617492914 CET	443	49994	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.617583990 CET	443	49994	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.617604971 CET	443	49994	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.617620945 CET	49994	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.617681026 CET	49994	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.617799044 CET	49994	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.617820024 CET	443	49994	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.617831945 CET	49994	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.617839098 CET	443	49994	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.620754004 CET	50001	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.620785952 CET	443	50001	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.620867968 CET	50001	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.621007919 CET	50001	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.621017933 CET	443	50001	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.864233017 CET	443	49997	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.905680895 CET	49997	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.935328960 CET	49997	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.935347080 CET	443	49997	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:49.935558081 CET	49997	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:49.935563087 CET	443	49997	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.062048912 CET	443	49997	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.062165022 CET	443	49997	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.062350988 CET	49997	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.067711115 CET	49997	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.067727089 CET	443	49997	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.086641073 CET	50002	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.086672068 CET	443	50002	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.086770058 CET	50002	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.091341972 CET	50002	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.091360092 CET	443	50002	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.112449884 CET	443	49998	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.120275021 CET	49998	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.120327950 CET	443	49998	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.120728016 CET	49998	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.120743990 CET	443	49998	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.144293070 CET	443	49999	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.144664049 CET	49999	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.144682884 CET	443	49999	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.148302078 CET	49999	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.148308039 CET	443	49999	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.224400997 CET	443	50000	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.224898100 CET	50000	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.224911928 CET	443	50000	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.225532055 CET	50000	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.225538969 CET	443	50000	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.246953964 CET	443	49998	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.247011900 CET	443	49998	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.247065067 CET	49998	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.247247934 CET	49998	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.247279882 CET	443	49998	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.247307062 CET	49998	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.247340918 CET	443	49998	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.250391960 CET	50003	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.250436068 CET	443	50003	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.250503063 CET	50003	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.250756025 CET	50003	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.250770092 CET	443	50003	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.283076048 CET	443	49999	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.283147097 CET	443	49999	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.283229113 CET	49999	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.283375025 CET	49999	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.283375025 CET	49999	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.283390045 CET	443	49999	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.283399105 CET	443	49999	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.285818100 CET	50004	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.285845995 CET	443	50004	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.285940886 CET	50004	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.286078930 CET	50004	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.286092043 CET	443	50004	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.356149912 CET	443	50000	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.356379032 CET	443	50000	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.356467962 CET	50000	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.356467962 CET	50000	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.356581926 CET	50000	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.356595993 CET	443	50000	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.359528065 CET	50005	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.359591961 CET	443	50005	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.359678984 CET	50005	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.359818935 CET	50005	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.359843969 CET	443	50005	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.367866993 CET	443	50001	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.368280888 CET	50001	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.368300915 CET	443	50001	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.368740082 CET	50001	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.368746042 CET	443	50001	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.501816988 CET	443	50001	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.501852989 CET	443	50001	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.501893997 CET	50001	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.501909018 CET	443	50001	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.501944065 CET	443	50001	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.501988888 CET	50001	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.502084970 CET	50001	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.502099037 CET	443	50001	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.502110958 CET	50001	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.502119064 CET	443	50001	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.834925890 CET	443	50002	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.835551023 CET	50002	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.835580111 CET	443	50002	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.836066961 CET	50002	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.836074114 CET	443	50002	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.967047930 CET	443	50002	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.967125893 CET	443	50002	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.967386007 CET	50002	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.967536926 CET	50002	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.967536926 CET	50002	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.967554092 CET	443	50002	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.967564106 CET	443	50002	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.996337891 CET	443	50003	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.997020006 CET	50003	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.997062922 CET	443	50003	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:50.997415066 CET	50003	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:50.997422934 CET	443	50003	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:51.027689934 CET	443	50004	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:51.028290987 CET	50004	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:51.028310061 CET	443	50004	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:51.028830051 CET	50004	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:51.028835058 CET	443	50004	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:51.112063885 CET	443	50005	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:51.112756968 CET	50005	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:51.112845898 CET	443	50005	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:51.113460064 CET	50005	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:51.113475084 CET	443	50005	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:51.130718946 CET	443	50003	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:51.130826950 CET	443	50003	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:51.130897045 CET	50003	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:51.131124020 CET	50003	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:51.131124020 CET	50003	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:51.131151915 CET	443	50003	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:51.131169081 CET	443	50003	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:51.159284115 CET	443	50004	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:51.159377098 CET	443	50004	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:51.159482956 CET	50004	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:51.159637928 CET	50004	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:51.159653902 CET	443	50004	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:51.159663916 CET	50004	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:51.159670115 CET	443	50004	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:51.246879101 CET	443	50005	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:51.247179985 CET	443	50005	13.107.246.45	192.168.2.4
Oct 30, 2024 22:37:51.247428894 CET	50005	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:51.247428894 CET	50005	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:51.247430086 CET	50005	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:51.561886072 CET	50005	443	192.168.2.4	13.107.246.45
Oct 30, 2024 22:37:51.561919928 CET	443	50005	13.107.246.45	192.168.2.4

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 30, 2024 22:36:23.575380087 CET	1.1.1.1	192.168.2.4	0x245b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 22:36:23.575380087 CET	1.1.1.1	192.168.2.4	0x245b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 30, 2024 22:36:59.999083042 CET	1.1.1.1	192.168.2.4	0x5272	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 22:36:59.999083042 CET	1.1.1.1	192.168.2.4	0x5272	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

Target ID:	0
Start time:	17:36:02
Start date:	30/10/2024
Path:	C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe"
Imagebase:	0xc00000
File size:	9'078'880 bytes
MD5 hash:	5CB83A1A92E59213A76D94E436AE3AC6
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000000.00000002.2338851704.00000000037A6000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000000.00000002.2363378019.0000000006E90000.00000004.08000000.00040000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CosturaAssemblyLoader, Description: Yara detected Costura Assembly Loader, Source: 00000000.00000002.2348038104.0000000004AC4000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	17:37:08
Start date:	30/10/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Imagebase:	0xb40000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	17:37:09
Start date:	30/10/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 7836 -s 1120
Imagebase:	0xc50000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	9.8%
Dynamic/Decrypted Code Coverage:	98%
Signature Coverage:	6.5%
Total number of Nodes:	153
Total number of Limit Nodes:	7

Executed Functions

Function 0371BE80 Relevance: 6.0, Strings: 4, Instructions: 983
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

pjq, xrefs: 0371CA3A
Tefq, xrefs: 0371C5A3
TJkq, xrefs: 0371C022
xbiq, xrefs: 0371BFAD

Memory Dump Source

Source File: 00000000.00000002.2338758874.0000000003710000.00000040.00000800.00020000.00000000.sdmp, Offset: 03710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3710000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: TJkq$Tefq$pjq$xbiq
API String ID: 0-513662044
Opcode ID: 8ab8d3a6e25e8b2860c3cc4f7912a341505fcd604d063007d52f4073a5e83fd6
Instruction ID: 21dfab6510b540166e3b6ed304b99b11cc24164058fce6c3cce5b4ee4de2bc29
Opcode Fuzzy Hash: 8ab8d3a6e25e8b2860c3cc4f7912a341505fcd604d063007d52f4073a5e83fd6
Instruction Fuzzy Hash: 7BA2B575A00228CFDB65CF69C984AD9BBB2FF89300F1581E9D509AB325DB319E91CF40

Function 06D86DD0 Relevance: 1.9, Strings: 1, Instructions: 697COMMON

Download Yara Rule

Strings

(jq, xrefs: 06D86F88

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: (jq
API String ID: 0-3225323518
Opcode ID: af5c3de25fcb48c27be7c78ddd7b599d3ac6117c0fa45930810402b113fde986
Instruction ID: de00ae3533c8b38f00af4aec53f34e39150736782f2501c4125a70a0daecd3eb
Opcode Fuzzy Hash: af5c3de25fcb48c27be7c78ddd7b599d3ac6117c0fa45930810402b113fde986
Instruction Fuzzy Hash: D4426A70B007198FCB58EFA9C49866EBBF2FF88310F248569D55AD7381DB34A901CB91

Function 06DC5DD0 Relevance: 1.8, APIs: 1, Instructions: 308COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2076935c16d6eebfc3e41ef3808846f977d7599f91c9c6812170dac06c4a0e4d
Instruction ID: e02cf95dc36039d29fcea9c48350477f2db3224a43ce5f6040165ab1f7b4e8a1
Opcode Fuzzy Hash: 2076935c16d6eebfc3e41ef3808846f977d7599f91c9c6812170dac06c4a0e4d
Instruction Fuzzy Hash: 9AB1517180E3E95FDB03DB7898A05CABFB4AF07214F0950CBD091DB1A3D6385919C7AA

Function 06DC5F81 Relevance: 1.6, APIs: 1, Instructions: 110nativeCOMMON

Download Yara Rule

APIs

NtProtectVirtualMemory.NTDLL(?,?,?,?,?), ref: 06DC603D

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID: MemoryProtectVirtual
String ID:
API String ID: 2706961497-0
Opcode ID: 2235f54e8728660d81e799cc8fd7f8279dabda815cb846faf2df64704192d7ba
Instruction ID: aa6754a644ebbe2aa034ce790b80efb19b4c42ff9ec991424d89df3973ac01ab
Opcode Fuzzy Hash: 2235f54e8728660d81e799cc8fd7f8279dabda815cb846faf2df64704192d7ba
Instruction Fuzzy Hash: FC4198B4D012599FCF10CFAAD980ADEFBB5BB49320F10A42AE818B7310D735A945DF64

Function 06DC5F88 Relevance: 1.6, APIs: 1, Instructions: 105nativeCOMMON

Download Yara Rule

APIs

NtProtectVirtualMemory.NTDLL(?,?,?,?,?), ref: 06DC603D

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID: MemoryProtectVirtual
String ID:
API String ID: 2706961497-0
Opcode ID: dea231f29036549be8691ffdd343220fd0af0755915a434ae572969edb26ba55
Instruction ID: c28c08d37fbd2d50c6168bbf5c23b6a8c3134fa9d77cb8cab1bf8cadb1f00bff
Opcode Fuzzy Hash: dea231f29036549be8691ffdd343220fd0af0755915a434ae572969edb26ba55
Instruction Fuzzy Hash: CA4188B4D002599FCF10CFAAD980ADEFBB5BB49320F10A42AE818B7310D735A945DF54

Function 06DC7400 Relevance: 1.6, APIs: 1, Instructions: 94nativethreadCOMMON

Download Yara Rule

APIs

NtResumeThread.NTDLL(?,?), ref: 06DC7496

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID: ResumeThread
String ID:
API String ID: 947044025-0
Opcode ID: 45c23ed2b1eee6023fd0aeede5fa9d86039dbb1290c60bae0322ce82e970d7b6
Instruction ID: 979d2dbb2846d23ef1713fd802c1079fe6562d81767a86feb0a88b79ef3c2023
Opcode Fuzzy Hash: 45c23ed2b1eee6023fd0aeede5fa9d86039dbb1290c60bae0322ce82e970d7b6
Instruction Fuzzy Hash: 8531EDB4D052199FCB10CFA9D980ADEFBF5BB09320F24942AE414B7200C775A906CFA4

Function 06DC7408 Relevance: 1.6, APIs: 1, Instructions: 82nativethreadCOMMON

Download Yara Rule

APIs

NtResumeThread.NTDLL(?,?), ref: 06DC7496

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID: ResumeThread
String ID:
API String ID: 947044025-0
Opcode ID: 44e52d1e6859e9db8862740b7b5c1079dbc12ad32ff1fb016b1bec4427e64d7f
Instruction ID: b8cf6f7672c9f9a31456c48ea55d1c4a93a0320ef4f8766b0fbbce999d9fe804
Opcode Fuzzy Hash: 44e52d1e6859e9db8862740b7b5c1079dbc12ad32ff1fb016b1bec4427e64d7f
Instruction Fuzzy Hash: 83319AB5D052199FCB14CFAAD980A9EFBF5FB49320F20942AE815B7300C775A945CF94

Function 06D8F995 Relevance: 1.5, Strings: 1, Instructions: 249COMMON

Download Yara Rule

Strings

PHfq, xrefs: 06D8FC7A

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: PHfq
API String ID: 0-2154135885
Opcode ID: f53f73ce826a5088a2b3a52fc27a24597b8b8b96a49c6b62eb2fb21a5d1fd402
Instruction ID: 1572ee29b7872c7eb9a128921d662e0f42baf073f74816aa82a24936be6a09c4
Opcode Fuzzy Hash: f53f73ce826a5088a2b3a52fc27a24597b8b8b96a49c6b62eb2fb21a5d1fd402
Instruction Fuzzy Hash: 0EB10874E04218CFEB64DFA9D988BADBBF2FB89344F1080A9D449A7245CB749D85CF41

Function 06749980 Relevance: 1.5, Strings: 1, Instructions: 236COMMON

Download Yara Rule

Strings

Tefq, xrefs: 06749B1C

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: Tefq
API String ID: 0-1066582953
Opcode ID: bb84c522ed3c5e3d887e251349cd043bce7c557d4e2ef9b4d7c1b2f1fd511431
Instruction ID: f2ba8ea2d56a23e1a2b5c7e173e417a4b5d7ce4a2eeea42467515c86a4df3553
Opcode Fuzzy Hash: bb84c522ed3c5e3d887e251349cd043bce7c557d4e2ef9b4d7c1b2f1fd511431
Instruction Fuzzy Hash: C2A11674E04208CFDB64DFA9D988BAEBBF2FB89304F20816AD509A7241DB745981CF40

Function 06749990 Relevance: 1.5, Strings: 1, Instructions: 235COMMON

Download Yara Rule

Strings

Tefq, xrefs: 06749B1C

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: Tefq
API String ID: 0-1066582953
Opcode ID: 059398fc5ab45487b98309057ae046fa1ae88b05a93293e934ccaddb242063b4
Instruction ID: 2b0c85ea776328d372fb30739f4216b6d3fe200ed204b394ed87fff68b968772
Opcode Fuzzy Hash: 059398fc5ab45487b98309057ae046fa1ae88b05a93293e934ccaddb242063b4
Instruction Fuzzy Hash: 71A11674E04218CFEB64DFA9D988BAEBBF6FB89304F10816AD509A7241DB705981CF40

Function 06DCD170 Relevance: .4, Instructions: 412COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 11c8c11e6f7f74c0bd635cbad941748c8944b4b47299b5420afcc172f7ccf35a
Instruction ID: ce31b23081b892a22114ef3bafe9cdf04b7ab3835d0db6617a44588d23e50673
Opcode Fuzzy Hash: 11c8c11e6f7f74c0bd635cbad941748c8944b4b47299b5420afcc172f7ccf35a
Instruction Fuzzy Hash: E602C270D0021D8FDB64CFA8CD81BADBBB2BF49314F1085AAD409B7294EB749A85CF55

Function 06DCDFA0 Relevance: .4, Instructions: 387COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0d9b6ccbf3760371bd0fd9a2639ba8d6e3b2c542c67c9b5937837f6e593b61f6
Instruction ID: 04011ac99603433c5e80e405ca8d5c842f819b0249060bc439301a5d5790c4de
Opcode Fuzzy Hash: 0d9b6ccbf3760371bd0fd9a2639ba8d6e3b2c542c67c9b5937837f6e593b61f6
Instruction Fuzzy Hash: 2EF1E4B0D0022ECFDB64CFA9C981B9DBBF1BF49310F1085AAD409A7254EB749A85CF51

Function 067492B0 Relevance: .2, Instructions: 183COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2fa8ecf0a29b0275218fd25f2ba6366868b36435382e88fc9f97317e6d5722e1
Instruction ID: 7675db2b4dd7804ba5cb277a4e0f0131e4b30f50cb24b73fa9915a6d9d953c5c
Opcode Fuzzy Hash: 2fa8ecf0a29b0275218fd25f2ba6366868b36435382e88fc9f97317e6d5722e1
Instruction Fuzzy Hash: EF81D174E05209CFDB54DFAAD5497EEBBF2FB89304F10802AE519A7290DB345986CF50

Function 06D8AAA8 Relevance: .1, Instructions: 148COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5238cd5bd8492a81fc6e673911583d253ba47d34bf4db1279168bd4893660276
Instruction ID: ef2257101ecb68b133598c0ec4cef05c4720bd25f1d007133fd6cf3e69ae92d1
Opcode Fuzzy Hash: 5238cd5bd8492a81fc6e673911583d253ba47d34bf4db1279168bd4893660276
Instruction Fuzzy Hash: 5951E2B4A05208CFEB54DFA9D548BEDBBF2FB49314F28502AD005A7281DB78AD85CF44

Function 06D8AA9B Relevance: .1, Instructions: 147COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a1872baeaa68e91023ed74dba6ec9f734c607ecd12945e78c6250becf782b44d
Instruction ID: 7613817137b49d35a665bdfbbab878cc356b398612430282c2b8962d16dfbceb
Opcode Fuzzy Hash: a1872baeaa68e91023ed74dba6ec9f734c607ecd12945e78c6250becf782b44d
Instruction Fuzzy Hash: B851E374A05208CFEB54DFA9D558BEDBBF2FB49314F28502AD005AB281DB78AD85CF44

Function 06D8AC99 Relevance: .1, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c5ae36014503d1a8a527df23afa97ed51f0371f6315d94bbd9519ff1a957f950
Instruction ID: dd32f282357bcb94f651d166e8acd0fec9198b5f9df59046e828d477ed23cd0b
Opcode Fuzzy Hash: c5ae36014503d1a8a527df23afa97ed51f0371f6315d94bbd9519ff1a957f950
Instruction Fuzzy Hash: 3E5116B8E0520CCFEB54EFA9D5487EDBBB2FB49304F28502AD045A7255DB74A985CF40

Function 06DC15E0 Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7b053b9ed0de0c6d5b9e9dc152b9f5731b19b3d24dda5480cc7e3f1b12437020
Instruction ID: 926879a19f17d5616f62f28c9954360e878088410515480f165973505ed62c9f
Opcode Fuzzy Hash: 7b053b9ed0de0c6d5b9e9dc152b9f5731b19b3d24dda5480cc7e3f1b12437020
Instruction Fuzzy Hash: CE41F4B1E046198FEB58CF9AC8407DDBBF6AF88310F14C0AAD809A7255DB354946CF84

Function 0674D988 Relevance: 7.7, Strings: 6, Instructions: 155
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

4'fq, xrefs: 0674DA0C
4'fq, xrefs: 0674DAD2
4'fq, xrefs: 0674DA3C
4'fq, xrefs: 0674DA5A
pjq, xrefs: 0674DADF
(jq, xrefs: 0674DB52

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: (jq$4'fq$4'fq$4'fq$4'fq$pjq
API String ID: 0-799542208
Opcode ID: d5abd12c076b14a38b6284e459c1ede41e02a7c3faa3ef46ce50cea4d10eadfe
Instruction ID: e75338ce707a674be27d021f2e207e043de77b6a28400c411c52307d0c8d095d
Opcode Fuzzy Hash: d5abd12c076b14a38b6284e459c1ede41e02a7c3faa3ef46ce50cea4d10eadfe
Instruction Fuzzy Hash: 8B517F70A002059FCB58EB7988906AFBBF7BFC8300F14882DD14997395DF75AD469BA1

Function 05760E4B Relevance: 6.3, Strings: 5, Instructions: 77
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

&, xrefs: 0576035B
0, xrefs: 05760EAE
(, xrefs: 057612A6
@, xrefs: 05761280
G, xrefs: 05760ED7

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: &$($0$@$G
API String ID: 0-3976891210
Opcode ID: 9b9a8930daffaf3526cb2802b1dc49a8a2d79e16008e814f7ffd5a6c6cffdbe0
Instruction ID: 4e009f32313304902e41e9b1391ae3817865b356d562fc1e849abb0ee661e338
Opcode Fuzzy Hash: 9b9a8930daffaf3526cb2802b1dc49a8a2d79e16008e814f7ffd5a6c6cffdbe0
Instruction Fuzzy Hash: 9941DE74E1122A9FDB64CF24C998BADBBB2BB49304F0081EAD419A7241DB355F84EF41

Function 0674C6D8 Relevance: 4.2, Strings: 3, Instructions: 483
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Hjq, xrefs: 0674CBAD
Hjq, xrefs: 0674CC2C
Hjq, xrefs: 0674CBDC

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: Hjq$Hjq$Hjq
API String ID: 0-2296473396
Opcode ID: 238b3c90f52c62a50cd01b6c4a84c410d0dc44c52ffc1ade41c98961b2b570bf
Instruction ID: 2b2f983946c38b8c0d8cff01a7978673f573bca0a7638cf8b782d8c52b560401
Opcode Fuzzy Hash: 238b3c90f52c62a50cd01b6c4a84c410d0dc44c52ffc1ade41c98961b2b570bf
Instruction Fuzzy Hash: 91128B71A01215CFCBA5EFA9C888A6EB7B2FF88300F14852DE5469B391DB35EC45CB50

Function 0674E380 Relevance: 4.1, Strings: 3, Instructions: 370
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

4'fq, xrefs: 0674E6F9
4'fq, xrefs: 0674E679
4'fq, xrefs: 0674E59A

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: 4'fq$4'fq$4'fq
API String ID: 0-3646979650
Opcode ID: ebc0c7882dcb56f93f66aa303eb79a5ccb076aacd684e5406eb3fb90e28a1270
Instruction ID: 0392ca04c547f1630647a4ca5c05ce5f16ccc4a9a11d78ded3c714c87ac178ae
Opcode Fuzzy Hash: ebc0c7882dcb56f93f66aa303eb79a5ccb076aacd684e5406eb3fb90e28a1270
Instruction Fuzzy Hash: D6F1DA34A00218DFDB44EFA4D998EADB7B2FF88310F118159E905AB3A5DB71EC42CB41

Function 06D830A0 Relevance: 4.1, Strings: 3, Instructions: 363
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

(jq, xrefs: 06D831C9
Hjq, xrefs: 06D83221
(jq, xrefs: 06D831F5

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: (jq$(jq$Hjq
API String ID: 0-2836811127
Opcode ID: 9ff639cb265763eaf8596f999c08084542961333fb11acff00f3c833c0f00e1e
Instruction ID: 46fd73f70d528f975e55aa04001614a47af38c7c12be6879a93cd2aece1b9e74
Opcode Fuzzy Hash: 9ff639cb265763eaf8596f999c08084542961333fb11acff00f3c833c0f00e1e
Instruction Fuzzy Hash: F6E16334A00209DFCB54EFA4D4989ADBBB2FF89710F118569E906AB364DF34EC41CB91

Function 0674C190 Relevance: 2.8, Strings: 2, Instructions: 348
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

d, xrefs: 0674C3F1
(jq, xrefs: 0674C1A4

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: (jq$d
API String ID: 0-51203222
Opcode ID: ed2940eea20f649fcc765f801372ac888327e2db98e0cb03eed0ad66d3130f2c
Instruction ID: 5a94e395eec0916762bc7c82be88b4497ef6d3ee4a4b08c7f79cdce8201766d3
Opcode Fuzzy Hash: ed2940eea20f649fcc765f801372ac888327e2db98e0cb03eed0ad66d3130f2c
Instruction Fuzzy Hash: CBD18D34601602CFCB25DF28C58496ABBF2FF88314B26C969D55A9B365DB30FC46CB90

Function 03710928 Relevance: 2.7, Strings: 2, Instructions: 188
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

