Edit tour

Windows Analysis Report
file.exe

Overview

General Information

Sample name:	file.exe
Analysis ID:	1420792
MD5:	219ef06e5b58fcf3134f362ca6073c06
SHA1:	9d784d81fec551d248506901f7283ed7d91f8017
SHA256:	b86d5ba2ec3c95ad28c63d2c1256a6ce067bbea9b3f2903babe468f53d3838ef
Tags:	exe
Infos:

Detection

DanaBot

Score:	84
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Yara detected DanaBot stealer dll

Machine Learning detection for sample

May use the Tor software to hide its network traffic

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to steal Instant Messenger accounts or passwords

Abnormal high CPU Usage

Detected potential crypto function

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

May sleep (evasive loops) to hinder dynamic analysis

PE file contains more sections than normal

PE file contains sections with non-standard names

Queries information about the installed CPU (vendor, model number etc)

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Queries the installation date of Windows

Queries the product ID of Windows

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Tries to load missing DLLs

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

file.exe (PID: 6860 cmdline: "C:\Users\user\Desktop\file.exe" MD5: 219EF06E5B58FCF3134F362CA6073C06)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
DanaBot	Proofpoints describes DanaBot as the latest example of malware focused on persistence and stealing useful information that can later be monetized rather than demanding an immediate ransom from victims. The social engineering in the low-volume DanaBot campaigns we have observed so far has been well-crafted, again pointing to a renewed focus on quality over quantity in email-based threats. DanaBots modular nature enables it to download additional components, increasing the flexibility and robust stealing and remote monitoring capabilities of this banker.	SCULLY SPIDER	https://asec.ahnlab.com/en/30445/ https://asert.arbornetworks.com/danabots-travels-a-global-perspective/ https://assets.virustotal.com/reports/2021trends.pdf https://blog.lexfo.fr/danabot-malware.html https://blog.sekoia.io/privateloader-the-loader-of-the-prevalent-ruzki-ppi-service/	https://malpedia.caad.fkie.fraunhofer.de/details/win.danabot

Malware Configuration

⊘No configs have been found

Yara Signatures

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.1622327967.000000007E81D000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 6860	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: file.exe PID: 6860	JoeSecurity_DanaBot_stealer_dll	Yara detected DanaBot stealer dll	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: file.exe

Avira: detected

Multi AV Scanner detection for submitted file

Source: file.exe	ReversingLabs: Detection: 39%
Source: file.exe	Virustotal: Detection: 47%			Perma Link

Yara detected DanaBot stealer dll

Source: Yara match

File source: Process Memory Space: file.exe PID: 6860, type: MEMORYSTR

Machine Learning detection for sample

Source: file.exe

Joe Sandbox ML: detected

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows	Jump to behavior

Source: unknown	TCP traffic detected without corresponding DNS query: 91.242.163.155
Source: unknown	TCP traffic detected without corresponding DNS query: 91.242.163.155
Source: unknown	TCP traffic detected without corresponding DNS query: 91.242.163.155
Source: unknown	TCP traffic detected without corresponding DNS query: 91.242.163.155
Source: unknown	TCP traffic detected without corresponding DNS query: 95.164.23.133
Source: unknown	TCP traffic detected without corresponding DNS query: 95.164.23.133
Source: unknown	TCP traffic detected without corresponding DNS query: 95.164.23.133
Source: unknown	TCP traffic detected without corresponding DNS query: 95.164.23.133
Source: unknown	TCP traffic detected without corresponding DNS query: 91.242.163.155
Source: unknown	TCP traffic detected without corresponding DNS query: 91.242.163.155
Source: unknown	TCP traffic detected without corresponding DNS query: 91.242.163.155
Source: unknown	TCP traffic detected without corresponding DNS query: 91.242.163.155
Source: unknown	TCP traffic detected without corresponding DNS query: 95.164.23.133
Source: unknown	TCP traffic detected without corresponding DNS query: 95.164.23.133
Source: unknown	TCP traffic detected without corresponding DNS query: 95.164.23.133
Source: unknown	TCP traffic detected without corresponding DNS query: 95.164.23.133
Source: unknown	TCP traffic detected without corresponding DNS query: 91.242.163.155
Source: unknown	TCP traffic detected without corresponding DNS query: 91.242.163.155
Source: unknown	TCP traffic detected without corresponding DNS query: 91.242.163.155
Source: unknown	TCP traffic detected without corresponding DNS query: 91.242.163.155
Source: unknown	TCP traffic detected without corresponding DNS query: 95.164.23.133
Source: unknown	TCP traffic detected without corresponding DNS query: 95.164.23.133
Source: unknown	TCP traffic detected without corresponding DNS query: 95.164.23.133
Source: unknown	TCP traffic detected without corresponding DNS query: 95.164.23.133
Source: unknown	TCP traffic detected without corresponding DNS query: 91.242.163.155
Source: unknown	TCP traffic detected without corresponding DNS query: 91.242.163.155
Source: unknown	TCP traffic detected without corresponding DNS query: 91.242.163.155
Source: unknown	TCP traffic detected without corresponding DNS query: 91.242.163.155
Source: unknown	TCP traffic detected without corresponding DNS query: 95.164.23.133
Source: unknown	TCP traffic detected without corresponding DNS query: 95.164.23.133
Source: unknown	TCP traffic detected without corresponding DNS query: 95.164.23.133
Source: unknown	TCP traffic detected without corresponding DNS query: 95.164.23.133
Source: unknown	TCP traffic detected without corresponding DNS query: 91.242.163.155
Source: unknown	TCP traffic detected without corresponding DNS query: 91.242.163.155
Source: unknown	TCP traffic detected without corresponding DNS query: 91.242.163.155
Source: unknown	TCP traffic detected without corresponding DNS query: 91.242.163.155
Source: unknown	TCP traffic detected without corresponding DNS query: 95.164.23.133
Source: unknown	TCP traffic detected without corresponding DNS query: 95.164.23.133
Source: unknown	TCP traffic detected without corresponding DNS query: 95.164.23.133
Source: unknown	TCP traffic detected without corresponding DNS query: 95.164.23.133
Source: unknown	TCP traffic detected without corresponding DNS query: 91.242.163.155
Source: unknown	TCP traffic detected without corresponding DNS query: 91.242.163.155
Source: unknown	TCP traffic detected without corresponding DNS query: 91.242.163.155
Source: unknown	TCP traffic detected without corresponding DNS query: 91.242.163.155
Source: unknown	TCP traffic detected without corresponding DNS query: 95.164.23.133
Source: unknown	TCP traffic detected without corresponding DNS query: 95.164.23.133
Source: unknown	TCP traffic detected without corresponding DNS query: 95.164.23.133
Source: unknown	TCP traffic detected without corresponding DNS query: 95.164.23.133
Source: unknown	TCP traffic detected without corresponding DNS query: 91.242.163.155
Source: unknown	TCP traffic detected without corresponding DNS query: 91.242.163.155

Source: file.exe, 00000000.00000003.1622837846.000000007E9D0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://.css
Source: file.exe, 00000000.00000003.1622837846.000000007E9D0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://.jpg
Source: file.exe, 00000000.00000003.2770720839.0000000000B2A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2749545134.0000000000B2A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://Passport.NET/STS%253C/ds:KeyName%253E%253C/ds:KeyInfo%
Source: file.exe, 00000000.00000003.3072242947.000000000472E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2988111513.000000000472E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://Passport.NET/STS%253C/ds:KeyName%253E%253C/ds:KeyInfo%253E%253CCipherData%253E%253CCipherValu
Source: file.exe, 00000000.00000003.1622837846.000000007E9D0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://html4/loose.dtd
Source: file.exe, 00000000.00000003.1626983108.000000007EB1A000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000003.1625768571.000000007EB44000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.openssl.org/V
Source: file.exe, 00000000.00000003.1625100794.000000007ECF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.openssl.org/support/faq.html
Source: file.exe, 00000000.00000003.1625100794.000000007ECF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: http://www.openssl.org/support/faq.htmlRAND
Source: file.exe, 00000000.00000003.2410227137.00000000046F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2635591395.0000000000B88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2948984043.0000000004A66000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2642496174.0000000000B88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2348148508.000000000495D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2480126501.0000000000B86000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2421155033.000000000495F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2734680484.000000000476F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3011524077.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3045561736.0000000000B90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: file.exe, 00000000.00000003.2410227137.00000000046F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2635591395.0000000000B88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2948984043.0000000004A66000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2642496174.0000000000B88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2348148508.000000000495D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2480126501.0000000000B86000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2421155033.000000000495F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2734680484.000000000476F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3011524077.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3045561736.0000000000B90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: file.exe, 00000000.00000003.2410227137.00000000046F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2635591395.0000000000B88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2948984043.0000000004A66000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2642496174.0000000000B88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2348148508.000000000495D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2480126501.0000000000B86000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2421155033.000000000495F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2734680484.000000000476F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3011524077.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3045561736.0000000000B90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: file.exe, 00000000.00000003.2410227137.00000000046F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2635591395.0000000000B88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2948984043.0000000004A66000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2642496174.0000000000B88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2348148508.000000000495D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2480126501.0000000000B86000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2421155033.000000000495F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2734680484.000000000476F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3011524077.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3045561736.0000000000B90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: file.exe, 00000000.00000003.2410227137.00000000046F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2948984043.0000000004A66000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2348148508.000000000495D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2480126501.0000000000B86000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2734680484.000000000476F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3011524077.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: file.exe, 00000000.00000003.2410227137.00000000046F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2948984043.0000000004A66000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2348148508.000000000495D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2480126501.0000000000B86000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2734680484.000000000476F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3011524077.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: file.exe, 00000000.00000003.2410227137.00000000046F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2948984043.0000000004A66000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2348148508.000000000495D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2480126501.0000000000B86000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2734680484.000000000476F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3011524077.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: file.exe, 00000000.00000003.2619513088.00000000047A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2676561278.00000000047A8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2945230347.00000000047A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2611227259.00000000047A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3001017973.00000000047A8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2607042116.00000000047A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3082533498.00000000047A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2720368894.00000000047A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2877784941.00000000047A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2702989604.00000000047A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2908738705.00000000047A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2867581643.00000000047A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3042037465.00000000047AA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2743861423.00000000047AA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2814605134.00000000047A8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3015643951.00000000047A8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2939321614.00000000047A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2818957265.00000000047A8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2669525901.00000000047A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2802184233.00000000047A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2741830378.00000000047A9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.li
Source: file.exe, 00000000.00000003.2937690440.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2705859022.0000000004707000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2601779879.0000000000B38000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2568002807.0000000000B38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_authorize.srf?client_id=00000000480728C5&scope=service::ssl.live.com:
Source: file.exe, 00000000.00000003.2431342375.0000000000B1F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2497889916.00000000049B1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2492808103.00000000049D8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2601779879.0000000000B66000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf
Source: file.exe, 00000000.00000003.2619513088.000000000479F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2573173499.000000000479F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2533783706.000000000479F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2611227259.000000000479F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2676561278.000000000479F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2939321614.000000000479F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2702989604.000000000479F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2743861423.0000000004797000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2950541926.000000000479F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2501222295.000000000479F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2818957265.000000000479F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2351558348.0000000004791000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2607042116.000000000479F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2743861423.000000000479F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2590639481.0000000000B59000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2802184233.000000000479F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2741830378.0000000004791000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2539096747.000000000479F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2715409430.000000000479F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2993320043.000000000479F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2908738705.000000000479F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf&lw=1&fl=wld2
Source: file.exe, 00000000.00000003.2351558348.00000000047C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf&lw=1&fl=wld2$$
Source: file.exe, 00000000.00000003.2998048987.00000000049DC000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2607042116.000000000474F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2995342084.00000000049DA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf&lw=1&fl=wld2)
Source: file.exe, 00000000.00000003.2666885410.0000000000B59000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2881766376.0000000000B59000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf&lw=1&fl=wld2;
Source: file.exe, 00000000.00000003.3066912322.0000000000B5A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf&lw=1&fl=wld2LMEM
Source: file.exe, 00000000.00000003.2721548326.0000000000B97000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2347291761.0000000000B05000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2999264272.0000000004718000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2804138946.0000000004718000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2701817879.0000000004718000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2770720839.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2705859022.0000000004718000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2639406882.0000000004718000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2653356262.000000000476B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2498832707.0000000000B93000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2649653398.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3049181323.0000000004A6E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2467623038.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2452926612.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2496088216.0000000000B92000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2393376569.0000000000B6F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2502016988.0000000004718000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2912282557.0000000004718000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2937690440.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2469923875.0000000000B6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf?lc=1033
Source: file.exe, 00000000.00000003.2351558348.00000000047C1000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2654763146.00000000047C2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf?lc=1033)LMEM
Source: file.exe, 00000000.00000003.2736998221.0000000000B38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf?lc=10330r
Source: file.exe, 00000000.00000003.2746303343.0000000004718000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2956287059.0000000004718000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2491326656.0000000004718000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2807981482.0000000004718000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2922291131.0000000004718000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2924647221.0000000004718000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3085126416.0000000004718000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2573173499.0000000004718000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3043736522.0000000004718000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2547578884.0000000004718000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2934129894.0000000004718000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2622540183.0000000004718000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2607042116.0000000004718000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2674350541.0000000004718000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2879473709.0000000004718000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2664482823.0000000004718000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2570498947.0000000004718000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2611227259.0000000004718000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2563962912.0000000004718000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2535265766.0000000004718000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2536811089.0000000004718000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf?lc=10331
Source: file.exe, 00000000.00000003.2574812935.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2723538610.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3073117032.0000000000B57000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2760467323.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3021409168.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2537470907.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2555550008.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2561425432.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2920192593.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2601779879.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2460362455.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2825022775.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2623844124.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2551995254.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3002707245.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2749545134.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2498980595.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2431342375.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2708030520.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2869026827.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2491984914.0000000000B56000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf?lc=1033F
Source: file.exe, 00000000.00000003.2590639481.0000000000B32000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2654763146.00000000047C2000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2601779879.0000000000B38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf?lc=1033LMEM
Source: file.exe, 00000000.00000003.2351042995.0000000000B99000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf?lc=1033bo
Source: file.exe, 00000000.00000003.2351558348.00000000047C1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf?lc=1033ogLMEM
Source: file.exe, 00000000.00000003.2723538610.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3073117032.0000000000B57000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2760467323.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3021409168.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2920192593.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2825022775.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3002707245.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2749545134.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2708030520.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2869026827.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2881766376.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3056958583.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2666885410.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2810339247.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3066912322.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2913862233.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2673425399.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2926785461.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2957170265.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3046938059.0000000000B56000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2770720839.0000000000B56000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf?lc=1033p
Source: file.exe, 00000000.00000003.2872914805.0000000000B05000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2941090526.0000000000B06000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2494763434.0000000000B05000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2674899417.0000000000B05000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2711259656.0000000000B05000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2431342375.0000000000B05000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3056958583.0000000000B05000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2356294586.0000000000B05000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2554375579.0000000000B05000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2473927453.0000000000B06000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3052599663.000000000477A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2615459489.0000000000B06000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2774503216.0000000000B05000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2388121275.0000000000B05000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2463152524.0000000000B06000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2957170265.0000000000B06000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2633312328.0000000000B06000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2486538158.0000000000B05000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2467623038.0000000000B06000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2408243240.0000000000B06000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2594372686.0000000000B05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf?lc=1033x
Source: file.exe, 00000000.00000003.3045561736.0000000000B9A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3011524077.0000000000B9A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2749383255.0000000000B99000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2810339247.0000000000B6A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2760467323.0000000000B9B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3000786325.0000000000B9A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2818358556.0000000000B97000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2822671101.0000000000B97000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3062027958.0000000000B9A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2877230884.0000000000B9B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2861875288.0000000000B9A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2867066451.0000000000B9A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2944420257.0000000000B6F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2952463757.0000000000B98000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2986677826.0000000000B9A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2935584773.0000000000B9B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3049014356.0000000000B9A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2741135380.0000000000B6F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2765164454.0000000000B9B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2754363490.0000000000B9B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf?lc=1033y
Source: file.exe, 00000000.00000003.3045561736.0000000000B9A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3011524077.0000000000B9A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3007946890.0000000000B9B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3000786325.0000000000B9A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3062027958.0000000000B9A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2590399137.0000000000B9B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2986677826.0000000000B9A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3049014356.0000000000B9A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_desktop.srf?lc=1033z
Source: file.exe, 00000000.00000003.2892622832.0000000004776000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2877784941.000000000476D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_logout.srf?client_
Source: file.exe, 00000000.00000003.2649653398.0000000000B31000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2460362455.0000000000B33000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2736998221.0000000000B33000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2601779879.0000000000B33000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2541205551.0000000000B33000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2770720839.0000000000B31000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3056958583.0000000000B34000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3021409168.0000000000B33000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2555550008.0000000000B33000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_logout.srf?client_id=00000000480728C5&redirect_uri=ht
Source: file.exe, 00000000.00000003.2761708909.00000000047A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.com/oauth20_logout.srf?client_id=00000000480728C5&redirect_uri=https://login.live
Source: file.exe, 00000000.00000003.2401230339.0000000000B29000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://login.live.coml
Source: file.exe, 00000000.00000003.2410227137.00000000046F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2635591395.0000000000B88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2948984043.0000000004A66000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2642496174.0000000000B88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2348148508.000000000495D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2480126501.0000000000B86000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2421155033.000000000495F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2734680484.000000000476F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3011524077.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3045561736.0000000000B90000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: file.exe, 00000000.00000003.2410227137.00000000046F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2948984043.0000000004A66000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2348148508.000000000495D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2480126501.0000000000B86000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2734680484.000000000476F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3011524077.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: file.exe, 00000000.00000003.2342462577.0000000000B05000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.oracle.com/technetwork/java/javase/downloads8.132

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927

E-Banking Fraud

Yara detected DanaBot stealer dll

Source: Yara match

File source: Process Memory Space: file.exe PID: 6860, type: MEMORYSTR

Source: C:\Users\user\Desktop\file.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0471CCDA	0_3_0471CCDA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0471CCDA	0_3_0471CCDA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0471CCDA	0_3_0471CCDA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_0471CCDA	0_3_0471CCDA
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A3E3EF	0_3_04A3E3EF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A3E3EF	0_3_04A3E3EF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A3E3EF	0_3_04A3E3EF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A3E3EF	0_3_04A3E3EF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A3E3EF	0_3_04A3E3EF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A3E3EF	0_3_04A3E3EF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A3E3EF	0_3_04A3E3EF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A3E3EF	0_3_04A3E3EF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A3E3EF	0_3_04A3E3EF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A3E3EF	0_3_04A3E3EF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A3E3EF	0_3_04A3E3EF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A3E3EF	0_3_04A3E3EF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A3E3EF	0_3_04A3E3EF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A3E3EF	0_3_04A3E3EF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A3E3EF	0_3_04A3E3EF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A3E3EF	0_3_04A3E3EF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A3E3EF	0_3_04A3E3EF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A3E3EF	0_3_04A3E3EF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A3E3EF	0_3_04A3E3EF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A3E3EF	0_3_04A3E3EF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A3E3EF	0_3_04A3E3EF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A3E3EF	0_3_04A3E3EF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A3E3EF	0_3_04A3E3EF
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A3E3EF	0_3_04A3E3EF

Source: file.exe

Static PE information: Number of sections : 11 > 10

Source: file.exe, 00000000.00000003.1626983108.000000007EB1A000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamessleay32.dllH vs file.exe
Source: file.exe, 00000000.00000003.1625768571.000000007EB44000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamelibeay32.dllH vs file.exe

Source: C:\Users\user\Desktop\file.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wsock32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: cryptui.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: avifil32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msvfw32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: msacm32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: pstorec.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mlang.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: vaultcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: napinsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: pnrpnsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wshbth.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: nlaapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: winrnr.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: wlanapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: netprofm.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: npmproxy.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: mmdevapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: devobj.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: audioses.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: logoncli.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: firewallapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Section loaded: fwpolicyiomgr.dll	Jump to behavior

Source: file.exe

Static PE information: EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI

Source: classification engine

Classification label: mal84.phis.troj.spyw.evad.winEXE@1/269@0/2

Source: C:\Users\user\Desktop\file.exe

File created: C:\Users\user\AppData\Local\Temp\Sduwpdseet

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion RegisteredOrganization

Jump to behavior

Source: file.exe, 00000000.00000003.1622585020.000000007E8E0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
Source: file.exe, 00000000.00000003.1622585020.000000007E8E0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
Source: file.exe, 00000000.00000003.1622585020.000000007E8E0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
Source: file.exe, 00000000.00000003.1622585020.000000007E8E0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' \|\| %Q \|\| substr(name,%d+18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
Source: file.exe, 00000000.00000003.3040797939.00000000049D4000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3040946435.0000000004606000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2580568718.0000000004606000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2943226680.0000000004606000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2483705137.00000000045E9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2637539182.0000000004606000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2828313914.0000000004606000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2413415893.00000000045E9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2864985244.000000000495B000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2732108808.0000000004606000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2345727174.0000000004606000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: file.exe	ReversingLabs: Detection: 39%
Source: file.exe	Virustotal: Detection: 47%

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\InProcServer32

Jump to behavior

Source: file.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: file.exe

Static file information: File size 3706880 > 1048576

Source: file.exe

Static PE information: Raw size of .text is bigger than: 0x100000 < 0x363400

Source: file.exe

Static PE information: section name: .didata

Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A34AA9 push 4C6C8280h; retf	0_3_04A34AB1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A34AA3 push 4C6C8280h; retf	0_3_04A34AB1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A34AA3 push 4C6C8280h; retf	0_3_04A34AB1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A34AA3 push 4C6C8280h; retf	0_3_04A34AB1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A34A83 push 5404A34Ah; retf	0_3_04A34AA1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A34A83 push 5404A34Ah; retf	0_3_04A34AA1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A34A83 push 5404A34Ah; retf	0_3_04A34AA1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A34A83 push 5404A34Ah; retf	0_3_04A34AA1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A35E84 push F404A35Eh; iretd	0_3_04A35EA1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A35E82 push F404A35Eh; iretd	0_3_04A35EA1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A35E82 push F404A35Eh; iretd	0_3_04A35EA1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A35E82 push F404A35Eh; iretd	0_3_04A35EA1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A34AA3 push 4C6C8280h; retf	0_3_04A34AB1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A34AA3 push 4C6C8280h; retf	0_3_04A34AB1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A34AA3 push 4C6C8280h; retf	0_3_04A34AB1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A34A83 push 5404A34Ah; retf	0_3_04A34AA1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A34A83 push 5404A34Ah; retf	0_3_04A34AA1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A34A83 push 5404A34Ah; retf	0_3_04A34AA1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A34A83 push 5404A34Ah; retf	0_3_04A34AA1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A35E82 push F404A35Eh; iretd	0_3_04A35EA1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A35E82 push F404A35Eh; iretd	0_3_04A35EA1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A35E82 push F404A35Eh; iretd	0_3_04A35EA1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A34AA3 push 4C6C8280h; retf	0_3_04A34AB1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A34AA3 push 4C6C8280h; retf	0_3_04A34AB1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A34AA3 push 4C6C8280h; retf	0_3_04A34AB1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A34A83 push 5404A34Ah; retf	0_3_04A34AA1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A34A83 push 5404A34Ah; retf	0_3_04A34AA1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A34A83 push 5404A34Ah; retf	0_3_04A34AA1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A34A83 push 5404A34Ah; retf	0_3_04A34AA1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A35E82 push F404A35Eh; iretd	0_3_04A35EA1
Source: C:\Users\user\Desktop\file.exe	Code function: 0_3_04A35E82 push F404A35Eh; iretd	0_3_04A35EA1

Hooking and other Techniques for Hiding and Protection

May use the Tor software to hide its network traffic

Source: file.exe, 00000000.00000003.1622327967.000000007E81D000.00000004.00001000.00020000.00000000.sdmp

Binary or memory string: torConnect

Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_NetworkAdapter

Source: C:\Users\user\Desktop\file.exe	Window / User API: threadDelayed 4499			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Window / User API: threadDelayed 4935			Jump to behavior

Source: C:\Users\user\Desktop\file.exe TID: 1880	Thread sleep time: -8998000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 3688	Thread sleep time: -75075s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 3168	Thread sleep time: -9870000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 3168	Thread sleep time: -130000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\file.exe TID: 1880	Thread sleep time: -84000s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem
Source: C:\Users\user\Desktop\file.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_ComputerSystem

Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Thread delayed: delay time: 75075

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Microsoft\Windows	Jump to behavior

Source: file.exe, 00000000.00000003.2342462577.0000000000AE4000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dllQ

Source: C:\Users\user\Desktop\file.exe

Process token adjusted: Debug

Jump to behavior

Source: file.exe, 00000000.00000003.1622327967.000000007E81D000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: Shell_TrayWndTrayNotifyWndSysPagerToolbarWindow32U
Source: file.exe, 00000000.00000003.1622585020.000000007E8E0000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: explorer.exeShell_TrayWnd

Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion InstallDate

Jump to behavior

Source: C:\Users\user\Desktop\file.exe	Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion ProductId			Jump to behavior
Source: C:\Users\user\Desktop\file.exe	Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion ProductId			Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\file.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information

Yara detected DanaBot stealer dll

Source: Yara match

File source: Process Memory Space: file.exe PID: 6860, type: MEMORYSTR

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\file.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior

Tries to steal Instant Messenger accounts or passwords

Source: C:\Users\user\Desktop\file.exe

File opened: C:\Users\user\AppData\Roaming\Miranda\

Jump to behavior

Source: Yara match	File source: 00000000.00000003.1622327967.000000007E81D000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: file.exe PID: 6860, type: MEMORYSTR

Remote Access Functionality

Yara detected DanaBot stealer dll

Source: Yara match

File source: Process Memory Space: file.exe PID: 6860, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	11 Windows Management Instrumentation	1 DLL Side-Loading	1 Process Injection	121 Virtualization/Sandbox Evasion	1 OS Credential Dumping	111 Security Software Discovery	Remote Services	1 Archive Collected Data	12 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 DLL Side-Loading	1 Process Injection	1 Credentials in Registry	1 Process Discovery	Remote Desktop Protocol	1 Data from Local System	1 Multi-hop Proxy	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	1 Credentials In Files	121 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	1 Proxy	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	1 System Owner/User Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	Steganography	Cached Domain Credentials	2 File and Directory Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	Compile After Delivery	DCSync	53 System Information Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
file.exe	39%	ReversingLabs	Win32.Trojan.Barys
file.exe	47%	Virustotal		Browse
file.exe	100%	Avira	TR/ATRAPS.Gen
file.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label	Link
http://html4/loose.dtd	0%	Avira URL Cloud	safe
http://.jpg	0%	Avira URL Cloud	safe
https://login.li	0%	Avira URL Cloud	safe
http://.css	0%	Avira URL Cloud	safe
http://Passport.NET/STS%253C/ds:KeyName%253E%253C/ds:KeyInfo%253E%253CCipherData%253E%253CCipherValu	0%	Avira URL Cloud	safe
http://Passport.NET/STS%253C/ds:KeyName%253E%253C/ds:KeyInfo%	0%	Avira URL Cloud	safe
http://Passport.NET/STS%253C/ds:KeyName%253E%253C/ds:KeyInfo%	0%	Virustotal		Browse
http://Passport.NET/STS%253C/ds:KeyName%253E%253C/ds:KeyInfo%253E%253CCipherData%253E%253CCipherValu	0%	Virustotal		Browse
https://login.li	0%	Virustotal		Browse

Name	Source	Malicious	Antivirus Detection	Reputation
https://ac.ecosia.org/autocomplete?q=	file.exe, 00000000.00000003.2410227137.00000000046F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2635591395.0000000000B88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2948984043.0000000004A66000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2642496174.0000000000B88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2348148508.000000000495D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2480126501.0000000000B86000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2421155033.000000000495F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2734680484.000000000476F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3011524077.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3045561736.0000000000B90000.00000004.00000020.00020000.00000000.sdmp	false		high
http://html4/loose.dtd	file.exe, 00000000.00000003.1622837846.000000007E9D0000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
https://duckduckgo.com/chrome_newtab	file.exe, 00000000.00000003.2410227137.00000000046F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2948984043.0000000004A66000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2348148508.000000000495D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2480126501.0000000000B86000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2734680484.000000000476F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3011524077.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.openssl.org/support/faq.htmlRAND	file.exe, 00000000.00000003.1625100794.000000007ECF0000.00000004.00001000.00020000.00000000.sdmp	false		high
https://duckduckgo.com/ac/?q=	file.exe, 00000000.00000003.2410227137.00000000046F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2948984043.0000000004A66000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2348148508.000000000495D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2480126501.0000000000B86000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2734680484.000000000476F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3011524077.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	file.exe, 00000000.00000003.2410227137.00000000046F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2948984043.0000000004A66000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2348148508.000000000495D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2480126501.0000000000B86000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2734680484.000000000476F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3011524077.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp	false		high
http://www.openssl.org/V	file.exe, 00000000.00000003.1626983108.000000007EB1A000.00000004.00001000.00020000.00000000.sdmp, file.exe, 00000000.00000003.1625768571.000000007EB44000.00000004.00001000.00020000.00000000.sdmp	false		high
https://login.li	file.exe, 00000000.00000003.2619513088.00000000047A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2676561278.00000000047A8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2945230347.00000000047A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2611227259.00000000047A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3001017973.00000000047A8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2607042116.00000000047A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3082533498.00000000047A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2720368894.00000000047A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2877784941.00000000047A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2702989604.00000000047A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2908738705.00000000047A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2867581643.00000000047A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3042037465.00000000047AA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2743861423.00000000047AA000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2814605134.00000000047A8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3015643951.00000000047A8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2939321614.00000000047A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2818957265.00000000047A8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2669525901.00000000047A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2802184233.00000000047A9000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2741830378.00000000047A9000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://Passport.NET/STS%253C/ds:KeyName%253E%253C/ds:KeyInfo%253E%253CCipherData%253E%253CCipherValu	file.exe, 00000000.00000003.3072242947.000000000472E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2988111513.000000000472E000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	file.exe, 00000000.00000003.2410227137.00000000046F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2635591395.0000000000B88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2948984043.0000000004A66000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2642496174.0000000000B88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2348148508.000000000495D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2480126501.0000000000B86000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2421155033.000000000495F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2734680484.000000000476F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3011524077.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3045561736.0000000000B90000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	file.exe, 00000000.00000003.2410227137.00000000046F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2948984043.0000000004A66000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2348148508.000000000495D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2480126501.0000000000B86000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2734680484.000000000476F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3011524077.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	file.exe, 00000000.00000003.2410227137.00000000046F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2635591395.0000000000B88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2948984043.0000000004A66000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2642496174.0000000000B88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2348148508.000000000495D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2480126501.0000000000B86000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2421155033.000000000495F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2734680484.000000000476F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3011524077.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3045561736.0000000000B90000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.oracle.com/technetwork/java/javase/downloads8.132	file.exe, 00000000.00000003.2342462577.0000000000B05000.00000004.00000020.00020000.00000000.sdmp	false		high
http://.css	file.exe, 00000000.00000003.1622837846.000000007E9D0000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
https://www.ecosia.org/newtab/	file.exe, 00000000.00000003.2410227137.00000000046F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2635591395.0000000000B88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2948984043.0000000004A66000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2642496174.0000000000B88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2348148508.000000000495D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2480126501.0000000000B86000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2421155033.000000000495F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2734680484.000000000476F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3011524077.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3045561736.0000000000B90000.00000004.00000020.00020000.00000000.sdmp	false		high
http://.jpg	file.exe, 00000000.00000003.1622837846.000000007E9D0000.00000004.00001000.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	file.exe, 00000000.00000003.2410227137.00000000046F8000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2635591395.0000000000B88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2948984043.0000000004A66000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2642496174.0000000000B88000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2348148508.000000000495D000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2480126501.0000000000B86000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2421155033.000000000495F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2734680484.000000000476F000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3011524077.0000000000B8E000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.3045561736.0000000000B90000.00000004.00000020.00020000.00000000.sdmp	false		high
http://Passport.NET/STS%253C/ds:KeyName%253E%253C/ds:KeyInfo%	file.exe, 00000000.00000003.2770720839.0000000000B2A000.00000004.00000020.00020000.00000000.sdmp, file.exe, 00000000.00000003.2749545134.0000000000B2A000.00000004.00000020.00020000.00000000.sdmp	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://www.openssl.org/support/faq.html	file.exe, 00000000.00000003.1625100794.000000007ECF0000.00000004.00001000.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
95.164.23.133	unknown	Gibraltar		29632	NASSIST-ASGI	false
91.242.163.155	unknown	Russian Federation		61335	OOO-SYSMEDIA-ASRU	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1420792
Start date and time:	2024-04-05 12:24:05 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 8m 18s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	5
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	file.exe
Detection:	MAL
Classification:	mal84.phis.troj.spyw.evad.winEXE@1/269@0/2
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 4
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target file.exe, PID 6860 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtEnumerateKey calls found.
Report size getting too big, too many NtEnumerateValueKey calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtQueryVolumeInformationFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

Time	Type	Description
12:24:54	API Interceptor	11735647x Sleep call for process: file.exe modified

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
NASSIST-ASGI	7qAKRRMho6.exe	Get hash	malicious	GCleaner, Glupteba, Mars Stealer, PureLog Stealer, RedLine, RisePro Stealer, SmokeLoader	Browse	95.164.45.22
	8b3ee970a1b172952a665247aa5ff590d12d8f4b33c07.exe	Get hash	malicious	GCleaner, Mars Stealer, Meduza Stealer, PureLog Stealer, RedLine, RisePro Stealer, SmokeLoader	Browse	95.164.45.22
	e8iuAWz9pB.exe	Get hash	malicious	Glupteba, Mars Stealer, PureLog Stealer, Stealc, Vidar, zgRAT	Browse	95.164.45.22
	5zq2Yob8xh.exe	Get hash	malicious	GCleaner, Glupteba, Mars Stealer, Meduza Stealer, PureLog Stealer, RedLine, RisePro Stealer	Browse	95.164.45.22
	It5nlRgHw8.exe	Get hash	malicious	Spark RAT	Browse	95.164.0.23
	It5nlRgHw8.exe	Get hash	malicious	Spark RAT	Browse	95.164.0.23
	03.04.24 0000123.vbs	Get hash	malicious	AgentTesla, XWorm	Browse	94.131.122.80
	Ux0uyPZABV.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, PureLog Stealer, RedLine, zgRAT	Browse	95.164.45.22
	VALUATION NO. 2_SC.bat	Get hash	malicious	Unknown	Browse	95.164.21.184
	BL 236029977 INV NUMBER 5521662738.bat	Get hash	malicious	Unknown	Browse	95.164.10.214

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aapwhteqfofdw

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aaqufauauwhhu

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Adieowyieuwii

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aeaauesqeueiy

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aiyeedhrtueou

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Apsouutdfuhed

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Aqdrfphsaruoy

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Arsuyuedipwwp

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Arwufqpqiqrow

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Audyhusipiehs

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Auuthshhifarq

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Awdoufhtqeere

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ayftfphyqwwqs

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ddhrehi

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Deqahwiteehohho

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Deqeafdp

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Dhrtoia

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Diahyeieedo

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Dieafewiooo

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Dieafewiooo-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Dihqayquqpi

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Dioeeiaqrpa

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Diryeeditew

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Doaeptewyeao

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Doaeptewyeao-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Dopoyqyrtyti

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Dpfpop

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Duwyihudoe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Duyashswws

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Dyipiqtua

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eatdssrywuaatap

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Edohyqpdrhdohao

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eeeepoqt

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eehaieps

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eeohfyasqwfueqt

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eeohfyasqwfueqt-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eepqaqedfsoqeea

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Efeqrpiurwweiwp

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eharsyadsrhwtsu

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eispsetfuywtqds

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eispsetfuywtqds-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eiuhaoee

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eoeioeyd

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eoepfhooouaihea

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eptryiee

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eqhttwrwetyrdpd

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eraqoyat

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Erqioweo

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Erqooqhpuiursop

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Etushdpyweoarrh

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Euhwsufu

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Eweyiofp

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ewrtpfid

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ewrtpfid-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fathiy