<d}q, xrefs: 03710B56
Tefq, xrefs: 037109C1

Memory Dump Source

Source File: 00000000.00000002.2338758874.0000000003710000.00000040.00000800.00020000.00000000.sdmp, Offset: 03710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3710000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: <d}q$Tefq
API String ID: 0-503018455
Opcode ID: 2cf060aa4ee11a8d71d89e405ae8072c61b45aeea8280e008487d164021a9c81
Instruction ID: 1c467b0f770b2ac87a893a33a7dfc07b75a9a7025df05e0ce561853b5a8529c7
Opcode Fuzzy Hash: 2cf060aa4ee11a8d71d89e405ae8072c61b45aeea8280e008487d164021a9c81
Instruction Fuzzy Hash: C1713779B001049FCB54DF6CD998AADBBF2FF88714B258099E805AB3A1DB31AC41CF50

Function 0674A7D0 Relevance: 2.7, Strings: 2, Instructions: 152
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

(jq, xrefs: 0674A93B
(jq, xrefs: 0674A8E4

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: (jq$(jq
API String ID: 0-2294966697
Opcode ID: 6a4960b7aac9e55262b87f0b082920be18c966f7cde85b5c387978a1ca1eb45f
Instruction ID: fdb0547f8dbdb4280c4df11723299dd6cbffa20b53e788bb0c48c2fe8ca84377
Opcode Fuzzy Hash: 6a4960b7aac9e55262b87f0b082920be18c966f7cde85b5c387978a1ca1eb45f
Instruction Fuzzy Hash: F351E1317002548FDB99AF28D858AAE3BA6FFC4340F148469E906CB391CF39DC42CB95

Function 0674D960 Relevance: 2.6, Strings: 2, Instructions: 132
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

4'fq, xrefs: 0674DA0C
pjq, xrefs: 0674DADF

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: 4'fq$pjq
API String ID: 0-3152366003
Opcode ID: 562c0c4a40850823d08fdf5b6d77e12b7698b49cd2a3c03429316eb383e51935
Instruction ID: e72d0e9bd26e7c9e06df3c625cdf26a265a0f6dad3f758127d4781718445b9bc
Opcode Fuzzy Hash: 562c0c4a40850823d08fdf5b6d77e12b7698b49cd2a3c03429316eb383e51935
Instruction Fuzzy Hash: E441E470A043059FCB55DF78C9906AEBBB2EFC9300F14886DD0859B292DF75AC46C7A1

Function 05760742 Relevance: 2.6, Strings: 2, Instructions: 82
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

&, xrefs: 0576035B
C, xrefs: 057612CD

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: &$C
API String ID: 0-3720090316
Opcode ID: 8110ba9a7d60adfee302c06ecaf86ff5f616bd22363d35d4881698d784c0fdb9
Instruction ID: df1f8c9611219b6e1d3e1627451fa5ce26eff28ef5477eadf8d7c8ccbe8f68ad
Opcode Fuzzy Hash: 8110ba9a7d60adfee302c06ecaf86ff5f616bd22363d35d4881698d784c0fdb9
Instruction Fuzzy Hash: A941F078A14229CFCB64CF64C898BADBBB2FB49304F5041EAD419A7241DB359E85DF50

Function 05760CD4 Relevance: 2.5, Strings: 2, Instructions: 26COMMON

Download Yara Rule

Strings

", xrefs: 05760D44
A, xrefs: 05760CDE

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: "$A
API String ID: 0-884726588
Opcode ID: 5232eb259564e6a7367a03e81d66e3d187c33684bcd17145c3ed92438a792e09
Instruction ID: 0d75aa9f813bddff8088919c49b97122f19799306cbae1085c5d32e760dbf123
Opcode Fuzzy Hash: 5232eb259564e6a7367a03e81d66e3d187c33684bcd17145c3ed92438a792e09
Instruction Fuzzy Hash: 9FF0E2749002299FCB64CF64C894BEDB7B6FF4A300F1080EAC919A7251DB349E85DF86

Function 05760A7B Relevance: 2.5, Strings: 2, Instructions: 19COMMON

Download Yara Rule

Strings

$, xrefs: 05760A86
<, xrefs: 057608BE

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: $$<
API String ID: 0-511879695
Opcode ID: 077ac5c5991c54546e84fd9302bfabd11363a83c3a96deb1f5e6302c0cc91d51
Instruction ID: def35a1321cda929ea0ca6a52fbeb19aef031230be13402220cf156eab4065a0
Opcode Fuzzy Hash: 077ac5c5991c54546e84fd9302bfabd11363a83c3a96deb1f5e6302c0cc91d51
Instruction Fuzzy Hash: 60E0C234845229DEDB35CF60C94CBECBBB2FB00304F1082AAC80563282D3B84B85EF41

Function 0674F260 Relevance: 1.9, Strings: 1, Instructions: 677COMMON

Download Yara Rule

Strings

,jq, xrefs: 0674F5DB

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: ,jq
API String ID: 0-1538246120
Opcode ID: cdfb4086d95dfc88f74d388b9ae5ad8da01e5f6b2f7b61e543247bb7a6783653
Instruction ID: 8a3c9a62d9532cb0f81280b635384945e7ba4d80099e93a0f8c0277d91e6d85a
Opcode Fuzzy Hash: cdfb4086d95dfc88f74d388b9ae5ad8da01e5f6b2f7b61e543247bb7a6783653
Instruction Fuzzy Hash: 0D52F775A002288FDB64DF68C994BADBBF2BF88300F1581D9E549A7391DB349D81CF61

Function 06DC676C Relevance: 1.8, APIs: 1, Instructions: 266processCOMMON

Download Yara Rule

APIs

CreateProcessA.KERNELBASE(?,?,?,?,?,?,?,?,?,?), ref: 06DC69DF

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID: CreateProcess
String ID:
API String ID: 963392458-0
Opcode ID: 15a19f2541bae323b28bc926ee8e759d9a389ebb5abae75979da86d74289aa84
Instruction ID: c464857b784df9a0a00a0a295804c43e7f919c09ae0932c2bfeeffa1dd9e449a
Opcode Fuzzy Hash: 15a19f2541bae323b28bc926ee8e759d9a389ebb5abae75979da86d74289aa84
Instruction Fuzzy Hash: EAA1E0B0D0025E8FDF64CFA9C881BADBBF1BF49310F14956AE858A7280DB748985CF45

Function 06DC6778 Relevance: 1.8, APIs: 1, Instructions: 261processCOMMON

Download Yara Rule

APIs

CreateProcessA.KERNELBASE(?,?,?,?,?,?,?,?,?,?), ref: 06DC69DF

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID: CreateProcess
String ID:
API String ID: 963392458-0
Opcode ID: 84bafd8e69a6d04cb7f84b5c255ad306d95d1d5a21c975d3b7b913ed0fccb7fb
Instruction ID: 4eea921f6fc30a4115a7a50cb25f314ba7354deb4f13143ac3311a81d58f8215
Opcode Fuzzy Hash: 84bafd8e69a6d04cb7f84b5c255ad306d95d1d5a21c975d3b7b913ed0fccb7fb
Instruction Fuzzy Hash: 6EA1E0B0D0025E8FDF64CFA9C881BADBBF1BF49310F14956AE858A7280DB749985CF45

Function 06DC8F17 Relevance: 1.7, APIs: 1, Instructions: 207fileCOMMON

Download Yara Rule

APIs

CopyFileA.KERNEL32(?,?,?), ref: 06DC90E3

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID: CopyFile
String ID:
API String ID: 1304948518-0
Opcode ID: 45290313b50c1fd63df1a70a95e87af6c3c3b933af26ba6e661997a7f2f10b61
Instruction ID: b723adf1730d5ef97d2283ba424ae3e5a64f571eb7d55eedfc364a34adbf303f
Opcode Fuzzy Hash: 45290313b50c1fd63df1a70a95e87af6c3c3b933af26ba6e661997a7f2f10b61
Instruction Fuzzy Hash: 54818670D0434D8FCB64CFA9D9957ADBBF1FB45320F14852AD818AB281DB348985DF41

Function 06DC8F68 Relevance: 1.7, APIs: 1, Instructions: 169fileCOMMON

Download Yara Rule

APIs

CopyFileA.KERNEL32(?,?,?), ref: 06DC90E3

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID: CopyFile
String ID:
API String ID: 1304948518-0
Opcode ID: 131bf09a2b16fc253a994a97c77d16fefd1aeb87684c5288434d91016f18c6ac
Instruction ID: 270cc42930ec5ab4e75b0a2b6a6c4dc3f79af4fff24bf75ec750e40d34830cf0
Opcode Fuzzy Hash: 131bf09a2b16fc253a994a97c77d16fefd1aeb87684c5288434d91016f18c6ac
Instruction Fuzzy Hash: E86114B0D0021DDFDB54CFAAC8957ADBBF1FB48324F249529E815AB280DB748985DF41

Function 06DC865C Relevance: 1.7, APIs: 1, Instructions: 158fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,?,?,?,?,?,?), ref: 06DC87AC

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: bb6c54f86337303244e938d9881ccaaae2564852f6fef7507461c5fb17a7a87d
Instruction ID: fff1f78a134262aa2c5259b9830fde924e083017221ffaa3303939c95796a7f6
Opcode Fuzzy Hash: bb6c54f86337303244e938d9881ccaaae2564852f6fef7507461c5fb17a7a87d
Instruction Fuzzy Hash: 7351CDB4D0021D9FDF64CFA9D885B9EBBB1BF09310F24A52AE818B7240DB749885DF54

Function 06DC88B4 Relevance: 1.7, APIs: 1, Instructions: 156COMMON

Download Yara Rule

APIs

CreateFileMappingA.KERNEL32(?,?,?,?,?,?), ref: 06DC89F6

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID: CreateFileMapping
String ID:
API String ID: 524692379-0
Opcode ID: aec1b8af32ed772839ffc40258bd4570de87bd002248836d8fc9e3272c2bdd09
Instruction ID: d10e5f4f83be1ac5a2ac6f5aa6684a17a09d340e3f6353264c546665a7243904
Opcode Fuzzy Hash: aec1b8af32ed772839ffc40258bd4570de87bd002248836d8fc9e3272c2bdd09
Instruction Fuzzy Hash: 605102B4D0020D9FDF64CFA9D881A9EBFB1BB09310F24952AE819BB240DB749885DF55

Function 06DC8668 Relevance: 1.7, APIs: 1, Instructions: 153fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,?,?,?,?,?,?), ref: 06DC87AC

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 505ba2962d0661357e6192ae11b1c9b2a541cd1543e5ee976aba6e98659d3190
Instruction ID: b9fa17d74dec35cc83e60a091c3bf0aae68be771a828c9bfd70bb7cf895fec94
Opcode Fuzzy Hash: 505ba2962d0661357e6192ae11b1c9b2a541cd1543e5ee976aba6e98659d3190
Instruction Fuzzy Hash: BB51BDB4D0021D9FDF64CFA9D885B9EBBB1BB09310F20A52AE818B7240DB749885DF54

Function 06DC88C0 Relevance: 1.6, APIs: 1, Instructions: 146COMMON

Download Yara Rule

APIs

CreateFileMappingA.KERNEL32(?,?,?,?,?,?), ref: 06DC89F6

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID: CreateFileMapping
String ID:
API String ID: 524692379-0
Opcode ID: 1bae3534fa71510d08c097de3c8ba15a064daa559fe0ed38ff6108a1090db0e5
Instruction ID: 151ab6e074f8c07e145d084a7a58c87823d95140ee8ccead02d9dd62e7c6b122
Opcode Fuzzy Hash: 1bae3534fa71510d08c097de3c8ba15a064daa559fe0ed38ff6108a1090db0e5
Instruction Fuzzy Hash: 4D51F0B4D0020D9FDF54CFA9D885A9EBFB1FB49310F20942AE819BB280DB749885DF45

Function 06DC71E8 Relevance: 1.6, APIs: 1, Instructions: 118injectionCOMMON

Download Yara Rule

APIs

WriteProcessMemory.KERNELBASE(?,?,?,?,?), ref: 06DC72C3

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID: MemoryProcessWrite
String ID:
API String ID: 3559483778-0
Opcode ID: cf5fd2c861343d5bbfdc3bf50cab726c3a40ad0ee0e3e6b810c27086b585e94c
Instruction ID: 8fc3ba3b54bbe014f000fca6451b1f46aeba7a5b29b0d7d03f17e3a41b643a19
Opcode Fuzzy Hash: cf5fd2c861343d5bbfdc3bf50cab726c3a40ad0ee0e3e6b810c27086b585e94c
Instruction Fuzzy Hash: A441AAB5D012599FCF10CFA9D984ADEFBF1BB49310F24942AE818B7210D735AA45CF54

Function 06DC71F0 Relevance: 1.6, APIs: 1, Instructions: 116injectionCOMMON

Download Yara Rule

APIs

WriteProcessMemory.KERNELBASE(?,?,?,?,?), ref: 06DC72C3

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID: MemoryProcessWrite
String ID:
API String ID: 3559483778-0
Opcode ID: 54019109b5dd1851d168c47d6c2c99206f9508bb27252138de6a44510bca9aa0
Instruction ID: 3ae31f20844c9a59a9e8f7bd3bab6859fb3ae06997ac9b5c6aaccb7b39b3e739
Opcode Fuzzy Hash: 54019109b5dd1851d168c47d6c2c99206f9508bb27252138de6a44510bca9aa0
Instruction Fuzzy Hash: 0C41B9B5D012599FCF10CFA9D980AEEFBF1BB49310F20942AE818B7210D735AA45CF64

Function 06DC8B00 Relevance: 1.6, APIs: 1, Instructions: 105fileCOMMON

Download Yara Rule

APIs

MapViewOfFile.KERNELBASE(?,?,?,?,?), ref: 06DC8BB2

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID: FileView
String ID:
API String ID: 3314676101-0
Opcode ID: 79497f90ad7c1901d5b3c82f942601801adb6428364da1e744112d07e004dc6e
Instruction ID: 0f66fc803bd63241ed221a24caf380984a533774d76bc45e938ee96667560dc9
Opcode Fuzzy Hash: 79497f90ad7c1901d5b3c82f942601801adb6428364da1e744112d07e004dc6e
Instruction Fuzzy Hash: 1E41A9B4D002599FCF10CFA9D981A9EFBB5BB49320F10942AE814B7210D735A905DFA4

Function 06DC7088 Relevance: 1.6, APIs: 1, Instructions: 105memoryCOMMON

Download Yara Rule

APIs

VirtualAllocEx.KERNELBASE(?,?,?,?,?), ref: 06DC713A

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: dd981cc38bae36ed4800079446e2850b96e121a88fe980055d34224d8b178dc2
Instruction ID: 8f02a20fba8e341170b316732ce4897b087637fb50283137a87c3b83ec1cbafa
Opcode Fuzzy Hash: dd981cc38bae36ed4800079446e2850b96e121a88fe980055d34224d8b178dc2
Instruction Fuzzy Hash: C53199B5D002599FCF14CFA9D980ADEBBB5FB49320F10A42AE815B7310D735A941CF54

Function 06DC76D8 Relevance: 1.6, APIs: 1, Instructions: 101memoryCOMMON

Download Yara Rule

APIs

VirtualProtect.KERNELBASE(?,?,?,?), ref: 06DC7784

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: b955c8e6be552f766c6ab09ff8c8b06c50e357d5abe57a577b57361a960dcadd
Instruction ID: 00c91c3a77a9a69b4ce9564abd053a51813398ca5a990d7dd2b89e8d2d3299c2
Opcode Fuzzy Hash: b955c8e6be552f766c6ab09ff8c8b06c50e357d5abe57a577b57361a960dcadd
Instruction Fuzzy Hash: 5931DBB5D012099FCB10CFAAD980AEEFBF1EB48320F14942AE815B7200C775A945DF64

Function 06DC8B08 Relevance: 1.6, APIs: 1, Instructions: 101fileCOMMON

Download Yara Rule

APIs

MapViewOfFile.KERNELBASE(?,?,?,?,?), ref: 06DC8BB2

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID: FileView
String ID:
API String ID: 3314676101-0
Opcode ID: 90488081e339b2f093ffbb8cd3c70360c29c9f90431f0dea913cb55ba48f6481
Instruction ID: 0055286e6cf943924f8951e439438e2e0b616f53e036de22d9a24e6fa4a2bfff
Opcode Fuzzy Hash: 90488081e339b2f093ffbb8cd3c70360c29c9f90431f0dea913cb55ba48f6481
Instruction Fuzzy Hash: 103197B8D002599FCF10CFA9D980A9EFBB5BB49320F10A42AE814B7310D735A901DF54

Function 06DC7090 Relevance: 1.6, APIs: 1, Instructions: 101memoryCOMMON

Download Yara Rule

APIs

VirtualAllocEx.KERNELBASE(?,?,?,?,?), ref: 06DC713A

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 2ad5dd157c5839dbf2ca7e694f581166ca297efd632db533e94f1e153d2a73d6
Instruction ID: 7ce4026d179e8287ea0487113608594b9ac3deefc413838127c28d6d2c606c44
Opcode Fuzzy Hash: 2ad5dd157c5839dbf2ca7e694f581166ca297efd632db533e94f1e153d2a73d6
Instruction Fuzzy Hash: 523197B8D002599FCF14CFA9D980A9EFBB5FB49320F10A42AE814B7310D735A902CF54

Function 06DC76E0 Relevance: 1.6, APIs: 1, Instructions: 98memoryCOMMON

Download Yara Rule

APIs

VirtualProtect.KERNELBASE(?,?,?,?), ref: 06DC7784

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: 0e5d9f3fa49c52323dff400bae13c384ae465a2d0170d5d325a4d0c12b56549b
Instruction ID: d8b00dacb02ebfb08a63557c5b5eca1188ba1c05afefd6ba4ae04b0af3aa883d
Opcode Fuzzy Hash: 0e5d9f3fa49c52323dff400bae13c384ae465a2d0170d5d325a4d0c12b56549b
Instruction Fuzzy Hash: B831C8B8D01259DFCF14CFAAD980AEEFBB1EB49320F24942AE814B7250C735A945DF54

Function 06DC6B28 Relevance: 1.6, APIs: 1, Instructions: 98threadCOMMON

Download Yara Rule

APIs

Wow64SetThreadContext.KERNEL32(?,?), ref: 06DC6BDF

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID: ContextThreadWow64
String ID:
API String ID: 983334009-0
Opcode ID: 8f28649ff1a2405574faf5bbcab2cc1ad3b704b0cd5bc8f4d1890ef0715dc73c
Instruction ID: e487a97928aea820a1d144709d93283e5df3578aaadca829b1910a421be13565
Opcode Fuzzy Hash: 8f28649ff1a2405574faf5bbcab2cc1ad3b704b0cd5bc8f4d1890ef0715dc73c
Instruction Fuzzy Hash: 1341ACB5D012599FCB14CFA9D985AEEFBF1BB48324F24842AE418B7240C778A945CF54

Function 06E1D748 Relevance: 1.6, APIs: 1, Instructions: 96memoryCOMMON

Download Yara Rule

APIs

VirtualProtect.KERNELBASE(?,?,?,?), ref: 06E1D7EC

Memory Dump Source

Source File: 00000000.00000002.2360879207.0000000006E10000.00000040.00000800.00020000.00000000.sdmp, Offset: 06E10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6e10000_SecuriteInfo.jbxd

Similarity

API ID: ProtectVirtual
String ID:
API String ID: 544645111-0
Opcode ID: 9506b1c7a97643264f523d2c85b8d5fec49436bf8f3a49967bfe5b9e3c8e4abf
Instruction ID: c86f9de9e71ba5aa5486cf2d4957be23a50c8e94b90e0dc7e672449e7bbcd617
Opcode Fuzzy Hash: 9506b1c7a97643264f523d2c85b8d5fec49436bf8f3a49967bfe5b9e3c8e4abf
Instruction Fuzzy Hash: 133198B5D012489FCF14CFA9D980A9EFBB5FF49310F24A42AE818BB210D775A945CF54

Function 06DC6B30 Relevance: 1.6, APIs: 1, Instructions: 94threadCOMMON

Download Yara Rule

APIs

Wow64SetThreadContext.KERNEL32(?,?), ref: 06DC6BDF

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID: ContextThreadWow64
String ID:
API String ID: 983334009-0
Opcode ID: c59dc7c6bab57229dc8f3655eeffc96347ad360d64eef3f67635d1d1f9426255
Instruction ID: b818a67885a37dead306ef7318458d23ef13daf6d09727614339997bc49f399c
Opcode Fuzzy Hash: c59dc7c6bab57229dc8f3655eeffc96347ad360d64eef3f67635d1d1f9426255
Instruction Fuzzy Hash: 4031BBB5D002599FCB14CFAAD985AEEFBF1BF48320F24802AE418B7240C778A945CF54

Function 06DC2058 Relevance: 1.6, APIs: 1, Instructions: 89COMMON

Download Yara Rule

APIs

SleepEx.KERNELBASE(?,?), ref: 06DC20F2

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: b959fea7456c6a78ee075c60bc8af34d4502da0783678dbf365eac063a1c7d1d
Instruction ID: 1368211359ef9292101fbd2e157b751ce953ca5567ae4d60e139bafe57a60532
Opcode Fuzzy Hash: b959fea7456c6a78ee075c60bc8af34d4502da0783678dbf365eac063a1c7d1d
Instruction Fuzzy Hash: 7A31CEB4D012199FCB14CFA9D980AEEFBF5EB49320F14942AE814B7340C775AA45CFA4

Function 06DC2060 Relevance: 1.6, APIs: 1, Instructions: 83COMMON

Download Yara Rule

APIs

SleepEx.KERNELBASE(?,?), ref: 06DC20F2

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID: Sleep
String ID:
API String ID: 3472027048-0
Opcode ID: 49371220fbbadb7e55d30b3ec18d1314a261d2f9596524a44a33e07683953742
Instruction ID: e8d76cbd7c61f89d9f0f205f3071f2b38c8e8eb20e488464b32310587a319bab
Opcode Fuzzy Hash: 49371220fbbadb7e55d30b3ec18d1314a261d2f9596524a44a33e07683953742
Instruction Fuzzy Hash: 4E31CCB4D012199FCB14CFAAD980A9EFBF5AB49320F14942AE814B7300C775AA45CF54

Function 06749F40 Relevance: 1.5, Strings: 1, Instructions: 244COMMON

Download Yara Rule

Strings

Plfq, xrefs: 0674A128

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: Plfq
API String ID: 0-3206639473
Opcode ID: d08b559233494e900b194ebe997b4ab73f871f5f521f0f0a9d64d06535ccc42e
Instruction ID: 8e31f4486bb0aebbb4020ee84809f77d6a495838170d4900cc1df1a685d364ab
Opcode Fuzzy Hash: d08b559233494e900b194ebe997b4ab73f871f5f521f0f0a9d64d06535ccc42e
Instruction Fuzzy Hash: 61910374B001158FCB55EF28C888AAE7BF6BF89710B1184A9E505DB3B5DB70ED41CBA1

Function 0674E370 Relevance: 1.5, Strings: 1, Instructions: 228COMMON

Download Yara Rule

Strings

4'fq, xrefs: 0674E59A

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: 4'fq
API String ID: 0-2007657732
Opcode ID: b40f5ab57957a9bb71764357eecf8ea96a60f3b2ec669b4108404635cb8dd25b
Instruction ID: 11e84787c52cdadb260a566db86689ad6f0a01b5db7d70410b75fcc7199a5aa9
Opcode Fuzzy Hash: b40f5ab57957a9bb71764357eecf8ea96a60f3b2ec669b4108404635cb8dd25b
Instruction Fuzzy Hash: 89A11C34A10618DFCB54EFA4D898E9DB7B2FF88310F118558E505AB3A5DB70EC46CB41