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fathiy-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fdhaho

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fdhyur

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fdyfyi

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fiitdo

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fiitdo-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fowpew

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fprrre

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Frests

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fsaqfs

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fsaqfs-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fsepur

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fsuhoe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Fwfeuu

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hehapwq

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hehapwq-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hffaqyi

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hffuhoh

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hfieswe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hipdpup

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hpqerqd

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hpypryu

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hqheeoq

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hqsdppf

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hsytpou

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hufsdhp

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hufsdhp-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hwsyfeu

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hyyiqho

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Hyyiqho-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ihhffeqoyui

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ihpqufwhtys

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ihtrahqhqwo

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ihtrddpeefu

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ihtrddpeefu-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Iiyoiftasoq

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ipyusweshwu

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ipyusweshwu-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Iqtpiieoequ

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Iqtpiieoequ-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Isoyaweysqd

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Itdpeuietph

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Iuphdeopetp

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Iwdquisdifd

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Iwdusoshoue

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Oapedeiweqrt

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Oayhefwewdii

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Oeeywdfoqdye

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Oerittytfwhq

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ofeyifoyfhew

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ofeyifoyfhew-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ohiaiyhaeper

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ohqreheeufpe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Oipyuoseewei

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Oitfqfqeqtre

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Oohoihdiussa

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Oohoihdiussa-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Opqpawwrtowu

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Orfashowsihr

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Orhysedstqrh

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Orufderahqey

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Otifhoourtiq

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Otoueofwisfr

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Otoueofwisfr-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Otqadepweids

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Owitryodeedt

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Oyaqhirqoiyh

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Oydetetiestp

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Oydetetiestp-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Pafutrhowurea

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Pafutrhowurea-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Pawteqdotpiqy

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Pdeapwqt

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Pfqqdt

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Pfwreq

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Pfwreq-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Piaqfesdset

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Piaqfesdset-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Pipoerswqdr

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Piueieupfee

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Piwredeauee

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Poqeyheowshh

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Proqtwoiahpf

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Pshurta

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Psuaofefea

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ptyhedstp

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Puuqrtdpep

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Puuqrtdpep-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Pwspihfqhdf

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Pyfrshddw

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qdepeupashdeou

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qdowwfwadsfisf

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qdrwswdussipye

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qdtsfairyqpffd

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qdtsfairyqpffd-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qeaeaeaeupeesa

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qeaeaeaeupeesa-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qesraewweauped

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qfdrdeousestqe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qfefefqoiqhdpy

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qiaeeusedpsuui

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qityqurqisiosu

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qodshtatsiiwyd

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qrisypdarpfsro

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qspyowareydspe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qspyowareydspe-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qteredeaaqrwfr

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qtqiepqqederut

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qufeeitftiyqfe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Qyaoifypeawqsy

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rarqdqdrfisoh

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Reqtdueihoaaqfs

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	modified
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Reuweaiwysftwhe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Risuoswrsey

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rpsseeut

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rrtewaiq

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rshttad

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rteetroi

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rteetroi-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ruwuatypui

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rwteewyupuyqpds

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rwwtsiatawu

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Rywhohaod

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Sduwpdseet

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Sfaefy

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Shedttt

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Shfooad

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Shwresp

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Shyaqda

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Sioriraqqwp

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Soioweqshets

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Spefhstisfewawe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Sqifisoewaursr

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Sroeehpuphie

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Stuyqpdfwo

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Swawapurowuad

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Syhqotewa

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Sywydystt

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Taoqooeieifpu

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Tdiaaohtdtr

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Tdydoeowe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Teoetrewtyqrdys

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Tepeqoho

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Tewsuqwe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Tfhhif

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Therqwo

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Thewtty

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Thpeeht

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ttrwwtswies

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Tuetiewttq

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Tuetiewttq-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Tuqowowtao

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Tyyswyqsh

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Uafiwqtdrd

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Udeoeuuaey

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Udwsfieeuo

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Uhuqssqfer

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Uitqeeqyet

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Uoqaqoaeef

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Uoqaqoaeef-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Uoyqsoqdhi

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Upeauesoip

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Upwpyeeuts

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Usahfqyeys

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Uswftyhieh

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Utrwpppsop

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Uwduerwwyo

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Uweshpridy

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Uwifureufy

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Uyeriwrfeo

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Uypetiuysf

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Uyqqrywiiq

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wephqsiqqohsspe

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Weyrhpeeqfryody

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wqefsdyhyeqyqo

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wrepwwou

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wreuryeiuhsdwsu

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wrfifi

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wrfifi-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wtdqeswrotsweh

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wteesurwhhwesee

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wttqhetpeiwauy

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wuehruyoaa

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wufeieuriw

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wufeieuriw-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wwfyot

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wwopadhsirye

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wyefuesyw

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wyffuyfer

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Wyoesarau

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yahsdifut

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yaofesqhw

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ydhsutuee

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ydhsutuee-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ydttyoteh

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yewaotead

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yihowfsyu

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yiquyopay

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yiquyopay-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yoepuydpf

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	0A9156C4E3C48EF827980639C4D1E263
SHA1:	9F13A523321C66208E90D45F87FA0CD9B370E111
SHA-256:	3A3ED164E42500A1C5B2D0093F0A813D27DC50D038F330CC100A7E70ECE2E6E4
SHA-512:	8A46C1B44C0EA338AFF0D2E2D07C34430B67B68B6D27E1ADB8CF216B0F0994172CED106A90283F2F0469B5CAA40ACEDF101D45729B823E5179EA55AC507E04AD
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yoepuydpf-shm

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.017262956703125623
Encrypted:	false
SSDEEP:	3:G8lQs2TSlElQs2TtPRp//:G0QjSaQjrpX
MD5:	B7C14EC6110FA820CA6B65F5AEC85911
SHA1:	608EEB7488042453C9CA40F7E1398FC1A270F3F4
SHA-256:	FD4C9FDA9CD3F9AE7C962B0DDF37232294D55580E1AA165AA06129B8549389EB
SHA-512:	D8D75760F29B1E27AC9430BC4F4FFCEC39F1590BE5AEF2BFB5A535850302E067C288EF59CF3B2C5751009A22A6957733F9F80FA18F2B0D33D90C068A3F08F3B0
Malicious:	false
Preview:	..-.....................................8...5.....-.....................................8...5...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yowhhdpow

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ypehrdirp

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yppqrpaty

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	40960
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	AB893875D697A3145AF5EED5309BEE26
SHA1:	C90116149196CBF74FFB453ECB3B12945372EBFA
SHA-256:	02B1C2234680617802901A77EAE606AD02E4DDB4282CCBC60061EAC5B2D90BBA
SHA-512:	6B65C0A1956CE18DF2D271205F53274D2905C803D059A0801BF8331CCAA28A1D4842D3585DD9C2B01502A4BE6664BDE2E965B15FCFEC981E85EED37C595CD6BC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ypsspuyea

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ypyweuitp

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yrsoiahru

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yrthdhiis

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yseqfqyft

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Ysissqtoi

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	114688
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	76B973F7B910A22256212C63ADB7A103
SHA1:	2EAB7B3CF42E12BA5F1FF6AB512E4A105740F631
SHA-256:	96C94D0826105FE47C587FD79E8869CE5EDBFBACDDDAB9F4F30C5FECBA2CA6A3
SHA-512:	4C11351FE96BA26070E1B22230AA940BAFD2AA646960ED7A512F7398DAFE6FA2C029FE941F7EBF2C27C9D64957DC05DF66F5DB4365A9A8C6556216314FC12E95
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yswruerru

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	106496
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	E6FF930C3FB6DE61F664581C1A85F60C
SHA1:	F447CB15945D8630CC88ED3B7BEE049B6F5E4C7D
SHA-256:	CAA961E702D561D3245D06BF54FB5FE35BF75037032D764EC11FCB5AC1D41C1C
SHA-512:	60CA902E544D9535BC0F596EE8D262CAA73C885750875623DE20B42FAD52189C0CF41225312FC50DDB0C4D52580094A79F69CC8C674DC3200A42A935190DFFF8
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yyfiewadi

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	CF845A781C107EC1346E849C9DD1B7E8
SHA1:	B44CCC7F7D519352422E59EE8B0BDBAC881768A7
SHA-256:	18619B678A5C207A971A0AA931604F48162E307C57ECDEC450D5F095FE9F32C7
SHA-512:	4802861EA06DC7FB85229A3C8F04E707A084F1BA516510C6F269821B33C8EE4EBF495258FE5BEE4850668A5AAC1A45F0EDF51580DA13B7EE160A29D067C67612
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Yyqouhrah

Download File

Process:	C:\Users\user\Desktop\file.exe
File Type:	data
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	F4F35D60B3CC18AAA6D8D92F0CD3708A
SHA1:	6FECD5769C727E137B7580AE3B1823B06EE6F9D9
SHA-256:	2AAE7DC846AAF25F1CADF55F1666862046C6DB9D65D84BDC07FA039DAC405606
SHA-512:	A69E2DCE2F75771C63ACDA51E4AEECC95B00F65377E3026BAF93A6CFB936BF6F10CB320CC09B0E43EB7833D062B24EFC5932569A1826E55DBB736CCDA0BEB413
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.7603057180395405
TrID:	Win32 Executable (generic) a (10002005/4) 99.53% Win32 EXE PECompact compressed (generic) (41571/9) 0.41% Win16/32 Executable Delphi generic (2074/23) 0.02% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02%
File name:	file.exe
File size:	3'706'880 bytes
MD5:	219ef06e5b58fcf3134f362ca6073c06
SHA1:	9d784d81fec551d248506901f7283ed7d91f8017
SHA256:	b86d5ba2ec3c95ad28c63d2c1256a6ce067bbea9b3f2903babe468f53d3838ef
SHA512:	d4cc35a6265b190d5be505798824d41aa06d6f4075ba23c2de3298f9ff0a77dbdb371b166b7a4821b3e303d87788a9268f9f44bd6214225a84b25ca5ad8a3286
SSDEEP:	49152:qdtvLwUU5h6/60ChOUreaSwotBP1aH4vaTZtSkLvUWgIc/ivZAFZnyFNz30dm9TN:iuo61frTStildtSkjDctBARkdS
TLSH:	9506F126F284D53EE49E1A394037A994D93FB76278168C8B56F048CCCF3D4817A7A25F
File Content Preview:	MZP.....................@...............................................!..L.!..This program must be run under Win32..$7.......................................................................................................................................

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x765d78
Entrypoint Section:	.itext
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI
DLL Characteristics:
Time Stamp:	0x660FB096 [Fri Apr 5 08:04:38 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	0
File Version Major:	5
File Version Minor:	0
Subsystem Version Major:	5
Subsystem Version Minor:	0
Import Hash:	3515998abe0aea14ac46a446bebe93d1

Entrypoint Preview

Instruction
push ebp
mov ebp, esp
add esp, FFFFFFF0h
mov eax, 00760FB0h
call 00007F0FFCD82FF5h
xor eax, eax
push ebp
push 00765DA9h
push dword ptr fs:[eax]
mov dword ptr fs:[eax], esp
call 00007F0FFD0D378Ah
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword ptr fs:[eax], edx
push 00765DB0h
ret
jmp 00007F0FFCD7BC47h
jmp 00007F0FFD0D884Ah
call 00007F0FFCD7C354h
lea eax, dword ptr [eax+00h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x377000	0x97	.edata
IMAGE_DIRECTORY_ENTRY_IMPORT	0x374000	0x13a2	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x393000	0x3400	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x37a000	0x182a0	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x379000	0x18	.rdata
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x374404	0x2ec	.idata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x376000	0x246	.didata
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x363338	0x363400	3f2cd5fa88724df31fcf0e381943e73d	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.itext	0x365000	0xdb8	0xe00	e541b584ebb047ffe0eb64ae2ea76930	False	0.5580357142857143	data	6.224715531237705	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.data	0x366000	0x7488	0x7600	19df17825a5cd981b58f20dfdf00e994	False	0.5737552966101694	data	6.326463995089972	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.bss	0x36e000	0x5f38	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x374000	0x13a2	0x1400	b7b3ad03a0fa9b93301d30e153e6e0ed	False	0.33359375	data	4.899869589483029	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.didata	0x376000	0x246	0x400	020b75d8398ba5c98b72db31cb9e8c5b	False	0.259765625	firmware 100 v0 (revision 2455844608) Ha7 , version 12318.16640.30 (region 2288006912), 0 bytes or less, UNKNOWN1 0x88603700, at 0 0 bytes , at 0 0 bytes , at 0x14524000 2354135040 bytes	2.4287425138293757	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.edata	0x377000	0x97	0x200	f52dc19b27d4291714a8135ee65e2ece	False	0.251953125	data	1.8247353620405944	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.tls	0x378000	0x20	0x0	d41d8cd98f00b204e9800998ecf8427e	False	0	empty	0.0	IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rdata	0x379000	0x5c	0x200	e6e33c184a5992815f54be7636d6ad3f	False	0.1875	data	1.350805590113611	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x37a000	0x182a0	0x18400	773828fa93ce0e7d4665d61ec3932b8a	False	0.5864308150773195	data	6.711616617593465	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
.rsrc	0x393000	0x3400	0x3400	070c734a20828e36d1786ba497543ec4	False	0.2860576923076923	data	3.661232076352613	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	ZLIB Complexity
RT_STRING	0x393368	0x20c	data	0.4255725190839695
RT_STRING	0x393574	0x424	data	0.34150943396226413
RT_STRING	0x393998	0x294	data	0.3151515151515151
RT_STRING	0x393c2c	0x488	data	0.3956896551724138
RT_STRING	0x3940b4	0x544	data	0.3241839762611276
RT_STRING	0x3945f8	0x37c	data	0.3632286995515695
RT_STRING	0x394974	0x440	data	0.38878676470588236
RT_STRING	0x394db4	0x21c	data	0.40555555555555556
RT_STRING	0x394fd0	0xbc	data	0.6542553191489362
RT_STRING	0x39508c	0x100	data	0.62890625
RT_STRING	0x39518c	0x338	data	0.4223300970873786
RT_STRING	0x3954c4	0x478	data	0.29895104895104896
RT_STRING	0x39593c	0x354	data	0.4107981220657277
RT_STRING	0x395c90	0x2b8	data	0.4367816091954023
RT_RCDATA	0x395f48	0x10	data	1.5
RT_RCDATA	0x395f58	0x348	data	0.6142857142857143

Imports

DLL	Import
oleaut32.dll	SysFreeString, SysReAllocStringLen, SysAllocStringLen
advapi32.dll	RegQueryValueExW, RegOpenKeyExW, RegCloseKey
user32.dll	CharNextW, LoadStringW
kernel32.dll	Sleep, VirtualFree, VirtualAlloc, lstrlenW, VirtualQuery, QueryPerformanceCounter, GetTickCount, GetSystemInfo, GetVersion, CompareStringW, IsValidLocale, SetThreadLocale, GetSystemDefaultUILanguage, GetUserDefaultUILanguage, GetLocaleInfoW, WideCharToMultiByte, MultiByteToWideChar, GetACP, LoadLibraryExW, GetStartupInfoW, GetProcAddress, GetModuleHandleW, GetModuleFileNameW, GetCommandLineW, FreeLibrary, GetLastError, UnhandledExceptionFilter, RtlUnwind, RaiseException, ExitProcess, ExitThread, SwitchToThread, GetCurrentThreadId, CreateThread, DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, InitializeCriticalSection, FindFirstFileW, FindClose, WriteFile, GetStdHandle, CloseHandle
kernel32.dll	GetProcAddress, RaiseException, LoadLibraryA, GetLastError, TlsSetValue, TlsGetValue, LocalFree, LocalAlloc, GetModuleHandleW, FreeLibrary
user32.dll	PeekMessageW, MsgWaitForMultipleObjects, MessageBoxW, LoadStringW, GetSystemMetrics, CharUpperBuffW, CharUpperW, CharLowerBuffW
version.dll	VerQueryValueW, GetFileVersionInfoSizeW, GetFileVersionInfoW
kernel32.dll	WriteFile, WideCharToMultiByte, WaitForSingleObject, VirtualQueryEx, VirtualQuery, VirtualProtect, VirtualFree, VerSetConditionMask, VerifyVersionInfoW, UnmapViewOfFile, SwitchToThread, SuspendThread, Sleep, SetThreadPriority, SetLastError, SetFileTime, SetFilePointer, SetEvent, SetEndOfFile, ResumeThread, ResetEvent, ReleaseSemaphore, ReadFile, RaiseException, QueryDosDeviceW, IsDebuggerPresent, MapViewOfFile, LocalFree, LoadLibraryA, LoadLibraryW, LeaveCriticalSection, IsValidLocale, InitializeCriticalSection, HeapSize, HeapFree, HeapDestroy, HeapCreate, HeapAlloc, GetVolumeInformationW, GetVersionExW, GetTimeZoneInformation, GetTickCount, GetThreadPriority, GetThreadLocale, GetStdHandle, GetProcAddress, GetModuleHandleW, GetModuleFileNameW, GetLogicalDrives, GetLogicalDriveStringsW, GetLocaleInfoW, GetLocalTime, GetLastError, GetFullPathNameW, GetFileSize, GetFileAttributesExW, GetFileAttributesW, GetExitCodeThread, GetDriveTypeW, GetDiskFreeSpaceW, GetDateFormatW, GetCurrentThreadId, GetCurrentThread, GetCurrentProcess, GetCPInfoExW, GetCPInfo, GetACP, FreeLibrary, FormatMessageW, FindNextFileW, FindFirstFileW, FindClose, FileTimeToSystemTime, FileTimeToLocalFileTime, FileTimeToDosDateTime, EnumSystemLocalesW, EnumCalendarInfoW, EnterCriticalSection, DeleteCriticalSection, CreateSemaphoreA, CreateFileMappingW, CreateFileW, CreateEventA, CreateEventW, CreateDirectoryW, CompareStringW, CloseHandle
kernel32.dll	Sleep
netapi32.dll	NetApiBufferFree, NetWkstaGetInfo
oleaut32.dll	SafeArrayPtrOfIndex, SafeArrayGetUBound, SafeArrayGetLBound, SafeArrayCreate, VariantChangeType, VariantCopy, VariantClear, VariantInit
msvcrt.dll	memset, memmove, memcpy
msvcrt.dll	_beginthreadex

Exports

Name	Ordinal	Address
TMethodImplementationIntercept	3	0x7005cc
__dbk_fcall_wrapper	2	0x4103fc
dbkFCallWrapperAddr	1	0x77162c

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 5, 2024 12:24:55.168735027 CEST	49730	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:24:55.168771029 CEST	443	49730	91.242.163.155	192.168.2.4
Apr 5, 2024 12:24:55.168847084 CEST	49730	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:24:55.233330011 CEST	49730	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:24:55.233357906 CEST	443	49730	91.242.163.155	192.168.2.4
Apr 5, 2024 12:24:55.233403921 CEST	49730	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:24:55.233405113 CEST	443	49730	91.242.163.155	192.168.2.4
Apr 5, 2024 12:24:55.233418941 CEST	443	49730	91.242.163.155	192.168.2.4
Apr 5, 2024 12:24:55.241601944 CEST	49731	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:24:55.241630077 CEST	443	49731	95.164.23.133	192.168.2.4
Apr 5, 2024 12:24:55.241700888 CEST	49731	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:24:55.296281099 CEST	49731	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:24:55.296295881 CEST	443	49731	95.164.23.133	192.168.2.4
Apr 5, 2024 12:24:55.296336889 CEST	443	49731	95.164.23.133	192.168.2.4
Apr 5, 2024 12:24:55.296345949 CEST	49731	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:24:55.296358109 CEST	443	49731	95.164.23.133	192.168.2.4
Apr 5, 2024 12:24:55.304932117 CEST	49732	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:24:55.304971933 CEST	443	49732	91.242.163.155	192.168.2.4
Apr 5, 2024 12:24:55.305052042 CEST	49732	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:24:55.365669012 CEST	49732	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:24:55.365684986 CEST	443	49732	91.242.163.155	192.168.2.4
Apr 5, 2024 12:24:55.365695000 CEST	49732	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:24:55.365700960 CEST	443	49732	91.242.163.155	192.168.2.4
Apr 5, 2024 12:24:55.365732908 CEST	443	49732	91.242.163.155	192.168.2.4
Apr 5, 2024 12:24:55.374254942 CEST	49733	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:24:55.374296904 CEST	443	49733	95.164.23.133	192.168.2.4
Apr 5, 2024 12:24:55.374366999 CEST	49733	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:24:55.434667110 CEST	49733	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:24:55.434698105 CEST	443	49733	95.164.23.133	192.168.2.4
Apr 5, 2024 12:24:55.434741974 CEST	443	49733	95.164.23.133	192.168.2.4
Apr 5, 2024 12:24:55.434746027 CEST	49733	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:24:55.434760094 CEST	443	49733	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:43.064301968 CEST	49740	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:43.064344883 CEST	443	49740	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:43.064414978 CEST	49740	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:43.119481087 CEST	49740	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:43.119499922 CEST	443	49740	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:43.119543076 CEST	49740	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:43.119549990 CEST	443	49740	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:43.119560957 CEST	443	49740	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:43.129657030 CEST	49741	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:43.129690886 CEST	443	49741	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:43.129762888 CEST	49741	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:43.202105045 CEST	49741	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:43.202136040 CEST	443	49741	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:43.202184916 CEST	443	49741	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:43.202186108 CEST	49741	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:43.202199936 CEST	443	49741	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:43.213787079 CEST	49742	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:43.213820934 CEST	443	49742	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:43.213890076 CEST	49742	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:43.267077923 CEST	49742	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:43.267105103 CEST	443	49742	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:43.267149925 CEST	443	49742	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:43.267154932 CEST	49742	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:43.267168045 CEST	443	49742	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:43.275337934 CEST	49743	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:43.275367022 CEST	443	49743	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:43.275433064 CEST	49743	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:43.358381987 CEST	49743	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:43.358401060 CEST	443	49743	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:43.358453989 CEST	49743	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:43.358460903 CEST	443	49743	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:43.358465910 CEST	443	49743	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:43.367407084 CEST	49744	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:43.367435932 CEST	443	49744	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:43.367522001 CEST	49744	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:43.634746075 CEST	49744	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:43.634774923 CEST	443	49744	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:43.634830952 CEST	49744	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:43.634831905 CEST	443	49744	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:43.634845018 CEST	443	49744	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:43.643330097 CEST	49745	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:43.643358946 CEST	443	49745	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:43.643420935 CEST	49745	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:43.724263906 CEST	49745	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:43.724282980 CEST	443	49745	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:43.724304914 CEST	49745	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:43.724309921 CEST	443	49745	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:43.724328041 CEST	443	49745	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:43.736783028 CEST	49746	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:43.736813068 CEST	443	49746	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:43.736891985 CEST	49746	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:43.787241936 CEST	49746	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:43.787256956 CEST	443	49746	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:43.787267923 CEST	49746	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:43.787275076 CEST	443	49746	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:43.787298918 CEST	443	49746	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:43.804001093 CEST	49747	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:43.804033041 CEST	443	49747	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:43.804097891 CEST	49747	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:43.857688904 CEST	49747	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:43.857706070 CEST	443	49747	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:43.857745886 CEST	443	49747	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:43.857758045 CEST	49747	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:43.857767105 CEST	443	49747	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:54.495215893 CEST	49749	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:54.495255947 CEST	443	49749	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:54.495328903 CEST	49749	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:54.545922041 CEST	49749	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:54.545939922 CEST	443	49749	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:54.545983076 CEST	443	49749	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:54.545989037 CEST	49749	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:54.546001911 CEST	443	49749	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:54.787930012 CEST	49750	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:54.787969112 CEST	443	49750	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:54.788038969 CEST	49750	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:54.829287052 CEST	49750	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:54.829302073 CEST	443	49750	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:54.829336882 CEST	443	49750	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:54.829348087 CEST	49750	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:54.829356909 CEST	443	49750	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:54.835977077 CEST	49751	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:54.836013079 CEST	443	49751	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:54.836078882 CEST	49751	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:54.896725893 CEST	49751	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:54.896738052 CEST	443	49751	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:54.896756887 CEST	443	49751	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:54.896780968 CEST	49751	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:54.896790981 CEST	443	49751	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:54.911053896 CEST	49752	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:54.911082983 CEST	443	49752	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:54.911155939 CEST	49752	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:54.954396963 CEST	49752	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:54.954410076 CEST	443	49752	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:54.954432964 CEST	443	49752	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:54.954461098 CEST	49752	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:54.954468966 CEST	443	49752	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:59.010957956 CEST	49753	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:59.010996103 CEST	443	49753	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:59.011080027 CEST	49753	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:59.055165052 CEST	49753	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:59.055183887 CEST	443	49753	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:59.055223942 CEST	443	49753	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:59.055233955 CEST	49753	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:59.055244923 CEST	443	49753	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:59.062601089 CEST	49754	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:59.062638044 CEST	443	49754	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:59.062711954 CEST	49754	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:59.116133928 CEST	49754	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:59.116147041 CEST	443	49754	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:59.116169930 CEST	443	49754	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:59.116204977 CEST	49754	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:59.116214991 CEST	443	49754	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:59.122752905 CEST	49755	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:59.122791052 CEST	443	49755	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:59.122852087 CEST	49755	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:59.182949066 CEST	49755	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:59.182965994 CEST	443	49755	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:59.182992935 CEST	443	49755	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:59.183010101 CEST	49755	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:59.183023930 CEST	443	49755	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:59.189912081 CEST	49756	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:59.189943075 CEST	443	49756	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:59.190005064 CEST	49756	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:59.231650114 CEST	49756	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:59.231668949 CEST	443	49756	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:59.231697083 CEST	443	49756	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:59.231719017 CEST	49756	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:59.231729031 CEST	443	49756	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:59.238260031 CEST	49757	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:59.238296986 CEST	443	49757	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:59.238363028 CEST	49757	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:59.290086031 CEST	49757	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:59.290105104 CEST	443	49757	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:59.290136099 CEST	443	49757	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:59.290158987 CEST	49757	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:59.290168047 CEST	443	49757	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:59.297025919 CEST	49758	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:59.297054052 CEST	443	49758	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:59.297127962 CEST	49758	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:59.345757008 CEST	49758	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:59.345772028 CEST	443	49758	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:59.345793962 CEST	443	49758	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:59.345820904 CEST	49758	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:59.345828056 CEST	443	49758	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:59.352546930 CEST	49759	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:59.352571964 CEST	443	49759	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:59.352641106 CEST	49759	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:59.408041954 CEST	49759	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:59.408057928 CEST	443	49759	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:59.408078909 CEST	443	49759	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:59.408099890 CEST	49759	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:25:59.408107996 CEST	443	49759	91.242.163.155	192.168.2.4
Apr 5, 2024 12:25:59.414654016 CEST	49760	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:59.414684057 CEST	443	49760	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:59.414753914 CEST	49760	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:59.471218109 CEST	49760	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:59.471232891 CEST	443	49760	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:59.471255064 CEST	443	49760	95.164.23.133	192.168.2.4
Apr 5, 2024 12:25:59.471272945 CEST	49760	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:25:59.471281052 CEST	443	49760	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:01.495536089 CEST	49761	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:01.495577097 CEST	443	49761	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:01.495654106 CEST	49761	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:01.565053940 CEST	49761	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:01.565068007 CEST	443	49761	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:01.565114021 CEST	443	49761	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:01.565135002 CEST	49761	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:01.565145016 CEST	443	49761	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:02.239248037 CEST	49762	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:02.239280939 CEST	443	49762	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:02.239357948 CEST	49762	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:03.616978884 CEST	49762	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:03.617011070 CEST	443	49762	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:03.617055893 CEST	49762	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:03.617064953 CEST	443	49762	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:04.204241037 CEST	49763	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:04.204267979 CEST	443	49763	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:04.204360962 CEST	49763	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:04.271389008 CEST	49763	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:04.271409035 CEST	443	49763	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:04.271426916 CEST	49763	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:04.271434069 CEST	443	49763	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:04.271456003 CEST	443	49763	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:04.891733885 CEST	49764	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:04.891767025 CEST	443	49764	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:04.891827106 CEST	49764	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:05.026815891 CEST	49764	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:05.026837111 CEST	443	49764	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:05.026854992 CEST	49764	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:05.026861906 CEST	443	49764	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:05.026911020 CEST	443	49764	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:07.558532000 CEST	49765	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:07.558573961 CEST	443	49765	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:07.558634996 CEST	49765	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:07.648627043 CEST	49765	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:07.648643017 CEST	443	49765	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:07.648684025 CEST	49765	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:07.648698092 CEST	443	49765	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:08.244664907 CEST	49766	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:08.244688988 CEST	443	49766	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:08.244750977 CEST	49766	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:08.325195074 CEST	49766	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:08.325217009 CEST	443	49766	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:08.325258970 CEST	49766	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:08.325264931 CEST	443	49766	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:08.325287104 CEST	443	49766	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:09.469250917 CEST	49767	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:09.469278097 CEST	443	49767	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:09.469333887 CEST	49767	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:09.554157019 CEST	49767	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:09.554168940 CEST	443	49767	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:09.554212093 CEST	49767	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:09.554214001 CEST	443	49767	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:09.554223061 CEST	443	49767	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:10.339849949 CEST	49768	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:10.339894056 CEST	443	49768	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:10.339956045 CEST	49768	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:10.518362045 CEST	49768	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:10.518385887 CEST	443	49768	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:10.518438101 CEST	443	49768	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:11.544353962 CEST	49769	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:11.544393063 CEST	443	49769	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:11.544465065 CEST	49769	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:11.722462893 CEST	49769	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:11.722486973 CEST	443	49769	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:11.722544909 CEST	443	49769	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:11.722557068 CEST	49769	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:11.722569942 CEST	443	49769	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:11.733768940 CEST	49770	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:11.733809948 CEST	443	49770	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:11.733869076 CEST	49770	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:11.794934034 CEST	49770	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:11.794946909 CEST	443	49770	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:11.794971943 CEST	443	49770	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:11.794990063 CEST	49770	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:11.795000076 CEST	443	49770	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:11.804239988 CEST	49771	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:11.804272890 CEST	443	49771	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:11.804337025 CEST	49771	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:11.864689112 CEST	49771	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:11.864711046 CEST	443	49771	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:11.864737034 CEST	443	49771	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:11.864764929 CEST	49771	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:11.864775896 CEST	443	49771	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:11.896315098 CEST	49772	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:11.896348000 CEST	443	49772	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:11.896410942 CEST	49772	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:11.955539942 CEST	49772	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:11.955557108 CEST	443	49772	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:11.955583096 CEST	443	49772	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:13.981089115 CEST	49773	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:13.981120110 CEST	443	49773	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:13.981374025 CEST	49773	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:14.075082064 CEST	49773	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:14.075102091 CEST	443	49773	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:14.075156927 CEST	443	49773	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:14.075166941 CEST	49773	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:14.075177908 CEST	443	49773	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:14.841003895 CEST	49774	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:14.841033936 CEST	443	49774	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:14.841252089 CEST	49774	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:15.539525986 CEST	49774	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:15.539546967 CEST	443	49774	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:15.539611101 CEST	443	49774	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:15.539627075 CEST	49774	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:15.539644003 CEST	443	49774	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:16.073718071 CEST	49775	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:16.073745966 CEST	443	49775	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:16.073848963 CEST	49775	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:16.148303032 CEST	49775	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:16.148319960 CEST	443	49775	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:16.148375034 CEST	443	49775	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:16.148380041 CEST	49775	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:16.148396969 CEST	443	49775	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:17.196316004 CEST	49776	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:17.196346998 CEST	443	49776	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:17.196892977 CEST	49776	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:18.283500910 CEST	49776	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:18.283525944 CEST	443	49776	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:18.283570051 CEST	49776	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:18.283576012 CEST	443	49776	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:18.283590078 CEST	443	49776	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:22.285377026 CEST	49777	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:22.285409927 CEST	443	49777	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:22.285474062 CEST	49777	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:22.375274897 CEST	49777	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:22.375292063 CEST	443	49777	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:22.375339031 CEST	49777	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:22.375350952 CEST	443	49777	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:23.106703997 CEST	49778	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:23.106741905 CEST	443	49778	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:23.106834888 CEST	49778	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:23.443825006 CEST	49778	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:23.443856955 CEST	443	49778	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:23.443869114 CEST	49778	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:23.443876028 CEST	443	49778	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:23.443912029 CEST	443	49778	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:24.665698051 CEST	49779	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:24.665738106 CEST	443	49779	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:24.665808916 CEST	49779	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:25.006685019 CEST	49779	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:25.006716967 CEST	443	49779	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:25.006763935 CEST	49779	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:25.006778955 CEST	443	49779	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:25.721003056 CEST	49780	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:25.721029043 CEST	443	49780	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:25.725111961 CEST	49780	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:25.787287951 CEST	49780	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:25.787308931 CEST	443	49780	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:25.787363052 CEST	443	49780	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:25.787441015 CEST	49780	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:25.787451029 CEST	443	49780	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:26.824074030 CEST	49781	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:26.824120998 CEST	443	49781	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:26.824187040 CEST	49781	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:26.894678116 CEST	49781	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:26.894696951 CEST	443	49781	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:26.894746065 CEST	443	49781	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:26.894752979 CEST	49781	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:26.894764900 CEST	443	49781	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:26.906812906 CEST	49782	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:26.906847954 CEST	443	49782	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:26.906932116 CEST	49782	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:26.972220898 CEST	49782	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:26.972234964 CEST	443	49782	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:26.972260952 CEST	443	49782	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:26.972291946 CEST	49782	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:26.972300053 CEST	443	49782	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:26.985776901 CEST	49783	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:26.985801935 CEST	443	49783	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:26.985862970 CEST	49783	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:27.067920923 CEST	49783	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:27.067934990 CEST	443	49783	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:27.067958117 CEST	443	49783	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:27.067976952 CEST	49783	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:27.067998886 CEST	443	49783	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:27.079005957 CEST	49784	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:27.079031944 CEST	443	49784	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:27.079113007 CEST	49784	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:27.165206909 CEST	49784	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:27.165230036 CEST	443	49784	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:27.165260077 CEST	443	49784	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:27.165276051 CEST	49784	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:27.165292025 CEST	443	49784	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:29.227022886 CEST	49785	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:29.227056026 CEST	443	49785	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:29.227128983 CEST	49785	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:29.688317060 CEST	49785	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:29.688343048 CEST	443	49785	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:29.688378096 CEST	49785	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:29.688386917 CEST	443	49785	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:29.688407898 CEST	443	49785	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:30.794079065 CEST	49786	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:30.794109106 CEST	443	49786	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:30.794169903 CEST	49786	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:31.098644018 CEST	49786	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:31.098669052 CEST	443	49786	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:31.098716974 CEST	49786	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:31.098723888 CEST	443	49786	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:31.098735094 CEST	443	49786	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:32.573555946 CEST	49787	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:32.573590994 CEST	443	49787	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:32.573648930 CEST	49787	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:32.670615911 CEST	49787	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:32.670631886 CEST	443	49787	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:32.670679092 CEST	49787	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:32.670684099 CEST	443	49787	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:32.670695066 CEST	443	49787	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:34.100241899 CEST	49788	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:34.100269079 CEST	443	49788	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:34.103219986 CEST	49788	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:35.188359022 CEST	49788	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:35.188386917 CEST	443	49788	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:35.188426018 CEST	49788	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:35.188431978 CEST	443	49788	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:35.188448906 CEST	443	49788	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:38.777221918 CEST	49789	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:38.777262926 CEST	443	49789	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:38.777329922 CEST	49789	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:38.859726906 CEST	49789	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:38.859770060 CEST	443	49789	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:38.859816074 CEST	443	49789	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:38.859829903 CEST	49789	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:38.859853029 CEST	443	49789	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:40.491811037 CEST	49790	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:40.491842031 CEST	443	49790	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:40.491898060 CEST	49790	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:40.911479950 CEST	49790	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:40.911499023 CEST	443	49790	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:40.911546946 CEST	49790	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:40.911564112 CEST	443	49790	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:42.056994915 CEST	49791	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:42.057022095 CEST	443	49791	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:42.057092905 CEST	49791	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:43.148910046 CEST	49791	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:43.148924112 CEST	443	49791	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:43.148962021 CEST	49791	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:43.148971081 CEST	443	49791	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:44.468997002 CEST	49792	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:44.469027996 CEST	443	49792	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:44.473025084 CEST	49792	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:44.575656891 CEST	49792	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:44.575673103 CEST	443	49792	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:44.575721025 CEST	443	49792	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:44.575723886 CEST	49792	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:44.575731993 CEST	443	49792	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:45.943083048 CEST	49793	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:45.943114996 CEST	443	49793	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:45.943228006 CEST	49793	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:46.001125097 CEST	49793	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:46.001136065 CEST	443	49793	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:46.001178026 CEST	443	49793	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:46.001275063 CEST	49793	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:46.001283884 CEST	443	49793	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:46.012440920 CEST	49794	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:46.012520075 CEST	443	49794	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:46.012623072 CEST	49794	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:46.700211048 CEST	49794	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:46.700236082 CEST	443	49794	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:46.700282097 CEST	49794	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:46.700284958 CEST	443	49794	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:46.700294971 CEST	443	49794	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:46.751746893 CEST	49795	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:46.751791954 CEST	443	49795	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:46.751852989 CEST	49795	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:46.798118114 CEST	49795	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:46.798131943 CEST	443	49795	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:46.798160076 CEST	443	49795	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:46.798177004 CEST	49795	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:46.798186064 CEST	443	49795	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:46.809838057 CEST	49796	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:46.809870958 CEST	443	49796	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:46.809925079 CEST	49796	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:46.861707926 CEST	49796	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:46.861725092 CEST	443	49796	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:46.861757994 CEST	443	49796	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:48.886826992 CEST	49797	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:48.886858940 CEST	443	49797	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:48.886910915 CEST	49797	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:48.950313091 CEST	49797	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:48.950333118 CEST	443	49797	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:48.950371981 CEST	443	49797	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:48.950378895 CEST	49797	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:48.950390100 CEST	443	49797	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:50.825202942 CEST	49798	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:50.825227976 CEST	443	49798	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:50.825283051 CEST	49798	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:51.051265955 CEST	49798	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:51.051280975 CEST	443	49798	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:51.051331043 CEST	443	49798	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:51.996992111 CEST	49799	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:51.997021914 CEST	443	49799	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:51.997416973 CEST	49799	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:55.337699890 CEST	49799	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:55.337727070 CEST	443	49799	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:55.337771893 CEST	49799	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:55.337774992 CEST	443	49799	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:55.337786913 CEST	443	49799	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:56.563834906 CEST	49800	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:56.563864946 CEST	443	49800	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:56.563920975 CEST	49800	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:56.642860889 CEST	49800	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:56.642875910 CEST	443	49800	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:56.642918110 CEST	443	49800	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:56.642920017 CEST	49800	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:26:56.642926931 CEST	443	49800	95.164.23.133	192.168.2.4
Apr 5, 2024 12:26:59.574356079 CEST	49801	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:59.574394941 CEST	443	49801	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:59.574620962 CEST	49801	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:59.625969887 CEST	49801	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:59.625984907 CEST	443	49801	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:59.626025915 CEST	443	49801	91.242.163.155	192.168.2.4