Function 0371FD28 Relevance: 1.4, Strings: 1, Instructions: 164COMMON

Download Yara Rule

Strings

TJkq, xrefs: 0371FE01

Memory Dump Source

Source File: 00000000.00000002.2338758874.0000000003710000.00000040.00000800.00020000.00000000.sdmp, Offset: 03710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3710000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: TJkq
API String ID: 0-3106782265
Opcode ID: a0d732825db5ce18e6f435c9fe372f0252cc23d1379a744434e16b41e69968a7
Instruction ID: 7d5f704ca3c425b9a423cead9666d5dacf7b8debf98b21d3904bd9f401dbbd2d
Opcode Fuzzy Hash: a0d732825db5ce18e6f435c9fe372f0252cc23d1379a744434e16b41e69968a7
Instruction Fuzzy Hash: DE711779E042089FDB04DFA9D5586AEBBB2FF8D300F20816AE415A7354DB34AD46CF51

Function 06D837B8 Relevance: 1.4, Strings: 1, Instructions: 141COMMON

Download Yara Rule

Strings

(jq, xrefs: 06D838E4

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: (jq
API String ID: 0-3225323518
Opcode ID: 86fdab3cc3787b2bf44c93db5acfbed3c0f2232f129b6e42a1fc95232a43897e
Instruction ID: 3fee880db8a029d2adef3990b819c841d26a68d9d5ccccdecf9e7772504342f5
Opcode Fuzzy Hash: 86fdab3cc3787b2bf44c93db5acfbed3c0f2232f129b6e42a1fc95232a43897e
Instruction Fuzzy Hash: BF41B336704250AFCB4A9F68D818D597FB6FF8931071680E6E605CB3B2CA35DC11DB61

Function 0674AA60 Relevance: 1.4, Strings: 1, Instructions: 140COMMON

Download Yara Rule

Strings

(jq, xrefs: 0674AB19

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: (jq
API String ID: 0-3225323518
Opcode ID: 5376d0b0de49ff07b7f8e65d138ad14c06f4c0f67fb87f3e895eb343bb77815f
Instruction ID: 8bfc55d77c1d99fa783ce5c4d8d6da9153d9c317dc84eae37393a427e0db41e7
Opcode Fuzzy Hash: 5376d0b0de49ff07b7f8e65d138ad14c06f4c0f67fb87f3e895eb343bb77815f
Instruction Fuzzy Hash: 314144327442658FC764DB7DD844ABE7BEAEFC562071884BAE504CB396CB25DC01C7A0

Function 06D82368 Relevance: 1.4, Strings: 1, Instructions: 134COMMON

Download Yara Rule

Strings

4'fq, xrefs: 06D823A2

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: 4'fq
API String ID: 0-2007657732
Opcode ID: 7e9f0029e52409274f40f62289cfa235db94cde99b14c5eab2f74da13e4ab19d
Instruction ID: 72fff114b4fc60bab9733898e982d3fc1c187157f30ab9af1b12c5db6d067d28
Opcode Fuzzy Hash: 7e9f0029e52409274f40f62289cfa235db94cde99b14c5eab2f74da13e4ab19d
Instruction Fuzzy Hash: 46418130B106148FCB94BB68C8ACA6EB7B7BFC9710F104429E5169B394DF749C06CB91

Function 06D81D61 Relevance: 1.4, Strings: 1, Instructions: 118COMMON

Download Yara Rule

Strings

4'fq, xrefs: 06D81E17

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: 4'fq
API String ID: 0-2007657732
Opcode ID: 0b6e543f3578e45ac21bd622f4726c05fed962859e093bac3f65fa9281f2bdb1
Instruction ID: 22403824ba9c4664d71a9762be3a89fbd3aad99800a477f29d0f8af62b738372
Opcode Fuzzy Hash: 0b6e543f3578e45ac21bd622f4726c05fed962859e093bac3f65fa9281f2bdb1
Instruction Fuzzy Hash: 85415C717006119FD349EB69C8A8F2B7BE6AFC8710F108468E206CB3A1DE71EC46C791

Function 06D81D70 Relevance: 1.4, Strings: 1, Instructions: 109COMMON

Download Yara Rule

Strings

4'fq, xrefs: 06D81E17

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: 4'fq
API String ID: 0-2007657732
Opcode ID: f84f7821dccaf54798b5f7e05eebac4727c4ba48506b148ee8cea01d0701b4fa
Instruction ID: 788f0e0a68c3e5b89ae5a153bf0733df7361cc609b08881bc688a877a1fe8c26
Opcode Fuzzy Hash: f84f7821dccaf54798b5f7e05eebac4727c4ba48506b148ee8cea01d0701b4fa
Instruction Fuzzy Hash: 65312A757006119FD348EB69C8A8F2B77A6AFCC714F104068E606CB3A1DE71EC42CBA1

Function 0674E781 Relevance: 1.4, Strings: 1, Instructions: 106COMMON

Download Yara Rule

Strings

4'fq, xrefs: 0674E6F9

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: 4'fq
API String ID: 0-2007657732
Opcode ID: 4076a6c8912a07034a442c06889f157d6e5a8cb6595181f1530e76b4dfc461f6
Instruction ID: b3b99c14ed804802a3a2822f0cf04861d08d8fee7238856b4edd61d78559d0f2
Opcode Fuzzy Hash: 4076a6c8912a07034a442c06889f157d6e5a8cb6595181f1530e76b4dfc461f6
Instruction Fuzzy Hash: 1B41B674B00214CFDB48DB64D998AAEBBB2FF88704F108198E5069B3A5DB71EC42CB41

Function 03710918 Relevance: 1.3, Strings: 1, Instructions: 99COMMON

Download Yara Rule

Strings

Tefq, xrefs: 037109C1

Memory Dump Source

Source File: 00000000.00000002.2338758874.0000000003710000.00000040.00000800.00020000.00000000.sdmp, Offset: 03710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3710000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: Tefq
API String ID: 0-1066582953
Opcode ID: b3c74eb3f8c0a38e7b031934f9857460179faa086b7324f416424500c5bfe589
Instruction ID: 5237e9e1554898e84c4c13a731c7a67e05725f4322c906854a49bbc980f686b5
Opcode Fuzzy Hash: b3c74eb3f8c0a38e7b031934f9857460179faa086b7324f416424500c5bfe589
Instruction Fuzzy Hash: E0313979B10104DFCB54DF69D898A9DBBF2BF8D711F2480A9E806AB361CB71AC45CB50

Function 0674D7F8 Relevance: 1.3, Strings: 1, Instructions: 97COMMON

Download Yara Rule

Strings

4'fq, xrefs: 0674D841

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: 4'fq
API String ID: 0-2007657732
Opcode ID: a72ed57cb4b09f4c570a73eb85d9682615cf9b1fb92ccf63c6cc2e9d516eaf86
Instruction ID: e2608df16de63ee40fbf9c39dfd82f77c8c910351a3de34792c7c0bd7a4c171f
Opcode Fuzzy Hash: a72ed57cb4b09f4c570a73eb85d9682615cf9b1fb92ccf63c6cc2e9d516eaf86
Instruction Fuzzy Hash: E531C371B001049FCB559F64D858DAA7BB7EF8C310B014069EA069B3A5DB31DC02CBA1

Function 06E1E910 Relevance: 1.3, APIs: 1, Instructions: 94memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(?,?,?,?), ref: 06E1E9AF

Memory Dump Source

Source File: 00000000.00000002.2360879207.0000000006E10000.00000040.00000800.00020000.00000000.sdmp, Offset: 06E10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6e10000_SecuriteInfo.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 62784cadc0cb6d6f88b72fbc45c0c20d8f0f93a04eb3383f5e8eadc63610ede7
Instruction ID: 9b680234bc743e7587f319444ccf56485dae941958125e6c00bbd19e16c6ee5e
Opcode Fuzzy Hash: 62784cadc0cb6d6f88b72fbc45c0c20d8f0f93a04eb3383f5e8eadc63610ede7
Instruction Fuzzy Hash: 263197B4D002589FCF14CFA9D980A9EFBB5AB59320F24A42AE814BB210D735A945CF94

Function 06D8235B Relevance: 1.3, Strings: 1, Instructions: 89COMMON

Download Yara Rule

Strings

4'fq, xrefs: 06D823A2

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: 4'fq
API String ID: 0-2007657732
Opcode ID: ba47e693d21d1636f3dd19df87137e5163cd39d76f546d2cae50dd07b7478fbf
Instruction ID: 447618eb96b9670898c0933a86ea7917cb72394efd6d98f93c058f7363566ce7
Opcode Fuzzy Hash: ba47e693d21d1636f3dd19df87137e5163cd39d76f546d2cae50dd07b7478fbf
Instruction Fuzzy Hash: 03213030B102149BCB94BB69D89CAAEB7ABAFD8B10F104429E116DB394CF745C46C7A5

Function 06DC6351 Relevance: 1.3, APIs: 1, Instructions: 80COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 06DC63D6

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: 408de4af1a788e39b89a7605cba68e34b522350549a343b4a69f3df272fc106b
Instruction ID: 24de09cbfb1311ec91a1294492e6684f2adda02339d565c3846fc9b10f484027
Opcode Fuzzy Hash: 408de4af1a788e39b89a7605cba68e34b522350549a343b4a69f3df272fc106b
Instruction Fuzzy Hash: F631EFB4D012599FCB14CFAAD881AEEFBB5AB48320F14942AE415B7200C775A941CFA4

Function 0371094B Relevance: 1.3, Strings: 1, Instructions: 78COMMON

Download Yara Rule

Strings

Tefq, xrefs: 037109C1

Memory Dump Source

Source File: 00000000.00000002.2338758874.0000000003710000.00000040.00000800.00020000.00000000.sdmp, Offset: 03710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3710000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: Tefq
API String ID: 0-1066582953
Opcode ID: d5846dad45982c23a03247ebd63d4adaca78b394d6931931c61c6d00223c7e78
Instruction ID: 5e60b5875c4e87e8c3b808e079b8ff4e2bcac74af9280152624fb7f8b78b1d19
Opcode Fuzzy Hash: d5846dad45982c23a03247ebd63d4adaca78b394d6931931c61c6d00223c7e78
Instruction Fuzzy Hash: 7B31E279A00104CFC754DF68D998AADBBF2BF8C710B2580AAE906EB361CB709C51CF10

Function 06DC6358 Relevance: 1.3, APIs: 1, Instructions: 75COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 06DC63D6

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: cb7ac505cf5065858ca18f1b3f071df09627b539e9c28f0fbbf562f1158bbc6f
Instruction ID: 5f161bcc875c39a3403c2d259a394c065d5abe804b041f62a0980539958e273f
Opcode Fuzzy Hash: cb7ac505cf5065858ca18f1b3f071df09627b539e9c28f0fbbf562f1158bbc6f
Instruction Fuzzy Hash: AF31ECB4D002599FCB14CFAAD881AEEFBF4AF48320F24942AE414B7300C779A941CF64

Function 05760499 Relevance: 1.3, Strings: 1, Instructions: 47COMMON

Download Yara Rule

Strings

&, xrefs: 0576035B

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: &
API String ID: 0-1010288
Opcode ID: 08d8b63f511a638b1d3eb62bfcb2ceeddf300c9c9434b9dc56425ea075234f28
Instruction ID: 14ee26bbfd49ac8baf922c941ff2f32be71b898d05e0099de94179946c04fe96
Opcode Fuzzy Hash: 08d8b63f511a638b1d3eb62bfcb2ceeddf300c9c9434b9dc56425ea075234f28
Instruction Fuzzy Hash: 5521C37491422ADFCB24CF24D998BEDBBB2BB05304F5041EAD419A3291D7395F84EF51

Function 05760608 Relevance: 1.3, Strings: 1, Instructions: 39COMMON

Download Yara Rule

Strings

,, xrefs: 05760695

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: ,
API String ID: 0-3772416878
Opcode ID: dd73c5b268e0b63521efbd3a180b44091a5773974e0d661e5732b65c36d16555
Instruction ID: 89d821a460da9bbc656c1257c5c3567cb496cc00e620839f5af68229aded0b1d
Opcode Fuzzy Hash: dd73c5b268e0b63521efbd3a180b44091a5773974e0d661e5732b65c36d16555
Instruction Fuzzy Hash: 1611F578905228CFEBA1CF54C854BE9BBB1FB49300F1081D9D508A3280DB359E85DF00

Function 06D8ECE7 Relevance: 1.3, Strings: 1, Instructions: 39COMMON

Download Yara Rule

Strings

', xrefs: 06D8ED64

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: '
API String ID: 0-1997036262
Opcode ID: 2dc585fcb869c6591a030151d588469384f1f68e56465feb71ddf36833be1bc6
Instruction ID: 0a61ada22a8dfc9da494cb2dfb196ff9d4cb041abe131f7dd5a121d101335526
Opcode Fuzzy Hash: 2dc585fcb869c6591a030151d588469384f1f68e56465feb71ddf36833be1bc6
Instruction Fuzzy Hash: A8110C78B50218CFDB90DF29D845BAA73F2EF89304F00819AD41997380D734AD85CF41

Function 06D8E4E5 Relevance: 1.3, Strings: 1, Instructions: 38COMMON

Download Yara Rule

Strings

%, xrefs: 06D8E557

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: %
API String ID: 0-2567322570
Opcode ID: c173bbc5cb83911dcdbf9295c4738e2b58ab66b4799bceab57232d865ef8cc25
Instruction ID: cc8ad6f429eb3a9eed858dcd355e367e685a6235e1d2899a021211f3f1d5b767
Opcode Fuzzy Hash: c173bbc5cb83911dcdbf9295c4738e2b58ab66b4799bceab57232d865ef8cc25
Instruction Fuzzy Hash: F8112774A00204CFCB84CF59D884BEE77F2EB48314F10916AE411AB380DB38AD85CF44

Function 06D8EE4B Relevance: 1.3, Strings: 1, Instructions: 30COMMON

Download Yara Rule

Strings

$, xrefs: 06D8EED3

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: $
API String ID: 0-3993045852
Opcode ID: 806482b9ba743d16db9fbff7f006bb6bbff94cc4225b2214077988a2faa4f6c1
Instruction ID: 74132eaedfea6a67bb9b4f76c08b583454d1c82bda1cf9f14fb3134d3fd48573
Opcode Fuzzy Hash: 806482b9ba743d16db9fbff7f006bb6bbff94cc4225b2214077988a2faa4f6c1
Instruction Fuzzy Hash: 55014B74640604CFC7D4DF25DC99BE977F5EB98305F00909AA01A9B394EB345D89CF41

Function 06D8F089 Relevance: 1.3, Strings: 1, Instructions: 29COMMON

Download Yara Rule

Strings

&, xrefs: 06D8F0FA

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: &
API String ID: 0-1010288
Opcode ID: 457968d592e2bad81d45fde116758196ac02e43ffcd0d9e16c23f066c300d343
Instruction ID: 0297d038d90b2b328d58cfe4ab2480a25b83434ed46dda146d4d3e8732b45390
Opcode Fuzzy Hash: 457968d592e2bad81d45fde116758196ac02e43ffcd0d9e16c23f066c300d343
Instruction Fuzzy Hash: 4DF0F974A403048FCB84DF69D995BAE77F5EF89304F11902BA41AAB794EB349C02DF41

Function 03710BD7 Relevance: 1.3, Strings: 1, Instructions: 28COMMON

Download Yara Rule

Strings

8jq, xrefs: 03710BF5

Memory Dump Source

Source File: 00000000.00000002.2338758874.0000000003710000.00000040.00000800.00020000.00000000.sdmp, Offset: 03710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3710000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: 8jq
API String ID: 0-3286795621
Opcode ID: f63a621c72cac50aa55688c6a82a98e45999143eae59087d03f11f596dc48cf5
Instruction ID: f709d982bb1200862965b172ec9d5614d5fdac586fbbac062418a24b2547753e
Opcode Fuzzy Hash: f63a621c72cac50aa55688c6a82a98e45999143eae59087d03f11f596dc48cf5
Instruction Fuzzy Hash: 4FF0A7793442118FC748DB38E044BF9FBF1EFC9710B14459DE80997651DB645C55CB80

Function 06D8E0DF Relevance: 1.3, Strings: 1, Instructions: 28COMMON

Download Yara Rule

Strings

f\M, xrefs: 06D8E0E4

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: f\M
API String ID: 0-2036767121
Opcode ID: 0907e529266ae8fcc87de2ddf3d2c94a96085f91818ae302dfab044b2c716bf1
Instruction ID: fdb8ed144270c0cca3791fb086616d8fc0fb4cef89fadc1733d3c78657ff9298
Opcode Fuzzy Hash: 0907e529266ae8fcc87de2ddf3d2c94a96085f91818ae302dfab044b2c716bf1
Instruction Fuzzy Hash: D6013C746401488FCBD4DB25DC84BEE73F5EB89300F0191AAA40A97390DB34AE85DF40

Function 05760DA5 Relevance: 1.3, Strings: 1, Instructions: 24COMMON

Download Yara Rule

Strings

8, xrefs: 05760E04

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: 8
API String ID: 0-4194326291
Opcode ID: 391ebb2de09c556bc7623e8a8445fe74afcdc9aea84ac89676c7dde215e23959
Instruction ID: c2fd1ad4085eed1051e975d04d6d362a9ba8ca7d6ff2343a11fd420a6a00a3d6
Opcode Fuzzy Hash: 391ebb2de09c556bc7623e8a8445fe74afcdc9aea84ac89676c7dde215e23959
Instruction Fuzzy Hash: 2EF0BE3590461ACFCF129F64C818AEABBB2FF44300F0582D5E49D27160CB30AB89DF80

Function 05760292 Relevance: 1.3, Strings: 1, Instructions: 15COMMON

Download Yara Rule

Strings

", xrefs: 05760D44

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: "
API String ID: 0-123907689
Opcode ID: 7487ecc6505c2d6eb6be582f89d33e09e84da67ff905eb38870b0ab9268e7157
Instruction ID: 8ee0b677c198b28419df799b7685fae6c870a87108d8d08f9c46a7d777bc1a43
Opcode Fuzzy Hash: 7487ecc6505c2d6eb6be582f89d33e09e84da67ff905eb38870b0ab9268e7157
Instruction Fuzzy Hash: D5E002789002189FCB55CF64C984AD9FBFAEB49304F1481AAD919A7342D731AE46DF41

Function 0576088F Relevance: 1.3, Strings: 1, Instructions: 13COMMON

Download Yara Rule

Strings

<, xrefs: 057608BE

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: <
API String ID: 0-4251816714
Opcode ID: 6ff7aa0be29b2b9b16a9296fb2d2ebe082bfcd9756e7999187d945e45d1a3d3d
Instruction ID: 4b6a44f384b692edde7dfdf4297826376c8467f10233672d1c672e1f815a559a
Opcode Fuzzy Hash: 6ff7aa0be29b2b9b16a9296fb2d2ebe082bfcd9756e7999187d945e45d1a3d3d
Instruction Fuzzy Hash: BCE0E238805229CFCB21CF20D948BECBBB6FB54300F1081AAC805A3291D3B84F85EF40

Function 06D829A8 Relevance: .4, Instructions: 437COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 086270a389087ec494b331c6dc15ae64f38123000c5388664a69dd07a2f255f5
Instruction ID: a14ffd9d825c82d6a1987385cb06084ddd42c8f14346128cd8a94aed24ad1fdc
Opcode Fuzzy Hash: 086270a389087ec494b331c6dc15ae64f38123000c5388664a69dd07a2f255f5
Instruction Fuzzy Hash: 4B12E934A002198FCB54EF64C898A9DB7B2FF89300F5185A9E54AAB355DF30ED85CF91

Function 06D82818 Relevance: .4, Instructions: 414COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d307790140c04e4b0d8cc622f12a7ab3de64564cefdac506ef978bf102b9f5f3
Instruction ID: 6228f4ecd5ae76ca147a0d76d551bc98a4e02a2d9b34e8cef969b71884e3661e
Opcode Fuzzy Hash: d307790140c04e4b0d8cc622f12a7ab3de64564cefdac506ef978bf102b9f5f3
Instruction Fuzzy Hash: 99F19430A0A3A49FC746EF38CCA46D97FB2AF46300F0545D6D485DB2A3DA349D49CBA5

Function 06D869B0 Relevance: .3, Instructions: 314COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 38a2f8f22542c4d1e457952bfaaba704575500f70c5c8928b5f0d4372d04aa1d
Instruction ID: 06c9983a62f68b4c59b49ba4972c61382840e039fb3739c2fc3369cf5abac752
Opcode Fuzzy Hash: 38a2f8f22542c4d1e457952bfaaba704575500f70c5c8928b5f0d4372d04aa1d
Instruction Fuzzy Hash: 85C1C631A006948FCB65EF28C458A2EBBF2FF85320F14895DE586CB692DB35EC41CB51

Function 0674EA20 Relevance: .2, Instructions: 230COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ba26da37115c4e6544398c91060a301d18e669c53b3090417220a8a6ba5c191a
Instruction ID: 96e8a34ae4d9d5d8485e66dc050944b48a173067763fca8a4a3bd56b38de536a
Opcode Fuzzy Hash: ba26da37115c4e6544398c91060a301d18e669c53b3090417220a8a6ba5c191a
Instruction Fuzzy Hash: 9371D236900514EFDF4A9F94D948D957BB2FF49320B0681D5E60AAB232C732ECA5EF40

Function 06D83950 Relevance: .2, Instructions: 227COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 74ced385390fc27e28dcf902e007dbcc6b57b752270ef66d7d12bb063750910c
Instruction ID: 189164a83abec0047ec2c39a26a941f9f0d1b2c244727a8a79150d6aaaa97d13
Opcode Fuzzy Hash: 74ced385390fc27e28dcf902e007dbcc6b57b752270ef66d7d12bb063750910c
Instruction Fuzzy Hash: 66914C70B10614DFCB94EF68C898A6DB7B6FF89A10F1541A9E506DB3A5CB30EC41CB91

Function 0674B0A0 Relevance: .2, Instructions: 208COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: be94f15b64f35466d2aafcf918d40144a8adc31cf0dd5f1f6a11a5abcb2a68c8
Instruction ID: 8e346104a1979960ab6b481c85a2ac6ba66ae7743c58cd28e6a874b114adcc53
Opcode Fuzzy Hash: be94f15b64f35466d2aafcf918d40144a8adc31cf0dd5f1f6a11a5abcb2a68c8
Instruction Fuzzy Hash: E3813D75A00218CFCB54EFA9C58899EB7F5FF48750B1585A9E806DB361DB30ED41CB90

Function 06D83943 Relevance: .2, Instructions: 164COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 26398e6c92b9eaa1e6df6fa21decce96a5cef5ab91bab816804a8c5abf57ff13
Instruction ID: 0e74883bcbcc085a441c3570614656236b5e60b35690d322ba23a2fcdf3f02d9
Opcode Fuzzy Hash: 26398e6c92b9eaa1e6df6fa21decce96a5cef5ab91bab816804a8c5abf57ff13
Instruction Fuzzy Hash: 88613C74B10614DFCB54EF68C898A6DB7B6FF88710F1581A9E5169B3A5CB30EC42CB90