Apr 5, 2024 12:26:59.626061916 CEST	49801	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:26:59.626071930 CEST	443	49801	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:00.845912933 CEST	49802	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:00.845941067 CEST	443	49802	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:00.845997095 CEST	49802	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:00.901674986 CEST	49802	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:00.901695967 CEST	443	49802	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:00.901742935 CEST	49802	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:00.901742935 CEST	443	49802	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:00.901756048 CEST	443	49802	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:01.510279894 CEST	49803	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:01.510317087 CEST	443	49803	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:01.510404110 CEST	49803	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:02.357319117 CEST	49803	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:02.357337952 CEST	443	49803	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:02.357388973 CEST	49803	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:02.357393026 CEST	443	49803	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:02.357403994 CEST	443	49803	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:03.434601068 CEST	49804	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:03.434638977 CEST	443	49804	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:03.434739113 CEST	49804	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:03.487871885 CEST	49804	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:03.487894058 CEST	443	49804	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:03.487905025 CEST	49804	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:03.487910032 CEST	443	49804	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:03.487925053 CEST	443	49804	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:05.073616982 CEST	49805	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:05.073645115 CEST	443	49805	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:05.073713064 CEST	49805	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:05.135591984 CEST	49805	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:05.135610104 CEST	443	49805	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:05.135663033 CEST	443	49805	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:05.135672092 CEST	49805	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:05.135684013 CEST	443	49805	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:05.151993990 CEST	49806	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:05.152025938 CEST	443	49806	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:05.152089119 CEST	49806	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:05.497183084 CEST	49806	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:05.497198105 CEST	443	49806	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:05.497240067 CEST	443	49806	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:05.497248888 CEST	49806	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:05.497266054 CEST	443	49806	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:05.512279987 CEST	49807	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:05.512301922 CEST	443	49807	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:05.512391090 CEST	49807	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:05.571906090 CEST	49807	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:05.571919918 CEST	443	49807	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:05.571949959 CEST	443	49807	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:05.571978092 CEST	49807	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:05.571985006 CEST	443	49807	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:05.582447052 CEST	49808	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:05.582484961 CEST	443	49808	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:05.582634926 CEST	49808	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:05.640225887 CEST	49808	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:05.640248060 CEST	443	49808	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:05.640273094 CEST	443	49808	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:05.640302896 CEST	49808	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:05.640311003 CEST	443	49808	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:07.684987068 CEST	49809	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:07.685018063 CEST	443	49809	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:07.685139894 CEST	49809	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:08.364146948 CEST	49809	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:08.364170074 CEST	443	49809	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:08.364211082 CEST	49809	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:08.364224911 CEST	443	49809	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:08.982856035 CEST	49810	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:08.982882977 CEST	443	49810	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:08.982943058 CEST	49810	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:10.100995064 CEST	49810	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:10.101020098 CEST	443	49810	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:10.101073027 CEST	443	49810	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:13.737202883 CEST	49811	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:13.737234116 CEST	443	49811	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:13.737289906 CEST	49811	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:14.053045988 CEST	49811	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:14.053066969 CEST	443	49811	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:14.053112030 CEST	443	49811	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:14.053119898 CEST	49811	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:14.053132057 CEST	443	49811	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:15.352988005 CEST	49812	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:15.353018999 CEST	443	49812	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:15.353179932 CEST	49812	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:16.748989105 CEST	49812	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:16.749020100 CEST	443	49812	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:16.749067068 CEST	443	49812	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:19.855129957 CEST	49813	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:19.855165005 CEST	443	49813	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:19.855273008 CEST	49813	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:19.909086943 CEST	49813	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:19.909104109 CEST	443	49813	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:19.909143925 CEST	443	49813	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:19.923335075 CEST	49814	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:19.923362017 CEST	443	49814	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:19.923460007 CEST	49814	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:19.973686934 CEST	49814	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:19.973697901 CEST	443	49814	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:19.973738909 CEST	443	49814	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:19.973768950 CEST	49814	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:19.973783970 CEST	443	49814	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:19.986502886 CEST	49815	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:19.986532927 CEST	443	49815	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:19.986612082 CEST	49815	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:20.035413027 CEST	49815	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:20.035434008 CEST	443	49815	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:20.035470963 CEST	443	49815	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:20.035495996 CEST	49815	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:20.035505056 CEST	443	49815	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:20.047298908 CEST	49816	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:20.047326088 CEST	443	49816	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:20.047437906 CEST	49816	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:20.118690014 CEST	49816	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:20.118706942 CEST	443	49816	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:20.118730068 CEST	443	49816	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:20.131191969 CEST	49817	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:20.131217003 CEST	443	49817	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:20.131288052 CEST	49817	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:20.180088043 CEST	49817	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:20.180097103 CEST	443	49817	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:20.180124998 CEST	443	49817	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:20.182955027 CEST	49818	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:20.182981014 CEST	443	49818	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:20.183068991 CEST	49818	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:20.233494997 CEST	49818	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:20.233506918 CEST	443	49818	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:20.233529091 CEST	443	49818	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:20.235985994 CEST	49819	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:20.236010075 CEST	443	49819	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:20.236088037 CEST	49819	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:20.341644049 CEST	49819	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:20.341667891 CEST	443	49819	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:20.341697931 CEST	443	49819	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:20.341730118 CEST	49819	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:20.341746092 CEST	443	49819	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:20.344496965 CEST	49820	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:20.344536066 CEST	443	49820	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:20.344727993 CEST	49820	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:20.391366959 CEST	49820	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:20.391386032 CEST	443	49820	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:20.391407013 CEST	443	49820	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:20.391444921 CEST	49820	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:20.391462088 CEST	443	49820	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:22.416981936 CEST	49821	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:22.417011976 CEST	443	49821	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:22.421125889 CEST	49821	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:22.468980074 CEST	49821	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:22.468995094 CEST	443	49821	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:22.469033003 CEST	443	49821	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:22.469068050 CEST	49821	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:22.469077110 CEST	443	49821	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:22.480669022 CEST	49822	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:22.480712891 CEST	443	49822	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:22.480874062 CEST	49822	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:22.525023937 CEST	49822	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:22.525043011 CEST	443	49822	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:22.525064945 CEST	443	49822	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:22.536984921 CEST	49823	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:22.537014008 CEST	443	49823	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:22.537198067 CEST	49823	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:22.592237949 CEST	49823	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:22.592252016 CEST	443	49823	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:22.592278957 CEST	443	49823	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:22.592295885 CEST	49823	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:22.592303991 CEST	443	49823	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:22.609251022 CEST	49824	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:22.609277964 CEST	443	49824	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:22.609328985 CEST	49824	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:22.732045889 CEST	49824	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:22.732064009 CEST	443	49824	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:22.732095957 CEST	443	49824	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:22.732108116 CEST	49824	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:22.732115030 CEST	443	49824	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:24.776721001 CEST	49825	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:24.776774883 CEST	443	49825	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:24.776833057 CEST	49825	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:24.833625078 CEST	49825	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:24.833640099 CEST	443	49825	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:24.833672047 CEST	443	49825	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:24.833679914 CEST	49825	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:24.833689928 CEST	443	49825	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:24.849309921 CEST	49826	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:24.849340916 CEST	443	49826	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:24.849397898 CEST	49826	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:24.912564993 CEST	49826	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:24.912580967 CEST	443	49826	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:24.912595987 CEST	49826	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:24.912606955 CEST	443	49826	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:24.912636995 CEST	443	49826	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:24.931880951 CEST	49827	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:24.931911945 CEST	443	49827	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:24.931974888 CEST	49827	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:24.997248888 CEST	49827	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:24.997262001 CEST	443	49827	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:24.997283936 CEST	443	49827	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:25.012725115 CEST	49828	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:25.012751102 CEST	443	49828	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:25.012806892 CEST	49828	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:25.066868067 CEST	49828	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:25.066880941 CEST	443	49828	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:25.066915035 CEST	443	49828	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:25.066924095 CEST	49828	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:25.066932917 CEST	443	49828	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:25.080379963 CEST	49829	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:25.080406904 CEST	443	49829	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:25.080476999 CEST	49829	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:25.159648895 CEST	49829	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:25.159668922 CEST	443	49829	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:25.159713984 CEST	49829	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:25.159715891 CEST	443	49829	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:25.159723997 CEST	443	49829	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:25.163408041 CEST	49830	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:25.163438082 CEST	443	49830	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:25.163492918 CEST	49830	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:25.207720041 CEST	49830	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:25.207732916 CEST	443	49830	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:25.207750082 CEST	443	49830	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:25.207771063 CEST	49830	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:25.207782984 CEST	443	49830	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:25.211112022 CEST	49831	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:25.211138964 CEST	443	49831	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:25.211206913 CEST	49831	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:25.259785891 CEST	49831	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:25.259802103 CEST	443	49831	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:25.259821892 CEST	443	49831	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:25.259852886 CEST	49831	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:25.259861946 CEST	443	49831	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:25.263166904 CEST	49832	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:25.263200998 CEST	443	49832	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:25.263253927 CEST	49832	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:25.326344013 CEST	49832	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:25.326360941 CEST	443	49832	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:25.326383114 CEST	443	49832	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:25.326414108 CEST	49832	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:25.326426983 CEST	443	49832	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:27.354850054 CEST	49833	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:27.354883909 CEST	443	49833	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:27.354938030 CEST	49833	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:27.425291061 CEST	49833	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:27.425299883 CEST	443	49833	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:27.425329924 CEST	443	49833	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:27.425357103 CEST	49833	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:27.425367117 CEST	443	49833	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:27.444293976 CEST	49834	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:27.444333076 CEST	443	49834	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:27.444402933 CEST	49834	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:27.491303921 CEST	49834	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:27.491334915 CEST	443	49834	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:27.491369963 CEST	443	49834	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:27.491380930 CEST	49834	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:27.491394043 CEST	443	49834	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:27.514765024 CEST	49835	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:27.514807940 CEST	443	49835	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:27.514866114 CEST	49835	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:27.580796003 CEST	49835	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:27.580796003 CEST	49835	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:27.580812931 CEST	443	49835	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:27.580822945 CEST	443	49835	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:27.580847025 CEST	443	49835	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:27.592994928 CEST	49836	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:27.593029022 CEST	443	49836	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:27.596059084 CEST	49836	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:27.645162106 CEST	49836	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:27.645162106 CEST	49836	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:27.645174026 CEST	443	49836	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:27.645184994 CEST	443	49836	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:27.645201921 CEST	443	49836	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:31.281858921 CEST	49837	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:31.281888962 CEST	443	49837	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:31.281948090 CEST	49837	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:31.439490080 CEST	49837	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:31.439507008 CEST	443	49837	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:31.439549923 CEST	49837	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:31.439554930 CEST	443	49837	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:31.439672947 CEST	443	49837	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:31.488306999 CEST	49838	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:31.488337040 CEST	443	49838	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:31.488390923 CEST	49838	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:31.563680887 CEST	49838	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:31.563694000 CEST	443	49838	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:31.563735962 CEST	49838	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:31.563740969 CEST	443	49838	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:31.563761950 CEST	443	49838	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:31.594141960 CEST	49839	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:31.594175100 CEST	443	49839	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:31.595305920 CEST	49839	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:31.649822950 CEST	49839	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:31.649837017 CEST	443	49839	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:31.649867058 CEST	443	49839	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:31.694406033 CEST	49840	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:31.694438934 CEST	443	49840	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:31.694674969 CEST	49840	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:31.734981060 CEST	49840	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:31.734996080 CEST	443	49840	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:31.735024929 CEST	443	49840	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:31.751415014 CEST	49841	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:31.751456976 CEST	443	49841	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:31.751549959 CEST	49841	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:31.788036108 CEST	49841	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:31.788048029 CEST	443	49841	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:31.788069963 CEST	443	49841	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:31.788117886 CEST	49841	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:31.788127899 CEST	443	49841	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:31.792093039 CEST	49842	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:31.792125940 CEST	443	49842	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:31.792241096 CEST	49842	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:31.833339930 CEST	49842	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:31.833359003 CEST	443	49842	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:31.833396912 CEST	443	49842	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:31.833425045 CEST	49842	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:31.833436966 CEST	443	49842	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:31.836692095 CEST	49843	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:31.836716890 CEST	443	49843	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:31.836812019 CEST	49843	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:31.884351969 CEST	49843	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:31.884351969 CEST	49843	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:31.884366035 CEST	443	49843	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:31.884375095 CEST	443	49843	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:31.884390116 CEST	443	49843	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:31.892452002 CEST	49844	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:31.892478943 CEST	443	49844	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:31.892647028 CEST	49844	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:31.937114954 CEST	49844	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:31.937136889 CEST	443	49844	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:31.937191963 CEST	443	49844	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:31.937196970 CEST	49844	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:31.937208891 CEST	443	49844	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:33.966579914 CEST	49845	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:33.966614008 CEST	443	49845	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:33.967039108 CEST	49845	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:34.032977104 CEST	49845	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:34.032994986 CEST	443	49845	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:34.033061981 CEST	443	49845	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:34.033101082 CEST	49845	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:34.033113003 CEST	443	49845	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:34.048984051 CEST	49846	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:34.049005985 CEST	443	49846	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:34.049213886 CEST	49846	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:34.116996050 CEST	49846	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:34.117012978 CEST	443	49846	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:34.117058039 CEST	443	49846	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:34.117082119 CEST	49846	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:34.117094040 CEST	443	49846	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:34.128140926 CEST	49847	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:34.128166914 CEST	443	49847	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:34.128253937 CEST	49847	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:34.171509027 CEST	49847	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:34.171519995 CEST	443	49847	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:34.171547890 CEST	443	49847	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:34.184972048 CEST	49848	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:34.184995890 CEST	443	49848	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:34.185142994 CEST	49848	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:34.243094921 CEST	49848	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:34.243140936 CEST	443	49848	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:34.243195057 CEST	443	49848	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:36.279002905 CEST	49849	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:36.279041052 CEST	443	49849	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:36.283319950 CEST	49849	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:36.331130028 CEST	49849	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:36.331150055 CEST	443	49849	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:36.331186056 CEST	443	49849	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:36.331222057 CEST	49849	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:36.331232071 CEST	443	49849	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:36.342133999 CEST	49850	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:36.342166901 CEST	443	49850	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:36.342545033 CEST	49850	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:36.398977041 CEST	49850	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:36.399008036 CEST	443	49850	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:36.399030924 CEST	443	49850	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:36.403011084 CEST	49850	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:36.403023958 CEST	443	49850	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:36.415127039 CEST	49851	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:36.415153980 CEST	443	49851	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:36.419090986 CEST	49851	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:37.589818001 CEST	49851	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:37.589818001 CEST	49851	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:37.589849949 CEST	443	49851	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:37.589859962 CEST	443	49851	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:37.589935064 CEST	443	49851	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:37.606873035 CEST	49852	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:37.606910944 CEST	443	49852	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:37.607009888 CEST	49852	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:37.646462917 CEST	49852	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:37.646473885 CEST	443	49852	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:37.646502972 CEST	443	49852	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:37.646511078 CEST	49852	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:37.646521091 CEST	443	49852	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:37.658122063 CEST	49853	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:37.658157110 CEST	443	49853	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:37.658265114 CEST	49853	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:37.706299067 CEST	49853	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:37.706334114 CEST	443	49853	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:37.706357956 CEST	443	49853	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:37.710885048 CEST	49854	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:37.710911989 CEST	443	49854	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:37.711297035 CEST	49854	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:37.762984991 CEST	49854	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:37.762990952 CEST	443	49854	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:37.763008118 CEST	443	49854	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:37.766830921 CEST	49855	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:37.766859055 CEST	443	49855	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:37.767041922 CEST	49855	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:37.815844059 CEST	49855	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:37.815857887 CEST	443	49855	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:37.815892935 CEST	443	49855	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:37.818738937 CEST	49856	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:37.818769932 CEST	443	49856	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:37.818959951 CEST	49856	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:37.883838892 CEST	49856	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:37.883856058 CEST	443	49856	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:37.883886099 CEST	443	49856	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:39.916752100 CEST	49857	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:39.916785955 CEST	443	49857	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:39.916938066 CEST	49857	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:39.969852924 CEST	49857	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:39.969873905 CEST	443	49857	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:39.969933033 CEST	443	49857	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:39.969952106 CEST	49857	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:39.969963074 CEST	443	49857	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:39.981280088 CEST	49858	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:39.981312990 CEST	443	49858	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:39.981466055 CEST	49858	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:40.035177946 CEST	49858	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:40.035207033 CEST	443	49858	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:40.035254955 CEST	443	49858	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:40.035290956 CEST	49858	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:40.035303116 CEST	443	49858	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:40.047068119 CEST	49859	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:40.047096968 CEST	443	49859	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:40.047270060 CEST	49859	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:40.087147951 CEST	49859	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:40.087162971 CEST	443	49859	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:40.087183952 CEST	443	49859	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:40.087274075 CEST	49859	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:40.087284088 CEST	443	49859	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:40.097320080 CEST	49860	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:40.097352982 CEST	443	49860	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:40.097495079 CEST	49860	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:40.140836954 CEST	49860	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:40.140851021 CEST	443	49860	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:40.140888929 CEST	49860	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:40.140894890 CEST	443	49860	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:40.140908957 CEST	443	49860	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:42.184978008 CEST	49861	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:42.185013056 CEST	443	49861	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:42.185276031 CEST	49861	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:42.223514080 CEST	49861	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:42.223526955 CEST	443	49861	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:42.223576069 CEST	443	49861	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:42.223603010 CEST	49861	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:42.223611116 CEST	443	49861	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:42.235270977 CEST	49862	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:42.235310078 CEST	443	49862	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:42.235443115 CEST	49862	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:42.275729895 CEST	49862	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:42.275758028 CEST	443	49862	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:42.275780916 CEST	443	49862	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:42.275825024 CEST	49862	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:42.275840998 CEST	443	49862	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:42.286725044 CEST	49863	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:42.286755085 CEST	443	49863	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:42.286830902 CEST	49863	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:42.348974943 CEST	49863	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:42.348989964 CEST	443	49863	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:42.349041939 CEST	443	49863	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:42.349081039 CEST	49863	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:42.349088907 CEST	443	49863	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:42.360595942 CEST	49864	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:42.360625029 CEST	443	49864	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:42.361094952 CEST	49864	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:42.433945894 CEST	49864	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:42.433959007 CEST	443	49864	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:42.434012890 CEST	443	49864	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:42.434056044 CEST	49864	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:42.434065104 CEST	443	49864	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:42.445092916 CEST	49865	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:42.445131063 CEST	443	49865	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:42.449048042 CEST	49865	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:43.535120010 CEST	49865	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:43.535145998 CEST	443	49865	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:43.535187960 CEST	49865	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:43.535193920 CEST	443	49865	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:43.535250902 CEST	443	49865	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:43.539041042 CEST	49866	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:43.539071083 CEST	443	49866	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:43.539128065 CEST	49866	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:43.603941917 CEST	49866	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:43.603954077 CEST	443	49866	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:43.603986025 CEST	49866	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:43.603998899 CEST	443	49866	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:43.604032040 CEST	443	49866	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:43.605058908 CEST	49866	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:43.605067015 CEST	443	49866	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:43.607372999 CEST	49867	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:43.607404947 CEST	443	49867	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:43.607517958 CEST	49867	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:43.647802114 CEST	49867	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:43.647813082 CEST	443	49867	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:43.647852898 CEST	443	49867	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:43.647875071 CEST	49867	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:43.647886992 CEST	443	49867	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:43.650721073 CEST	49868	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:43.650753975 CEST	443	49868	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:43.650971889 CEST	49868	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:43.719144106 CEST	49868	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:43.719145060 CEST	49868	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:43.719172001 CEST	443	49868	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:43.719177008 CEST	443	49868	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:43.719203949 CEST	443	49868	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:45.747050047 CEST	49869	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:45.747133970 CEST	443	49869	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:45.751051903 CEST	49869	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:45.806996107 CEST	49869	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:45.807017088 CEST	443	49869	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:45.807068110 CEST	443	49869	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:45.823275089 CEST	49870	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:45.823318958 CEST	443	49870	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:45.827090025 CEST	49870	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:45.866607904 CEST	49870	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:45.866628885 CEST	443	49870	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:45.866660118 CEST	443	49870	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:45.879132032 CEST	49871	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:45.879168034 CEST	443	49871	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:45.883100033 CEST	49871	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:45.942749977 CEST	49871	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:45.942763090 CEST	443	49871	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:45.942828894 CEST	443	49871	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:45.942858934 CEST	49871	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:45.942868948 CEST	443	49871	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:45.954372883 CEST	49872	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:45.954399109 CEST	443	49872	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:45.954756021 CEST	49872	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:46.003025055 CEST	49872	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:46.003040075 CEST	443	49872	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:46.003087997 CEST	443	49872	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:48.060185909 CEST	49873	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:48.060225010 CEST	443	49873	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:48.060313940 CEST	49873	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:48.822638988 CEST	49873	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:48.822664976 CEST	443	49873	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:48.822705030 CEST	49873	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:48.822710991 CEST	443	49873	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:48.822719097 CEST	443	49873	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:49.460599899 CEST	49874	