Function 06748CC6 Relevance: .2, Instructions: 157COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5f122b800d602e848e03c7150da6d7d79faae9d6fbf2e84ab9728b5492ba243d
Instruction ID: 399b27b073135a22419b6d0fbe57c28ff6c63de7b206b176f29d0929a9c025f4
Opcode Fuzzy Hash: 5f122b800d602e848e03c7150da6d7d79faae9d6fbf2e84ab9728b5492ba243d
Instruction Fuzzy Hash: 59617E74E0121CCFEB64DFA9C988BADBBF2FB49304F2081AAD509A7251D7748981CF45

Function 06D8C13D Relevance: .1, Instructions: 148COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6772994d4adad040c0cd443dc50a13e51367298ed600de937923d27470903e22
Instruction ID: 6f795369324c05432a7509de8f1e8455ae6580ed52fcfac059598b013fb00a8d
Opcode Fuzzy Hash: 6772994d4adad040c0cd443dc50a13e51367298ed600de937923d27470903e22
Instruction Fuzzy Hash: 2C6126B4A10218CFDBA4DF29D888BA9B7F6FB89304F1091E6D40DA3255DB349E81CF54

Function 0674DF50 Relevance: .1, Instructions: 143COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 79b88322cdc40a4c73fb674be3dd52097623da82b7a1cf6ce5a5f4eecfc5b297
Instruction ID: 4b6493d834248b453f0ce13a0787b43478cc4bb188ef9f0813bba2fb82923386
Opcode Fuzzy Hash: 79b88322cdc40a4c73fb674be3dd52097623da82b7a1cf6ce5a5f4eecfc5b297
Instruction Fuzzy Hash: 60516235B10609DFCB14EF64E458AAEB7B6FFC8711F108119E5029B3A4EF70A946CB91

Function 06D83630 Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0c446b39fed05c3d5bbc0b729ddfac32bda83335068df7d4a92aea6b4709d15
Instruction ID: 1d9e7f25699856cfa36d047ad2f799114fbdff64b2ba9e5119d0d3f92f400cf7
Opcode Fuzzy Hash: e0c446b39fed05c3d5bbc0b729ddfac32bda83335068df7d4a92aea6b4709d15
Instruction Fuzzy Hash: 9841A070700201CFD769AB74C998A3A77A3EBC5700F258568E50A8B3A5CB75EC46CB81

Function 06D86848 Relevance: .1, Instructions: 127COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1d74b65135fbdc4b7d878f3a8ae0aab639bb13b59ca2a8497938265043d02092
Instruction ID: a690727a1d2bdffb372b2f42152ac5ccdb5cca8e3d10b214f173eb4c7acadb20
Opcode Fuzzy Hash: 1d74b65135fbdc4b7d878f3a8ae0aab639bb13b59ca2a8497938265043d02092
Instruction Fuzzy Hash: C941D271F047648FCBA4DB7CD55429EBBF1EF85320B04886ED55ACBA84DA30E941CB81

Function 06D8BA71 Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 23d085911ffe26bb28984ffc0a01960774ec2f83b20b1f4e4220a230f3ffcf88
Instruction ID: 863446e4368b64a6e7b8b8b41a0a89a05cba063baab2d15e2c7a598bc4cade2d
Opcode Fuzzy Hash: 23d085911ffe26bb28984ffc0a01960774ec2f83b20b1f4e4220a230f3ffcf88
Instruction Fuzzy Hash: 4951E974A54218CFDBA4DF29D889BA9B7F2EB89305F1481E6D409A7390DB349EC5CF40

Function 067496D0 Relevance: .1, Instructions: 114COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b85fd381bb7735d27b9afbb46bae8e20af8630b55de408908b734b4ac1f3bcb2
Instruction ID: 681f8775b9ef9e2f694f6cc18e929994576443967ca69ef36cd3fddff287e053
Opcode Fuzzy Hash: b85fd381bb7735d27b9afbb46bae8e20af8630b55de408908b734b4ac1f3bcb2
Instruction Fuzzy Hash: 6851C574D01208CFDB58DFB9D598A9EBBB2BF88300F20812AD515AB365DB319941CF50

Function 067496C0 Relevance: .1, Instructions: 113COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 65de51a9e409609a647136e93c633ef1b3e26feb839e8d249f324e0e1acf2de8
Instruction ID: 659d90fe60fbebcc6344d19f77050f8d67c06b6df3f2c7a6e98a1f24911e22a9
Opcode Fuzzy Hash: 65de51a9e409609a647136e93c633ef1b3e26feb839e8d249f324e0e1acf2de8
Instruction Fuzzy Hash: 4B41C574D01208DFDB68DFB9D598A9DBBF2AF89300F20812ED815AB365DB319941CF50

Function 06D83C3F Relevance: .1, Instructions: 109COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 404a3ea647ce8a075c7baa48bf2a95a7392f0dddeeb1ca75c209aa3ca30cd6a0
Instruction ID: 0c27939c2d1ccb0a256139587572375b569d3a9961a584a05ac82483ac48c47b
Opcode Fuzzy Hash: 404a3ea647ce8a075c7baa48bf2a95a7392f0dddeeb1ca75c209aa3ca30cd6a0
Instruction Fuzzy Hash: 78416235A002199FDF54EFA4D858AEEBBB6FF88710F118065E815B7290CB359D45CBA0

Function 06D8C09D Relevance: .1, Instructions: 107COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7e50d65da5992836436ccedcbfe69d60722c90bb8e2282ebe1091ee712078f48
Instruction ID: c90f905d441e2a3cb097feffd566675daf258c34f9016edcd863972016e96ed2
Opcode Fuzzy Hash: 7e50d65da5992836436ccedcbfe69d60722c90bb8e2282ebe1091ee712078f48
Instruction Fuzzy Hash: 9E512AB8A012298FDBA5DF29D954BAEB7F5FB48304F1081EAD419A7340DB345E85CF41

Function 06D80E70 Relevance: .1, Instructions: 103COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6cf437bf0ea835cce891b7ee865fdb47f1fbe9dc6dfaed20cd17f9180d8aa655
Instruction ID: 8ba8f08ab1ab10421f45772eb0b3f3b304b31841111a142a3ef07083410b1070
Opcode Fuzzy Hash: 6cf437bf0ea835cce891b7ee865fdb47f1fbe9dc6dfaed20cd17f9180d8aa655
Instruction Fuzzy Hash: 4131D436A111049FCB45DF68D888EA9BBB6FF48720F1680A9E6099B372C731ED55DB40

Function 06D8B9A8 Relevance: .1, Instructions: 102COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c4b12ac5fc18c945567966def9f91e14523e54e59826e7476ae9158da46514ce
Instruction ID: da4e5d7427a015bf9b74b3c3892617699ce59f5fb3be25716f9801b1a5365bd4
Opcode Fuzzy Hash: c4b12ac5fc18c945567966def9f91e14523e54e59826e7476ae9158da46514ce
Instruction Fuzzy Hash: 9F51E874954229CFDBA4DF19D849BE9B7F1EB49308F1481EAD409A7290D7349EC5CF80

Function 06D8F338 Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cc140e288533a2f9ab1204d6710dee56573991b4ffe59356d389b16f7782007a
Instruction ID: 8bd876f23125219e7b6330c58c22f79b4760153adcb7364b0ec9d2d61700b040
Opcode Fuzzy Hash: cc140e288533a2f9ab1204d6710dee56573991b4ffe59356d389b16f7782007a
Instruction Fuzzy Hash: DD41E474E052099FCB44DFA9D895AEEBBF6FF89300F10806AE955A7350DB30A941CF90

Function 06D8BF51 Relevance: .1, Instructions: 99COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f613aeda4d3d064de2479a9aaf167db86785f66a45255b0a086fcc50c4abbc47
Instruction ID: ad0d1fdab9c3b7dc8f6225e29b3f124c6e188516aaec6feb7c7ecb4e06a84a66
Opcode Fuzzy Hash: f613aeda4d3d064de2479a9aaf167db86785f66a45255b0a086fcc50c4abbc47
Instruction Fuzzy Hash: 315139B8A052298FCBA6DF29D894B9EB7F5FB49300F1081EAD449A7340DB345E85CF41

Function 06D8BBCB Relevance: .1, Instructions: 98COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b6ef820edfe5ec4b90c9aaa079ef8759e1ef30ff2338a68d57fbe0c0abf6064f
Instruction ID: 1505f0fc6453d898514d2897c289d8749d4c4ca8297d92e4f1dd659cdfe34793
Opcode Fuzzy Hash: b6ef820edfe5ec4b90c9aaa079ef8759e1ef30ff2338a68d57fbe0c0abf6064f
Instruction Fuzzy Hash: F541B474A54269CFDBA4DF29D889BE9B7F1EB49304F1481E6D409A7290D7349EC1CF40

Function 06D8BF05 Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b5860121a929954cee3fdf174aab8be6fd29f1175f739f4d848216eb49905ee4
Instruction ID: ac97b4cc6b5d461dcd6e8d47eb2328456ef1075040b6d2da6774bf537d601264
Opcode Fuzzy Hash: b5860121a929954cee3fdf174aab8be6fd29f1175f739f4d848216eb49905ee4
Instruction Fuzzy Hash: E551F5B8A052288FDBA5DF29D994B9EB7F6FB48304F1081EAD449A7340DB345E85CF41

Function 06D8BF95 Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d0e8fed9e0c5a6289a574f8d084358fb850abbd5f24a7c373e0fc82c86a4dd2
Instruction ID: c355c2162b707dd4e4e496afd4e850b4dad4971e0d858aaf0dc34d1709d3f5d3
Opcode Fuzzy Hash: 8d0e8fed9e0c5a6289a574f8d084358fb850abbd5f24a7c373e0fc82c86a4dd2
Instruction Fuzzy Hash: 244107B8A052288FDBA5DF29D994B9EB7F5FB48304F1081EAD509A7340DB345E85CF41

Function 06D8B413 Relevance: .1, Instructions: 94COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f7c3e3ba0e6a00fbe64af27efcb225a40c485f872bee04369412a510e13ea61f
Instruction ID: 7aa97cf819fedfd3340e79b8a5715b4efeab713377b6abe3d88d98d18ac86338
Opcode Fuzzy Hash: f7c3e3ba0e6a00fbe64af27efcb225a40c485f872bee04369412a510e13ea61f
Instruction Fuzzy Hash: F141C574905218CFEBA4DF19D88DBA8B7F1EB49308F2482EAD408A7290D7759EC4CF44

Function 0674ECF0 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 33b927b0e47ba1a9e2a9dccba904af7917fb46c8c7e9ab6838e4702699e639b8
Instruction ID: 9ea81f3ae22b81f221d8525f3f01e7a6e62c05442199a436fff0aa9fa2e0d710
Opcode Fuzzy Hash: 33b927b0e47ba1a9e2a9dccba904af7917fb46c8c7e9ab6838e4702699e639b8
Instruction Fuzzy Hash: 1F21D6323046048FC774AB69E948666BBE5EFC1361B25C87AE55EC7252DB30EC42CB51

Function 06D8BDEF Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d729302eb2072d607f588e5305f74cce3b9fb2eeb2c00c3e8fd467cb1751cf0
Instruction ID: f925ffc0abb2a66e8c2417822d29f604138dc70328b50f493cc815703e401427
Opcode Fuzzy Hash: 6d729302eb2072d607f588e5305f74cce3b9fb2eeb2c00c3e8fd467cb1751cf0
Instruction Fuzzy Hash: EB4126B8A052288FDBA5DF29D894B9EB7F6FB48300F1081EAD409A3340DB345E85CF41

Function 0674A7C0 Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3c3406c313b307c593ae78f350f9ccfc08cb226b85edf7d2ea1f99f9a4b1623e
Instruction ID: 330f991c5434d5f73677929f126304a34bf9480d6066fbd086be2dbd5d67aad8
Opcode Fuzzy Hash: 3c3406c313b307c593ae78f350f9ccfc08cb226b85edf7d2ea1f99f9a4b1623e
Instruction Fuzzy Hash: 5E31B331600204DFDB65DF29C888BAA7BB6FF84340F548469F805CB2A1CB35EC96CB90

Function 06D8BAF3 Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f94c79abffb1354d523f22a1c9f494ccdc9ef24850d185b1f9ff6c9c2c2256b
Instruction ID: f72d87372e6232a201db15417096f6527544cbe6e584272ba847040461ec27d0
Opcode Fuzzy Hash: 6f94c79abffb1354d523f22a1c9f494ccdc9ef24850d185b1f9ff6c9c2c2256b
Instruction Fuzzy Hash: FA410574915268CFDBA4DF29D8497A9B7F2FB49304F1081EAD408A7290CB389EC5CF44

Function 06D84A10 Relevance: .1, Instructions: 88COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: afd78a9dc9827be69dfcd9bbfc01d2fdef0096916940d8bd5d1a06b808870d19
Instruction ID: 5b6f97b8d00bc483a1152ced00dea69ad1631b6ea25252b50b10a91a03033bdb
Opcode Fuzzy Hash: afd78a9dc9827be69dfcd9bbfc01d2fdef0096916940d8bd5d1a06b808870d19
Instruction Fuzzy Hash: 4931FB34A046459FCB41FF74C8488AEBBB5FF46300F50456AD551DB361DB309906CBA1

Function 06D8BE1B Relevance: .1, Instructions: 87COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed48b36d56c14c350cc42a1c860ef17ba7fdcd41f22413c316853d61165770c4
Instruction ID: 545f9a2f0b091c8015a13fdf51fba8696f1c73eca364091db9b5139db7468dce
Opcode Fuzzy Hash: ed48b36d56c14c350cc42a1c860ef17ba7fdcd41f22413c316853d61165770c4
Instruction Fuzzy Hash: FD412BB8A052288FCBA5DF29D894B9EB7F6FB48300F1081EAD419A7340DB345E85CF51

Function 06D8B61F Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f45a1cb65ec704949952720f5caefec7f9a38f187e0984599117759154ee1220
Instruction ID: dbef7639b5ab4baecef6dbfc5156ec746150e8e7edc68d7764abf9da9264c7be
Opcode Fuzzy Hash: f45a1cb65ec704949952720f5caefec7f9a38f187e0984599117759154ee1220
Instruction Fuzzy Hash: 9F41AF74A14229CFDBA4DF29D849BE9B7B2EB89304F1485EAD408A7290D7749EC5CF40

Function 06D8F707 Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e5f5b8cb6a24899c1e2661fd7bb382dbc21771e9591e4fcbff69229fba4980a2
Instruction ID: f21c4a2e7678397c0a9e033daf82067e57d9615787e208fad07960a00fa6c78a
Opcode Fuzzy Hash: e5f5b8cb6a24899c1e2661fd7bb382dbc21771e9591e4fcbff69229fba4980a2
Instruction Fuzzy Hash: DD313374E042099FEB44DFAAD9446EEBBF2FB88300F008066E455A7340D7385945CFA0

Function 06D8B82F Relevance: .1, Instructions: 85COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 296b748be96e612d28f6df2cf04f62bba6bb21e3d81580e346a1e6723541c44f
Instruction ID: 66d1d1f32c5ac09e28d3bb5be6c0f7eabc69291597d5840b5d996b17bad2bb22
Opcode Fuzzy Hash: 296b748be96e612d28f6df2cf04f62bba6bb21e3d81580e346a1e6723541c44f
Instruction Fuzzy Hash: 7741B274914229CFDBA4DF29D889BE8B7B2FB49304F2085E6D408A7290D7749EC5CF40

Function 06D8AFFC Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 23a19ecc78dc004b33568351a6f7a880eb9b43ff7bd9b4cbc9ad5306044c207c
Instruction ID: 3f449d60a82f5841ea5a90f1ff2d08fb89934f76aa4ee46f3bd8d4f262b5056c
Opcode Fuzzy Hash: 23a19ecc78dc004b33568351a6f7a880eb9b43ff7bd9b4cbc9ad5306044c207c
Instruction Fuzzy Hash: AA41D474909228CFEBA4DF19D88D7A8B7F6EB49309F1481E6D408A7291C7749EC5CF40

Function 06D8B700 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9c493c17e60353d1b23f49be47e2678c51d472d4ad9bf4f78817021237eda228
Instruction ID: 199a28b9503ba675cdbe5243751828e06deeb2408eabf33044c540dcf42ac890
Opcode Fuzzy Hash: 9c493c17e60353d1b23f49be47e2678c51d472d4ad9bf4f78817021237eda228
Instruction Fuzzy Hash: 0B41F778915268CFDBA4DF29D9897A9B7F2FB49305F1081EAD409A7290CB349EC1CF44

Function 06D8B932 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 20c2d29b665ab3adb77bcabd5a3b5bf91ff84f679b0d60fd301979d97e27d722
Instruction ID: ccba89e1eaaf0af52402cf4707a8ffcdda6cb91697be2f451fa67c00f09fd245
Opcode Fuzzy Hash: 20c2d29b665ab3adb77bcabd5a3b5bf91ff84f679b0d60fd301979d97e27d722
Instruction Fuzzy Hash: 61419F74A14229CFDBA4DF19D889BA8B7F2FB49308F1481EAD449A7290D7749EC5CF40

Function 06D8B7F4 Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c869e1bfb9b383f1e21062831322800663374aa99c3ecccde0cd1636d5aa9d66
Instruction ID: 96543c73b1d1d44670e213ba2fac7207769a61ef9a888cbdb3b2fe276227ff06
Opcode Fuzzy Hash: c869e1bfb9b383f1e21062831322800663374aa99c3ecccde0cd1636d5aa9d66
Instruction Fuzzy Hash: 2F41C374914228CFDBA4DF19D889BE8B7F2EB49304F1481EAD408A7290C7799EC4CF44

Function 06D8F718 Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a24adeb10c60e6d07924a352ce7daf24a6bd5239b0b6f8b0a3e12a626bd872ad
Instruction ID: 61dba5a319be1426c0f5010e91fc04b87a33777842e9c77bbe07fbece3392720
Opcode Fuzzy Hash: a24adeb10c60e6d07924a352ce7daf24a6bd5239b0b6f8b0a3e12a626bd872ad
Instruction Fuzzy Hash: C731F675E04219DFEB44DFAAD9486EEBBF6FB88340F108026D555A7340DB345945CF90

Function 06D8BC41 Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a573b23b0beacbaa4ae1e8731d10299162ad7f4a3456431e2283fad25e7b70cc
Instruction ID: fcc4c35b5f3e4d1af50cb72f77cb6cff4daac3b46ff6bb300d29a4af61551c98
Opcode Fuzzy Hash: a573b23b0beacbaa4ae1e8731d10299162ad7f4a3456431e2283fad25e7b70cc
Instruction Fuzzy Hash: 3941B274914268CFDBA4DF19D889BE8B7F2EB49305F1481EAD408A7290D7789EC5CF44

Function 03717ED0 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2338758874.0000000003710000.00000040.00000800.00020000.00000000.sdmp, Offset: 03710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3710000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1c49792c0cacf60b76e9f10f9b068ea030d770892aafad961051493dbeddb8a5
Instruction ID: 0d76123cf0cf674add62cc0030bc798ad7d623dcef6bdd439e8b2866c2b1c5f2
Opcode Fuzzy Hash: 1c49792c0cacf60b76e9f10f9b068ea030d770892aafad961051493dbeddb8a5
Instruction Fuzzy Hash: BA312875904208DFEB04EFADC1497AEBBF6EB48305F1085A5D425A7280DB388A82CF41

Function 06D8B6F6 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1b0be28cd4d987e5a33049beebf04171f26dace04f493d279fd612a40e995140
Instruction ID: 667e42e71245a28ee412d17bb5d8e251e6c0674d7ad02e31bbc2ebc0a67f0685
Opcode Fuzzy Hash: 1b0be28cd4d987e5a33049beebf04171f26dace04f493d279fd612a40e995140
Instruction Fuzzy Hash: 0B410274908229CFDBA4DF19D848BE8B7F2EB49308F1481EAD408A7291D7749EC4CF40

Function 06D8B7B3 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed0ea270e83710ef1fa14631376d595c6ea4072853e10b6fdb48c2c5dfab88f7
Instruction ID: baf214bccaedcd19d481f2e20535648ccbfd42a547f9d7d86d8b1b6454192811
Opcode Fuzzy Hash: ed0ea270e83710ef1fa14631376d595c6ea4072853e10b6fdb48c2c5dfab88f7
Instruction Fuzzy Hash: E641C374914268CFDBA4DF19D889BE8B7F1EB49305F1481EAD408A7291D7789EC4CF44

Function 06D8B6B4 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 061761717e2df4198037b1c6ef53684b2a03ccb240891a0150f300a46156c8c7
Instruction ID: d80e17a50c423e526ccd6f0b5e4638f4dd8b6b08877d2e1c45be921ba36e2270
Opcode Fuzzy Hash: 061761717e2df4198037b1c6ef53684b2a03ccb240891a0150f300a46156c8c7
Instruction Fuzzy Hash: A7310574904218CFDBA4DF19D889BE8B7F2EB49304F1481E6D408A7290D7799EC4CF44

Function 06D84A20 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c76e7584a43e34fccffe528a26fdcfab63f7cc9d8d414a9e3f8201da93cf9b0d
Instruction ID: 6b79c3ce28fbf454ad7da99a68383991d0bc2253e6d6bb1b8ab37feb13ffb2fb
Opcode Fuzzy Hash: c76e7584a43e34fccffe528a26fdcfab63f7cc9d8d414a9e3f8201da93cf9b0d
Instruction Fuzzy Hash: D2218834B10909CFCB40FF68C45896EF7B5FF89700B50456AD61697324EF70A906CB91

Function 0371BCD8 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2338758874.0000000003710000.00000040.00000800.00020000.00000000.sdmp, Offset: 03710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3710000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f00ea89c2bc501613e20c130599d8d93d6562a633e1737ad4b519d04d94aba25
Instruction ID: 7d66843c241154e05767689d870544577238c6f3fd20c89358d89bed2003dede
Opcode Fuzzy Hash: f00ea89c2bc501613e20c130599d8d93d6562a633e1737ad4b519d04d94aba25
Instruction Fuzzy Hash: F02144B9E0420DCFDB08DFAAC9446EEBBB2BB8D304F10846AD155B3244DB7849418F91

Function 06D80E60 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7eabf6a23649dbecc046cc7e077e6406887bb3252bce69a7ed13f60f312468ea
Instruction ID: 4f92f5158ef43815b5e0fa3547857cc98bcf77e467481a5b0a49472cbaef0bb1
Opcode Fuzzy Hash: 7eabf6a23649dbecc046cc7e077e6406887bb3252bce69a7ed13f60f312468ea
Instruction Fuzzy Hash: 23213836611104AFCB05DFA9E888D99BBB2FF49320B1680A9E609DB272D731EC15DB41

Function 06D8B8A5 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ec16205e550b958ef67be00229f78d59d40bed4bc95efac18b9ef365170c7629
Instruction ID: 9ecce635c1a906c6d02a716d06a82ce2d8e7cff07da14863bbbc1036b7ca7e85
Opcode Fuzzy Hash: ec16205e550b958ef67be00229f78d59d40bed4bc95efac18b9ef365170c7629
Instruction Fuzzy Hash: 5231E374914228CFDBA4DF19D849BE8B7F2EB49304F1481EAD408A7290D7799EC4CF44

Function 01A2D4CC Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2337313682.0000000001A2D000.00000040.00000800.00020000.00000000.sdmp, Offset: 01A2D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1a2d000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bd9b4d30f48b2cd90899469f491d766e7b927244067d878af72a1cd0bee4815c
Instruction ID: dbdaff07b2b6d5d83c725629efcd47e5841fb68bdbe0c0bcb5a588540d2a1e82
Opcode Fuzzy Hash: bd9b4d30f48b2cd90899469f491d766e7b927244067d878af72a1cd0bee4815c
Instruction Fuzzy Hash: A32103B1504240EFDB05DF6CD9C0B26BF65FB98328F24C569E9090A257C376D456CAA1

Function 03717EE0 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2338758874.0000000003710000.00000040.00000800.00020000.00000000.sdmp, Offset: 03710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3710000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb454eb39b0bb8993159b4d9b2c2ed7fdbec7abba6a780b8e18614b151b44782
Instruction ID: 297e626ca19dcebce53c37064d8f912377271712af6a2f864c61599ccddc3beb
Opcode Fuzzy Hash: bb454eb39b0bb8993159b4d9b2c2ed7fdbec7abba6a780b8e18614b151b44782
Instruction Fuzzy Hash: B8312575904208DFEB08EFADC1487AEBBF6FB49305F10C4A9D425A3280DB784A86CF51

Function 06D8B8ED Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 05adf1fe162ba52912dbdae192a8460d1ba20f107e21081da50e2b5d8e23f8e7
Instruction ID: 17e50431da19c849557611427ea1513f77ced79b2b8e11dbf4959aa09daac8e6
Opcode Fuzzy Hash: 05adf1fe162ba52912dbdae192a8460d1ba20f107e21081da50e2b5d8e23f8e7
Instruction Fuzzy Hash: 8031C174914268CFDBA4DF19D889BE8B7F2EB49308F1481EAD408A7290C7789EC4CF44

Function 01B7D01C Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2338276916.0000000001B7D000.00000040.00000800.00020000.00000000.sdmp, Offset: 01B7D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1b7d000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7aa57359c5cbbaaea0e842d92fd6bff5c23e5179debd8e1bf211fda17d528779
Instruction ID: 711a91af3123073a3a6e5d7bf971357db930872c191d221d69249443a7a5f767
Opcode Fuzzy Hash: 7aa57359c5cbbaaea0e842d92fd6bff5c23e5179debd8e1bf211fda17d528779
Instruction Fuzzy Hash: 3C2125B1104240DFCB1ADF58D9D4B26BF65FF88394F24C6ADE9090B242C336D406CBA2

Function 06D8BB8D Relevance: .1, Instructions: 73COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0330eacd0df2256c963f910635cef660019eafeeb1237140b464d7f8a7b5a74a
Instruction ID: c1cf2f0fcba2c2781504f8f246d1de18ab6d4444a666699cc3aff2fba3560ccb
Opcode Fuzzy Hash: 0330eacd0df2256c963f910635cef660019eafeeb1237140b464d7f8a7b5a74a
Instruction Fuzzy Hash: 5931D274915228CFDBA4DF19D889BE8B7F2EB49314F1485EAD408A7290C7789EC5CF44

Function 0674C5A8 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21acb6a6b5cd00faeadd5ff4506766d83a377d7a35dae8225203622048664e69
Instruction ID: d1c6468d7c757f0b78ca8d60c10990e917f9d466469e0d735710e62851bbe54b
Opcode Fuzzy Hash: 21acb6a6b5cd00faeadd5ff4506766d83a377d7a35dae8225203622048664e69
Instruction Fuzzy Hash: 4F212635A40208CFCB45DF98C984AEDB7F2FB88300F2045A5E405BB2A1DB71AD40CBA5

Function 06749E60 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 81c09676965a3f9c8a3b87e83d89bc8f5abc68c1f02f892e84f806ad1c79e260
Instruction ID: 6a9f1800a9aa666b4ed37452e8de6ab94973bfcb0f942a0713328464a3bd1a83
Opcode Fuzzy Hash: 81c09676965a3f9c8a3b87e83d89bc8f5abc68c1f02f892e84f806ad1c79e260
Instruction Fuzzy Hash: 64212774E05209DFCB54EFA9D0896BEBBB5BB88300F10C1AAE515A7244D7349981CF90

Function 06D8B10F Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 20869fa869803fec5c5ff03f16cdf2bc39972881ed901172f901901ffc9ff047
Instruction ID: a13a5b3e8e583b2cccff568f2605dc9ea185b03d19a32dd42794e03c0f023fa5
Opcode Fuzzy Hash: 20869fa869803fec5c5ff03f16cdf2bc39972881ed901172f901901ffc9ff047
Instruction Fuzzy Hash: 3E31FC74A042288FDB94DF29D898BAA77F6FF89304F1041EAE549A7384DB345E81CF45

Function 06D8B68E Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8f7832476c703604b94362faf7a708bd8f0d9704d86598594916cae09660b3b0
Instruction ID: 038ff6e692087fd1ea0c6d4fc87d4334c68dcdc1817535794882178afc542c84
Opcode Fuzzy Hash: 8f7832476c703604b94362faf7a708bd8f0d9704d86598594916cae09660b3b0
Instruction Fuzzy Hash: D231C274918228CFDBA4DF19D888BA8B7F2FB49304F2485EAD408A7290D7749EC5CF44

Function 06D8C78F Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5380fdfee5215bb7804e88b33e02d775ec6abd4f85cbbe40ed0c4f73d8fd947b
Instruction ID: c6eb18221ced4dd643e2563f1920973c0f6e40c5249c9097eb89eb87c5487266
Opcode Fuzzy Hash: 5380fdfee5215bb7804e88b33e02d775ec6abd4f85cbbe40ed0c4f73d8fd947b
Instruction Fuzzy Hash: C431F974A102288FCBA4DF29C855BAAB7F5FB8D314F5080EAE54997340CB345E81CF85

Function 06D83570 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 98b4bd43234c53e3d7e07acde5b44245b0c4d0b9524393abc29065772dba4252
Instruction ID: 97e57f4222b91c0761d4fd1e70bc1b0a7465d0516575d4841157e24ae6d561ed
Opcode Fuzzy Hash: 98b4bd43234c53e3d7e07acde5b44245b0c4d0b9524393abc29065772dba4252
Instruction Fuzzy Hash: FB21CD34B006048FC754EF28D888AAEBBB6FF89610F144469E512DB3A1CB30ED45CBA1

Function 01B7D006 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2338276916.0000000001B7D000.00000040.00000800.00020000.00000000.sdmp, Offset: 01B7D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1b7d000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f01f5b5f18ef4f1e5f4a386b369f6ac64056046f89cd79e64f77b843cb49473a
Instruction ID: 7b9a18ba2cc79823b73fc9939cebaba2863e4fb69649ae764cd6b85d932cc292
Opcode Fuzzy Hash: f01f5b5f18ef4f1e5f4a386b369f6ac64056046f89cd79e64f77b843cb49473a
Instruction Fuzzy Hash: D321AF714083808FCB07CF14D994B16BF71EF8A214F2981DAD8458B257C33AD81ACBA2

Function 0674C5A7 Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7c9d7e79cbe9a85bc15eb01480fb7f70992ceaecf61208594c6784286e961a43
Instruction ID: 638b3c1cd5b7af1d0fc48e663f79c30db0a061c94a8f74b92f4a4e22ad7979fe
Opcode Fuzzy Hash: 7c9d7e79cbe9a85bc15eb01480fb7f70992ceaecf61208594c6784286e961a43
Instruction Fuzzy Hash: 57211675A40208CFDB45DF64C984AEDB7F2BF48300F2095A9E405BB2A1DB75AD40CBA5

Function 06D8B35C Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 452858b45a225129ea975cf3867484af77fa0c2b09fe933bdf40cc34a17e6a33
Instruction ID: c702c67d258b9eff5aebc0cf5a1bc2f68f02d629654cffba291b24984182a455
Opcode Fuzzy Hash: 452858b45a225129ea975cf3867484af77fa0c2b09fe933bdf40cc34a17e6a33
Instruction Fuzzy Hash: D031EBB4A04218CFDBA4DF28D888BA977F6FB89304F1042EAE549A7351DB355E81CF45

Function 06D8C52B Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f5fce80f595103b5971d3fb072c7c53dd44a79990a41f881e6490cebee8812b3
Instruction ID: 5722ae71cf2dc5c915395f2103dbfd7a9b91cd70276bee3ae774b7f2b4198d98
Opcode Fuzzy Hash: f5fce80f595103b5971d3fb072c7c53dd44a79990a41f881e6490cebee8812b3
Instruction Fuzzy Hash: 0531E374A10228CFDB65DF28C859BE9B7F5FB48304F4080EAE549A7240CB749E80CF84

Function 05764631 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c00af231b6fe23b9a58d71675879a1deca861322e013135720c5e4b7abd151ac
Instruction ID: 4e2eea9f8ed6f7b8180336f2b6ec79896f3956985de0db184e62aac6c72caeec
Opcode Fuzzy Hash: c00af231b6fe23b9a58d71675879a1deca861322e013135720c5e4b7abd151ac
Instruction Fuzzy Hash: 9F1104304092489FCF05DFA8C98569A7FBAEB07210F1481EAD906D7352D6724E00BF56

Function 06D83580 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e415841ad43191b61e70561aa094ed6ae657b0e60621846de7586e79fa7d46bd
Instruction ID: 93c69d198a5a4a7101b28f32394c45e1e1fe528886847c193aa480ca94c36eaf
Opcode Fuzzy Hash: e415841ad43191b61e70561aa094ed6ae657b0e60621846de7586e79fa7d46bd
Instruction Fuzzy Hash: 17119A34B106048FCB54EF68D888AAEB7F6FF89710F144569E6169B360DB30ED05CBA1

Function 067491DB Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cd3b38525157d23f591ccef4b06bd3f556b7ca089d32aee4beae8e6c0bd73324
Instruction ID: ba056c719f8ce78496a40f33357b9826a5bcfd3653a49888a9c860919ad79f2f
Opcode Fuzzy Hash: cd3b38525157d23f591ccef4b06bd3f556b7ca089d32aee4beae8e6c0bd73324
Instruction Fuzzy Hash: 8D117330C4E388DFD7EAFBA88C4E2BA7FB59B03200F5845DAC79596162EB344945CB51

Function 0371D068 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2338758874.0000000003710000.00000040.00000800.00020000.00000000.sdmp, Offset: 03710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3710000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 16228775c584e0113a65b110a49212817fb4505b5b4ed21c27c20b6a30015974
Instruction ID: 98c9d6ac408e59e65c02d392c4edd37c11831599eba4cda70bdef0b6cfc6bcef
Opcode Fuzzy Hash: 16228775c584e0113a65b110a49212817fb4505b5b4ed21c27c20b6a30015974
Instruction Fuzzy Hash: 9C11F376D0411DCFCB24DFAAC8456FEBBB6EB88310F14842AD509B3204DB355A56DFA4

Function 0674B090 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 605c6a66a653a6658e48608a8ed9d7eea21053f5de570ba035e586d6b7a5c287
Instruction ID: 17ed85f51906f4f158e39899ab7e3bf20e9d21373eb616001f4ca33efcb87d5e
Opcode Fuzzy Hash: 605c6a66a653a6658e48608a8ed9d7eea21053f5de570ba035e586d6b7a5c287
Instruction Fuzzy Hash: 73111FB2A00118AFDB15DF95D884CDEBBBDEF48650B154166E515E7210D630E905CBA0

Function 05763051 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8dc521570d60c830095e49ac91079c31e73a36094bd5c123165646871fcb683b
Instruction ID: 383128e246f6b9f24e37a9e43721c765274a9bc380652591b23ae8304bfd08c6
Opcode Fuzzy Hash: 8dc521570d60c830095e49ac91079c31e73a36094bd5c123165646871fcb683b
Instruction Fuzzy Hash: 63113A74908208EFCF01CF98DA409ADBFB2EB49310F24C5AAEC1997351C7328A56EF51

Function 01A2D4C7 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2337313682.0000000001A2D000.00000040.00000800.00020000.00000000.sdmp, Offset: 01A2D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_1a2d000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d470e05bf275f9961b8f2d54e60ae5f944f02dbb38b852c854ecf385a2209709
Instruction ID: 066a4cd3c682839f1ff234dc6af019de3d6c81ba0d8a5dd13dd45802fe00d99e
Opcode Fuzzy Hash: d470e05bf275f9961b8f2d54e60ae5f944f02dbb38b852c854ecf385a2209709
Instruction Fuzzy Hash: 2E11E676504240CFDB16CF58D6C4B16BF72FB84314F24C6A9D9094B657C33AD45ACBA1

Function 0576244F Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8a88c4ef5f170d923f73a025cb59dfa3388fd86b315b79d7d1a1a1227f86651c
Instruction ID: 12190b1eedd9c7092af81e743b84a5f4ce5649c6699aad61912fc77b6d97ce71
Opcode Fuzzy Hash: 8a88c4ef5f170d923f73a025cb59dfa3388fd86b315b79d7d1a1a1227f86651c
Instruction Fuzzy Hash: 7E21D578D04229CFDBA4CF58C894BECBBB2FB49301F1181A9D419AB291DB745D89DF01

Function 06D8B25F Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e593fc806954f162a069e3d931ac3903dbc28946f038a5b597192ad522220636
Instruction ID: af1d8838bf8a7f8ed12cd5e96b3ceaf228d12be127ef7fd9318fae8fd6c836c2
Opcode Fuzzy Hash: e593fc806954f162a069e3d931ac3903dbc28946f038a5b597192ad522220636
Instruction Fuzzy Hash: 5C211A78A042288FDBA4DF28D888BA977B6FB49305F1041EAE40D97350CB345EC5CF41

Function 06D83D99 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 943bc3b632e6d60a6da6daf3fcce13a052ef2d5e2a6c4ea8ac8b6216d13ea4af
Instruction ID: f3fe8414b1977d1652b7e4805bb0fa0890c34a4acc1a86153b8785a023af378b
Opcode Fuzzy Hash: 943bc3b632e6d60a6da6daf3fcce13a052ef2d5e2a6c4ea8ac8b6216d13ea4af
Instruction Fuzzy Hash: 5E01C0307007408FC76AAB34C858A2ABBB2EBC5710F15456DD5A68B3A1CB34DC02CB90

Function 06D818A1 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7688909c80e93a481b64cff2b6c22a2ba115208f49658f6edb9e9563d500f3e7
Instruction ID: d3eab17de8b4b83c5af01782c1ab006b0f10739c051526b767b745148fc44e1e
Opcode Fuzzy Hash: 7688909c80e93a481b64cff2b6c22a2ba115208f49658f6edb9e9563d500f3e7
Instruction Fuzzy Hash: 37015A753006109FC3169B24D42896ABBB3EB89651B10856AE94ACB7E5DB31EC02CBD2

Function 06D8680F Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: da391bb89bae4cfcbfbd7ed9777912c0aabbf26c4a1c888320c02b68812634f4
Instruction ID: 2af3b47b748902677034a53bfe6f0b9939bf849eb46848a72cdc346e93804a78
Opcode Fuzzy Hash: da391bb89bae4cfcbfbd7ed9777912c0aabbf26c4a1c888320c02b68812634f4
Instruction Fuzzy Hash: D9019631A0A7C09FCB56D76499944AABFB1DF4731471984DFD09ECB093C235E81AC792

Function 06D86DBF Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d0784ffadcbafab4e834516834f4c682590460905e8be1ae163731085dbf3304
Instruction ID: 37cda920bae6a3c982e3333a1d83bbdf528f4b949e99b0f1a78da5e222bbe79b
Opcode Fuzzy Hash: d0784ffadcbafab4e834516834f4c682590460905e8be1ae163731085dbf3304
Instruction Fuzzy Hash: 0211C431E04658AFCB01EF69D9088DEBBF5FF8A711B20815AE155E7350E7309A05CB91

Function 0674D740 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 626bd727da857a5517adb368ac8a348418c0f0926401a8f12f070852b34dcda2
Instruction ID: 79069d67d51aab272128c0713b5f84034750d23376d6e4a303d67b52ebe7caab
Opcode Fuzzy Hash: 626bd727da857a5517adb368ac8a348418c0f0926401a8f12f070852b34dcda2
Instruction Fuzzy Hash: 44F02831B0D3A05FDB632A394C19029BFA4EF8665078588BFE8C6CB242C6184C06C3A1

Function 06D8AF3C Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2c4e7a3cc094241ab7954f7630508d23cfb4737d41471729697a3cc45d78cd4f
Instruction ID: f77dceff5017dc1b0a6d159a4ff5b71206e440bc7317e1bb6455f82d641bebbc
Opcode Fuzzy Hash: 2c4e7a3cc094241ab7954f7630508d23cfb4737d41471729697a3cc45d78cd4f
Instruction Fuzzy Hash: 511193B4919228CFDBA4DF18D88CBA9B7B2FB5A305F1052D6E449A7250D7359E80CF44

Function 06D8EC72 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 12e04d8d17094537728ff25a8ede38f7af19e27ab70e77ab90437b0616c61f6e
Instruction ID: 1853f02c162dcdb4187993f379eae553ff6cb936eb268f8fa21b3e0009265b43
Opcode Fuzzy Hash: 12e04d8d17094537728ff25a8ede38f7af19e27ab70e77ab90437b0616c61f6e
Instruction Fuzzy Hash: 6B116DB4A402448FDB94DF65DC85BAEB7F1FB88200F00919AE419A7351EB34AE46CF41

Function 0674DF41 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9672616293c1a5d2f63a22174c333cd118e28e6fdd3edab1e0bd18f34306c97b
Instruction ID: 8f693482ec1285357beb87d0854e6bd82d68a81cb36350ae29d941c3dd914563
Opcode Fuzzy Hash: 9672616293c1a5d2f63a22174c333cd118e28e6fdd3edab1e0bd18f34306c97b
Instruction Fuzzy Hash: 0FF02835711108AFCB286A29D854DFABBAAEFC9360F048069F815C7361CF305C16C7A1

Function 06D83DA8 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8309012373c8a8f2d0f915267151dd54188f73e8680bc87872a42ad07f49d9eb
Instruction ID: 8251299a257787d9a4a622f0d5acb0088293035ca82dc8fc272dec12b5f4f043
Opcode Fuzzy Hash: 8309012373c8a8f2d0f915267151dd54188f73e8680bc87872a42ad07f49d9eb
Instruction Fuzzy Hash: AF01BC307006009FC769BB64D848A2B7BA2EBC9720F14862CE5568B7A0CB71EC02CB90

Function 06749910 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6330f0e64c398810c9bd658cabbfc79efb11f31be14e55002710753755386cb5
Instruction ID: 94d5c5f359256a4ae7b6f1e5a8677b8657316cd69b36960af4ef9182032d4bf5
Opcode Fuzzy Hash: 6330f0e64c398810c9bd658cabbfc79efb11f31be14e55002710753755386cb5
Instruction Fuzzy Hash: 6E0128B0D09248EFCB85DFA8D9456AEBBF4AB49300F1084EAE849E3350E7314A40DB52

Function 05761711 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aed4013e7f356e35c288d076883f0258f2e49724217dcd86f74f64a46c316222
Instruction ID: e5cfa186c7c2970d32ac79d1742c7faf2bca0ee7ac3a429d07a94c4d4169196c
Opcode Fuzzy Hash: aed4013e7f356e35c288d076883f0258f2e49724217dcd86f74f64a46c316222
Instruction Fuzzy Hash: 66018F3180420A9FCF019F94D8058EEBF35FF49310F40C55AEA4477211D331A556DF92

Function 06D8FE68 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 48502b5c4168c969f4bf68e52c0200fdf299b84f986a1f8ca07ecc8aad37b4be
Instruction ID: 167446a5804f1e55ce873d0cf044b45b02705c5fa5a21628ecd51ee3f36a5937
Opcode Fuzzy Hash: 48502b5c4168c969f4bf68e52c0200fdf299b84f986a1f8ca07ecc8aad37b4be
Instruction Fuzzy Hash: 07016D70E05208EFCB91EFA8C8545ADBFB5EB49200F1085DAD848D7352DB355A15DF91

Function 06D8F870 Relevance: .0, Instructions: 42COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3c0b30f5dde70c3a5d644d40b5f5f54ca6f547c005d896c8eb1d7bf16e3cfcd3
Instruction ID: fdc80ba2492a76fa1ee1824b3823814ac769dae4a8a155ba911267f6d884d6a1
Opcode Fuzzy Hash: 3c0b30f5dde70c3a5d644d40b5f5f54ca6f547c005d896c8eb1d7bf16e3cfcd3
Instruction Fuzzy Hash: 9401AD74E0924CDFC750EFA8C9454ACBFB4EB49300F1485DAC84997352DB319A15DF82

Function 03710AF9 Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2338758874.0000000003710000.00000040.00000800.00020000.00000000.sdmp, Offset: 03710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3710000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 73ff887afe3ea371cc491c23278bf7cdda788b789732f487bdc7e378abf9613e
Instruction ID: ac46383b6f534209dc5059830f228ad20a88f755f72692fad6d5470b40b83008
Opcode Fuzzy Hash: 73ff887afe3ea371cc491c23278bf7cdda788b789732f487bdc7e378abf9613e
Instruction Fuzzy Hash: DF010436B005158FCB04DF69D994AADB7F2FF88714F15809AE006AB371DB349D568B80

Function 03710898 Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2338758874.0000000003710000.00000040.00000800.00020000.00000000.sdmp, Offset: 03710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3710000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5728c216581851943b87d980f1195a67a4a62d2c584e3b074b9656ce14070423
Instruction ID: 001dde5c9811c140a7f7c2b9ab0aea17694b6afabb33daf2b952f5dd46c370b7
Opcode Fuzzy Hash: 5728c216581851943b87d980f1195a67a4a62d2c584e3b074b9656ce14070423
Instruction Fuzzy Hash: 7AF0F6727047151FC706973D885056F77AAFBC6A60319456AD844DB340FF24ED158BE1

Function 06D81628 Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 577509ac8515fa08df0c9ad8e90eeec3bc402005210964122aac8508c1c8af9b
Instruction ID: 728ae216df0b92acb754f60d815afbee388b461af506d7829ead80110d957656
Opcode Fuzzy Hash: 577509ac8515fa08df0c9ad8e90eeec3bc402005210964122aac8508c1c8af9b
Instruction Fuzzy Hash: DA0119353006009FC3259F25D898D2ABBB6FF89711B1544AAEA96CB3A1DA32DC41DB91

Function 06749E5B Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4d67cd5129e5a4429fb1de7c276a6ee57e343a1d5b755126dceb89c0191d96ab
Instruction ID: ecfda62e4739e6e88bc9a0d7704d2c100dc26415fe400d6eab519e5a19e63d8f
Opcode Fuzzy Hash: 4d67cd5129e5a4429fb1de7c276a6ee57e343a1d5b755126dceb89c0191d96ab
Instruction Fuzzy Hash: AF010874D052499FDB54EFA9D5856AEBBF5BB88300F54C1AAD508E3204DB354A81CF80

Function 06D8C569 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 19a59e00db0d1c42d542a5bc3402d2a0017778780cae9b321bd71b98ddec77ea
Instruction ID: dc885f0f59367607844f9439ccf7341e9a1601a322fc4a7ebde1325599767f72
Opcode Fuzzy Hash: 19a59e00db0d1c42d542a5bc3402d2a0017778780cae9b321bd71b98ddec77ea
Instruction Fuzzy Hash: 6B111FB8A00228CFDB55DF28C995B9A77B5FB88304F1080EAD64DA3344DB345E82CF44