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:49.460628033 CEST	443	49874	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:49.460690022 CEST	49874	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:49.537931919 CEST	49874	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:49.537949085 CEST	443	49874	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:49.538002968 CEST	443	49874	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:49.538028002 CEST	49874	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:49.538036108 CEST	443	49874	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:49.728749037 CEST	49875	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:49.728785992 CEST	443	49875	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:49.728964090 CEST	49875	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:49.773952007 CEST	49875	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:49.773963928 CEST	443	49875	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:49.774000883 CEST	443	49875	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:49.774005890 CEST	49875	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:49.774013996 CEST	443	49875	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:49.818937063 CEST	49876	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:49.818965912 CEST	443	49876	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:49.819149017 CEST	49876	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:49.865457058 CEST	49876	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:49.865457058 CEST	49876	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:49.865468979 CEST	443	49876	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:49.865485907 CEST	443	49876	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:49.865502119 CEST	443	49876	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:49.885113955 CEST	49877	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:49.885139942 CEST	443	49877	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:49.885466099 CEST	49877	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:49.983349085 CEST	49877	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:49.983369112 CEST	443	49877	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:49.983411074 CEST	443	49877	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:49.983444929 CEST	49877	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:49.983454943 CEST	443	49877	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:49.986646891 CEST	49878	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:49.986682892 CEST	443	49878	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:49.986833096 CEST	49878	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:50.038988113 CEST	49878	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:50.039006948 CEST	443	49878	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:50.039031029 CEST	443	49878	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:50.040308952 CEST	49879	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:50.040344954 CEST	443	49879	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:50.040611029 CEST	49879	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:50.080987930 CEST	49879	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:50.081002951 CEST	443	49879	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:50.081034899 CEST	443	49879	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:50.083065033 CEST	49880	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:50.083092928 CEST	443	49880	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:50.083214045 CEST	49880	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:50.127062082 CEST	49880	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:50.127074957 CEST	443	49880	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:50.127101898 CEST	443	49880	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:52.150989056 CEST	49881	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:52.151024103 CEST	443	49881	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:52.151263952 CEST	49881	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:52.191186905 CEST	49881	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:52.191186905 CEST	49881	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:52.191205025 CEST	443	49881	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:52.191215038 CEST	443	49881	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:52.191242933 CEST	443	49881	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:52.200481892 CEST	49882	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:52.200515985 CEST	443	49882	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:52.200732946 CEST	49882	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:52.238976002 CEST	49882	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:52.238992929 CEST	443	49882	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:52.239013910 CEST	443	49882	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:52.251000881 CEST	49883	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:52.251024008 CEST	443	49883	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:52.251526117 CEST	49883	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:52.288680077 CEST	49883	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:52.288680077 CEST	49883	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:52.288680077 CEST	49883	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:52.288696051 CEST	443	49883	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:52.288703918 CEST	443	49883	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:52.288711071 CEST	443	49883	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:52.288731098 CEST	443	49883	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:52.301054955 CEST	49884	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:52.301093102 CEST	443	49884	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:52.301484108 CEST	49884	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:52.386989117 CEST	49884	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:52.386990070 CEST	49884	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:52.387013912 CEST	443	49884	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:52.387021065 CEST	443	49884	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:52.387039900 CEST	443	49884	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:54.419260025 CEST	49885	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:54.419287920 CEST	443	49885	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:54.423304081 CEST	49885	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:54.461508036 CEST	49885	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:54.461520910 CEST	443	49885	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:54.461576939 CEST	443	49885	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:54.471066952 CEST	49886	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:54.471086979 CEST	443	49886	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:54.471265078 CEST	49886	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:54.534992933 CEST	49886	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:54.535002947 CEST	443	49886	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:54.535036087 CEST	443	49886	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:54.544173002 CEST	49887	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:54.544316053 CEST	443	49887	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:54.544666052 CEST	49887	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:54.582906008 CEST	49887	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:54.582937956 CEST	443	49887	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:54.582961082 CEST	443	49887	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:54.591248989 CEST	49888	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:54.591273069 CEST	443	49888	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:54.595065117 CEST	49888	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:54.638729095 CEST	49888	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:54.638748884 CEST	443	49888	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:54.638772964 CEST	443	49888	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:54.638798952 CEST	49888	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:54.638808966 CEST	443	49888	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:54.651108027 CEST	49889	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:54.651134968 CEST	443	49889	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:54.651195049 CEST	49889	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:54.734138012 CEST	49889	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:54.734165907 CEST	443	49889	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:54.734179020 CEST	49889	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:54.734189987 CEST	443	49889	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:54.734222889 CEST	443	49889	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:54.735642910 CEST	49890	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:54.735666037 CEST	443	49890	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:54.735743999 CEST	49890	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:54.770797014 CEST	49890	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:54.770812988 CEST	443	49890	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:54.770836115 CEST	443	49890	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:54.770872116 CEST	49890	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:54.770884991 CEST	443	49890	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:54.771878004 CEST	49891	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:54.771918058 CEST	443	49891	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:54.771970034 CEST	49891	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:54.804447889 CEST	49891	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:54.804461956 CEST	443	49891	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:54.804471970 CEST	49891	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:54.804477930 CEST	443	49891	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:54.805540085 CEST	49892	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:54.805569887 CEST	443	49892	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:54.805636883 CEST	49892	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:54.856326103 CEST	49892	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:54.856344938 CEST	443	49892	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:54.856357098 CEST	49892	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:54.856363058 CEST	443	49892	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:54.856385946 CEST	443	49892	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:56.885149956 CEST	49893	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:56.885176897 CEST	443	49893	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:56.885238886 CEST	49893	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:56.950459003 CEST	49893	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:56.950481892 CEST	443	49893	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:56.950527906 CEST	49893	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:56.950532913 CEST	443	49893	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:56.950555086 CEST	443	49893	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:56.967889071 CEST	49894	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:56.967921972 CEST	443	49894	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:56.967978001 CEST	49894	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:57.027650118 CEST	49894	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:57.027657032 CEST	443	49894	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:57.027692080 CEST	49894	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:57.027704000 CEST	443	49894	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:57.027710915 CEST	443	49894	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:57.046211958 CEST	49895	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:57.046236038 CEST	443	49895	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:57.046292067 CEST	49895	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:57.108310938 CEST	49895	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:57.108331919 CEST	443	49895	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:57.108366013 CEST	443	49895	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:57.108376980 CEST	49895	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:57.108388901 CEST	443	49895	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:57.122143030 CEST	49896	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:57.122169018 CEST	443	49896	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:57.122229099 CEST	49896	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:57.185614109 CEST	49896	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:57.185626984 CEST	443	49896	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:57.185678959 CEST	49896	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:57.185684919 CEST	443	49896	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:57.185688019 CEST	443	49896	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:59.228790998 CEST	49897	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:59.228853941 CEST	443	49897	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:59.228925943 CEST	49897	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:59.288755894 CEST	49897	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:59.288769960 CEST	443	49897	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:59.288815975 CEST	443	49897	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:59.288821936 CEST	49897	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:59.288831949 CEST	443	49897	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:59.298742056 CEST	49898	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:59.298768997 CEST	443	49898	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:59.298851013 CEST	49898	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:59.358875990 CEST	49898	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:59.358891964 CEST	443	49898	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:59.358907938 CEST	49898	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:59.358916044 CEST	443	49898	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:59.358942032 CEST	443	49898	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:59.373126030 CEST	49899	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:59.373153925 CEST	443	49899	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:59.373208046 CEST	49899	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:59.423800945 CEST	49899	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:59.423816919 CEST	443	49899	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:59.423857927 CEST	49899	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:59.423863888 CEST	443	49899	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:59.437273026 CEST	49900	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:59.437304020 CEST	443	49900	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:59.437360048 CEST	49900	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:59.494009972 CEST	49900	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:59.494023085 CEST	443	49900	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:59.494048119 CEST	49900	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:59.494048119 CEST	443	49900	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:59.494057894 CEST	443	49900	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:59.507998943 CEST	49901	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:59.508030891 CEST	443	49901	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:59.508110046 CEST	49901	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:59.571029902 CEST	49901	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:59.571044922 CEST	443	49901	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:59.571091890 CEST	443	49901	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:59.571099997 CEST	49901	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:59.571108103 CEST	443	49901	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:59.572434902 CEST	49902	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:59.572464943 CEST	443	49902	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:59.572536945 CEST	49902	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:59.621284962 CEST	49902	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:59.621294022 CEST	443	49902	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:59.621320009 CEST	443	49902	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:59.621332884 CEST	49902	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:59.621344090 CEST	443	49902	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:59.622539043 CEST	49903	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:59.622567892 CEST	443	49903	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:59.622632980 CEST	49903	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:59.668359041 CEST	49903	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:59.668374062 CEST	443	49903	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:59.668423891 CEST	443	49903	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:59.668447018 CEST	49903	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:27:59.668454885 CEST	443	49903	91.242.163.155	192.168.2.4
Apr 5, 2024 12:27:59.669522047 CEST	49904	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:59.669548035 CEST	443	49904	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:59.669620991 CEST	49904	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:59.719017982 CEST	49904	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:27:59.719033957 CEST	443	49904	95.164.23.133	192.168.2.4
Apr 5, 2024 12:27:59.719063044 CEST	443	49904	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:01.744973898 CEST	49905	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:01.745008945 CEST	443	49905	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:01.745199919 CEST	49905	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:01.792993069 CEST	49905	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:01.792993069 CEST	49905	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:01.793009996 CEST	443	49905	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:01.793019056 CEST	443	49905	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:01.793044090 CEST	443	49905	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:01.808973074 CEST	49906	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:01.809005976 CEST	443	49906	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:01.809524059 CEST	49906	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:01.868973970 CEST	49906	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:01.868973970 CEST	49906	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:01.869002104 CEST	443	49906	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:01.869016886 CEST	443	49906	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:01.869035006 CEST	443	49906	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:01.880973101 CEST	49907	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:01.880997896 CEST	443	49907	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:01.881158113 CEST	49907	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:01.943964005 CEST	49907	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:01.943974018 CEST	443	49907	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:01.944006920 CEST	443	49907	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:01.944041967 CEST	49907	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:01.944053888 CEST	443	49907	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:01.959120035 CEST	49908	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:01.959152937 CEST	443	49908	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:01.959449053 CEST	49908	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:02.011706114 CEST	49908	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:02.011720896 CEST	443	49908	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:02.011749983 CEST	443	49908	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:02.011780977 CEST	49908	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:02.011791945 CEST	443	49908	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:04.041054010 CEST	49909	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:04.041085005 CEST	443	49909	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:04.041181087 CEST	49909	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:04.083636999 CEST	49909	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:04.083655119 CEST	443	49909	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:04.083693027 CEST	443	49909	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:04.083726883 CEST	49909	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:04.083735943 CEST	443	49909	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:04.094945908 CEST	49910	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:04.094985008 CEST	443	49910	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:04.095199108 CEST	49910	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:04.134717941 CEST	49910	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:04.134722948 CEST	443	49910	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:04.134748936 CEST	443	49910	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:04.134911060 CEST	49910	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:04.134936094 CEST	443	49910	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:04.147051096 CEST	49911	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:04.147078037 CEST	443	49911	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:04.147290945 CEST	49911	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:04.190980911 CEST	49911	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:04.191059113 CEST	443	49911	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:04.191098928 CEST	443	49911	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:04.199203014 CEST	49912	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:04.199229956 CEST	443	49912	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:04.199388981 CEST	49912	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:04.248828888 CEST	49912	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:04.248846054 CEST	443	49912	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:04.248867035 CEST	443	49912	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:04.258969069 CEST	49913	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:04.258996964 CEST	443	49913	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:04.259147882 CEST	49913	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:04.300162077 CEST	49913	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:04.300162077 CEST	49913	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:04.300178051 CEST	443	49913	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:04.300182104 CEST	443	49913	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:04.300209045 CEST	443	49913	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:04.303049088 CEST	49914	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:04.303078890 CEST	443	49914	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:04.303191900 CEST	49914	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:04.351186991 CEST	49914	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:04.351186991 CEST	49914	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:04.351213932 CEST	443	49914	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:04.351228952 CEST	443	49914	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:04.351258993 CEST	443	49914	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:04.355077982 CEST	49915	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:04.355102062 CEST	443	49915	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:04.359106064 CEST	49915	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:05.848269939 CEST	49915	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:05.848295927 CEST	443	49915	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:05.848356009 CEST	443	49915	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:05.979095936 CEST	49916	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:05.979135990 CEST	443	49916	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:05.979275942 CEST	49916	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:07.835870028 CEST	49916	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:07.835906982 CEST	443	49916	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:07.835925102 CEST	49916	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:07.835932016 CEST	443	49916	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:07.835969925 CEST	443	49916	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:09.869534969 CEST	49917	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:09.869565010 CEST	443	49917	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:09.869631052 CEST	49917	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:09.926400900 CEST	49917	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:09.926415920 CEST	443	49917	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:09.926469088 CEST	49917	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:09.926472902 CEST	443	49917	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:09.926481009 CEST	443	49917	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:09.941719055 CEST	49918	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:09.941744089 CEST	443	49918	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:09.941803932 CEST	49918	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:10.022238016 CEST	49918	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:10.022254944 CEST	443	49918	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:10.022293091 CEST	49918	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:10.022296906 CEST	443	49918	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:10.022310972 CEST	443	49918	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:10.040731907 CEST	49919	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:10.040762901 CEST	443	49919	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:10.040831089 CEST	49919	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:10.110416889 CEST	49919	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:10.110433102 CEST	443	49919	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:10.110481977 CEST	49919	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:10.110486984 CEST	443	49919	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:10.110496044 CEST	443	49919	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:10.124211073 CEST	49920	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:10.124224901 CEST	443	49920	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:10.124275923 CEST	49920	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:10.203181028 CEST	49920	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:10.203197002 CEST	443	49920	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:10.203226089 CEST	443	49920	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:10.203233957 CEST	49920	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:10.203239918 CEST	443	49920	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:12.246643066 CEST	49921	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:12.246671915 CEST	443	49921	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:12.246778011 CEST	49921	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:12.307339907 CEST	49921	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:12.307348967 CEST	443	49921	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:12.307385921 CEST	49921	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:12.307390928 CEST	443	49921	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:12.307404041 CEST	443	49921	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:12.323705912 CEST	49922	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:12.323734045 CEST	443	49922	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:12.323780060 CEST	49922	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:12.426546097 CEST	49922	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:12.426561117 CEST	443	49922	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:12.426601887 CEST	49922	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:12.426606894 CEST	443	49922	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:12.426630020 CEST	443	49922	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:12.441867113 CEST	49923	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:12.441900015 CEST	443	49923	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:12.441963911 CEST	49923	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:12.504267931 CEST	49923	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:12.504281044 CEST	443	49923	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:12.504295111 CEST	49923	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:12.504302025 CEST	443	49923	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:12.504317999 CEST	443	49923	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:12.519570112 CEST	49924	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:12.519601107 CEST	443	49924	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:12.519659042 CEST	49924	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:12.588673115 CEST	49924	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:12.588689089 CEST	443	49924	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:12.588721991 CEST	443	49924	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:12.588730097 CEST	49924	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:12.588745117 CEST	443	49924	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:12.604513884 CEST	49925	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:12.604541063 CEST	443	49925	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:12.604588032 CEST	49925	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:12.662976027 CEST	49925	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:12.662987947 CEST	443	49925	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:12.663018942 CEST	443	49925	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:12.670984030 CEST	49926	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:12.671009064 CEST	443	49926	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:12.675196886 CEST	49926	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:12.726984024 CEST	49926	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:12.726998091 CEST	443	49926	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:12.727020979 CEST	443	49926	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:12.735151052 CEST	49927	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:12.735178947 CEST	443	49927	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:12.739088058 CEST	49927	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:12.799057961 CEST	49927	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:12.799069881 CEST	443	49927	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:12.799094915 CEST	443	49927	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:12.799129009 CEST	49927	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:12.799137115 CEST	443	49927	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:12.803133011 CEST	49928	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:12.803155899 CEST	443	49928	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:12.807306051 CEST	49928	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:13.868478060 CEST	49928	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:13.868499994 CEST	443	49928	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:13.868556023 CEST	443	49928	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:15.930011034 CEST	49929	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:15.930039883 CEST	443	49929	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:15.930095911 CEST	49929	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:15.999169111 CEST	49929	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:15.999177933 CEST	443	49929	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:15.999221087 CEST	443	49929	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:15.999233007 CEST	49929	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:15.999244928 CEST	443	49929	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:16.016031027 CEST	49930	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:16.016060114 CEST	443	49930	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:16.016114950 CEST	49930	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:16.078583956 CEST	49930	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:16.078600883 CEST	443	49930	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:16.078645945 CEST	49930	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:16.078650951 CEST	443	49930	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:16.078656912 CEST	443	49930	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:16.092215061 CEST	49931	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:16.092257977 CEST	443	49931	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:16.092308998 CEST	49931	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:16.163863897 CEST	49931	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:16.163945913 CEST	443	49931	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:16.163992882 CEST	443	49931	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:16.164017916 CEST	49931	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:16.164052963 CEST	443	49931	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:16.191818953 CEST	49932	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:16.191854954 CEST	443	49932	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:16.191910028 CEST	49932	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:16.247519016 CEST	49932	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:16.247531891 CEST	443	49932	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:16.247565985 CEST	443	49932	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:16.247570038 CEST	49932	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:16.247581005 CEST	443	49932	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:18.293548107 CEST	49933	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:18.293579102 CEST	443	49933	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:18.293694019 CEST	49933	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:18.363548994 CEST	49933	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:18.363570929 CEST	443	49933	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:18.363626003 CEST	49933	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:18.363626003 CEST	443	49933	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:18.363636971 CEST	443	49933	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:18.385956049 CEST	49934	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:18.385987997 CEST	443	49934	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:18.386049032 CEST	49934	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:18.447640896 CEST	49934	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:18.447654009 CEST	443	49934	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:18.447684050 CEST	443	49934	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:18.447702885 CEST	49934	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:18.447710991 CEST	443	49934	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:18.461633921 CEST	49935	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:18.461661100 CEST	443	49935	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:18.461711884 CEST	49935	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:18.526372910 CEST	49935	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:18.526390076 CEST	443	49935	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:18.526433945 CEST	49935	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:18.526444912 CEST	443	49935	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:18.536639929 CEST	49936	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:18.536664963 CEST	443	49936	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:18.536725998 CEST	49936	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:18.585175991 CEST	49936	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:18.585191011 CEST	443	49936	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:18.585227013 CEST	443	49936	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:18.585241079 CEST	49936	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:18.585247993 CEST	443	49936	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:18.605063915 CEST	49937	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:18.605099916 CEST	443	49937	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:18.605165005 CEST	49937	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:18.656811953 CEST	49937	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:18.656821012 CEST	443	49937	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:18.656831980 CEST	49937	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:18.656837940 CEST	443	49937	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:18.656873941 CEST	443	49937	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:18.659266949 CEST	49938	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:18.659293890 CEST	443	49938	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:18.659347057 CEST	49938	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:18.704979897 CEST	49938	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:18.704979897 CEST	49938	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:18.704999924 CEST	443	49938	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:18.705010891 CEST	443	49938	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:18.705059052 CEST	443	49938	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:18.707988024 CEST	49939	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:18.708023071 CEST	443	49939	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:18.708506107 CEST	49939	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:18.776972055 CEST	49939	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:18.776972055 CEST	49939	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:18.776988029 CEST	443	49939	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:18.777003050 CEST	443	49939	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:18.777020931 CEST	443	49939	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:18.782987118 CEST	49940	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:18.783008099 CEST	443	49940	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:18.783160925 CEST	49940	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:18.827975035 CEST	49940	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:18.827975035 CEST	49940	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:18.827990055 CEST	443	49940	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:18.827999115 CEST	443	49940	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:18.828017950 CEST	443	49940	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:20.856975079 CEST	49941	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:20.857003927 CEST	443	49941	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:20.860033989 CEST	49941	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:20.934994936 CEST	49941	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:20.935019970 CEST	443	49941	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:20.935069084 CEST	443	49941	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:20.952972889 CEST	49942	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:20.953013897 CEST	443	49942	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:20.958992958 CEST	49942	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:20.994993925 CEST	49942	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:20.995016098 CEST	443	49942	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:20.995049953 CEST	443	49942	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:21.012965918 CEST	49943	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:21.012999058 CEST	443	49943	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:21.016196012 CEST	49943	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:21.053042889 CEST	49943	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:21.053077936 CEST	443	49943	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:21.053113937 CEST	443	49943	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:21.063985109 CEST	49944	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:21.064013958 CEST	443	49944	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:21.067109108 CEST	49944	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:21.116678953 CEST	49944	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:21.116691113 CEST	443	49944	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:21.116736889 CEST	443	49944	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:23.151031017 CEST	49945	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:23.151065111 CEST	443	49945	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:23.151233912 CEST	49945	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:23.191231966 CEST	49945	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:23.191246033 CEST	443	49945	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:23.191272974 CEST	443	49945	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:23.191282988 CEST	49945	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:23.191293001 CEST	443	49945	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:23.204969883 CEST	49946	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:23.204998016 CEST	443	49946	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:23.205248117 CEST	49946	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:23.249495029 CEST	49946	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:23.249495029 CEST	49946	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:23.249514103 CEST	443	49946	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:23.249522924 CEST	443	49946	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:23.249558926 CEST	443	49946	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:23.260085106 CEST	49947	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:23.260116100 CEST	443	49947	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:23.260305882 CEST	49947	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:23.298234940 CEST	49947	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:23.298249960 CEST	443	49947	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:23.298273087 CEST	443	49947	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:23.312975883 CEST	49948	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:23.313007116 CEST	443	49948	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:23.316065073 CEST	49948	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:23.358273029 CEST	49948	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:23.358290911 CEST	443	49948	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:23.358319044 CEST	443	49948	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:23.358378887 CEST	49948	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:23.358391047 CEST	443	49948	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:23.378987074 CEST	49949	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:23.379017115 CEST	443	49949	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:23.385138035 CEST	49949	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:24.641017914 CEST	49949	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:24.641038895 CEST	443	49949	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:24.641103983 CEST	443	49949	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:24.671030045 CEST	49950	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:24.671062946 CEST	443	49950	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:24.671114922 CEST	49950	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:24.751972914 CEST	49950	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:24.751988888 CEST	443	49950	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:24.752024889 CEST	443	49950	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:24.752166986 CEST	49950	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:24.752177954 CEST	443	49950	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:24.754988909 CEST	49951	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:24.755019903 CEST	443	49951	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:24.755254984 CEST	49951	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:26.517323017 CEST	49951	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:26.517344952 CEST	443	49951	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:26.517400980 CEST	49951	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:26.517410994 CEST	443	49951	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:26.517438889 CEST	443	49951	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:26.534310102 CEST	49952	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:26.534337044 CEST	443	49952	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:26.534401894 CEST	49952	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:26.609996080 CEST	49952	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:26.610012054 CEST	443	49952	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:26.610061884 CEST	49952	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:26.610068083 CEST	443	49952	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:26.610070944 CEST	443	49952	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:28.647058010 CEST	49953	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:28.647092104 CEST	443	49953	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:28.647459030 CEST	49953	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:28.699919939 CEST	49953	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:28.699925900 CEST	443	49953	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:28.699937105 CEST	49953	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:28.699942112 CEST	443	49953	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:28.699978113 CEST	443	49953	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:28.717962027 CEST	49954	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:28.717988014 CEST	443	49954	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:28.718049049 CEST	49954	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:28.777687073 CEST	49954	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:28.777700901 CEST	443	49954	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:28.777748108 CEST	443	49954	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:28.777757883 CEST	49954	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:28.777765989 CEST	443	49954	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:28.802117109 CEST	49955	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:28.802154064 CEST	443	49955	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:28.802222967 CEST	49955	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:28.855756998 CEST	49955	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:28.855772018 CEST	443	49955	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:28.855786085 CEST	49955	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:28.855791092 CEST	443	49955	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:28.855799913 CEST	443	49955	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:28.869012117 CEST	49956	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:28.869038105 CEST	443	49956	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:28.869235039 CEST	49956	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:28.920346022 CEST	49956	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:28.920361996 CEST	443	49956	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:28.920397043 CEST	443	49956	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:28.920439959 CEST	49956	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:28.920450926 CEST	443	49956	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:30.964430094 CEST	49957	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:30.964459896 CEST	443	49957	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:30.964524031 CEST	49957	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:31.021393061 CEST	49957	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:31.021405935 CEST	443	49957	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:31.021450043 CEST	49957	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:31.021455050 CEST	443	49957	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:31.021473885 CEST	443	49957	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:31.051647902 CEST	49958	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:31.051682949 CEST	443	49958	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:31.051742077 CEST	49958	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:31.115608931 CEST	49958	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:31.115622044 CEST	443	49958	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:31.115665913 CEST	49958	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:31.115670919 CEST	443	49958	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:31.131824017 CEST	49959	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:31.131849051 CEST	443	49959	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:31.131906033 CEST	49959	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:31.182248116 CEST	49959	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:31.182261944 CEST	443	49959	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:31.182301998 CEST	49959	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:31.182306051 CEST	443	49959	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:31.182312965 CEST	443	49959	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:31.213578939 CEST	49960	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:31.213604927 CEST	443	49960	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:31.213663101 CEST	49960	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:31.271616936 CEST	49960	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:31.271634102 CEST	443	49960	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:31.271663904 CEST	443	49960	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:31.271681070 CEST	49960	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:31.271692038 CEST	443	49960	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:31.288868904 CEST	49961	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:31.288892984 CEST	443	49961	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:31.288948059 CEST	49961	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:31.401535034 CEST	49961	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:31.401546955 CEST	443	49961	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:31.401557922 CEST	49961	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:31.401563883 CEST	443	49961	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:31.401607037 CEST	443	49961	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:31.403711081 CEST	49962	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:31.403737068 CEST	443	49962	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:31.403789997 CEST	49962	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:31.485889912 CEST	49962	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:31.485914946 CEST	443	49962	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:31.485930920 CEST	49962	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:31.485937119 CEST	443	49962	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:31.486025095 CEST	443	49962	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:31.488826036 CEST	49963	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:31.488862991 CEST	443	49963	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:31.488924980 CEST	49963	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:31.571317911 CEST	49963	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:31.571317911 CEST	49963	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:31.571396112 CEST	443	49963	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:31.571429968 CEST	443	49963	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:31.571450949 CEST	443	49963	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:31.574004889 CEST	49964	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:31.574035883 CEST	443	49964	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:31.574080944 CEST	49964	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:31.633217096 CEST	49964	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:31.633228064 CEST	443	49964	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:31.633260965 CEST	443	49964	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:31.633272886 CEST	49964	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:31.633282900 CEST	443	49964	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:33.650739908 CEST	49965	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:33.650772095 CEST	443	49965	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:33.650831938 CEST	49965	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:33.698877096 CEST	49965	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:33.698889971 CEST	443	49965	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:33.698930025 CEST	443	49965	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:33.698931932 CEST	49965	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:33.698940039 CEST	443	49965	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:33.713146925 CEST	49966	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:33.713175058 CEST	443	49966	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:33.716990948 CEST	49966	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:33.752954006 CEST	49966	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:33.752968073 CEST	443	49966	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:33.752996922 CEST	443	49966	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:33.768963099 CEST	49967	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:33.768995047 CEST	443	49967	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:33.773006916 CEST	49967	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:33.816962004 CEST	49967	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:33.816978931 CEST	443	49967	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:33.817014933 CEST	443	49967	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:33.817053080 CEST	49967	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:33.817061901 CEST	443	49967	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:33.828962088 CEST	49968	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:33.828985929 CEST	443	49968	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:33.832998037 CEST	49968	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:33.870842934 CEST	49968	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:33.870857000 CEST	443	49968	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:33.870898962 CEST	443	49968	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:35.900712013 CEST	49969	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:35.900752068 CEST	443	49969	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:35.900947094 CEST	49969	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:35.935369015 CEST	49969	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:35.935369015 CEST	49969	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:35.935384035 CEST	443	49969	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:35.935391903 CEST	443	49969	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:35.935488939 CEST	443	49969	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:35.939124107 CEST	49969	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:35.939124107 CEST	49969	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:35.939135075 CEST	443	49969	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:35.939141989 CEST	443	49969	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:35.949132919 CEST	49970	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:35.949162006 CEST	443	49970	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:35.951518059 CEST	49970	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:35.987873077 CEST	49970	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:35.987873077 CEST	49970	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:35.987890005 CEST	443	49970	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:35.987898111 CEST	443	49970	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:35.987967014 CEST	443	49970	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:35.999001026 CEST	49971	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:35.999028921 CEST	443	49971	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:36.003366947 CEST	49971	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:36.051103115 CEST	49971	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:36.051103115 CEST	49971	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:36.051116943 CEST	443	49971	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:36.051125050 CEST	443	49971	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:36.051143885 CEST	443	49971	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:36.063793898 CEST	49972	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:36.063813925 CEST	443	49972	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:36.063992977 CEST	49972	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:36.107402086 CEST	49972	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:36.107414961 CEST	443	49972	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:36.107496023 CEST	443	49972	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:36.107511044 CEST	49972	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:36.107525110 CEST	443	49972	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:36.119111061 CEST	49973	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:36.119139910 CEST	443	49973	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:36.119246006 CEST	49973	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:37.177995920 CEST	49973	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:37.178026915 CEST	443	49973	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:37.178076982 CEST	49973	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:37.178083897 CEST	443	49973	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:37.178098917 CEST	443	49973	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:37.179831028 CEST	49974	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:37.179857016 CEST	443	49974	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:37.179915905 CEST	49974	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:37.247585058 CEST	49974	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:37.247601986 CEST	443	49974	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:37.247643948 CEST	443	49974	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:37.251390934 CEST	49975	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:37.251415968 CEST	443	49975	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:37.251466990 CEST	49975	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:37.301920891 CEST	49975	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:37.301944017 CEST	443	49975	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:37.301981926 CEST	443	49975	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:37.302002907 CEST	49975	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:37.302015066 CEST	443	49975	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:37.303220034 CEST	49976	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:37.303246975 CEST	443	49976	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:37.303314924 CEST	49976	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:37.340935946 CEST	49976	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:37.340958118 CEST	443	49976	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:37.340993881 CEST	443	49976	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:37.340996027 CEST	49976	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:37.341005087 CEST	443	49976	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:39.373873949 CEST	49977	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:39.373914003 CEST	443	49977	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:39.373975039 CEST	49977	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:39.460752010 CEST	49977	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:39.460762024 CEST	443	49977	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:39.460786104 CEST	49977	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:39.460791111 CEST	443	49977	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:39.460836887 CEST	443	49977	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:39.477169991 CEST	49978	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:39.477195978 CEST	443	49978	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:39.477257013 CEST	49978	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:39.545160055 CEST	49978	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:39.545180082 CEST	443	49978	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:39.545192003 CEST	49978	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:39.545200109 CEST	443	49978	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:39.545229912 CEST	443	49978	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:39.558657885 CEST	49979	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:39.558686972 CEST	443	49979	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:39.558741093 CEST	49979	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:39.599677086 CEST	49979	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:39.599687099 CEST	443	49979	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:39.599725962 CEST	443	49979	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:39.599736929 CEST	49979	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:39.599745989 CEST	443	49979	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:39.608753920 CEST	49980	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:39.608774900 CEST	443	49980	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:39.608844042 CEST	49980	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:39.676203966 CEST	49980	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:39.676240921 CEST	443	49980	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:39.676255941 CEST	49980	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:39.676263094 CEST	443	49980	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:39.676279068 CEST	443	49980	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:41.744965076 CEST	49981	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:41.744996071 CEST	443	49981	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:41.745230913 CEST	49981	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:41.792957067 CEST	49981	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:41.792972088 CEST	443	49981	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:41.793015003 CEST	443	49981	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:41.846496105 CEST	49982	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:41.846528053 CEST	443	49982	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:41.849076986 CEST	49982	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:41.889760017 CEST	49982	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:41.889770985 CEST	443	49982	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:41.889834881 CEST	443	49982	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:41.907814026 CEST	49983	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:41.907844067 CEST	443	49983	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:41.907949924 CEST	49983	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:42.204957008 CEST	49983	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:42.204976082 CEST	443	49983	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:42.205018997 CEST	443	49983	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:42.371373892 CEST	49984	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:42.371401072 CEST	443	49984	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:42.371551037 CEST	49984	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:42.438332081 CEST	49984	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:42.438347101 CEST	443	49984	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:42.438412905 CEST	443	49984	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:42.438455105 CEST	49984	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:42.438463926 CEST	443	49984	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:42.449745893 CEST	49985	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:42.449774981 CEST	443	49985	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:42.449917078 CEST	49985	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:42.487728119 CEST	49985	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:42.487735033 CEST	443	49985	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:42.487768888 CEST	443	49985	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:42.487838984 CEST	49985	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:42.487849951 CEST	443	49985	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:42.489311934 CEST	49986	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:42.489334106 CEST	443	49986	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:42.489597082 CEST	49986	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:44.040221930 CEST	49986	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:44.040247917 CEST	443	49986	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:44.040292025 CEST	49986	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:44.040297985 CEST	443	49986	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:44.040304899 CEST	443	49986	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:44.060367107 CEST	49987	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:44.060400009 CEST	443	49987	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:44.060466051 CEST	49987	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:44.132641077 CEST	49987	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:44.132653952 CEST	443	49987	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:44.132677078 CEST	49987	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:44.132683039 CEST	443	49987	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:44.132713079 CEST	443	49987	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:44.137192965 CEST	49988	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:44.137217999 CEST	443	49988	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:44.137269974 CEST	49988	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:44.228312969 CEST	49988	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:44.228336096 CEST	443	49988	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:44.228382111 CEST	49988	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:44.228382111 CEST	443	49988	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:44.228394032 CEST	443	49988	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:46.260818005 CEST	49989	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:46.260848045 CEST	443	49989	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:46.260915995 CEST	49989	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:46.311410904 CEST	49989	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:46.311428070 CEST	443	49989	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:46.311470032 CEST	49989	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:46.311476946 CEST	443	49989	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:46.311480045 CEST	443	49989	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:46.326631069 CEST	49990	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:46.326667070 CEST	443	49990	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:46.326726913 CEST	49990	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:46.403188944 CEST	49990	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:46.403203011 CEST	443	49990	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:46.403237104 CEST	443	49990	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:46.403280020 CEST	49990	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:46.403289080 CEST	443	49990	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:46.416843891 CEST	49991	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:46.416868925 CEST	443	49991	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:46.416951895 CEST	49991	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:46.465574026 CEST	49991	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:46.465586901 CEST	443	49991	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:46.465615988 CEST	443	49991	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:46.465635061 CEST	49991	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:46.465641975 CEST	443	49991	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:46.479578972 CEST	49992	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:46.479604006 CEST	443	49992	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:46.479654074 CEST	49992	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:46.527929068 CEST	49992	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:46.527942896 CEST	443	49992	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:46.527966976 CEST	443	49992	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:46.527991056 CEST	49992	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:46.527997971 CEST	443	49992	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:48.556785107 CEST	49993	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:48.556812048 CEST	443	49993	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:48.556869984 CEST	49993	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:48.608542919 CEST	49993	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:48.608551025 CEST	443	49993	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:48.608561993 CEST	49993	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:48.608567953 CEST	443	49993	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:48.608603001 CEST	443	49993	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:48.621311903 CEST	49994	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:48.621337891 CEST	443	49994	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:48.621396065 CEST	49994	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:48.671701908 CEST	49994	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:48.671715975 CEST	443	49994	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:48.671751976 CEST	443	49994	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:48.671765089 CEST	49994	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:48.671772957 CEST	443	49994	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:48.680636883 CEST	49995	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:48.680674076 CEST	443	49995	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:48.680735111 CEST	49995	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:48.725516081 CEST	49995	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:48.725536108 CEST	443	49995	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:48.725548983 CEST	49995	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:48.725554943 CEST	443	49995	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:48.725565910 CEST	443	49995	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:48.734582901 CEST	49996	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:48.734610081 CEST	443	49996	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:48.734669924 CEST	49996	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:48.768920898 CEST	49996	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:48.768920898 CEST	49996	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:48.768920898 CEST	49996	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:48.768935919 CEST	443	49996	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:48.768948078 CEST	443	49996	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:48.768954039 CEST	443	49996	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:48.768968105 CEST	443	49996	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:48.780957937 CEST	49997	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:48.780986071 CEST	443	49997	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:48.788955927 CEST	49997	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:48.820960045 CEST	49997	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:48.820974112 CEST	443	49997	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:48.820993900 CEST	443	49997	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:48.828962088 CEST	49998	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:48.828988075 CEST	443	49998	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:48.836951971 CEST	49998	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:48.888957024 CEST	49998	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:48.888968945 CEST	443	49998	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:48.888989925 CEST	443	49998	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:48.896953106 CEST	49999	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:48.896979094 CEST	443	49999	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:48.904957056 CEST	49999	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:49.977842093 CEST	49999	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:49.977865934 CEST	443	49999	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:49.977905989 CEST	49999	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:49.977910995 CEST	443	49999	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:49.977941036 CEST	443	49999	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:49.980300903 CEST	50000	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:49.980328083 CEST	443	50000	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:49.980389118 CEST	50000	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:50.069698095 CEST	50000	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:50.069711924 CEST	443	50000	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:50.069756985 CEST	50000	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:50.069761992 CEST	443	50000	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:50.069777966 CEST	443	50000	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:52.103966951 CEST	50001	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:52.103996038 CEST	443	50001	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:52.104121923 CEST	50001	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:52.162974119 CEST	50001	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:52.162981987 CEST	443	50001	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:52.163022041 CEST	50001	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:52.163026094 CEST	443	50001	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:52.163055897 CEST	443	50001	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:52.174052954 CEST	50002	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:52.174081087 CEST	443	50002	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:52.174143076 CEST	50002	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:52.234927893 CEST	50002	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:52.234944105 CEST	443	50002	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:52.234972954 CEST	443	50002	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:52.235008001 CEST	50002	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:52.235016108 CEST	443	50002	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:52.247243881 CEST	50003	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:52.247278929 CEST	443	50003	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:52.247337103 CEST	50003	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:52.292180061 CEST	50003	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:52.292191982 CEST	443	50003	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:52.292213917 CEST	443	50003	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:52.302480936 CEST	50004	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:52.302521944 CEST	443	50004	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:52.302613020 CEST	50004	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:52.353708029 CEST	50004	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:52.353729010 CEST	443	50004	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:52.353749037 CEST	443	50004	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:52.353780031 CEST	50004	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:52.353790998 CEST	443	50004	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:54.385703087 CEST	50005	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:54.385739088 CEST	443	50005	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:54.385845900 CEST	50005	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:54.423213959 CEST	50005	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:54.423228979 CEST	443	50005	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:54.423269987 CEST	443	50005	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:54.441555023 CEST	50006	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:54.441581964 CEST	443	50006	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:54.441651106 CEST	50006	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:54.481517076 CEST	50006	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:54.481535912 CEST	443	50006	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:54.481560946 CEST	443	50006	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:54.503599882 CEST	50007	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:54.503632069 CEST	443	50007	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:54.503699064 CEST	50007	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:54.547966957 CEST	50007	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:54.547982931 CEST	443	50007	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:54.548021078 CEST	443	50007	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:54.564527035 CEST	50008	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:54.564553976 CEST	443	50008	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:54.564624071 CEST	50008	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:54.630064011 CEST	50008	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:54.630083084 CEST	443	50008	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:54.630124092 CEST	443	50008	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:54.643285990 CEST	50009	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:54.643316031 CEST	443	50009	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:54.643466949 CEST	50009	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:54.682727098 CEST	50009	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:54.682732105 CEST	443	50009	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:54.682744026 CEST	50009	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:54.682749033 CEST	443	50009	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:54.682770967 CEST	443	50009	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:54.684710026 CEST	50010	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:54.684731960 CEST	443	50010	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:54.684820890 CEST	50010	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:54.747627020 CEST	50010	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:54.747638941 CEST	443	50010	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:54.747670889 CEST	443	50010	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:54.747699976 CEST	50010	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:54.747708082 CEST	443	50010	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:54.749511003 CEST	50011	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:54.749545097 CEST	443	50011	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:54.749645948 CEST	50011	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:54.793179989 CEST	50011	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:54.793179989 CEST	50011	443	192.168.2.4	91.242.163.155
Apr 5, 2024 12:28:54.793195009 CEST	443	50011	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:54.793204069 CEST	443	50011	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:54.793220997 CEST	443	50011	91.242.163.155	192.168.2.4
Apr 5, 2024 12:28:54.794454098 CEST	50012	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:54.794476986 CEST	443	50012	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:54.794639111 CEST	50012	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:54.836057901 CEST	50012	443	192.168.2.4	95.164.23.133
Apr 5, 2024 12:28:54.836071968 CEST	443	50012	95.164.23.133	192.168.2.4
Apr 5, 2024 12:28:54.836092949 CEST	443	50012	95.164.23.133	192.168.2.4