Function 06D818B0 Relevance: .0, Instructions: 39COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 819cd6eda420aafbff423210fb40a03ef358a698680867d3228f082ec6404987
Instruction ID: 75b9b3f7881d3b604abd247b92eb96eda5344e6e023c028920b3527530f3d88e
Opcode Fuzzy Hash: 819cd6eda420aafbff423210fb40a03ef358a698680867d3228f082ec6404987
Instruction Fuzzy Hash: 860131753006149FC3059B25D45491EB7E3EBCC715B108169E906C77A4DF71EC02CBD1

Function 06D8DDEE Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 355305bc27c90cb67a7be30665cf974fc880692f13312f171d4c5eb98db57a78
Instruction ID: 515403490540390baa43bd01346f1dd8c3557b3f89c9df0a3817483d99e8a33d
Opcode Fuzzy Hash: 355305bc27c90cb67a7be30665cf974fc880692f13312f171d4c5eb98db57a78
Instruction Fuzzy Hash: F3111774A40108CFCB90DFA9E985BAE77F2EF88304F10906AE416AB390D734AD45CF41

Function 0674EE01 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a39f27e4314bef09c26a8027a65c182d6cfcac34ab36010ecb94f2ef77827d01
Instruction ID: 772786cd57278d3eeefef47843baa50c7c0173e2601aac262f89109a71a401ab
Opcode Fuzzy Hash: a39f27e4314bef09c26a8027a65c182d6cfcac34ab36010ecb94f2ef77827d01
Instruction Fuzzy Hash: D9F0E2302097A28FD763AB3458480957FF1AF4A12034548DAE0D2CB257DB248C46D761

Function 037108A8 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2338758874.0000000003710000.00000040.00000800.00020000.00000000.sdmp, Offset: 03710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3710000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 85cdbfb4513dca84d6013d4ba7b862bddf77a0752853e7548d7592319b2ba817
Instruction ID: 02d81400ca8863fbd092bcfcaa903d850bf157081a5b1ee7d6ca92b8b44c63aa
Opcode Fuzzy Hash: 85cdbfb4513dca84d6013d4ba7b862bddf77a0752853e7548d7592319b2ba817
Instruction Fuzzy Hash: CCF0E2727006251BC705E67D985056F33DAFBC5660304852ED809EB300EF68ED5147E0

Function 03710820 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2338758874.0000000003710000.00000040.00000800.00020000.00000000.sdmp, Offset: 03710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3710000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0d079b4a1cd5db5fda8d32a2c50d1d82b2b22ab7accfae87179932be1f3736bc
Instruction ID: 693aa6bdb83aa587e5cf0d8196b089ec679bb31333766b2f05e3037687646512
Opcode Fuzzy Hash: 0d079b4a1cd5db5fda8d32a2c50d1d82b2b22ab7accfae87179932be1f3736bc
Instruction Fuzzy Hash: A6F0E2319092589FCB05DB7CE8A02CD7FB4EF4A225F1809DAD444DB211EA355E05D7C6

Function 0674D7A9 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c1c5eeaad2270412ac1969bf0aa73ed1e6c7359803a0a73acc0d91a8e3c83acf
Instruction ID: f2a2e266cdf1278eafd13bc0ced055cf0e7ab8ee6071fd55ec7df9d8ba31a31e
Opcode Fuzzy Hash: c1c5eeaad2270412ac1969bf0aa73ed1e6c7359803a0a73acc0d91a8e3c83acf
Instruction Fuzzy Hash: BBF027313043055FC7159A2ADCC4C4BFF6BDFC1320300893AF14A8B226DE705C4A8790

Function 05762341 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d9bc02f9c69a95e69bb6005c92973b2148d4fb88035e652c4a41567c785c9776
Instruction ID: 8303442c198c27630ecd5c5efdb1776ca5b33b2caa7d93479149f82c02c0bc2c
Opcode Fuzzy Hash: d9bc02f9c69a95e69bb6005c92973b2148d4fb88035e652c4a41567c785c9776
Instruction Fuzzy Hash: DFF0903880824CEFCB41CF95C940AACBFB5EB4A310F0481EAED0597252C3324A25EF41

Function 06D8F4AB Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8f258ca2ce205d0bb3c5898dafc7904d1ca0a1b17ef12f5aee6ea2d835670797
Instruction ID: 2b5a5f317a91c3a797562ee30a6c77e7cb82af714c3015da026d93b4fe7f4a99
Opcode Fuzzy Hash: 8f258ca2ce205d0bb3c5898dafc7904d1ca0a1b17ef12f5aee6ea2d835670797
Instruction Fuzzy Hash: 07F05470909288AFCB41DF94C900AADBFF5AB59350F14C19BE869D3251C6368B51DF50

Function 05761720 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 72403c7f43ac13c4dd936598f3346f71bc8cb7015176b958de7aef09d4ee13bb
Instruction ID: 621cb6175bf15910268f8d4ea4631b261461220c1620523b5fb536574fa90bda
Opcode Fuzzy Hash: 72403c7f43ac13c4dd936598f3346f71bc8cb7015176b958de7aef09d4ee13bb
Instruction Fuzzy Hash: 13F0E73180461AEBCF01DF99D8049EEBB75FF89320F00C51AE95867210D732A5A6DF91

Function 06D81638 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 595ec0ca3bc15a24fc828de12a84fa4d69a8b28620ed7e474cc00e4fff361320
Instruction ID: 578ecce68a40264bb34327cdf5326026db8c15b27cd2d24b8d8e756c3152c891
Opcode Fuzzy Hash: 595ec0ca3bc15a24fc828de12a84fa4d69a8b28620ed7e474cc00e4fff361320
Instruction Fuzzy Hash: 58F054353002009FC314DF15D854D2A77A6FFC8711B114069FA56CB3A0DA31EC01CB50

Function 05762FB9 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ccd2bffa00ce144b833485fc26505090f985791a22149b0d3fc1085c4f746caf
Instruction ID: f980a1935ba8ff9ce7677f7dbab32b074bbb97107879879c7869be2ae0425306
Opcode Fuzzy Hash: ccd2bffa00ce144b833485fc26505090f985791a22149b0d3fc1085c4f746caf
Instruction Fuzzy Hash: 4EF082B8908209BFCB41CF94C8409EDBFB5EB5A301F14C0EADD4597352D2325A01EF55

Function 057634F1 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e08186af9eb065e7fd433a69015e46239d8d9f2320059bae33dc4938eb6135fc
Instruction ID: 9d4f9a855ae8a8deca9ba4037973f9b9de84192bd21189978ed0a73567f0ce0f
Opcode Fuzzy Hash: e08186af9eb065e7fd433a69015e46239d8d9f2320059bae33dc4938eb6135fc
Instruction Fuzzy Hash: 3AF0A03480D2089FCB17CBA4D8414BDBF76EB82316F5485EADC0957312D6324D02EB95

Function 057630A0 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 563199459caf64a7fd82a80773f151aa578f7024d9f8b1498675850d194a8687
Instruction ID: b2a8130d65c0bb793ead750f4e904d04d44286d36c83f04a179f5c8b6df2f113
Opcode Fuzzy Hash: 563199459caf64a7fd82a80773f151aa578f7024d9f8b1498675850d194a8687
Instruction Fuzzy Hash: 38F0F935909208EFCF01CF94D940999BFB2EB49310F14C5AAE90997356C2328A55EF51

Function 06D89839 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dd301abcf72790bf29dca2475e27b1c922a8ade1fe74d03e376e18674bd5e480
Instruction ID: 0c740fa3d643266161a871e8b370cab86e5e71cea78b4f52a14b454a62200337
Opcode Fuzzy Hash: dd301abcf72790bf29dca2475e27b1c922a8ade1fe74d03e376e18674bd5e480
Instruction Fuzzy Hash: C0F03A70D08208AFC741DFA9C8185A8BBF4EB49600F11C09AD898D7341D2359942CF80

Function 06749E00 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 94b0ad98e0040a91755ecc4f24b8d56fb283fbdd7842fcef19caf3ec7b8276e1
Instruction ID: 33d26ff3549d9745ca50594d7eafe57e7d3ebb68d6783e3cdaefabbbd9dce296
Opcode Fuzzy Hash: 94b0ad98e0040a91755ecc4f24b8d56fb283fbdd7842fcef19caf3ec7b8276e1
Instruction Fuzzy Hash: D0F03A30D08248DFD761EFA8C448999BFF4AF06200F5080DED894D3362D7319940CF51

Function 057632C0 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8a189239370d6e48013542c5d681b3dfb7de06433a84d1ad612872d28b000430
Instruction ID: cf4ff5903cd59354006099b48300f01ce11a24269565dedd039a297e31d6a487
Opcode Fuzzy Hash: 8a189239370d6e48013542c5d681b3dfb7de06433a84d1ad612872d28b000430
Instruction Fuzzy Hash: 19F05E74909248AFCB06DB94D5409ADBFB1EB4A310F14C5EADD4597352C2364A11EF54

Function 06748C85 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 579e36d78e42ac583b6a4d6852eb88d2be6e006fee589817a6ab57fe4cc67958
Instruction ID: 1de2e27ef0373713e6ee65a02f91bb47b477866dce6e7e41842ae27b9414d832
Opcode Fuzzy Hash: 579e36d78e42ac583b6a4d6852eb88d2be6e006fee589817a6ab57fe4cc67958
Instruction Fuzzy Hash: 2E01C978E01208CFDB64DF65E48CBADBBB2FB49304F0482A6E445A3250C7759981CF02

Function 06D8EEE0 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0c7a9c1c6069642520954cf4f87c01c263a818c882b70f87d12cf124b2a9db0e
Instruction ID: 4820d7400de67e8aa6ad832aa174eea2aad94ee98036fcd08e2beb11fb817854
Opcode Fuzzy Hash: 0c7a9c1c6069642520954cf4f87c01c263a818c882b70f87d12cf124b2a9db0e
Instruction Fuzzy Hash: BC0119B46812048FD794DB25D991FEA77F2FB88300F0091AAE409D7790EB359D85DF40

Function 06D8AE29 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3b155b89b899a33820c26ceca88289054017a32ae7f29c60bece40aaf466c5e9
Instruction ID: 56e7a64e6ad2523c697ae3b844572cf57491241a06a3a9ab955c4b7564e0d128
Opcode Fuzzy Hash: 3b155b89b899a33820c26ceca88289054017a32ae7f29c60bece40aaf466c5e9
Instruction Fuzzy Hash: 62F01C30A09248AFC751DFA4E8555ACBFB4AB85200F1484EED899D7282C6355A46DF51

Function 06D8DF9A Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 73f0bef88c3a821016fa4ff22611b78976e72b0fe121b22a9783dccc1a1eded5
Instruction ID: b328586e930cc4126ef67b3d7a84eaa61cba6af36e2142f48695c10982cb78b3
Opcode Fuzzy Hash: 73f0bef88c3a821016fa4ff22611b78976e72b0fe121b22a9783dccc1a1eded5
Instruction Fuzzy Hash: 93013174A401088FCB99DB29D952BEE77F2EB98300F0195AAA01A97380DB749D81CF51

Function 06D8EB54 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5b00f4fb043c0986a3a9fafa985023eb090d37ea6896f899e62ea8903cd9f954
Instruction ID: fe972390a0058e5c5feef05cacd47eb9f53be9e8a575cd0083f8ea2cbcce18d7
Opcode Fuzzy Hash: 5b00f4fb043c0986a3a9fafa985023eb090d37ea6896f899e62ea8903cd9f954
Instruction Fuzzy Hash: F001C9746402159FC794DF25D951BEA77F2EB88304F00D1AAD419A7754EE34AE81DF40

Function 06746B08 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f60a8c3aaf86bba900527249d7bd014021a59cd7402865024ef1d5f2177a7a9e
Instruction ID: 26b40b796e19ae8b112d4e8712a57a6fea09a494477baf44f1cd693f20991481
Opcode Fuzzy Hash: f60a8c3aaf86bba900527249d7bd014021a59cd7402865024ef1d5f2177a7a9e
Instruction Fuzzy Hash: 16E06570A09348DFC781EBB898497A97FB49B07300F2441EAE844D3691EB315A55CF51

Function 05760BD0 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e38e09644fd3224d1a683a7f6e9927ddd944a7a48eabf69947a62f4f3dbe81ac
Instruction ID: 5db5fe13d23e9c761059d37ad964bb6bcdf159e0bbb88527a5e68ef8abb4c53b
Opcode Fuzzy Hash: e38e09644fd3224d1a683a7f6e9927ddd944a7a48eabf69947a62f4f3dbe81ac
Instruction Fuzzy Hash: 6801DD78A012299FDB69DF64D994BACBBB2FB48300F10809AD919B7240DB306E809F10

Function 06D8EBE1 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9a0a9a79828c6063f83f9ff6884c07048663ee073a94400a3b1253d67f760fb8
Instruction ID: 1682ee42106df2998f42e45b12f2bc701178a31e84afaf896a5ddeac26595919
Opcode Fuzzy Hash: 9a0a9a79828c6063f83f9ff6884c07048663ee073a94400a3b1253d67f760fb8
Instruction Fuzzy Hash: 5EF03CB4A40204CFC784DF65E890BAEB7F1EB88300F10802AA416973A0EB30AD05CB81

Function 06746B50 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 332853c4f2eb9ac224e592d536c9a8f862b5561a904bf84c59efd9ac4f21ab9a
Instruction ID: a45e2647a15bf14b22bd755954205d27cfbcbf11b9b34b138f9428d22862ff61
Opcode Fuzzy Hash: 332853c4f2eb9ac224e592d536c9a8f862b5561a904bf84c59efd9ac4f21ab9a
Instruction Fuzzy Hash: 02F03070919248DFC741EFA8D849AA87FB4AF06301F6180EAE844D7362E3319D45CB51

Function 05764179 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9306d3e958e4f918f272e097cc039acbb62937ba1db26507dc79230c245a4cf6
Instruction ID: f41b42fbd69c8b5e0757364bbccc7441bf268bc2d3f0b8b416b7573a9297130c
Opcode Fuzzy Hash: 9306d3e958e4f918f272e097cc039acbb62937ba1db26507dc79230c245a4cf6
Instruction Fuzzy Hash: D7E0263401E204AFCB0BCF98D8C05EA7F7A9B62304B0041EECC0593352D6338E02EB51

Function 05763B09 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 90110b2bee65e1e4c3dff5776eced841c5e7482a930baba598b258f6a2ec7181
Instruction ID: 8a7071c6c1ca4336de4dac5c96d63917bf348bfc938747b92e287ec9a839cd6d
Opcode Fuzzy Hash: 90110b2bee65e1e4c3dff5776eced841c5e7482a930baba598b258f6a2ec7181
Instruction Fuzzy Hash: 0DE0923490D2449FCB02CF94E58056DBF75EB46320F2085EECD499B351D6324E46EF95

Function 06D8DCE2 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 94024c3989ab6af80ff323688503af14644a3164e0c1643de18efa41ce398e5c
Instruction ID: 2c34632491d6bb2a9f63566421eec9f10dedb6cf7ea5c2c9f5d63c1335cf7369
Opcode Fuzzy Hash: 94024c3989ab6af80ff323688503af14644a3164e0c1643de18efa41ce398e5c
Instruction Fuzzy Hash: 25F0F974A402088FC784DFA9D895BBE77F2FF99300B00912AE0169B394DB346C45DF81

Function 05761B9B Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 292ba7893d74c8635a0123ea3d121d9f02879de4ef37f6a7725e54c65d58565c
Instruction ID: ba499bc5e6931099c68af3772aeeb441f923d97af55a3c9d40f9f15ba16f9ab9
Opcode Fuzzy Hash: 292ba7893d74c8635a0123ea3d121d9f02879de4ef37f6a7725e54c65d58565c
Instruction Fuzzy Hash: E2F0B27690121DAFDF21CF50CD40FDEB7B9BB49314F1080D6AA09A7281D775AA89DF50

Function 05760CBA Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dd5c29fda3b30ef6c78467790e85055e9cfa992eb1c21b8feaa61f0db43099d0
Instruction ID: a30bc641b542ce3e7efc3b99f4abe04648caed534d483bcfb589468bf5de0e0e
Opcode Fuzzy Hash: dd5c29fda3b30ef6c78467790e85055e9cfa992eb1c21b8feaa61f0db43099d0
Instruction Fuzzy Hash: EB01BD789422299FDB65CFA4D848BEDBBB2FB08300F10819AD909B3280D7345E84EF50

Function 06D89B93 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c832f73f981f0e21262fab977c07a5b64447d8415a95e8f1358496e0184824fa
Instruction ID: f6b02cb2a6e2dc5257f7db96c9e59a197b0abf7423d814d621bfa95663e5d6bb
Opcode Fuzzy Hash: c832f73f981f0e21262fab977c07a5b64447d8415a95e8f1358496e0184824fa
Instruction Fuzzy Hash: 11F0E574C09248AFC700DFA8C4945ADBFB4AB49300F1080DAD8849B381D6369E01CF81

Function 0674D7B8 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 49a01f8c52754e6bbc0168395f78391f322cfd926e7c719f431197aa382c478d
Instruction ID: db8ebae2e7e0dcd32f8e8466a54e09a02a93cc57369b270727d117252d5da925
Opcode Fuzzy Hash: 49a01f8c52754e6bbc0168395f78391f322cfd926e7c719f431197aa382c478d
Instruction Fuzzy Hash: 60E01A713002055BC7149A2AE884C4BFB9BEFD03647109A3AA20A87625DEB0AD8A8791

Function 06D8F4B8 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 35580c4a5a2b35cf0d15841a50458a0d8996514ba41e811be0a1b96c26422296
Instruction ID: cd8f20ce6aae58c15ac7e067381281f805d1fd819d7e301d7e0575c15aff5e17
Opcode Fuzzy Hash: 35580c4a5a2b35cf0d15841a50458a0d8996514ba41e811be0a1b96c26422296
Instruction Fuzzy Hash: 2CF03074904208EFCB40DF98C544AADBFF8AB48310F14C09AEC5893341C6359A51DF50

Function 06746AC0 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e8d85b0fd2caee8e5ee8509af3f4fc5ad5930e0745c9894971e13530d3501827
Instruction ID: 56471c8fe7ac3cee59c11861810e0df86d952b996f08fb8b23d73fce2eb5c68e
Opcode Fuzzy Hash: e8d85b0fd2caee8e5ee8509af3f4fc5ad5930e0745c9894971e13530d3501827
Instruction Fuzzy Hash: 91F03974A49248AFC741EFA8D949A997FB4EF05300F1080DAD8448B361E7318A54CB92

Function 057630B0 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9d5b7ed739db04e0f5d8b149a6b5c22dfecbdada87b3008ee7ad0591289c8f5e
Instruction ID: 009e62ee7973790606085e80db91389a3d8736ba1c4b482bc9f8843a9001be2f
Opcode Fuzzy Hash: 9d5b7ed739db04e0f5d8b149a6b5c22dfecbdada87b3008ee7ad0591289c8f5e
Instruction Fuzzy Hash: 8CF09235904208EFCF05DF98D9409ADBBB6EB48310F10C599EC1957351C7329A65EF41

Function 06749268 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 315bf36a851fcedb8a33c9b301d0e36d075262cc8edfaad355992c724ee4eec8
Instruction ID: 7edae83b2bb916b274887cb00f9c09616cba1201fcfd1ca1378d08ae28a06412
Opcode Fuzzy Hash: 315bf36a851fcedb8a33c9b301d0e36d075262cc8edfaad355992c724ee4eec8
Instruction Fuzzy Hash: E9E01274E0D348DFD754EFA8D50969DBFB8AB46200F1441EADD45A3241EB314A44CB51

Function 05762350 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1de2704d155ca3b21bedc6335a3545eca67ed9d8717e97a6f519b2e5f08bbe5e
Instruction ID: 844a672009fffb4158590611a156e395fe79dd72a3053a99df354963f1bea50b
Opcode Fuzzy Hash: 1de2704d155ca3b21bedc6335a3545eca67ed9d8717e97a6f519b2e5f08bbe5e
Instruction Fuzzy Hash: 51F0A538908208EFCB45DF95D940AADBBB5BB48310F14C09AEC5466351C7329A61EF45

Function 06D8AA58 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e96777d0a0138b5bdc4436c12a4682d46573ed7edf5f08145945904ecf19473f
Instruction ID: 0a28b01252507695da17a6f39cc868bf76ec0fc3672f97c8ce9d2e8a3871e460
Opcode Fuzzy Hash: e96777d0a0138b5bdc4436c12a4682d46573ed7edf5f08145945904ecf19473f
Instruction Fuzzy Hash: A9E0923450D2859FC715DBA4CA059687F709B87218F1882CEC8988B292C6334D47CB40

Function 05760CB5 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c886d427b0fa843ed7d10f9b19d743c7617e6f120574433c20634a39160026f
Instruction ID: 8670600ed1e0a0daaa7a69031125faa38b26f8870bdd14aa35da45eb3bd5a488
Opcode Fuzzy Hash: 5c886d427b0fa843ed7d10f9b19d743c7617e6f120574433c20634a39160026f
Instruction Fuzzy Hash: 55F0AA78A422299FDB65CFA4D944BEDBBB2FB48300F10819AE909B3240D7316E809F50

Function 06D8FE78 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 051bb8596383ac1bef35ba3ce4c5636f37744e2a66aa3a5ae3be1ff043f6023a
Instruction ID: ea31409390a8fceb3c82a0788ea6dda08e117ef0330fa64e9adb0e18bcce75c1
Opcode Fuzzy Hash: 051bb8596383ac1bef35ba3ce4c5636f37744e2a66aa3a5ae3be1ff043f6023a
Instruction Fuzzy Hash: 2CE0E574E04208EFCB94EFA8D5446ACBBF4EB88300F10C0AAD808D3341D7329A42DF90

Function 06D89848 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 051bb8596383ac1bef35ba3ce4c5636f37744e2a66aa3a5ae3be1ff043f6023a
Instruction ID: e2e6e4fb21d73fde6518d3723db9cf6a48ec50c419bccc2b66b70990fa1dc2d0
Opcode Fuzzy Hash: 051bb8596383ac1bef35ba3ce4c5636f37744e2a66aa3a5ae3be1ff043f6023a
Instruction Fuzzy Hash: 76E0E574E04208EFCB84EFA9D5586ADBBF8EB48300F10C0AAD84897340D6329A42DF80

Function 05762FC8 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2004d59570c57b37e63152e218210e1f734e05a6a0e3a12e780d053d92601a09
Instruction ID: f0f5c7d3574c62b0a9355c3fe7a014779fd7e822662966eda2950664175123aa
Opcode Fuzzy Hash: 2004d59570c57b37e63152e218210e1f734e05a6a0e3a12e780d053d92601a09
Instruction Fuzzy Hash: B3E0E578908208BFCB45DF99D9409ACBFB5AB48310F10C0AADC4453341D6329A51EF80

Function 057632D0 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2004d59570c57b37e63152e218210e1f734e05a6a0e3a12e780d053d92601a09
Instruction ID: 57635026740f9ef49facc0e6b3107d73511ee5358bb098bb45728d0c7bbe98fd
Opcode Fuzzy Hash: 2004d59570c57b37e63152e218210e1f734e05a6a0e3a12e780d053d92601a09
Instruction Fuzzy Hash: AAE01A74D08208EFCB04DF99D5419ACFFB5EB89310F10C1AADC4453341C6329A51EF84