Target ID:	0
Start time:	12:24:50
Start date:	05/04/2024
Path:	C:\Users\user\Desktop\file.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\file.exe"
Imagebase:	0x400000
File size:	3'706'880 bytes
MD5 hash:	219EF06E5B58FCF3134F362CA6073C06
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	Borland Delphi
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1622327967.000000007E81D000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	false

Show Windows behavior

Function 0471CCDA Relevance: 1.0, Instructions: 950COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2253919514.0000000004709000.00000004.00000020.00020000.00000000.sdmp, Offset: 04709000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_4709000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3531e8e940f2fa0ee4823ace1ddffd8c823e2951853dadf3f6e70e8677e56e72
Instruction ID: 156e8d5b5f03c81593f74639de51e33e758eb9c8f060092d57e199eafb72070d
Opcode Fuzzy Hash: 3531e8e940f2fa0ee4823ace1ddffd8c823e2951853dadf3f6e70e8677e56e72
Instruction Fuzzy Hash: 066253A984F7C14FD7238B3859A96817FB05E27618B5E40DBC4D0CF2B7D299280AC767

Uniqueness

Uniqueness Score: -1.00%

Function 0471CCDA Relevance: 1.0, Instructions: 950COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2253919514.0000000004709000.00000004.00000020.00020000.00000000.sdmp, Offset: 04701000, based on PE: false

Associated: 00000000.00000003.2254663417.0000000004701000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_4709000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5919c174c8014596635c448e5baef6051d4c45308a2c6f9e7983f303fcb4f490
Instruction ID: 156e8d5b5f03c81593f74639de51e33e758eb9c8f060092d57e199eafb72070d
Opcode Fuzzy Hash: 5919c174c8014596635c448e5baef6051d4c45308a2c6f9e7983f303fcb4f490
Instruction Fuzzy Hash: 066253A984F7C14FD7238B3859A96817FB05E27618B5E40DBC4D0CF2B7D299280AC767

Uniqueness

Uniqueness Score: -1.00%

Function 04A3E3EF Relevance: .7, Instructions: 715COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2917495751.0000000004A2F000.00000004.00000020.00020000.00000000.sdmp, Offset: 04A2E000, based on PE: false

Associated: 00000000.00000003.2875378064.0000000004A2E000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_4a2e000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c489d0875f9285c8169f8eadd2d26de130e78204a35548a10fe2bba36d5b180e
Instruction ID: 6df7f64dbf76fc9c3f66f52a31a74488ffddb13bbda923ed69e69a01979e688a
Opcode Fuzzy Hash: c489d0875f9285c8169f8eadd2d26de130e78204a35548a10fe2bba36d5b180e
Instruction Fuzzy Hash: AB4244A685F7C25FD313877188696917FB0AE2321871A80DBD0C1CF1B3E29D594AD763

Uniqueness

Uniqueness Score: -1.00%

Function 04A3E3EF Relevance: .7, Instructions: 715COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000003.2917495751.0000000004A2F000.00000004.00000020.00020000.00000000.sdmp, Offset: 04A2F000, based on PE: false

Associated: 00000000.00000003.2948984043.0000000004A6E000.00000004.00000020.00020000.00000000.sdmpDownload File
Associated: 00000000.00000003.3009762884.0000000004A2F000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_3_4a2e000_file.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c489d0875f9285c8169f8eadd2d26de130e78204a35548a10fe2bba36d5b180e
Instruction ID: 6df7f64dbf76fc9c3f66f52a31a74488ffddb13bbda923ed69e69a01979e688a
Opcode Fuzzy Hash: c489d0875f9285c8169f8eadd2d26de130e78204a35548a10fe2bba36d5b180e
Instruction Fuzzy Hash: AB4244A685F7C25FD313877188696917FB0AE2321871A80DBD0C1CF1B3E29D594AD763

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search the Registry on compromised systems for insecurely stored credentials. The Windows Registry stores configuration information that can be used by the system or other programs. Adversaries may query the Registry looking for credentials and passwords that have been stored for use by other programs or services. Sometimes these credentials are used for automatic logons.
Tactics:	Credential Access
Data Sources:	Command: Command Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local file systems and remote file shares for files containing insecurely stored credentials. These can be files created by users to store their own credentials, shared credential stores for a group of individuals, configuration files containing passwords for a system or service, or source code/binary files containing embedded passwords.
Tactics:	Credential Access
Data Sources:	Command: Command Execution, File: File Access, Process: Process Creation
Platforms:	Containers, IaaS, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	To disguise the source of malicious traffic, adversaries may chain together multiple proxies. Typically, a defender will be able to identify the last proxy traffic traversed before it enters their network; the defender may or may not be able to identify any previous proxies before the last-hop proxy. This technique makes identifying the original source of the malicious traffic even more difficult by requiring the defender to trace malicious traffic through several proxies to identify its source. A particular variant of this behavior is to use onion routing networks, such as the publicly available TOR network.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a connection proxy to direct network traffic between systems or act as an intermediary for network communications to a command and control server to avoid direct connections to their infrastructure. Many tools exist that enable traffic redirection through proxies or port redirection, including HTRAN , ZXProxy, and ZXPortMap. Adversaries use these types of proxies to manage command and control communications, reduce the number of simultaneous outbound network connections, provide resiliency in the face of connection loss, or to ride over existing trusted communications paths between victims to avoid suspicion. Adversaries may chain together multiple proxies to further disguise the source of malicious traffic.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report file.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Yara Signatures

Memory Dumps

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

E-Banking Fraud

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Temp\Aaddfparpfpri

C:\Users\user\AppData\Local\Temp\Aapwhteqfofdw

C:\Users\user\AppData\Local\Temp\Aaqufauauwhhu

C:\Users\user\AppData\Local\Temp\Adieowyieuwii

C:\Users\user\AppData\Local\Temp\Aeaauesqeueiy

C:\Users\user\AppData\Local\Temp\Aiyeedhrtueou

C:\Users\user\AppData\Local\Temp\Apsouutdfuhed

C:\Users\user\AppData\Local\Temp\Aqdrfphsaruoy

C:\Users\user\AppData\Local\Temp\Arsuyuedipwwp

C:\Users\user\AppData\Local\Temp\Arwufqpqiqrow

C:\Users\user\AppData\Local\Temp\Audyhusipiehs

C:\Users\user\AppData\Local\Temp\Auuthshhifarq

C:\Users\user\AppData\Local\Temp\Awdoufhtqeere

C:\Users\user\AppData\Local\Temp\Ayftfphyqwwqs

C:\Users\user\AppData\Local\Temp\Ddhrehi

C:\Users\user\AppData\Local\Temp\Deqahwiteehohho

C:\Users\user\AppData\Local\Temp\Deqeafdp

C:\Users\user\AppData\Local\Temp\Dhrtoia

C:\Users\user\AppData\Local\Temp\Diahyeieedo

Windows Analysis Report
file.exe