Function 06746AD0 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 48782688f239aff0dcb3b0089e5bb94b38ada5a3877b85b55e12d811331d98a6
Instruction ID: 09216c6e30b7f97b344d94e0cdeb8ebe0f37815a62c0ec710a5070348d05e763
Opcode Fuzzy Hash: 48782688f239aff0dcb3b0089e5bb94b38ada5a3877b85b55e12d811331d98a6
Instruction Fuzzy Hash: A5E09278A45618DFCB84EFA9D549AADBFF8AF09301F1080A9D80997361E731DA40DF51

Function 06D89BA0 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b4362e5ce60df33e76680d97f0a967d358646d83382bbf6a3576d93b2a506f58
Instruction ID: d70878690325243c774b79a66c4421dafb86c25410140cae5f0961feca0eb03a
Opcode Fuzzy Hash: b4362e5ce60df33e76680d97f0a967d358646d83382bbf6a3576d93b2a506f58
Instruction Fuzzy Hash: 2FE01A74D08108AFCB44DB99D5545ADBBB4AB89300F10C0EAD89857381C636AA41DF80

Function 06749278 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 11bc352046da9865e438db4c9f506b368e1705163390e3e8738b90edaa831e9c
Instruction ID: f400a62f2afca34902e03d4ac372361419f3f81ef9b2c9b46f9e8c13062eb617
Opcode Fuzzy Hash: 11bc352046da9865e438db4c9f506b368e1705163390e3e8738b90edaa831e9c
Instruction Fuzzy Hash: C3E0EC74E1920CDFCB94EFA8D5496ADBFB8AB05201F1041A9D90893340EB315A80DF41

Function 0371BE30 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2338758874.0000000003710000.00000040.00000800.00020000.00000000.sdmp, Offset: 03710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3710000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 115d837229bb8e66ada8637540ce74e7038e0429033737b0e2b1f189c7143252
Instruction ID: c0b465edcba92418da5d8456d168fff4e6a2e89f664edb039f3011287818bd12
Opcode Fuzzy Hash: 115d837229bb8e66ada8637540ce74e7038e0429033737b0e2b1f189c7143252
Instruction Fuzzy Hash: ABE08C71401208ABCB00EFF9C50668EBFB89B09211F0084A9E404D7100EF324A40EF91

Function 05763B18 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 11b9fa34370780dd7db2c5a6a9873676f54b2dd7e100813d46a1f5f62f922de1
Instruction ID: d5cff600ccc375d344d94fcf59eb30a25a168753cb14cf67904b203e84e2d974
Opcode Fuzzy Hash: 11b9fa34370780dd7db2c5a6a9873676f54b2dd7e100813d46a1f5f62f922de1
Instruction Fuzzy Hash: 06E01234909108DFDB04DF94D5419ADBBB9EB45314F20C59DDC0957345CB329E42EF85

Function 05763500 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 11b9fa34370780dd7db2c5a6a9873676f54b2dd7e100813d46a1f5f62f922de1
Instruction ID: b84f0c5c92369006519a4844e30b9ea2654d8100e6d2d9b444804ec0173af835
Opcode Fuzzy Hash: 11b9fa34370780dd7db2c5a6a9873676f54b2dd7e100813d46a1f5f62f922de1
Instruction Fuzzy Hash: 06E0C234908108DBCB04DFA4D5409ACBBB4EB45301F10C0ADCC0813341C7329E42EF80

Function 05764640 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 11b9fa34370780dd7db2c5a6a9873676f54b2dd7e100813d46a1f5f62f922de1
Instruction ID: 0260ed917a69d06a144cbf21126674cdb1c08eaec814ff45e515d2ba5aca99e2
Opcode Fuzzy Hash: 11b9fa34370780dd7db2c5a6a9873676f54b2dd7e100813d46a1f5f62f922de1
Instruction Fuzzy Hash: 79E01234909108DBCF08DF94D5819ADBBB5EB45314F10C19DDC1957345C7329E42EF91

Function 06D8AA68 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 143bc84b8da1ca5907ea13695657c09908fd3ba0ff0004ebd03a15036a44617d
Instruction ID: 5f2708c9730e3294621bd2677a16ce48105b52e0db6aa9c5aa69092871870d7f
Opcode Fuzzy Hash: 143bc84b8da1ca5907ea13695657c09908fd3ba0ff0004ebd03a15036a44617d
Instruction Fuzzy Hash: 17E08C34908108EFCB04EF94D6449ACBBB8AB45300F14C09EC80817340CA329E42DF80

Function 0674CD58 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b5431237e0fde10392f3a85e8254a0a423cac1dc0624a4ac1d279606950ee2f1
Instruction ID: 446a588ef07daf1f386de07c2d1f3319d7b5ea455df2e76a744dfecff5ee3039
Opcode Fuzzy Hash: b5431237e0fde10392f3a85e8254a0a423cac1dc0624a4ac1d279606950ee2f1
Instruction Fuzzy Hash: 0FD02B30F097124FC753A238FC0405B3BE34F86310300887AE451C7211FE61CC864785

Function 06746B18 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 63212819a415363aa584885bd521e1831547c9d9ac8c194ad9fed94c786dacbf
Instruction ID: deecd6d0801c20843d43d2480b1aed587e8611a37bff38bd1f9452d3d9ab0005
Opcode Fuzzy Hash: 63212819a415363aa584885bd521e1831547c9d9ac8c194ad9fed94c786dacbf
Instruction Fuzzy Hash: 71E0EC74E15208DFDB80EFE8D5496ACBFB4AB45305F2081A9A84893740EB315A80DF41

Function 05762556 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9a0888ebf6cde4fcc8d3e6a662571f5367525e06f911af4a47cffe7932ae4f3e
Instruction ID: 1f9e7c215e26597a945a85ad1c30a4554033cb3de5a9c8c38d15422bc26a5689
Opcode Fuzzy Hash: 9a0888ebf6cde4fcc8d3e6a662571f5367525e06f911af4a47cffe7932ae4f3e
Instruction Fuzzy Hash: 8EF01578A0422DCFEB60CF28C959B9ABBB2FB08301F10C0D49409A7201DB309DC1CF50

Function 057619A2 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ee8c21da29bce4336904084f10ad0b1c0ca7a300e3e42e67061a33bb9ea2dac3
Instruction ID: 63ffd445702174f630cf981088f5be9bdc2b5eebbb9260534c9ff5110b4bafa7
Opcode Fuzzy Hash: ee8c21da29bce4336904084f10ad0b1c0ca7a300e3e42e67061a33bb9ea2dac3
Instruction Fuzzy Hash: 66E07E769142289FDB16CFA9C964BDABBF9BB4C340F0041D6E949A7244DB349A84CF90

Function 0371FCF0 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2338758874.0000000003710000.00000040.00000800.00020000.00000000.sdmp, Offset: 03710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3710000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d3ae4fc932ed4ea2575f9e1841a0977be7494412cd92fd01acf9deee0cf01d8
Instruction ID: 718094ed7f3ecab042a5e8c6562176893e9bf1bf9de40b11e5d449dcde33f6cf
Opcode Fuzzy Hash: 6d3ae4fc932ed4ea2575f9e1841a0977be7494412cd92fd01acf9deee0cf01d8
Instruction Fuzzy Hash: 94D05230509108EBCB04CA98E911AB9FBACEB86314F14819DD808A3341CA33AE12EF80

Function 05764188 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e36e169a3e0d89cc5b64cbbdf1f12daaea6e9d8bb42c2347d0021c493ad91e7a
Instruction ID: 5358a427d60e5eca2a56b27e19bc9ecb04a0111429e62783cb1469edf48ad9bd
Opcode Fuzzy Hash: e36e169a3e0d89cc5b64cbbdf1f12daaea6e9d8bb42c2347d0021c493ad91e7a
Instruction Fuzzy Hash: 5AD05E34519108DBCB18CA94D940A69BBAAEB46314F10809DDC0943341CA339D41EF80

Function 03710848 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2338758874.0000000003710000.00000040.00000800.00020000.00000000.sdmp, Offset: 03710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3710000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4ce344d3413a51566fae80a80093f93f2f447c1aa298dfef4affd2f271fb8af4
Instruction ID: c75dddb9aecd07b47d18abd0e4a11048374f84ecbab4b562781a94cae6e13517
Opcode Fuzzy Hash: 4ce344d3413a51566fae80a80093f93f2f447c1aa298dfef4affd2f271fb8af4
Instruction Fuzzy Hash: 0BD05B71A0410CEFCB04DFBCE94055DB7B5FB45211F104D99D408E3200DB315F009B91

Function 06749171 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6ea4facc519504a4439e95c6dfe65bacfeae075c7434386dfc7e5d4e5edd84ef
Instruction ID: e4898cd5d0f44bbe3a1f7815cb634a3edd6e977fed2b5774d8a31a89b4b7acc1
Opcode Fuzzy Hash: 6ea4facc519504a4439e95c6dfe65bacfeae075c7434386dfc7e5d4e5edd84ef
Instruction Fuzzy Hash: C4E0E234A0022CCFDF64EB64E8883ECB7B1FB88319F8085E5D24DA2140CB300A89DF41

Function 06D85AFB Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d930fccd0c80770203a4c873b00ac8888ee215113dc9040495dc140983b416b
Instruction ID: 7bb69c621b2e95f02956c38e703fc8eaa72c9761b09c8354945db6ef065409d3
Opcode Fuzzy Hash: 8d930fccd0c80770203a4c873b00ac8888ee215113dc9040495dc140983b416b
Instruction Fuzzy Hash: A2D0123200D3487FC3025A54DC148A77F69AB976007098093F1048B162CA659E55C7B2

Function 0371BC20 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2338758874.0000000003710000.00000040.00000800.00020000.00000000.sdmp, Offset: 03710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3710000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1b32f84e5dceafccb4127a991483566c6022c11458e29a5ef47eaa77bacdf7b0
Instruction ID: 44f0a415acc54dc07ea926d695f2ee20945a956f1378f507090248b21c257dd8
Opcode Fuzzy Hash: 1b32f84e5dceafccb4127a991483566c6022c11458e29a5ef47eaa77bacdf7b0
Instruction Fuzzy Hash: C5C08C30008A088FC390BFEAE90E7687FA8AB0131AF440111F2CC810206F794894EFAA

Function 067498C0 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 468e8f8eb92fb7371e87376a170a71f77023fddb1dc4c687014a1c4f2a307b30
Instruction ID: 746016191c738103762bd6cc8407111de534c2903a50945bc0a0a47886d40326
Opcode Fuzzy Hash: 468e8f8eb92fb7371e87376a170a71f77023fddb1dc4c687014a1c4f2a307b30
Instruction Fuzzy Hash: A8C00276E5001A9A8B00DAD9E8508DCB774EB94322B004026D215A6104D63015268B50

Function 067490FA Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: afa4fa779eb2c4df7def564e7810963e9c953d5f3e35c2f6f5867bf2a8b2cc50
Instruction ID: a4fbcab99efe7c81111c04ae5003aff19525c4ce13cb84894aa45e61c1c23425
Opcode Fuzzy Hash: afa4fa779eb2c4df7def564e7810963e9c953d5f3e35c2f6f5867bf2a8b2cc50
Instruction Fuzzy Hash: 98D0C57495622DCFEB64DF25D888B99BAB5BB09304F0082E9E84DA2241D7305A85CF11

Function 06D81610 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9145439845d19ed285ef8ed2e2731e53e84310996d3e08af64ba1494253e8755
Instruction ID: a5ced1602b898661de329531365079a034e3d75a808f59c5ffcbefa728424f66
Opcode Fuzzy Hash: 9145439845d19ed285ef8ed2e2731e53e84310996d3e08af64ba1494253e8755
Instruction Fuzzy Hash: 58C0927A140208EFC700DF69E848C85BBB8EF1977171180A1FA088B332C732EC60DA94

Function 06D81612 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 247014b2283d1247f15695b1c712a644ef39251bfe01b79e91a08de731ee6807
Instruction ID: df386b80834e05df8233f251f81bce15fb589bae1170117e3073fec460a75d2d
Opcode Fuzzy Hash: 247014b2283d1247f15695b1c712a644ef39251bfe01b79e91a08de731ee6807
Instruction Fuzzy Hash: 4CB0927A140004DFC700CF28E448CA47BB0EF6832131181A1F5088B231C332DC60DA00

Function 06D85B08 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 098abfc35cf9fe0e91a49ed1b0c9f53dd8cd691cd0490eb7874c1d829aedbc14
Instruction ID: ad4eeae20e30fcb0d4bc0c5d0d4e4f0d92279f689e78d4515d6ed5cfdca92abe
Opcode Fuzzy Hash: 098abfc35cf9fe0e91a49ed1b0c9f53dd8cd691cd0490eb7874c1d829aedbc14
Instruction Fuzzy Hash: 26B0923200420CABC701AA85EC0485ABB69AB58A50B048025F609061118B32A822DB94

Function 06D8392A Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ce219aee67b1d8d7819fc38249166831366ed58df027c4278644e8e8e9c6886f
Instruction ID: c942b1f065a030a52bf46b3cf25710f74ec13ac283428c3124b8af346e684668
Opcode Fuzzy Hash: ce219aee67b1d8d7819fc38249166831366ed58df027c4278644e8e8e9c6886f
Instruction Fuzzy Hash: DBB09276140104DFC700CF28E444CA47B70FF6832031181A1F5088B231C332D820DA00

Non-executed Functions

Function 03718019 Relevance: 2.7, Strings: 2, Instructions: 171COMMON

Download Yara Rule

Strings

4'fq, xrefs: 0371810A
4'fq, xrefs: 037180DF

Memory Dump Source

Source File: 00000000.00000002.2338758874.0000000003710000.00000040.00000800.00020000.00000000.sdmp, Offset: 03710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3710000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: 4'fq$4'fq
API String ID: 0-751858264
Opcode ID: eec7e9507160f2dc929926f81381020bcd71f26a283feb8eccca481d3cdb5f6c
Instruction ID: 5714cd893fb61057148a7144d49df8ab1493d16167802f442117bc75cdb573ce
Opcode Fuzzy Hash: eec7e9507160f2dc929926f81381020bcd71f26a283feb8eccca481d3cdb5f6c
Instruction Fuzzy Hash: F2711F74A016498FDB08DFAAE98469E7BF3FFC9300F14C52AD0049B268DF785945DB51

Function 03718028 Relevance: 2.7, Strings: 2, Instructions: 165COMMON

Download Yara Rule

Strings

4'fq, xrefs: 0371810A
4'fq, xrefs: 037180DF

Memory Dump Source

Source File: 00000000.00000002.2338758874.0000000003710000.00000040.00000800.00020000.00000000.sdmp, Offset: 03710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3710000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: 4'fq$4'fq
API String ID: 0-751858264
Opcode ID: 201a147bd26ea4e3b04795a3971ba7e12a2a54287165f03d147354ccf08438d4
Instruction ID: 18aac92f48763088ec61d6d80a94424e29706a1e542d23898d1c1616b5b6bae6
Opcode Fuzzy Hash: 201a147bd26ea4e3b04795a3971ba7e12a2a54287165f03d147354ccf08438d4
Instruction Fuzzy Hash: 10710E74A016498FDB08EFAAE9846AE7BF3FFC9300F14C52AD0049B268DF745945DB91

Function 06742878 Relevance: 2.6, Strings: 2, Instructions: 92COMMON

Download Yara Rule

Strings

&, xrefs: 06742947
8, xrefs: 06742E21

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: &$8
API String ID: 0-443267704
Opcode ID: 7d5915aa28e42f4f46bb86ee1a34cb27d5c7d029e78c947fd5920c8b35d1abcc
Instruction ID: 1bb0a498c2061a201d073189b6aef655cbf73fee3f2002019f40aaaf2a77558b
Opcode Fuzzy Hash: 7d5915aa28e42f4f46bb86ee1a34cb27d5c7d029e78c947fd5920c8b35d1abcc
Instruction Fuzzy Hash: C241AC71D056198BEB58DF2BC94869EFAF7AFC8300F14C1FA941DB6255DB300A818F44

Function 06E10040 Relevance: 1.4, Strings: 1, Instructions: 146COMMON

Download Yara Rule

Strings

+, xrefs: 06E101CC

Memory Dump Source

Source File: 00000000.00000002.2360879207.0000000006E10000.00000040.00000800.00020000.00000000.sdmp, Offset: 06E10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6e10000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: +
API String ID: 0-2126386893
Opcode ID: 0075ee4900db0d3e0cff4055767d8bc150366b91c6ed8f2bc827a87dcb2fba13
Instruction ID: ff627dd86aed53ebd71fa620340e47aac2352251a769376c96aab50c7116022e
Opcode Fuzzy Hash: 0075ee4900db0d3e0cff4055767d8bc150366b91c6ed8f2bc827a87dcb2fba13
Instruction Fuzzy Hash: E96158B5D056688BEB68CF2789447DAFAF3AFC8304F04D1EAD54CA6254EB740AC59F40

Function 06E10007 Relevance: 1.4, Strings: 1, Instructions: 131COMMON

Download Yara Rule

Strings

+, xrefs: 06E101CC

Memory Dump Source

Source File: 00000000.00000002.2360879207.0000000006E10000.00000040.00000800.00020000.00000000.sdmp, Offset: 06E10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6e10000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: +
API String ID: 0-2126386893
Opcode ID: 15af55320309789c4a9ab6b0c35e3740639887e456c56eae0d7cb447845ca651
Instruction ID: 580ab73c67184247db2628785b4ec2e1f1ecfbb0be69ac8b5b8fd5fe1bb79fd7
Opcode Fuzzy Hash: 15af55320309789c4a9ab6b0c35e3740639887e456c56eae0d7cb447845ca651
Instruction Fuzzy Hash: AA516C71D056588BE769CF278D442CAFBF3AFC9310F04C0FA954CAA215EB740AC69E50

Function 06742868 Relevance: 1.3, Strings: 1, Instructions: 70COMMON

Download Yara Rule

Strings

&, xrefs: 06742947

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: &
API String ID: 0-1010288
Opcode ID: 5a644818dd7208be9f8c7425c4e3e7906394b124c5a356ed117a57d20d3097d6
Instruction ID: 9cc1e267a4059ccca197f92a6e164c0369b9f046d42a3580122550423a8c675f
Opcode Fuzzy Hash: 5a644818dd7208be9f8c7425c4e3e7906394b124c5a356ed117a57d20d3097d6
Instruction Fuzzy Hash: 73319FB1E056598BDB5DCF6B894469AFAF7AFC8300F14C1FA9418B6215DB700A818F51

Function 06748448 Relevance: .4, Instructions: 431COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1b22aed144870380508ffe96c352dc52854b5525cd9b2eccbe4390bbd7798c4c
Instruction ID: 5e24f314c3b261abec2f68ef2832452e30c272f4be7999ce60e84e7f8c036a2a
Opcode Fuzzy Hash: 1b22aed144870380508ffe96c352dc52854b5525cd9b2eccbe4390bbd7798c4c
Instruction Fuzzy Hash: E212C771E046188FDB54DFAAC98069EFBF2FF88304F24C169D419AB21AD734A946CF51

Function 06DCCC20 Relevance: .4, Instructions: 354COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab8294a04c25c0119e25d65feb265c6a6442a01d9a32c019d42706bf4b719fe7
Instruction ID: 2b58605f78faa6476047f15cc9f11466f53c44feb7026d976103fcdd82708eb2
Opcode Fuzzy Hash: ab8294a04c25c0119e25d65feb265c6a6442a01d9a32c019d42706bf4b719fe7
Instruction Fuzzy Hash: 85E1D270D1021DCFEB64CFA9C881BDDBBB2BF49310F1095AAD409A7290EB749A85CF51

Function 06E1F940 Relevance: .2, Instructions: 215COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2360879207.0000000006E10000.00000040.00000800.00020000.00000000.sdmp, Offset: 06E10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6e10000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0e9623c535cb313fa15ed1a174afb2f738569c229f4079b6ab658fea6c9a3e48
Instruction ID: 415b3a9cdfdad42456bfb2f33b312b406fcbca579fc6320c43662d7a014e51c4
Opcode Fuzzy Hash: 0e9623c535cb313fa15ed1a174afb2f738569c229f4079b6ab658fea6c9a3e48
Instruction Fuzzy Hash: B681FEB4D05619DFEB44DFA9C9147EEBBF1FB89304F20A02AD40ABB244D7780A45DB94

Function 06748438 Relevance: .1, Instructions: 124COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c470e7908695a645a6513e1271e4eddea8ba7769209a741e4b245d5411ea3cfa
Instruction ID: 951176be93ab0902b2e84a3bd285630e0c743f4cc3e5400f34033368e8a0a500
Opcode Fuzzy Hash: c470e7908695a645a6513e1271e4eddea8ba7769209a741e4b245d5411ea3cfa
Instruction Fuzzy Hash: 1C4188B1E006198BEB18CFABC94069EFBF3AFC8300F14C17AD858AB264DB3059458F54

Function 06E1D590 Relevance: .1, Instructions: 114COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2360879207.0000000006E10000.00000040.00000800.00020000.00000000.sdmp, Offset: 06E10000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6e10000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 81f13abb1479aede5e1a4466f1d2748d8617d39754c13b8724409cea0faf88dd
Instruction ID: aea545e0c19f31fa1f689f237d8ab3fe5cbc5639359b16113fe2a2dec9705c36
Opcode Fuzzy Hash: 81f13abb1479aede5e1a4466f1d2748d8617d39754c13b8724409cea0faf88dd
Instruction Fuzzy Hash: D541FEB0D1034C9FDB54CFA9D985AAEBBF1FF09304F20A12AE819AB254D7749885CF45

Function 06DC8DF8 Relevance: .1, Instructions: 99COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4aa3c37e55d6f556ce3ea7a6e919c317bd23b0a570520442c7dd28f753765b62
Instruction ID: 5119dc3158899c0735ed2fbbd593770c27ca3fc62e86f9287ba85cd7a047ba1a
Opcode Fuzzy Hash: 4aa3c37e55d6f556ce3ea7a6e919c317bd23b0a570520442c7dd28f753765b62
Instruction Fuzzy Hash: AA411FB5C01259DFCB00CFA9D480AEEFBF4AB49320F24942AE404B7240C778AA45CFA4

Function 06DC8E00 Relevance: .1, Instructions: 95COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab78d256528b480758a290c6c8ae7550a1e9d6dc5e05d863ba32c9a62c424729
Instruction ID: a6a1be07bf58b1e0be01e58767fc53bfba2bb71b1b4a2bfb907d284e76503978
Opcode Fuzzy Hash: ab78d256528b480758a290c6c8ae7550a1e9d6dc5e05d863ba32c9a62c424729
Instruction Fuzzy Hash: 14410EB5D00259DFCB00CFA9D480AEEFBF4AF49320F24942AE414B7240C778AA45DFA4

Function 067410E8 Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 084417bd060d916b6c78bc815755e59bd3f7e8b8b7a9e8fae230ab7ae4cdad1b
Instruction ID: 68e06a2559423e7d0e5191415cec58940608706dae96c8deb1a954564130cf72
Opcode Fuzzy Hash: 084417bd060d916b6c78bc815755e59bd3f7e8b8b7a9e8fae230ab7ae4cdad1b
Instruction Fuzzy Hash: 1441F974D05658CFDB64EF6AC9087E9BBF2AB89300F10C1AAD80DA7254DB341A85CF40

Function 06DC15F0 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eef76ced17ef800fafc69e3e9cf6e090b63afad3aecdba2179b4c32b598544c9
Instruction ID: 7636b9c25dc107049a85e14d8ac1e5d3378134a013a1b643a81167d8c2c669f1
Opcode Fuzzy Hash: eef76ced17ef800fafc69e3e9cf6e090b63afad3aecdba2179b4c32b598544c9
Instruction Fuzzy Hash: 2431E3B1E056288BEB58CF9AC9007DDFBF6BF88310F14C1AAD408A7255DB344946CF84

Function 037185D0 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2338758874.0000000003710000.00000040.00000800.00020000.00000000.sdmp, Offset: 03710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3710000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 912000cecf7b7baf6f3261dc8175983ed176c40fbd88984e959ddebd582772e7
Instruction ID: 99d835d81aa680bedf0837ed7ad9497b24923877376af1f2fe380feaa951fb68
Opcode Fuzzy Hash: 912000cecf7b7baf6f3261dc8175983ed176c40fbd88984e959ddebd582772e7
Instruction Fuzzy Hash: 323188B1D116189BEB58CF6BC94578AFBF3AFC9304F14C5AAC44CAA264DB740585CF01

Function 037185E0 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2338758874.0000000003710000.00000040.00000800.00020000.00000000.sdmp, Offset: 03710000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3710000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3b53a2b31031fb17ba916cab563fb69a66048373ed1864b04de0cf4d40dfb22e
Instruction ID: ada5fec1870ee053f7ba9f71e4b0f3d8b0c1bb60df40a26a0a6aa22ec5b5cdde
Opcode Fuzzy Hash: 3b53a2b31031fb17ba916cab563fb69a66048373ed1864b04de0cf4d40dfb22e
Instruction Fuzzy Hash: B03188B1D016189BEB58CF5BC94478EFAF7AFC9304F04C1AAC40CAB264DB7405858F11

Function 06DC40F0 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: df5f6dfd6d57e48aa7bc31b5d2dcabca413cf2c2cad262d83dd7eaeb9bd02fe2
Instruction ID: f6473ee947d221fdf791a1eb98026f8df13d8874f8747ce0e0c5da220131358b
Opcode Fuzzy Hash: df5f6dfd6d57e48aa7bc31b5d2dcabca413cf2c2cad262d83dd7eaeb9bd02fe2
Instruction Fuzzy Hash: 2821D0B5D002089FCB14CFA9D981AEEFBF5FB59320F14901AE805B7210CB35A941CFA5

Function 06DC40F8 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359776875.0000000006DC0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06DC0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6dc0000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 21016f4108855a1711df3e6bca16ceb8c888780267aa4df921c610b6d10de4e4
Instruction ID: 052ba15492c15a55dd000400745662a7cf72e1b41d827de3b2812677f7c00a33
Opcode Fuzzy Hash: 21016f4108855a1711df3e6bca16ceb8c888780267aa4df921c610b6d10de4e4
Instruction Fuzzy Hash: 7F21BEB5D002199FCB14CFA9D981AEEBBF5EB59320F14901AE815B7210C735A905CFA4

Function 067410D9 Relevance: .1, Instructions: 55COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b717d31e4e2f8dbf57a0b9c1ddb9e1f32f68ba9fadfea553ca0fa8c4c8a58bd9
Instruction ID: ac45b4c08dd514191171520c67cbd34fc11e4bcfa6ed7f04267bb9894a5dfde9
Opcode Fuzzy Hash: b717d31e4e2f8dbf57a0b9c1ddb9e1f32f68ba9fadfea553ca0fa8c4c8a58bd9
Instruction Fuzzy Hash: 0F21BDB1D055588BDB69DF6B8D052D9FBF7AFC9300F14C4AAC45CAA225DB340985CF41

Function 06D84B03 Relevance: 5.2, Strings: 4, Instructions: 223COMMON

Download Yara Rule

Strings

(_fq, xrefs: 06D85203
(_fq, xrefs: 06D85239
(_fq, xrefs: 06D851B3
(_fq, xrefs: 06D851BD

Memory Dump Source

Source File: 00000000.00000002.2359582587.0000000006D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 06D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6d80000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: (_fq$(_fq$(_fq$(_fq
API String ID: 0-3776797759
Opcode ID: 45fc175457e24aafae48ca892505b44ae1ea2b91968c9aef33bba2e002d6e497
Instruction ID: b4e5fc0faca67ca8f2cc30696c466aea2b4e75f2d4885127184fea65dcbfc4c0
Opcode Fuzzy Hash: 45fc175457e24aafae48ca892505b44ae1ea2b91968c9aef33bba2e002d6e497
Instruction Fuzzy Hash: B481A375B00244CFC794AF78D8589AEBBB6FF8A310B1085ADE5459B361EB31DC41CBA1

Function 05760A2C Relevance: 5.1, Strings: 4, Instructions: 56COMMON

Download Yara Rule

Strings

/, xrefs: 05760A43
&, xrefs: 0576035B
#, xrefs: 05760473
(, xrefs: 05760449

Memory Dump Source

Source File: 00000000.00000002.2355945209.0000000005760000.00000040.00000800.00020000.00000000.sdmp, Offset: 05760000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_5760000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: #$&$($/
API String ID: 0-4071789109
Opcode ID: c76ac7a09da14c8ed25b03bb54a1a05eb577d6525c61a42b582552942135b4a1
Instruction ID: 670c287281e2e8dc33d1aaa334736a4b7bedabf70512ada9d428409fb387f068
Opcode Fuzzy Hash: c76ac7a09da14c8ed25b03bb54a1a05eb577d6525c61a42b582552942135b4a1
Instruction Fuzzy Hash: A121077496422A8FCB68CF54C898BEDB7B2FB06304F1040E9D419A7282D7385F84EF52

Function 06743A6D Relevance: 5.0, Strings: 4, Instructions: 47COMMON

Download Yara Rule

Strings

y, xrefs: 06743788
D, xrefs: 067437B4
R, xrefs: 06743B68
<, xrefs: 06743B94

Memory Dump Source

Source File: 00000000.00000002.2359011686.0000000006740000.00000040.00000800.00020000.00000000.sdmp, Offset: 06740000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_6740000_SecuriteInfo.jbxd

Similarity

API ID:
String ID: <$D$R$y
API String ID: 0-1538802552
Opcode ID: 176b1c96038494d3eeb3694a111c37892b64d10543b091e2e462749755f7a972
Instruction ID: b8022c0aff508b9538e3ed553dcf269cdca220909f1a1a99addcc1fbb1a4121d
Opcode Fuzzy Hash: 176b1c96038494d3eeb3694a111c37892b64d10543b091e2e462749755f7a972
Instruction Fuzzy Hash: 0C21AF74E452298FDBA0EF68D88C7D9BBB1EB09310F1091E9D519A3242CB385BC5CF95

Analysis Process: MSBuild.exePID: 7836, Parent PID: 2580COMMON

Executed Functions

Function 013D2DE4 Relevance: 1.6, Strings: 1, Instructions: 320COMMON

Download Yara Rule

Strings

Tefq, xrefs: 013D2E80

Memory Dump Source

Source File: 00000004.00000002.2943073247.00000000013D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 013D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_13d0000_MSBuild.jbxd

Similarity

API ID:
String ID: Tefq
API String ID: 0-1066582953
Opcode ID: 543189633a96dfd17a16dd3c69e3f7b94d216e9433bfbd724c3d32044f85c925
Instruction ID: 33fe5057235c7f44dd32d2bbd78503d027d00c7f15caf0dd162dd7c38a63f7f2
Opcode Fuzzy Hash: 543189633a96dfd17a16dd3c69e3f7b94d216e9433bfbd724c3d32044f85c925
Instruction Fuzzy Hash: B2D16EB9B00005CFE755DF29E448B6A77B7FB88708F288465E1069B7A9CB349C46CB12

Function 013D77F0 Relevance: .7, Instructions: 673COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2943073247.00000000013D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 013D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_13d0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3516ed6d5344ae85bf61399afc41d5ef3bc42c939ffc60422403dfdea8aee92e
Instruction ID: 322385d60a84ee6e82d1a15c0715ec29001d6a6347b955d939147ed8f4506529
Opcode Fuzzy Hash: 3516ed6d5344ae85bf61399afc41d5ef3bc42c939ffc60422403dfdea8aee92e
Instruction Fuzzy Hash: 1152F3B2D04329CFDB42CF68D8806ACBBB1FF55318B55856ED455EB202E335E896CB81

Function 013D4BC8 Relevance: 1.8, Strings: 1, Instructions: 588COMMON

Download Yara Rule

Strings

Dmq, xrefs: 013D4C63

Memory Dump Source

Source File: 00000004.00000002.2943073247.00000000013D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 013D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_13d0000_MSBuild.jbxd

Similarity

API ID:
String ID: Dmq
API String ID: 0-4031372824
Opcode ID: 213ebf8c893f57a4fb75a99b9fc42fbab9a721f0bef0882f0442c2fffdadaa5c
Instruction ID: b9a735f75ca68a2d6d2322a7a5ad99dcd43cd615fa48a83e0f9412d905048f4d
Opcode Fuzzy Hash: 213ebf8c893f57a4fb75a99b9fc42fbab9a721f0bef0882f0442c2fffdadaa5c
Instruction Fuzzy Hash: 7A32CFF6D007148FC75ADF68D88056DB7B1FB58324B62496AE015DB261F632EC82CB82

Function 013D4BB8 Relevance: 1.4, Strings: 1, Instructions: 169COMMON

Download Yara Rule

Strings

Dmq, xrefs: 013D4C63

Memory Dump Source

Source File: 00000004.00000002.2943073247.00000000013D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 013D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_13d0000_MSBuild.jbxd

Similarity

API ID:
String ID: Dmq
API String ID: 0-4031372824
Opcode ID: b8a4ccc477489704511fb584f2305da41a85d8c3fb5e8cd9d2a1e624aba64bad
Instruction ID: 321a15a056adcf93af6352809c300b20696d2b7a03889fc8778fd3f2083016d2
Opcode Fuzzy Hash: b8a4ccc477489704511fb584f2305da41a85d8c3fb5e8cd9d2a1e624aba64bad
Instruction Fuzzy Hash: 5671BE79A006149FCB14DF2DD584A59BBF2FF88314B158668E40AEB7A6DB30EC41CF90

Function 013D4224 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2943073247.00000000013D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 013D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_13d0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 96edde1966d6ef9c923d719bc29cfeae3734c469bdabaac0ea3607edcd81d882
Instruction ID: acb2402879f3dd853a333002e855b43b65080e96d0b897183444fb8f74d6dbf5
Opcode Fuzzy Hash: 96edde1966d6ef9c923d719bc29cfeae3734c469bdabaac0ea3607edcd81d882
Instruction Fuzzy Hash: 12316C39A40104CFD705DF5CE188B6977F2BB44308F1681A4E11A9BBA5DB35EC46CB10

Function 013D4249 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2943073247.00000000013D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 013D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_13d0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 60d14646a3c2d5a660095a505880e361fad0f93db0a5710620cdd6d2209a1008
Instruction ID: d9da3d1af76e03964ce837faea7f3da0438a91e7a2d8ca3d93cb26ef22820ba7
Opcode Fuzzy Hash: 60d14646a3c2d5a660095a505880e361fad0f93db0a5710620cdd6d2209a1008
Instruction Fuzzy Hash: 0231F239A40104CFD744CF58E188B6977F2BB48309F1681A9E60A9BBA5DB31EC46CF50

Function 013D2C88 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2943073247.00000000013D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 013D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_13d0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ceb5988767eb3069a4372ad6fbdee02407f3b95fd414355091ea9e5855d27960
Instruction ID: 353e49d33ec86eec07760036dc38878a4624589f3347a34a4971c79ba639fe6f
Opcode Fuzzy Hash: ceb5988767eb3069a4372ad6fbdee02407f3b95fd414355091ea9e5855d27960
Instruction Fuzzy Hash: B3218E75B001148FCB54DB7DE814A2A7BEABF8A315F2A81A6D506CB3A6DE309C01CB51

Function 013DAD80 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2943073247.00000000013D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 013D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_13d0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ad161794877dacf0bc523e81f127c4f2f321ec43714aab4fa1ac802853be204b
Instruction ID: 1ee9ce4f61684eb86d03b2d9df8eea1e723fbab8dba157a6267faf4402e54a46
Opcode Fuzzy Hash: ad161794877dacf0bc523e81f127c4f2f321ec43714aab4fa1ac802853be204b
Instruction Fuzzy Hash: F90196707002185FD348EABE9C95B6F66EEBFC9750F144479A10ADB3D5DE719C0143A4

Function 057A6570 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2950542176.00000000057A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 057A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_57a0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 879e0637618a229b7969f37e2d0abc696d1a5b80faa87dad4cd4d753831e3c90
Instruction ID: 3a11db5a5b3bd419258d38bc2cdd36ac3debcaa6e0d57a0d77b18fba06dfc13c
Opcode Fuzzy Hash: 879e0637618a229b7969f37e2d0abc696d1a5b80faa87dad4cd4d753831e3c90
Instruction Fuzzy Hash: 7F110A79D04105DFDB14DFAAD04839DBBF6FF88305F5481A5E00697388EB74A9859B41

Function 057A1482 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2950542176.00000000057A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 057A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_57a0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2ceb56ed1b5c29542093b2cd332dbb08a88f7711a5fa80113ab932e0c20562c2
Instruction ID: 8357de1624e7fef5c340057d208bba7056c26bafe500b54c79efe8e480f98e99
Opcode Fuzzy Hash: 2ceb56ed1b5c29542093b2cd332dbb08a88f7711a5fa80113ab932e0c20562c2
Instruction Fuzzy Hash: 51F0673DB042008BEB149F24E8AC7BA36ABF7C9301F0486B9910793299DF799841EF04

Function 013D5516 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2943073247.00000000013D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 013D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_13d0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e9a6b0eccfbd8cb09a5c0e1a5728831fa753e02d7c8c8911c636e9dcd274abb4
Instruction ID: 160daf9fcef42a184f99e24a30d3c5f5a8f0058a9db540bf8998e2f6a23956f7
Opcode Fuzzy Hash: e9a6b0eccfbd8cb09a5c0e1a5728831fa753e02d7c8c8911c636e9dcd274abb4
Instruction Fuzzy Hash: 56F03939708109CFDB14DBB8F9589ADB67AFB84329F1042A4E616AB7A4CA34DC049B00

Function 013D2D78 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2943073247.00000000013D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 013D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_13d0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c5b380eabf6c28e5e25e9afeb9921bf9b9b39ee8bf01ca435c549afbf965a52b
Instruction ID: 2fbb6554957c62b702ba9cb537d3a17d5bd1f4097c38c8a69f15932ca07e0c96
Opcode Fuzzy Hash: c5b380eabf6c28e5e25e9afeb9921bf9b9b39ee8bf01ca435c549afbf965a52b
Instruction Fuzzy Hash: 4FE0CD357097C19FD7439B38A4444D47FF45E4751178A40D7D045CBA72C6244C41C751

Function 057A07EC Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2950542176.00000000057A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 057A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_57a0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 272f7e978b2b053669aa115d567a00e4d457b12b6e54e144b56640383b44d5d0
Instruction ID: f2d01f592d6cefa393e1ddf5cc1dd2d1aa8eda6e1fa4685ddb12b1016edb590b
Opcode Fuzzy Hash: 272f7e978b2b053669aa115d567a00e4d457b12b6e54e144b56640383b44d5d0
Instruction Fuzzy Hash: 60F0ED38B04200DBEB188F08D8997B97263F7C9300F0082B8E20B432AACBB59C40AF05

Function 013D1920 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2943073247.00000000013D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 013D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_13d0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b5b0ed15bfce7c5537d7e9832f8ee064c9f6d905f150e638b7f54917083003a7
Instruction ID: b2a819201f70ac9d3286e7251c5698d8c5778b3a32aef007d53898e858179b18
Opcode Fuzzy Hash: b5b0ed15bfce7c5537d7e9832f8ee064c9f6d905f150e638b7f54917083003a7
Instruction Fuzzy Hash: 46D05E4890D2C08FCF03177410A82883FA29F93238B4904CDC4C1CF992C95D385AC312

Function 013D18B1 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2943073247.00000000013D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 013D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_13d0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2211995679f1355e5a31e87d8d5bc972d1f90b3f8e1baedba8abdd24c9c73f48
Instruction ID: 993fc90d77620d4e6814f85e8c2b66c07d9a2772b528872239de3edd6970376e
Opcode Fuzzy Hash: 2211995679f1355e5a31e87d8d5bc972d1f90b3f8e1baedba8abdd24c9c73f48
Instruction Fuzzy Hash: 83C08C380093C8AFCF522770A49C0DA3FFCDE07302F8020A1E088824138D293803D702

Function 013D2D88 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2943073247.00000000013D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 013D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_13d0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 14f988cc26d116fa6f3638a2fba93c814341b9e815c80612831c060c26b4bcc4
Instruction ID: 01b153791dbdb0fc5d77b996e0cdf252d4041092bcfe772193199179151b6aa5
Opcode Fuzzy Hash: 14f988cc26d116fa6f3638a2fba93c814341b9e815c80612831c060c26b4bcc4
Instruction Fuzzy Hash: 29C012397005148FC700AB79E40884937ED9F4A66130000A1F509C7734DE71EC0187D1

Function 013D0952 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2943073247.00000000013D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 013D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_13d0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab84f9ff801a6df7508d5ea92fa8fa7910187557cd97a8cdb04db7a380413d1c
Instruction ID: 16f22542b8787de18148048703d288a5ae8a4225cbed8edf6c5a06b12ab9425f
Opcode Fuzzy Hash: ab84f9ff801a6df7508d5ea92fa8fa7910187557cd97a8cdb04db7a380413d1c
Instruction Fuzzy Hash: 9FC0927601D7C86FCB132B6438146863FADBA273017CA10E3F18CDA193E95AA955D3A2

Function 013D19A8 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2943073247.00000000013D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 013D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_13d0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 64c633e41cc96ee9f710f4b7c53a7fc9bb47a90cf342f436d792ed7f073af8be
Instruction ID: f0c78bf24e962ce50d56e7c0a656e1bd49fb419a6c5168749ebcca90a90b0bd4
Opcode Fuzzy Hash: 64c633e41cc96ee9f710f4b7c53a7fc9bb47a90cf342f436d792ed7f073af8be
Instruction Fuzzy Hash: 3BC08C3980C2C08FC72217A064DC0C83F38DE4B24078600D1D88ECBC238D0A284BC782

Function 013D19F1 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2943073247.00000000013D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 013D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_13d0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c59cce8e51a6ff1a12f961cd4f781e9816a83b04bc8927336b812586e1741d98
Instruction ID: 43ed40771d58ee0bdf2b84cb90eaf3b33d3b3d7719a3b2c19baca1204c8a2c23
Opcode Fuzzy Hash: c59cce8e51a6ff1a12f961cd4f781e9816a83b04bc8927336b812586e1741d98
Instruction Fuzzy Hash: 52C0482554D2C05FCF2757748CA61E93FB2AE9B22079F86D2C0C0CAA77C94DA427D362

Function 013D24AF Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2943073247.00000000013D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 013D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_13d0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 05deaac4ee179f644dd0c54a17af98691cc415369fbb4ce9ab6f81f59c67c6a6
Instruction ID: 85e3b28bb16c7baaf24357ef3843dd672e0395400ec6126f25c6d26b9aa71922
Opcode Fuzzy Hash: 05deaac4ee179f644dd0c54a17af98691cc415369fbb4ce9ab6f81f59c67c6a6
Instruction Fuzzy Hash: 6AC08C3AD000298BD214A738E05021C21A5EB84608F018664C00B5B344EF242C0C23CB

Function 013D19B8 Relevance: .0, Instructions: 6COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2943073247.00000000013D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 013D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_13d0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7141ed85f1a1ca8a1559bb6ef6c6bf96662ff06a5ba42a21e084502990d01683
Instruction ID: 89b7d65474604911155f094b718b818dd29ef35b3cd74e60f59631d7d6c558d3
Opcode Fuzzy Hash: 7141ed85f1a1ca8a1559bb6ef6c6bf96662ff06a5ba42a21e084502990d01683
Instruction Fuzzy Hash: F0A0113A828208CBC2202BA0B80C0883B2CAB88302B800020A20E808088EA238008BA2

Function 013D18C0 Relevance: .0, Instructions: 6COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2943073247.00000000013D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 013D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_13d0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbdbab3eb6e22349935e2ada0ebabae2970e5a7e9afe3ffb3d5f9b0a0f2af5c2
Instruction ID: f8b6397ce1a431594c20ba87606e572dbcc73425a23933a4793d38d83922af49
Opcode Fuzzy Hash: dbdbab3eb6e22349935e2ada0ebabae2970e5a7e9afe3ffb3d5f9b0a0f2af5c2
Instruction Fuzzy Hash: ECA0113880020CCBE2A02BA0B80C00CBFACEB00302B800020B00E8000A8E2038008B80

Function 057AE3D0 Relevance: .0, Instructions: 6COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2950542176.00000000057A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 057A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_57a0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 55838a2b33be3542f6662908f673837b0badb62727b29785c35c91b61f40524c
Instruction ID: 1a0472809867424cb8ffbe00763030f29f35f354d0c26e84effc291941dbec18
Opcode Fuzzy Hash: 55838a2b33be3542f6662908f673837b0badb62727b29785c35c91b61f40524c
Instruction Fuzzy Hash: 53A02232002B0C82820032B0200802033CC0A800083B008B8820C08A20C833E0A08088

Function 013D0960 Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2943073247.00000000013D0000.00000040.00000800.00020000.00000000.sdmp, Offset: 013D0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_13d0000_MSBuild.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: be64c4e48ec6d7a57c44d024600d6ad8427c44d19369e4ce8e9cc07345b41feb
Instruction ID: 6ed1beb92b9e4ccb015b13f784ce0a34b35b6f780b1189a894a7f7aa1532f20e
Opcode Fuzzy Hash: be64c4e48ec6d7a57c44d024600d6ad8427c44d19369e4ce8e9cc07345b41feb
Instruction Fuzzy Hash: 0E90023504860C8BC66037957409A55775DB548616B840061A60D415455E96B4504695

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Memory Dumps

Unpacked PEs

Sigma Signatures

Data Obfuscation

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Software Vulnerabilities

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\cvchost.exe

C:\Users\user\AppData\Local\cvchost.exe:Zone.Identifier

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\cvchost.vbs

Static File Info

General

File Icon

Static PE Info

General

Authenticode Signature

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Network Behavior

Network Port Distribution

TCP Packets

DNS Answers

Statistics

CPU Usage

Windows Analysis Report
SecuriteInfo.com.Win32.RATX-gen.1803.21030.exe

Function 0371BE80 Relevance: 6.0, Strings: 4, Instructions: 983
COMMON

Function 0674D988 Relevance: 7.7, Strings: 6, Instructions: 155
COMMON

Function 05760E4B Relevance: 6.3, Strings: 5, Instructions: 77
COMMON

Function 0674C6D8 Relevance: 4.2, Strings: 3, Instructions: 483
COMMON

Function 0674E380 Relevance: 4.1, Strings: 3, Instructions: 370
COMMON

Function 06D830A0 Relevance: 4.1, Strings: 3, Instructions: 363
COMMON

Function 0674C190 Relevance: 2.8, Strings: 2, Instructions: 348
COMMON

Function 03710928 Relevance: 2.7, Strings: 2, Instructions: 188
COMMON

Function 0674A7D0 Relevance: 2.7, Strings: 2, Instructions: 152
COMMON

Function 0674D960 Relevance: 2.6, Strings: 2, Instructions: 132
COMMON

Function 05760742 Relevance: 2.6, Strings: 2, Instructions: 82
COMMON